4 July 2018
Responsible for the purposes of the General Data Protection Regulation and other national data protection laws of the Member States as well as other data protection provisions is:
Neue Grünstraße 25
Tel.: +49 30 45502-0
Managing directors: Kim Harris, Holger Hoffmann, Thomas Ossowski, Thomas Senf
Ms Patricia Kühnel, the data protection officer, can be reached at:
We only process personal user data if it is necessary in order to provide a functional website, content and services. The processing of personal user data takes place regularly only after the user has given his/her consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the data processing is permitted by law.
Insofar as we obtain the consent of the data subject to process personal data, Article 6(1)(a) of the European General Data Protection Regulation (GDPR) serves as the legal basis.
Article 6(1)(b) of the GDPR serves as the legal basis for processing personal data required to fulfil a contract to which the data subject is a party. This also applies to processing procedures that are necessary to carry out pre-contractual measures.
Insofar as personal data processing is required to fulfil a legal obligation to which our company is subject, Article 6(1)(c) of the GDPR serves as the legal basis.
In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) of the GDPR serves as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party, and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Article 6(1)(f) of the GDPR serves as the legal basis for processing.
The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has been legally provided for in EU or national regulations, laws or other provisions to which the responsible party is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
Every time you visit our website, our system automatically collects data and information from your computer system.
The following data is collected:
The data is also stored in the log files of our system. This data is not stored together with other personal user data.
The legal basis for the temporary storage of data and log files is Article 6(1)(f) of the GDPR.
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. This requires the IP address of the user to be stored for the duration of the session.
The data is stored in log files to ensure the functionality of the website. In addition, the data serves to optimise the website and to ensure the security of our IT systems. The data is not evaluated for marketing purposes in this context.
These purposes constitute our legitimate interest in data processing pursuant to Art. 6(1)(f) of the GDPR.
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data collection for the provision of the website, this is the case when the respective session has ended.
If the data has been stored in log files, this is the case after one month at the latest. Extended storage is possible. In this case, user IP addresses are deleted or depersonalised, so that the user’s client cannot be be determined.
Data collection for the provision of the website and data storage in log files are absolutely necessary for proper website operation. Consequently, user objection to this is not possible.
The following data is stored and transmitted in the cookies:
This allows the following data to be transmitted:
Technical precautions ensure that user data collected in this way is anonymised. Therefore, it is no longer possible to assign the data to the specific user. The data will not be stored together with other personal user data.
The legal basis for personal data processing using technically mandatory cookies is Article 6(1)(f) of the GDPR.
The legal basis for personal data processing using cookies for analytical purposes is Article 6(1)(a) of the GDPR.
Cookies are required for the following applications:
The user data collected by technically mandatory cookies is not used to create user profiles.
Analysis cookies are used to improve the quality of our website and its content. Analysis cookies show us how the website is used, allowing us to continuously optimise our website and our services portfolio.
Such purposes constitute our legitimate interest in the processing of personal data in accordance with Article 6(1)(f) of the GDPR.
You can subscribe to a free newsletter on our website. When registering for the newsletter, the following data from the input screen is transmitted to us:
In addition, the following data is collected upon registration:
In connection with the data processing required for dispatching newsletters, the data is shared with HubSpot Inc., our newsletter service provider. The data is used exclusively for sending the newsletter.
The legal basis for data processing after registering for the newsletter is Article (6)(1)(a) of the GDPR.
The collection of the user’s e-mail address is required to send the newsletter.
The collection of other personal data as part of the registration process serves to prevent misuse of the services provided or the e-mail address used.
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. The user’s e-mail address will therefore be stored for as long as subscription to the newsletter is active.
The other personal data collected during the registration process will generally be deleted after a period of 30 days.
The subscription to the newsletter can be cancelled by the user at any time. There is a corresponding link in every newsletter for this purpose.
This also makes it possible to revoke consent to the storage of personal data collected during the registration process.
White papers, case studies and other documents about our services and industry best practices can be downloaded from our website. The following data from the input screen will be transmitted to us before the download:
In addition, the following data is collected upon registration:
The legal basis for data processing after registering for the newsletter is Article (6)(1)(a) of the GDPR.
The data in the input screen, in particular the user’s e-mail address, is used to send the whitepapers and case studies and, if necessary, used for contact purposes about e-mail campaigns on similar topics.
The collection of other data as part of the registration process serves to prevent misuse of the services or the e-mail address used.
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. The user’s e-mail address will therefore be stored for as long as a contact exists or until the person objects to the storage.
The right to deletion of the aforementioned personal data can claimed by the user at any time. An informal notification is sufficient for this purpose. This can be done by telephone at +49 30 45502-0, by e-mail at firstname.lastname@example.org or by post. This also makes it possible to revoke consent to the storage of personal data collected during the registration process.
On our website, there is a contact form that can be used to initiate contact with us. If a user initiates contact in this way, the data entered into the input screen will be transmitted to us and stored. This data includes:
At the time the message is sent, the following data is also stored:
Alternatively, you can contact us via the e-mail address provided. In this case, the user’s personal data transmitted via e-mail will be stored.
We use this data to manage our current and prospective customer database using marketing tools (HubSpot and Vtiger) for initiating and processing contractual matters with customers. In this context, the data may be accessible to third parties.
The legal basis for data processing is Article 6(1)(a) of the GDPR if the user has given his consent.
The legal basis for the processing of data transmitted in the course of sending an e-mail is Article 6(1)(f) of the GDPR. If the e-mail communication serves the purpose of concluding a contract, then the additional legal basis for the data processing is Article 6(1)(b) of the GDPR.
The processing of personal data gathered from the input screen serves the sole purpose of processing the relevant communication for services within the scope of our service portfolio. In the event of contact via e-mail, this also constitutes the necessary legitimate interest in the processing of the data.
The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.
All data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. This applies to personal data from the input screen of the contact form and to the data that was sent via e-mail when the respective conversation regarding the intended and/or concluded contract with the user has been completed. The conversation is considered concluded once the circumstances indicate that a final clarification of the facts has been reached, the contractual relationship has ended and no follow-up orders are expected.
The user may revoke his consent to personal data processing at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In this case, the conversation cannot be continued.
You may object to personal data storage by telephone at +49 30 45502-0, by e-mail at email@example.com or by post.
In this case, all personal data that was stored in the course of contacting us will be deleted.
If individual pages of our website are accessed, the following data is stored:
Only the first half of the IP addresses is transmitted. IP anonymisation has been activated on the website so that your IP address will be truncated by Google within Member States of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google uses this information to evaluate your use of the website, compile reports on website activity and provide the website operator with other services relating to website and Internet use. The IP address transmitted by your browser through Google Analytics is not merged with other Google data.
The pseudonymised data collected by Google Analytics is also evaluated by the marketing tools HubSpot and Leadfeeder. No additional personal data is collected in this context. Further information about HubSpot and Leadfeeder can be found in the privacy policies of the respective companies on their websites.
The legal basis for the processing of users’ personal data is the consent pursuant to Art. 6 (1)(a) of the GDPR.
The processing of users’ personal data enables us to analyse the browsing behaviour of our users. We are able to compile information about the use of the individual components of our website by evaluating the data obtained. This helps us to continuously improve our website and its user-friendliness. The user agrees to the purposes of data processing with respect to granting his/her consent. By anonymising the IP address, the interest of users in protecting their personal data is also taken into account.
You may also prevent Google from collecting and processing data generated by the cookie and data relating to your use of the website (including your IP address). You can deactivate tracking for your browser using Google Analytics via the following opt-out link: Deactivate Google Analytics
text&form uses the “Recommend” buttons, “Plug-ins” and “Widgets” for Facebook, Twitter and LinkedIn in some areas of the website. By default, text&form embeds deactivated buttons that do not make contact with the servers of the corresponding social networks. Only when you activate these buttons and thereby consent to communication with Facebook, Twitter or LinkedIn, do the buttons become active and establish a connection. You can then submit your recommendation with a repeated click.
If your personal data is processed, you have the following rights vis-à-vis the responsible party in accordance with the GDPR:
You can request a confirmation from the responsible party about whether we process your personal data.
If such processing has taken place, you can request the following information from the responsible party:
You have the right to request information as to whether your personal data is transmitted to a third country or to an international organisation. In this context, you may request to be informed about the relevant guarantees pursuant to Art. 46 of the GDPR in connection with the transmission of your personal data.
You have a right to rectification and/or completion vis-à-vis the responsible party if your personal data is incorrect or incomplete. The responsible party shall make the correction without delay.
Under the following conditions, you may request that the processing of your personal data be restricted:
If the processing of your personal data has been restricted, such data may only be processed, apart from being stored, with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on the grounds of an important public interest of the Union or a Member State.
If processing has been restricted in accordance with the above conditions, you will be informed by the responsible party before the restriction is cancelled.
You may request to have the responsible party delete your personal data without delay. The responsible party is obliged to delete your personal data without delay if one of the following reasons applies:
Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
You revoke your consent, which was the basis for processing pursuant to Art. 6(1)(a) or Art. 9(2)(a) of the GDPR, and there is no other legal basis for the processing.
You file an objection against the processing pursuant to Art. 21(1) of the GDPR and there are no overriding legitimate reasons for the processing, or you file an objection against the processing pursuant to Art. 21(2) of the GDPR.
Your personal data has been processed unlawfully.
The deletion of your personal data is necessary to fulfil a legal obligation under European Union law or the law of the Member States to which the responsible party is subject.
Your personal data has been collected in relation to information society services that have been offered pursuant to Art. 8(1) of the GDPR.
If the responsible party has made your personal data public and is obliged to delete it pursuant to Art. 17(1) of the GDPR, he shall take appropriate measures, including technical measures, which take into account the available technology as well as implementation costs, to inform responsible parties who process your personal data that you as the data subject have requested the deletion of all links to your personal data and/or copies or replications of this personal data.
The right to deletion does not exist insofar as the processing is necessary
If you have exercised your right to have the responsible party correct, delete or limit processing, he/she is obliged to inform all recipients to whom your personal data has been disclosed of this correction or deletion of the data, or restriction on processing, unless this proves impossible or requires a disproportionate amount of effort.
You have the right to be informed by the responsible party of such recipients.
You have the right to receive the personal data that you have provided the responsible party in a structured, common and machine-readable format. In addition, you have the right to pass this data on to another responsible party without obstruction by the responsible party to whom the personal data was provided, provided that
In exercising this right, you also have the right to request that your personal data be transferred directly from one responsible party to another responsible party, to the extent that this is technically feasible. This must not impair the freedoms and rights of other persons.
The right to transferability shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred to the responsible party.
You have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data, which is based on Art. 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions.
The responsible party shall no longer process your personal data, unless he can prove that there are compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such advertising purposes; this also applies to profiling, insofar as it is associated with direct marketing.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
You can exercise your right of objection regarding the use of Information Society services, irrespective of Directive 2002/58/EC, by means of automated procedures that use technical specifications.
You have the right to revoke your data protection-related consent at any time. The revocation of consent shall not affect the legality of the processing that was carried out on the basis of the consent up to the time of revocation.
You have the right to not be subject to a decision based exclusively on automated processing, including profiling, that has legal consequences for you or that significantly adversely affects you in a similar manner. This does not apply if the decision
However, these decisions may not be based on special categories of personal data pursuant to Art. 9(1) of the GDPR, unless Art. 9(2)(a) or (g) of the GDPR applies and appropriate measures have been taken to protect your rights, freedoms and legitimate interests.
In the cases referred to in (1) and (3), the responsible party shall take reasonable measures to safeguard your rights, freedoms and legitimate interests, including, at minimum, the right to intervention of a person with respect to the responsible party, the right to maintain his/her individual position and the right to challenge the decision.
Irrespective of any other administrative or judicial remedy, you have the right to appeal to a supervisory authority, in particular in the Member State where you are staying, working or suspected of infringement, if you believe that the processing of your personal data violates the GDPR.
The supervisory authority to whom the complaint was lodged shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.
The protection of your personal data is important to us. If you have any questions, comments and/or suggestions for improvement, please contact us at firstname.lastname@example.org.
Your text&form team