1. Data collection and use when registering and using our services

You have the option to register on our website. When you create a user account or register, you must provide certain mandatory information in order to gain access to your user account and manage it (“mandatory information”). Mandatory information as part of the registration is marked with an asterisk and is required for the conclusion of the user contract. Which data is collected can be seen from the respective input forms. As part of the registration, these are: Your name and your e-mail address. You also need to create a password. If you do not provide this information, you will not be able to create a user account. In addition, you can voluntarily provide information about your job title / department and company name during registration. The legal basis for the processing of your data is the fulfillment of our contract with you in accordance with Art. 6 Para. 1 lit. b GDPR. We use the data you have provided to authenticate you when you log in and to follow up requests to reset your password, to verify your authorization to manage the user account, to enforce the terms of use of the website and all associated rights and obligations and to be in contact with you in order to be able to send you technical or legal notices, updates, security notifications or other messages relating to the administration of the user account. We therefore only use the data you have provided to process the contract and to provide our services to be provided within the framework of the contract. We can also pass on your data to one or more processors who also use your data exclusively for internal use on our behalf. When using our services, we also use the data you provided when registering. The legal basis for the processing of your data is the fulfillment of our contract with you in accordance with Art. 6 Para. 1 lit. b GDPR.

A transfer of this data to third parties does not take place unless there is a legal obligation to transfer or the transfer is used for criminal prosecution.

After the contract has been fully processed or your account has been deleted, your data will initially be blocked for further use and deleted after the statutory retention periods have expired, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is legally permitted and about which we will inform you below.

You can object to processing at any time and delete your account. In such a case, the contractual relationship with you cannot be continued.

2. Social Media

In addition to this website, we also maintain a presence in various social networks. If you visit such a site, personal data may be transmitted to the provider of the social network. It is possible that, in addition to the storage of the data you have specifically entered in this social network, further information will also be processed by the provider of the social network. As a rule, your data is processed for market research and advertising purposes, including in order to create appropriate usage profiles and to show you personalized advertising. For this purpose, the provider of the social network usually saves cookies on your device, in which your usage behavior and your interests are saved. In addition, the provider of the social network may process the most important data of the computer system from which you are visiting it - for example your IP address, the type of processor and browser version used, including plugins.

If you are logged in with your personal user account of the respective network while visiting such a network, this network can assign the visit to your account. If you do not want such an assignment, you must log out of your account before visiting our social media presence and delete the cookies.

The legal basis for the processing of personal data is Art. 6 Para. 1 lit. f GDPR. If you have given your consent to the processing of the respective social network provider, the legal basis for the processing of your data is Article 6 (1) (a) GDPR.

We maintain the presence in the respective social networks in order to be able to communicate with you there and to inform you about our services. Our legitimate interest in the processing of personal data in accordance with Art. 6 Para. 1 lit. f GDPR lies in these purposes.

For more information on the purpose and scope of data collection as well as on the further processing and use of your data and the option to opt out, please refer to the data protection provisions of the respective network:

If your personal data is processed, you as the person concerned within the meaning of the GDPR the following rights:

1. Right to information (Art. 15 GDPR)

You also have the right to receive free information from us about the personal data stored about you and a copy of this information from us at any time. You also have a right of access to the following information:

- the processing purposes, the categories of personal data that are processed,

- the recipients or categories of recipients to whom the personal data have been disclosed or are still being disclosed, in particular in the case of recipients in third countries or international organizations,

- if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration,

- the existence of a right to correction or deletion of the personal data concerning you or to restriction of processing by the person responsible or a right to object to this processing,

- the right to lodge a complaint with a supervisory authority,

- if the personal data are not collected from the data subject: all available information about the origin of the data and,

- The existence of automated decision-making including profiling in accordance with Art. 22 Paragraphs 1 and 4 GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

You also have a right to information as to whether personal data has been transmitted to a third country or to an international organization. If this is the case, you also have the right to receive information about the appropriate guarantees in connection with the transmission.

2. Right to correction (Art. 16 GDPR)

You have the right to request the immediate correction and / or completion of incorrect or incomplete personal data concerning you. We have to make the correction immediately.

3. Right to restriction of processing (Art. 18 GDPR)

You have the right to demand that we restrict processing if one of the following conditions is met:

- The correctness of the personal data is disputed by the person concerned, for a period that enables the person responsible to verify the correctness of the to check personal data

- the processing is unlawful, the person concerned refuses to delete the personal data and instead requests the restriction of the use of the personal data

- the person responsible no longer needs the personal data for the purposes of the processing, the person concerned However, it is required to assert, exercise or defend legal claims. The person concerned has lodged an objection to the processing in accordance with Art. 21 Paragraph 1 GDPR and it has not yet been determined whether the legitimate reasons of the person responsible outweigh those of the person concerned . Has been processing of the personal data relating to you, these data may only be - apart from their storage

- with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the Union or If the processing restriction has been restricted according to the above conditions, you will be informed by us before the restriction is lifted.

4. Right to deletion (Art. 17 GDPR)

You have the right to request that we delete your personal data immediately if one of the following reasons applies and if processing is not necessary:

- The personal data were collected or otherwise processed for purposes for which they are no longer necessary.

- The data subject revokes their consent, on which the processing was based in accordance with Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR, and there is no other legal basis for the processing.

- The data subject objects to the processing in accordance with Art. 21 Paragraph 1 GDPR and there are no overriding legitimate reasons for the processing or the data subject objects to the processing in accordance with Art. 21 Paragraph 2 GDPR.

- The personal data was processed unlawfully.

- The deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the member states to which the person responsible is subject.

- The personal data was collected in relation to information society services offered in accordance with Art. 8 Para. 1 GDPR.

If the personal data has been made public by us and we, as the person responsible, are obliged to delete the personal data in accordance with Art. 17 Para. 1 GDPR, we take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, in order to prevent others for the To inform those responsible for data processing who process the published personal data that the data subject has requested the deletion of all links to this personal data or of copies or replications of this personal data from these other data processors, insofar as the processing has not been carried out is required.

The right to deletion does not exist if the processing is necessary:

- to exercise the right to freedom of expression and information;

- to fulfill a legal obligation that requires processing under the law of the Union or the Member States to which the person responsible is subject, or to perform a task that is in the public interest or in the exercise of official authority vested in the person responsible;

- for reasons of public interest in the area of public health in accordance with Art. 9 Paragraph 2 lit. h and i and Art. 9 Paragraph 3 GDPR;

- for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Art. 89 Para. 1 GDPR, insofar as the right mentioned under section a) is likely to make the realization of the objectives of this processing impossible or seriously impair it,

- or for the establishment, exercise or defense of legal claims.

5. Right to be informed

If you have asserted the right to correction, deletion or restriction of processing against us, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction of processing, unless this is the case proves to be impossible or involves a disproportionate effort.

You have the right vis-à-vis us to be informed about these recipients.

6. Right to data portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. You also have the right to transfer this data to another person responsible without hindrance from us, provided that the processing is based on consent in accordance with Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR or on a contract in accordance with Art. 6 Para. 1 lit.b GDPR and the processing takes place with the aid of automated procedures, provided that the processing is not necessary for the performance of a task that is in the public interest or takes place in the exercise of official authority that has been assigned to us.

Furthermore, when exercising your right to data portability in accordance with Art. 20 Para. 1 GDPR, you have the right to have the personal data transmitted directly from us to another person responsible, insofar as this is technically feasible and insofar as this does not give rise to the rights and Other people's freedoms are impaired.

The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task that is in the public interest or takes place in the exercise of official authority that has been transferred to the person responsible.

7. Right to object (Art. 21 GDPR)

You have the right to withdraw your consent to the processing of personal data at any time. Withdrawing your consent does not affect the legality of the processing carried out on the basis of your consent up to the point of withdrawal.

8. Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged violation, if you are of the opinion that the processing of your personal data is against violates the GDPR. The supervisory authority to which the complaint was submitted informs the complainant about the status and the results of the complaint, including the possibility of a judicial remedy in accordance with Art. 78 GDPR.