Here you will find our privacy policy for the use of this website.
Additional privacy notices are available on the following pages:

• Privacy notice for customers, business partners and prospective clients
• Privacy notice for applicants
• Privacy notice for social media

PRIVACY POLICY WEBSITE

Thank you for your interest in our website. The protection of your personal data is very important to us. Below you will find information on how we handle the data collected through your use of our website. Your data is processed in accordance with the statutory provisions on data protection.

1. Data controller
The data controller within the meaning of the General Data Protection Regulation (GDPR) is
i-Hotel Services Germany GmbH & Co. KG
Gissigheimer Straße 26
97922 Lauda-Königshofen
Germany
Telephone: +491627641805
Email: datenschutz@i-hotelservices.com

2. Contact details of the Data Protection Officer
You can contact the Data Protection Officer at
Proliance GmbH
www.proliance.ai
Data Protection Officer
Leopoldstr. 21
80802 Munich
Email: datenschutzbeauftragter@proliance.ai
When contacting the Data Protection Officer, please state the company to which your enquiry relates. Please also refrain from attaching sensitive information, such as a copy of your ID, to your enquiry.

3. General information on data transfers to third countries
The processing of your data may, where applicable, also take place in countries outside the European Union (EU) and the European Economic Area (EEA).
For data transfers to certain third countries, an adequacy decision by the European Commission pursuant to Article 45(1) of the GDPR may apply. Such a decision establishes that an adequate level of data protection exists in the third country. A list of previous adequacy decisions can be viewed at the following link: Data protection adequacy for non-EU countries.
The scope of an adequacy decision may also be restricted to a specific group of recipients or subject to further conditions.
For example, the adequacy decision for data transfers to the US applies only to companies certified under the EU-US Data Privacy Framework. The certification status of a participating company can be viewed via the following link: Participant Search (dataprivacyframework.gov).
When your data is transferred to recipients in third countries for which no adequacy decision exists, there is a risk that authorities in those countries may access your data for security and surveillance purposes without you being informed or being able to seek legal redress.
We therefore ensure that appropriate safeguards within the meaning of Article 46 of the GDPR are in place to guarantee an adequate level of data protection when transferring your data to recipients in such third countries.
Standard data protection clauses of the European Commission pursuant to Article 46(2)(c) of the GDPR are therefore regularly concluded either by us or by the service providers we engage. These clauses oblige the recipient of the data in the third country to process it in accordance with the European level of protection. The clauses can be viewed via the following link: Publications on the Standard Contractual Clauses (SCCs) – European Commission. Should you require further details regarding the modules of the Standard Data Protection Clauses we have concluded in specific cases or any supplementary measures, we will be happy to provide you with a copy. In this case, please simply contact us using the contact details provided above under ‘Data Controller’.
In the case of certain recipients, data transfers may also be based on binding corporate rules (BCRs) approved by the supervisory authorities in accordance with Article 46(2)(b) of the GDPR. These can be viewed at the following link: Approved Binding Corporate Rules | European Data Protection Board.
Where the Standard Data Protection Clauses or Binding Corporate Rules are insufficient to ensure the required level of protection, additional technical, contractual or organisational measures are taken to safeguard the data transfer. Furthermore, we regularly review and assess whether these additional measures continue to ensure an adequate level of data protection or whether further supplementary measures may need to be taken.
Further details on data transfers to third countries can be found in the relevant cases below, in the sections on data processing or the services used, under ‘Data processing in third countries’.

4. General information on the use of artificial intelligence
Artificial intelligence may be used in the processing of your data.
Further details on the use of Artificial Intelligence can be found in the relevant sections below, in the explanations regarding data processing or the services used, under “Use of Artificial Intelligence”.

5. Data protection information for website visitors
5.1. Data processing in connection with web hosting
5.1.1. Usage data and server log files
Description of data processing and purpose
When you visit our website, it is technically necessary for data to be transmitted between your web browser and ours for communication purposes. During an active connection for communication between the web browser and the web server, the following data is regularly generated:
• IP address of the requesting device (router or mobile device),
• Date and time of the request,
• Name of the requested file,
• Website from which the file was requested (referrer URL),
• Access status,
• Amount of data transferred,
• Web browser and operating system used,
• Language used.
The data listed is stored in log files and analysed where necessary.
The purpose of data processing and our legitimate interest lie in ensuring a smooth connection between your internet browser and our website, guaranteeing the technically flawless provision of our services, and being able to detect, prevent and track attacks on our website. The log files are used to evaluate system stability, functionality and security. The processing of this data is strictly necessary in order to make the website available to you.
Legal basis for data processing
The legal basis for the processing of the data is Article 6(1)(f) of the GDPR.
Recipients
In the course of data processing, your data is transferred to the following categories of recipients whom we engage in the course of data processing to achieve the stated purposes
• Hosting service providers,
• IT support and administration service providers,
• Software service providers who provide us with solutions for the analysis of log data.
These recipients include, in particular:
• Strato GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany
In the event of anomalies or attacks, the data may also be passed on in individual cases to:
• Information security consultants and IT forensic experts
• Solicitors,
• Investigative authorities, courts.

5.2. Data processing in connection with cookies and similar technologies
5.2.1. Access to and storage of information on end devices
By using our website, information (e.g. IP address) may be accessed or stored (e.g. cookies) on your terminal equipment. Such access or storage may involve further processing of personal data within the meaning of the GDPR.
In cases where such access to or storage of information is strictly necessary for the technically fault-free provision of our services, this is carried out on the basis of Section 25(2)(1) or (2) of the Telecommunications and Digital Services Data Protection Act (TDDDG).
In cases where such processing serves other purposes (e.g. the needs-based design of our website), this is carried out on the basis of Section 25(1) of the Telecommunications and Digital Services Data Protection Act (TDDDG) . Consent may be withdrawn at any time with future effect.
Insofar as personal data is subsequently processed, this is done on the basis of the GDPR and the Federal Data Protection Act (BDSG). We explain these data processing activities separately in our privacy policy.
Further information on the processing of your personal data and the relevant legal bases in this context can be found in the following sections on the specific processing activities on our website.

5.2.2. Cookies and similar technologies
5.2.2.1. General information
On this website, we use services that employ cookies and similar technologies to store data in your device’s browser and to read data that has already been stored. Cookies, your browser’s local storage, pixels and so-called tags may be used for this purpose.
Cookies are small text files that are stored on your device and can be read.
A distinction is made between session cookies, which are deleted as soon as you close your browser, and persistent cookies, which are stored for a specific period of time beyond the individual session.
In addition to cookies, we may use your browser’s session storage or local storage to store and read data there.
We may also embed pixels in our websites. Pixels are small, customised, invisible image files that are loaded when a page is loaded and can be used to track user activity.
Finally, we may use tags on our websites. Tags are small fragments of HTML or JavaScript code that enable website analytics or user tracking services to distinguish or identify users and track certain user activities.
Further details on the cookies and similar technologies we use can be found below in the descriptions of the categories of cookies, as well as on our consent management platform, which is displayed when you visit our website. You can give your consent via the platform and also easily withdraw it.
You can access the platform at any time by clicking the ‘Cookie Settings’ link at the bottom left of the webpage to change your settings.
Please note that without the use of certain cookies and similar technologies, our websites may not display correctly and some functions may no longer be technically available.

5.2.2.2. Category Technical Necessary
Services in this category may use cookies and similar technologies to store and read information on your device. We use these for the purpose and in the interest of
• enable the website to be displayed and to provide its basic functions, in particular page navigation and access to login areas,
• to enable the granting and withdrawal of consent,
• to protect our forms from fraudulent entries, and
• to protect our website from cyber attacks and fraud attempts.
The use of the services as well as corresponding cookies and similar technologies in this category is based on § 25(2)(1), (2) TDDDG. Subsequent data processing is based on Art. 6(1)(f) GDPR.

5.2.2.3.  Analytics
Services in this category may use cookies and similar technologies to store and read information on your device. We use these
• to count and distinguish you as an individual website visitor and to compile statistical analyses of your interactions and your use of our websites,
• to design our websites to meet your needs and adapt them to user interactions,
• to test changes to the website and measure user response to them (A/B testing), and
• to monitor the technical functionality of our website and enable troubleshooting.
To this end, we and the services regularly store individual pseudonymous identifiers (recognition features) consisting of numbers and letters in cookies on your device when you visit our website, and these are read out again when you visit the site again.
The use of pseudonyms enables the individual differentiation and recognition of users. However, the natural person behind a pseudonym cannot usually be identified directly, particularly by name, without further, additional data.
Other technologies may also be used to read recognition features from your device, such as in the case of so-called browser or device fingerprinting, where data relating to the characteristics of the browser you are using (e.g. type and version of the browser) and its configuration (e.g. preferred language), the characteristics of your device (e.g. manufacturer and model of your mobile phone, operating system) or the hardware you are using (e.g. screen resolution) to recognise you pseudonymously as a distinct user.
The use of the services, as well as corresponding cookies and similar technologies in this category, is based on your consent in accordance with Section 25(1) of the TDDDG. Subsequent data processing is based on your consent in accordance with Article 6(1)(a) of the GDPR.

5.3. Consent management via the consent management platform Strato GmbH
On our websites, we use the consent management platform provided by Strato GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, and Papoo Software & Media GmbH, manufacturer of CCM19, Auguststr. 4, 53229 Bonn.
Description of data processing and purpose
We use this service to manage your consents to the use of cookies and similar technologies, as well as to the subsequent data processing.
If you give your consent via the banner on our consent management platform, the service processes the following data:
Consent data:, Consent ID,Time of consent, Opt-in / Opt-out, Banner language, Customer settings in the banner (consent data, template)
Device data: HTTP Agent, HTTP Referrer, HTTP Page
IP data:“Anonymised IP data, IP address in 24-hour rollover in log files”

This data is logged on the provider’s servers. As part of data processing, cookies are used to store your consent status on your device, to read it out again when you revisit the page, and to verify it.
In this way, we are able to check your consent status for all subsequent and future visits to our websites and, in accordance with your decision regarding the use of cookies and other technologies, activate or deactivate them when you visit the page again.
The purpose of the data processing and our legitimate interest lie in centrally managing cookies and similar technologies, as well as integrated services, on our website, and in being able to offer you a simple way to give and withdraw your consent, thereby fulfilling our legal obligations to obtain consent and our accountability obligations in accordance with Article 5(2) of the GDPR.
Legal basis for data processing
Where we use cookies and similar technologies in connection with the integration of the service, or where data is stored on your device by the service or read from it by 30 days, this is done in accordance with § 25(2)(2) TDDDG. Any subsequent data processing is carried out on the basis of Article 6(1)(f) of the GDPR.
Recipients
As part of the data processing, your data is transferred to the following recipients:
• Strato GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany,
• Papoo Software & Media GmbH, manufacturer of CCM19, Auguststr. 4, 53229 Bonn.
Retention period
By integrating the service into our websites, data is transmitted to the above-mentioned recipients and stored there for a period of 24 hours. As a rule, the data processed by the service and made available to us is not stored for any longer period in our own systems. In individual cases, data regarding the time, status and scope of consent may also be stored for longer in our own systems, provided this is permissible for other purposes specified in this statement.

5.4. Matomo
We integrate the “Matomo” service provided by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, into our websites.
In the European Union (EU) and the European Economic Area (EEA), the provider is represented within the meaning of Article 27 of the GDPR by ePrivacy Holding GmbH, Burchardstraße 14, 20095 Hamburg, Germany.
Description of data processing and purpose
The service enables us to statistically record and analyse website visits. To this end, the service processes various pieces of information regarding visits to the websites, the devices used and a user’s interactions with our websites on a pseudonymous basis. In doing so, certain individual metrics (e.g. pages visited per session, scroll depth, duration of visit, origin, type of device used), heatmaps (graphical highlighting of users’ clicks on individual web pages) and session recordings (playable recordings of individual users’ interactions with our websites during a visit) are recorded, analysed and made available to us in a processed form.
In particular, the following types of data are processed by the service:
Data relating to website visits
o IP address of the requesting device (router or mobile device)
o Date and time of the request
o Title of the page displayed (page title)
o URL of the page displayed (page URL)
o URL of the page displayed before the current page (referrer URL)
o Time taken to generate the page (the time required for web pages to be generated by the web server and then downloaded by the user)
User data
o User pseudonym (User ID).
o Time in the user’s time zone
o User location: country, region, city, approximate longitude and latitude
Device data
o User agent of the browser used (User-Agent header)
o Screen resolution used
o Operating system used
o Browser used
o Primary language of the browser used (Accept-Language header)
o Type of device used (desktop, tablet, mobile phone, television, car, games console, etc.), including make and model
Interactions with the website
o Files that have been clicked on and downloaded
o Links to an external domain that were clicked
o Recording of the entire website visit (session recording).
Some information is also stored in cookies on the end device and then collected by Matomo:
o Random unique user ID
o Time of this user’s first visit
o Time of this user’s previous visit
o Number of visits by this user
We use the results obtained to
o to trace the origin of visitors to our websites,
o to identify errors in the structure and design of the websites or insufficient compatibility with certain devices, browsers or operating systems,
o understand the obstacles visitors face when using our websites, and
o to assess the effectiveness of online advertising campaigns.
Cookies and similar technologies, in particular JavaScript, are used to store and read data on your device. Further details can be found above under “Data processing in connection with cookies and similar technologies”.
The purpose of data processing is to understand how we can adapt and optimise our websites to meet existing demand, as well as to manage our online advertising campaigns more effectively.
Legal basis for data processing
The legal basis for the integration and use of the service is your consent, provided you have given this via our consent management platform.
The use of cookies and similar technologies is based on Section 25(1) of the TDDDG. The subsequent processing of data is based on Article 6(1)(a) of the GDPR.
Your consent is voluntary and may be freely withdrawn at any time with effect for the future. To withdraw your consent, please use the ‘Cookie Settings’ link at the bottom left of the webpage to access the consent management platform again and change your settings.
Recipients
As part of data processing, your data will be transferred to the following recipients:
• InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand.
Data processing in third countries
Your data is transferred to recipients in third countries. An adequacy decision by the European Commission is in place for data transfers to New Zealand.
Further information on this and additional links can be found in the section above entitled “ General information on data transfers to third countries ”.
Retention period
By integrating the service into our websites, data is transferred to the recipients mentioned above and stored there for a period of 30 days  . No further storage of the data processed by the service and made available to us takes place in our own systems.

5.5. Google Fonts
We integrate the “Google Fonts” service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA, into our websites.
In the European Union (EU) and the European Economic Area (EEA), the service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Description of data processing and purpose
“Google Fonts” enables us to use web fonts. To do this, when you visit our website, the required Google Fonts are loaded from Google’s servers into your browser cache. This is necessary so that your browser can display our text in a visually enhanced manner. If your browser does not support this feature, a standard font from your computer will be used for display.
As Google Fonts is provided by Google and is loaded from its servers when the page is accessed, the usage data technically required for the page to be displayed is also transmitted. In this respect, Google also receives your IP address, which is technically necessary for retrieving the content.
Cookies and similar technologies, in particular JavaScript, may be used to store and read data on your device. Further details can be found above under “Data processing in connection with cookies and similar technologies .
The purpose of the data processing and our legitimate interest lie in making our website more visually appealing to you.
Legal basis for data processing
Insofar as we use cookies and similar technologies in connection with the integration of the service, or insofar as data is stored on or read from your device by the service, this is carried out in accordance with §25(2)(2) TDDDG. Subsequent data processing is carried out on the basis of Art. 6(1)(f) GDPR.
Recipients
In the course of using the service, the data collected via our websites is transferred to the following recipients:
• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland,
• Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.
Further information on how the service provider handles personal data can be found at https://policies.google.com/privacy?hl=de.
Data processing in third countries
Your data is transferred to recipients in third countries. For data transfers to the USA, there is an adequacy decision by the European Commission regarding companies certified under the EU-US Data Privacy Framework. Google LLC is certified under the EU-US Data Privacy Framework.
Further information on this and additional links can be found in the section above entitled “ General information on data transfers to third countries”.
Retention period
By integrating the service into our websites, data is transferred to the recipients mentioned above and processed there for as long as is necessary to achieve the stated purposes. No further storage of the data processed by the service and made available to us takes place in our own systems.

5.6. ZEEG
We integrate the “Zeeg” service provided by Zeeg GmbH, Friedrichstraße 114a, 10117 Berlin, Germany, into our websites.
Description of data processing and purpose
The service enables us to offer and process online appointment bookings via our websites. To this end, the service provides a booking interface through which you can view available time slots, select an appointment and book it. The service then handles the confirmation, reminders and synchronisation of the appointment with the calendar and communication systems we use. In addition, when the booking interface is accessed, the service processes log and device data for the purpose of ensuring technically secure and stable operation.

In particular, the service processes the following types of data:
• Appointment booking data
• First name and surname
• Email address
• Telephone number (if applicable)
• Selected date and time slot for the appointment
• Subject of the appointment and any additional information you voluntarily provide via the booking form (e.g. concerns, comments)
• Email addresses of any other participants you have invited
• Data relating to communication regarding the appointment
• Content of the confirmation, reminder and follow-up emails sent via the service, as well as calendar invitations (.ics)
• Open and click-through rates for emails sent via the service
• Log and device data
• IP address of the requesting device (router or mobile device)
• Date and time of the request
• Pages visited within the booking interface
• URLs accessed and referrer URL
• Technical information about the device used (device type, operating system, browser and browser version, language setting)
• Further online usage data relating to the booking process
Cookies and similar technologies, in particular JavaScript, may be used to store and read data on your device. Further details can be found above under “Data processing in connection with cookies and similar technologies”.
The purpose of data processing is to enable you to conveniently book appointments with us online, to reliably organise the agreed appointments and communicate with you, and to ensure the technically secure, stable and abuse-free operation of the booking service.
Legal basis for data processing
The legal basis for the integration and use of the service is your consent, provided you have given this via our consent management platform.
The use of cookies and similar technologies is based on Section 25(1) of the TDDDG. The subsequent data processing is based on Article 6(1)(a) of the GDPR. Insofar as the processing serves the purpose of carrying out the appointment booking and thus the initiation or performance of a contract with you, it is additionally based on Article 6(1)(b) of the GDPR.
Your consent is voluntary and may be freely withdrawn at any time with effect for the future. To withdraw your consent, please use the ‘Cookie settings’ link at the bottom left of the webpage to access the consent management platform again and change your settings.
Recipients
In the course of data processing, your data will be transferred to the following recipients:
• Zeeg GmbH, Friedrichstraße 114a, 10117 Berlin, Germany.
Data processing in third countries
The service itself does not transfer your data to recipients in third countries. All personal data processed on behalf of the service is stored and processed exclusively on servers in Germany.
Retention period
Through the integration of the service on our websites, data is transferred to the recipient mentioned above and stored there for as long as is necessary to fulfil the purposes for which the data was collected, to meet contractual and legal obligations, and to comply with the applicable limitation periods for the assertion and defence of claims. Log and device data processed within the context of the content delivery and security network (Cloudflare) upstream of the service is, in most cases, stored for less than 24 hours.

5.7. Contact form and general enquiries by email
Description of data processing and purpose

If you send us enquiries via the contact form or by email, your details from the enquiry form or , including the personal data you provide there, will be stored by us to process the enquiry and in the event of follow-up questions.
Providing an email address is required to contact us; providing your first name, surname and telephone number is voluntary. We will not pass on this data under any circumstances without your consent.
Legal basis for data processing
The legal basis for the processing of your data is your and our legitimate interest in responding to your enquiry in accordance with Article 6(1)(f) of the GDPR and, where applicable, Article 6(1)(b) of the GDPR, provided that your enquiry is aimed at concluding a contract.
Recipients
In the course of data processing, your data will be transferred to the following categories of recipients, whom we engage in the course of data processing to achieve the stated purposes
• Software service providers who provide us with solutions for internal and external communication, for the creation and editing of documents, and for the management of data sets.
These include, in particular, the following recipients:
• Strato GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany
Data processing in third countries
No data processing takes place in third countries.
Retention period
Your data will be deleted once your enquiry has been fully processed, provided no further queries are expected and provided there are no legal retention obligations to the contrary.

5.8. Web forms for collecting advertising data
On our websites, we collect personal data via various web forms for the purpose of addressing you with advertising, in order to promote the sale of our products, goods or services through direct marketing.
These may include forms
• for signing up to newsletters, webinars or events,
• to book appointments for consultations or product demonstrations, or
• for downloading white papers and other documents
Further information on the processing of your data for marketing purposes can be found in the following section of this privacy policy.

6. Advertising
We process your personal data to contact you by post, telephone and email for the purpose of direct marketing, as well as to analyse prospect data, conduct market research and carry out customer satisfaction surveys.
6.1. Place of data collection
6.1.1. Collection of advertising data via forms on the website
Where applicable, we collect personal data on our websites via various web forms for the purpose of addressing you with advertising to promote the sale of our own products, goods or services, or those of our cooperation partners, by means of direct marketing.
These may include forms
- for registering for newsletters, webinars or events,
- for downloading white papers and other documents,
- Further information on the scope of data processing, the purposes, legal bases, recipients and the retention period of the data collected can be found in the following sections.

6.1.2. Collection of marketing data at events or trade fairs
Where applicable, we may collect personal data at events or trade fairs via analogue or digital forms for the purpose of contacting you for marketing purposes, in order to promote the sale of our own products, goods or services or those of our cooperation partners by means of direct marketing.
Further information on the scope of data processing, the purposes, legal bases, recipients and the retention period of the data collected can be found in the following sections.

6.2. Email marketing
6.2.1. Marketing to existing customers
Description of data processing and purpose
We process your personal data (first name, surname, work email address for business contacts, private email address for consumers), which we receive in connection with the conclusion of a contract, for the purpose and in our legitimate interest of sending you or your company, as an existing customer, personalised direct marketing regarding similar products, goods and services, events and promotions related to the previous contract.
Legal basis for data processing
The legal basis for this processing is Article 6(1)(f) of the GDPR. As we comply with the requirements of the exemption under Section 7(3) of the Unfair Competition Act (UWG) and, in order to achieve the purpose, process only such personal data that is related to your professional activities, there do not appear to be any overriding interests on your part that would conflict with our interest in data processing, provided you have not yet objected to the processing.
You may object to the processing of your data at any time with future effect, without incurring any costs other than the standard transmission charges. To exercise your right to object, please use the unsubscribe link in our promotional emails or the contact details provided above under ‘Data Controller’.
Recipients
As part of data processing, your data is transferred to the following categories of recipients, whom we engage in the course of data processing to achieve the stated purposes:
• E-Mail marketing service providers,
• Software service providers who provide us with solutions for internal and external communication, for the creation and editing of documents, and for the management of data sets
These recipients include, in particular:
• Cleverreach GmbH & Co. KG, Schafjücken 2, 26180 Rastede, Germany
• Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
• Microsoft Ireland Operations, Ltd, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland.
Data processing in third countries
Your data is transferred to recipients in third countries. For data transfers to the USA  , there is an adequacy decision by the European Commission regarding companies certified under the EU-US Data Privacy Framework. Microsoft Corporation is certified under the EU-US Data Privacy Framework.
Further information on this and additional links can be found above in the section ‘General information on data transfers to third countries’.
Use of Artificial Intelligence
No artificial intelligence is used in the processing of your data.
Further information on this and additional links can be found in the section above entitled “General information on the use of artificial intelligence”.
Retention period
We store your data for as long as is necessary to achieve the aforementioned purpose, but no longer than the period during which we carry out advertising activities as part of our business operations or until you object to the data processing. We will then delete your data, unless data processing is still permitted on another legal basis or is mandatory for us (e.g. in the case of statutory retention obligations).

6.2.2. Consent to receive promotional emails and the newsletter, Email tracking
Description of data processing and purpose
We process your personal data (first name, surname, work email address for business contacts, private email address for consumer contacts), solely for the purpose of sending you or your company personalised promotional communications via email or through our email newsletter, and to inform you about our own products, goods, services, events and offers, or those of our cooperation partners, provided that you have given us your separate and explicit consent to do so.
If you give us your consent, you also authorise us to process data regarding whether you have received our marketing emails and opened them, the extent to which you have interacted with the content, in particular which links you have clicked on, and the extent to which you have read or skimmed our emails (newsletter tracking).
Legal basis for data processing
The legal basis for this processing is your consent pursuant to Article 6(1)(a) of the GDPR. Your consent is voluntary and may be withdrawn at any time with effect for the future. Withdrawing your consent does not affect the lawfulness of the data processing carried out up to that point. To exercise your right to withdraw consent, please use the unsubscribe link in our promotional emails or in the newsletter, or the contact details provided above under ‘Data Controller’.
Recipients
In the course of data processing, your data is transferred to the following categories of recipients whom we engage in the course of data processing to achieve the stated purposes:
• E-Mail marketing service providers,
• Software service providers who provide us with solutions for internal and external communication, for the creation and editing of documents, and for the management of data sets.
These recipients include, in particular:
• Cleverreach GmbH & Co. KG, Schafjücken 2, 26180 Rastede, Germany
• Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
• Microsoft Ireland Operations, Ltd, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland.
Data processing in third countries
Your data is transferred to recipients in third countries. For data transfers to the USA  , there is an adequacy decision by the European Commission regarding companies certified under the EU-US Data Privacy Framework. Microsoft Corporation is certified under the EU-US Data Privacy Framework.
Further information on this and additional links can be found above in the section ‘General information on data transfers to third countries’.
Use of Artificial Intelligence
No artificial intelligence is used in the processing of your data.
Further information on this and additional links can be found in the section above entitled “General information on the use of artificial intelligence”.
Retention period
We will retain your data for as long as is necessary to fulfil the aforementioned purpose, but no longer than the period during which we carry out promotional activities as part of our business operations, or until you withdraw your consent. We will then delete your data, unless data processing is still permitted on another legal basis or is mandatory for us (e.g. in the case of statutory retention obligations).

6.3.  telephone marketing
Description of data processing and purpose
We process your personal data (first name, surname, business telephone number for business contacts, private telephone numbers for consumers) for the purpose and, where applicable, in our legitimate interest, of contacting you or your company personally by telephone to provide information about our own products, goods, services, events and offers or those of our cooperation partners.
As we comply with the provisions of Section 7(2)(1) and (2) of the German Unfair Competition Act (UWG) and, in order to achieve this purpose, process only such personal data that is related to your professional activities, there do not appear to be any overriding interests on your part that conflict with our interest in data processing, provided you have not yet objected to the processing.
Legal basis for data processing in relation to business contacts
With regard to business contacts, the legal basis for processing is Article 6(1)(f) of the GDPR. Our legitimate interest lies in promoting the sale of our products, goods and services through direct marketing.
You may object to data processing at any time with effect for the future, without incurring any costs other than the transmission costs in accordance with standard rates. To exercise your right to object, please use the contact details provided above under ‘Data Controller’.
Recipients
In the course of data processing, your data will be transferred to the following categories of recipients, whom we engage in the course of data processing to achieve the stated purposes:
• Telephone and/or call centre service providers,
• Software service providers who provide us with solutions for internal and external communication, for the creation and editing of documents, and for the management of data sets.
These recipients include, in particular:
• Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
• Microsoft Ireland Operations, Ltd, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland.
Data processing in third countries
Your data is transferred to recipients in third countries. For data transfers to the USA  , there is an adequacy decision by the European Commission regarding companies certified under the EU-US Data Privacy Framework. Microsoft Corporation is certified under the EU-US Data Privacy Framework.
Further information on this and additional links can be found above in the section ‘General information on data transfers to third countries’.
Use of Artificial Intelligence
No artificial intelligence is used in the processing of your data.
Further information on this and additional links can be found in the section above entitled “General information on the use of artificial intelligence”.
Retention period
We store your data for as long as is necessary to achieve the aforementioned purpose, but at the latest for as long as we carry out advertising activities as part of our business operations, or until you withdraw your consent or object to the data processing. We will then delete your data, unless data processing is still permitted on another legal basis or is mandatory for us (e.g. in the case of statutory retention obligations).

7. Data protection information regarding data processing for compliance with data protection regulations
7.1. Documentation of consents and implementation of data subjects’ rights
Description of data processing and purpose
Where you provide us with a declaration of consent, we process your personal data regarding the circumstances and time of submission (where applicable, signature, email address, telephone or fax number or IP address) in order to be able to demonstrate, within the scope of our accountability obligation under Article 5(2)(f) of the GDPR, that you have consented to the data processing in question. The same applies to the withdrawal of your consent.
Where you exercise your data subject rights under the GDPR vis-à-vis us, we also process your personal data in order to be able to demonstrate, within the framework of the accountability obligation under Article 5(2)(f) of the GDPR, that we have complied with the GDPR when processing your request.
Legal basis for data processing
Processing is carried out in each case on the basis of Article 6(1)(c) GDPR in conjunction with Article 5(2) GDPR or Article 6(1)(f) GDPR. Our legitimate interest lies in being able to document compliance with the requirements of the GDPR as part of our accountability.
Recipients
In the course of data processing, your data will be transferred to the following categories of recipients whom we engage in the course of data processing to achieve the stated purposes:
• External Data Protection Officer,
• Software service providers who provide us with solutions for internal and external communication, for the creation and editing of documents, and for the management of data sets.
These recipients include, in particular:
• Proliance GmbH, Leopoldstr. 21, 80802 Munich, Germany
• Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
• Microsoft Ireland Operations, Ltd, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland.
Retention period
We store your data for as long as is necessary to achieve the aforementioned purpose. We generally store data relating to consent given for a period of 3 years from the end of the year in which we last made use of it. Data that we process in connection with the exercise of data subject rights is generally stored for a period of 3 years from the end of the year in which you exercised your data subject rights.
We will then delete your data, unless data processing, including in other systems where applicable, remains permissible on another legal basis or is mandatory for us (e.g. in the case of statutory retention obligations).

7.2. Maintaining an advertising opt-out list
Description of data processing and its purpose
If you object to data processing for advertising purposes on the basis of legitimate interests, we will regularly add your contact details (e.g. first name and surname, email address, telephone number, address) to our advertising opt-out list.
We maintain this list to ensure permanently that you will no longer be contacted for advertising purposes in the future, even if we collect and process your data again in accordance with the GDPR.
Thus, only by cross-referencing this list can we ensure that your data is not used again for advertising purposes after it has been otherwise deleted from the active data stock of our operational systems – for example, because you are re-registered as a customer in our systems, or because we collect your data again from other data sources, or receive it again from third parties, including processors.
You will also be added to the advertising opt-out list if, in addition to objecting, you exercise your right to erasure, unless it is explicitly important to you – or it is clear to us that it is important to you – that your data be erased and the permanent implementation of your right to object is not the primary concern.
Legal basis for data processing
Processing is carried out in each case on the basis of Article 6(1)(f) of the GDPR. Our legitimate interest lies in being able to permanently and effectively implement compliance with the right to object under the GDPR, as well as the right to object within the meaning of Section 7(3) of the Unfair Competition Act (UWG) in cases of direct marketing or marketing to existing customers, beyond the mere deletion of the data.
Recipients
In the course of data processing, your data is transferred to the following categories of recipients whom we engage in the course of data processing to achieve the stated purposes:
• Marketing and email marketing service providers,
• Software service providers who provide us with solutions for internal and external communication, for the creation and editing of documents, and for the management of data sets.
These recipients include, in particular:
• Cleverreach GmbH & Co. KG, Schafjücken 2, 26180 Rastede, Germany
• Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
• Microsoft Ireland Operations, Ltd, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland.
Retention period
We store your data in the advertising opt-out list for as long as is necessary to achieve the aforementioned purpose. This is generally for as long as we, as a company, are active in the market and advertise our products, goods, services, offers and events.

8. Privacy information for other data processing
8.1. Fulfilment of other legal obligations
Description of data processing and purpose
We process personal data where this is necessary to fulfil a legal obligation. The scope of the data to be processed is determined by the legal obligation with which we must comply.
Legal basis for data processing
In these cases, the legal basis for the processing of your data is Article 6(1)(c) of the GDPR in conjunction with the relevant legal provision imposing such an obligation on us.
These may include, for example, provisions of the German Fiscal Code (AO), e.g. Section 147 AO, the German Commercial Code (HGB), e.g. Section 257 HGB, or the Code of Criminal Procedure (StPO).
Recipients
In the course of data processing, your data is transferred to the following categories of recipients whom we engage in the course of data processing to achieve the stated purposes:
• Tax advisers,
• auditors,
• Tax or investigative authorities,
• solicitors,
• experts,
• courts.
Retention period
We store your data to the extent necessary for as long as is required to achieve the aforementioned purpose. The storage period is determined by specific statutory provisions which oblige us to retain or process data for up to 10 years, with the specific start date of the retention periods being determined by the relevant specific law.
We will then delete your data, unless data processing, including in other systems where applicable, remains permissible on the basis of another legal ground.

8.2. Exercise or defence of legal claims
Description of data processing and purpose
In addition, we process your data in individual cases for the purpose and in the interest of asserting legal claims, for example to enforce our claims arising from unpaid invoices, provided your data is relevant to a legal dispute.
We also process your data in individual cases for the purpose and in the interest of defending against legal claims brought against us, for example in the event of claims for liability for material defects, provided your data is relevant to a legal dispute.
Legal basis for data processing
The legal basis for the processing of your data is Article 6(1)(f) of the GDPR.
Recipients
As part of our data processing activities, your data will be disclosed to the following categories of recipients, whom we engage in the course of data processing to achieve the stated purposes:
• Tax advisers, auditors, tax or investigative authorities, solicitors, experts, courts.
Retention period
We store your data on a case-by-case basis to the extent necessary, for as long as this is required to achieve the aforementioned purpose. We will then delete your data, unless data processing, including in other systems where applicable, remains permissible on another legal basis or is mandatory for us (e.g. in the event of statutory retention obligations).

9. Your rights
Below you will find information on the data subject rights granted to you by applicable data protection law vis-à-vis the controller with regard to the processing of your personal data:
The right, pursuant to Article 15 of the GDPR, to request information about your personal data processed by us. In particular, you may request information regarding the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the intended storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data where it was not collected by us, as well as the existence of automated decision-making, including profiling, and, where applicable, meaningful information regarding its details.
The right, pursuant to Article 16 of the GDPR, to request the immediate rectification of inaccurate personal data or the completion of your personal data stored by us.
The right, pursuant to Article 17 of the GDPR, to request the erasure of your personal data stored by us, unless processing is necessary for the exercise of the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims.
The right, pursuant to Article 18 of the GDPR, to request the restriction of the processing of your personal data, provided that you contest the accuracy of the data, the processing is unlawful but you oppose its erasure and we no longer require the data, but you require it for the establishment, exercise or defend legal claims, or you have objected to the processing in accordance with Article 21 of the GDPR.
The right, pursuant to Article 20 of the GDPR, to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transmitted to another controller.
The right to lodge a complaint with a supervisory authority in accordance with Article 77 of the GDPR. As a rule, you may contact the supervisory authority of the federal state in which our registered office is located, as stated above, or, where applicable, that of your usual place of residence or workplace.
The right to withdraw consent pursuant to Article 7(3) of the GDPR: You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event of withdrawal, we will delete the relevant data without delay, provided that further processing cannot be based on a legal ground for processing without consent. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to withdrawal.
Right to object
Where we process your personal data on the basis of legitimate interests pursuant to Article 6(1)(f) of the GDPR, you have the right under Article 21 of the GDPR to object to the processing of your personal data , provided this is for reasons arising from your particular situation. Where the objection relates to the processing of personal data for the purposes of direct marketing, you have a general right to object without the need to specify a particular situation.
If you wish to exercise your right to withdraw consent or object, please contact us using the contact details provided above under ‘Data Controller’.

10. Status of the privacy policy
This privacy policy was last amended on 7th of October 2026 .