Privacy Policy

We are pleased about your interest in our website. TENTE International GmbH takes the protection of personal data very seriously. Protecting your privacy when using our websites is important to us. For this reason, we strictly comply with the national data protection laws as well as the European General Data Protection Regulation (GDPR).

Name and address of the controller

The controller responsible for the processing of your personal data is

We have appointed a Data Protection Officer for our company. You can reach her electronically at the email address: dpo@tente.com or at the above-mentioned postal address with the addition “To the Data Protection Officer”.

Our Data Protection Officer is also happy to hear your questions, suggestions or criticism regarding data protection.

Processing of data for the performance of contractual services

You may submit inquiries regarding the commissioning of contractual services to us via our website (contact form) and the contact details provided there. If, for this purpose or otherwise in connection with such inquiries, you transmit personal data to us, we process your data in order to respond to your inquiry, to perform the assignment/contract, and for invoicing purposes. For this, we require your name, your address details and your email address. Without this data, we are unable to perform the contract with you. Depending on the specific assignment/contract, we may require additional data, about which we will inform you on a case-by-case basis.

For suppliers/service providers, we process the personal data you provide in order to place orders and request services, as well as to pay for your services. For this, we require your name, address details and bank account information. Depending on the specific service/contract, we may also require further information, about which we will then inform you on a case-by-case basis.

The legal basis for this processing is Article 6(1)(b) GDPR, which permits the processing of data for the performance of a contract or for taking steps prior to entering into a contract.

Further information on the processing of business partner data can be found at: General terms and conditions.

Processing of data to communicate with you

In addition to the contractual data, we process your communication data (first and last name, company, address, telephone number, email address, message) in order to contact you and communicate with you. Personal data that you provide to us by email, via the contact form or by telephone is processed solely for the purpose of corresponding with you and only for the purpose for which you provided the data to us.

The legal basis for this processing is Article 6(1)(b) GDPR, which permits the processing of data for the performance of a contract or for taking steps prior to entering into a contract. Furthermore, an overriding legitimate interest of the company in processing the data on the basis of Article 6(1)(f) GDPR cannot be excluded.

Processing of data to comply with legal obligations

In addition, we process your data in order to comply with legal obligations (e.g., supervisory requirements, commercial and tax law retention and documentation obligations).

The legal basis for this processing is Article 6(1)(c) GDPR, which permits processing for compliance with a legal obligation.

Categories of recipients of personal data

Your contractual and communication data are forwarded to the responsible department and the responsible employees within our company in order to respond to your inquiries, to communicate with you, or to perform the assignment. The legal basis for this is Article 6(1)(b) GDPR, which permits the processing of data for the performance of a contract or for taking steps prior to entering into a contract.

Your personal data will only be disclosed or otherwise transmitted to third parties outside our company if this is necessary for the purpose of contract execution or billing, if you have given your prior consent, or if there is a legal basis for the disclosure.

Where we make use of services provided by third parties for the performance and handling of processing activities, the provisions of the General Data Protection Regulation are complied with. Service providers that support us in delivering our services to you include:

• hosting providers,
• email service providers,
• IT service providers,
• service providers for data destruction.

We also disclose personal data, within the scope of legal permissibility and necessity, to the following third parties who process personal data under their own responsibility (so-called controllers, cf. Article 4(7) GDPR):

• auditors,
• tax advisors,
• lawyers,
• authorities.

Duration of data storage

As a general rule, we delete your data as soon as it is no longer required for the purposes mentioned above, unless temporary retention remains necessary. We store your data due to statutory documentation and retention obligations, which arise, among other things, from the German Commercial Code and the German Fiscal Code. The retention periods are up to ten full years. In addition, we retain your data for the period during which claims may be asserted against our company (statutory limitation period of three up to thirty years).

The storage duration of the cookies used can be found in the consent management tool.

Data security

Your personal data is securely transmitted to us through encryption. For this purpose, we use the SSL (Secure Socket Layer) encryption system. You can recognize this in the browser's address bar by the character string “https://” and the lock symbol. Furthermore, we secure our websites and other systems through technical and organizational measures to protect your data against loss, destruction, access, alteration or dissemination by unauthorized persons. Our security measures are continuously improved in line with technological developments. However, we expressly point out that data transmission over the internet may involve security vulnerabilities and cannot be completely protected against access by third parties, which applies particularly and especially to unencrypted communication by email.

Processing of data for credit checks

In order to prevent payment defaults, it may occur that we use your name and address for a credit check if the payment method “invoice” is selected for contracts. For this purpose, we transmit your data to the following credit agency, which acts as an independent controller within the meaning of Article 4(7) GDPR: [Name and address of the credit agency]. The purpose of the processing is the assessment of your creditworthiness in order to avoid payment defaults. The legal basis is Article 6(1)(f) GDPR; our legitimate interest lies in minimizing economic risks. Further information on data processing by the credit agency can be found at: [Link to the credit agency’s privacy policy].

Where contracts with an international element are concluded or a credit check involving foreign bodies is required (e.g. if you are resident outside Germany or the invoice recipient is based abroad), we may need to pass on your name and address to international credit reference agencies or to partner companies abroad entrusted with carrying out the credit check. In these cases too, the transfer is carried out solely for the purpose of assessing your creditworthiness to prevent payment defaults. The respective recipients also act as independent controllers within the meaning of Article 4(7) of the GDPR.

Where personal data is transferred to countries outside the European Union as part of the credit assessment, this will only take place if an adequacy decision by the European Commission pursuant to Article 45 of the GDPR exists for the relevant third country, or if suitable safeguards pursuant to Article 46 of the GDPR are in place, in particular in the form of standard contractual clauses. Further information on data processing by the respective credit reference agencies and on the safeguards in place can be found in the privacy notices of the respective providers or is available on request. [Link to the credit agency's privacy policy].

Newsletter dispatch

On our website, we offer the option to subscribe to our email newsletter, which informs you about updates on our websites and invites you to trade fairs, seminars and workshops.

We use different procedures for newsletter subscriptions, depending on your country. For users in Germany (DE), Austria (AT), Greece (GR), Norway (NO), Denmark (DK), Luxembourg (LU) and Switzerland (CH), we use the so-called double opt-in procedure. This means that after you have registered, we will send a message to the email address you provided, asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your details will be blocked and automatically deleted after one month. In addition, we store your IP address and the time of registration and confirmation. The purpose of this processing is to verify your registration and, if necessary, to investigate any potential misuse.

For users from all other countries, subscription to the newsletter takes place without a prior double opt-in procedure. In these cases, after subscribing, you will receive a confirmation email containing an unsubscribe link, which you can use at any time to unsubscribe from the newsletter with future effect.

The purpose of this processing is to document your registration and to clarify any possible misuse. The only mandatory information required for sending the newsletter is your email address. Additional optional data may be provided by you within the respective newsletter registration and may be processed by us. After your confirmation, we store your email address and, where applicable, additional data solely for the purpose of sending the newsletter.

The legal basis is your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent to receive the newsletter at any time. The withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

For the sending and administration of the newsletter, we use the SAP Engagement Cloud marketing platform (formerly Emarsys). The data mentioned above is transmitted to SAP Engagement Cloud and processed there for sending, segmentation and managing the newsletter distribution.

As SAP Engagement Cloud processes personal data solely on our behalf, a data processing agreement (DPA) has been concluded with the provider in accordance with Article 28 GDPR.

Further information on data processing by SAP and your rights can be found in the provider’s privacy notice at: https://emarsys.com/de/datenschutzrichtlinie/.

Log files

Each time you access our website, usage data is transmitted by the respective internet browser and stored in log files, the so-called server log files. The data records stored in this process contain the following information: date and time of access, name of the accessed page, IP address, referrer URL (origin URL from which you arrived at the website), the amount of data transferred, as well as product and version information of the browser used and the operating system of your PC. The IP addresses of users are deleted or anonymized after the end of use. No further analysis of the data takes place, except for statistical purposes and then generally in anonymized form. No personal “surf profiles” or similar are created or processed.

The legal basis for the data processing is Article 6(1)(f) GDPR, which permits the processing of data for the purpose of legitimate interests pursued by the controller, provided that the interests or fundamental rights and freedoms of the data subject do not override those interests.

Operation of the webshop

We operate a webshop on our website through which you can select and order products online. In the context of using the webshop, we process those personal data that are required to provide the functions, to process your order, and to comply with legal requirements.

This includes in particular:

• inventory data (e.g., name, billing and delivery address)
• contact data (e.g., email address, telephone number)
• contract and order data (e.g., selected products, shopping cart contents, prices, order history)
• payment data (e.g., chosen payment method, transaction identifiers; in the case of payment service providers we do not receive full payment details such as credit card numbers)
• technical usage data (e.g., IP address, date and time of access, browser and device information), insofar as required for the operation of the shop

The processing of this data takes place for the purpose of fulfilling the contract or taking steps prior to entering into a contract pursuant to Article 6(1)(b) GDPR. In addition, we process data where necessary to comply with legal obligations (e.g., commercial and tax law retention obligations) pursuant to Article 6(1)(c) GDPR.

We also process technical data on the basis of Article 6(1)(f) GDPR, as we have a legitimate interest in the secure, stable and functional operation of our webshop.

Cookies

We use so-called cookies on some of our websites, among other things to provide you with website-specific services, to recognize you when you return to our website, and/or to adapt our offering to your personal preferences.

Cookies are small text files that are stored on a visitor’s computer and contain data relating to the respective user in order to enable access to various functions. Our website uses both session cookies and permanent cookies. A session cookie is temporarily stored on the computer you are using while you navigate through the website. A session cookie is deleted as soon as you close your internet browser or after your session has expired. A permanent cookie remains on your computer until it is deleted. By storing a cookie, it is ensured that you do not have to re-enter your personal settings and preferences each time you visit. This saves you time and makes the use of our website more convenient.

On some of our websites, we may work together with third parties, and therefore cookies from partner companies (third-party cookies) may also be stored on your hard drive when you visit such pages. We inform you below about the use of such cookies and the scope of the respective data collected.

You can delete permanently installed cookies via your browser settings. Most browsers automatically accept cookies — so if you wish to prevent the use of cookies, you may need to actively delete or block cookies or prevent their storage by adjusting your browser software. Please note, however, that if you refuse the use of cookies, you may still visit our website, but some functions may be impaired in their operation.

We use necessary cookies that are required to enable the provision of the services we owe or to ensure the functionality of our services. The corresponding data processing is based on Article 6(1)(b) GDPR, which permits the processing of data for the performance of a contract or for taking steps prior to entering into a contract, or on Article 6(1)(f) GDPR, which permits the processing of data for the purpose of legitimate interests pursued by the controller, provided that the interests or fundamental rights and freedoms of the data subject do not override those interests. Our interest in this case lies in ensuring the functionality of our website.

For the use of other, non-essential cookies, we obtain your consent where applicable. The data processing is then based on your consent pursuant to Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. You can change or withdraw your consent at any time via the link “Cookies” in the footer of this website or via the cookie declaration on our website. The lawfulness of processing carried out prior to the withdrawal remains unaffected.

Consent management tool

We use the consent management tool of Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, to control cookies on our website, to manage user consent regarding cookies, and to ensure compliance with data protection regulations. This enables users to give consent to certain data processing operations or to withdraw previously given consent. It also supports us in providing proof of the declaration of consent. For this purpose, we process information about the declaration of consent and additional log data relating to this declaration. Cookies are also used to collect these data. The processing of these data is necessary in order to be able to document consent that has been given.

The storage of technically necessary cookies is based on Article 6(1)(f) GDPR in conjunction with Section 25(2) No. 2 TDDDG.

For the use of other, non-essential cookies, we obtain your consent where applicable. The data processing is then based on your consent pursuant to Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. Through the respective settings, you can change or withdraw any consent you have given at any time. The lawfulness of the processing carried out prior to the withdrawal remains unaffected.

The use of the consent management tool required for the administration of cookies is based on legal obligations pursuant to Article 6(1)(c) GDPR in conjunction with Section 25 TDDDG.

External services

We use external services on some of our websites. These external services help us make our website more interactive and enable you to access direct links to partners or information provided by third parties. You can prevent the storage of cookies by adjusting your browser settings accordingly or by making the appropriate selection in our consent management tool.

The processing is carried out on the basis of your consent pursuant to Article 6(1)(a) GDPR in conjunction with Section 25(1) of the Telecommunications-Digital-Services-Data-Protection-Act (TDDDG). You may withdraw your consent at any time. You can declare your withdrawal by sending a message to the contact details provided above or via the consent management tool in use. The withdrawal does not affect the lawfulness of the data processing already carried out.

We use the following external services for specific purposes on our websites:

Use of Google services on our website

Use of Google Analytics 4

We use the web analytics service Google Analytics 4 provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics 4 uses cookies and other recognition technologies (e.g., device fingerprints) to analyse user behaviour and to statistically evaluate website usage. In this process, online identifiers (cookie IDs, user IDs), technical data (browser, device, operating system), usage data (page views, clicks, session duration) and anonymised IP addresses are processed. The data collected by Google Analytics 4 may be transmitted to and processed on servers of Google LLC in the United States. According to Google, GA4 no longer stores IP addresses in plain text but uses automatic IP anonymisation. No merging of the data with other Google data takes place.

The processing is carried out on the basis of Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG, provided that you have consented to tracking. Consent can be withdrawn at any time via the cookie settings.

Further information on Google Analytics’ privacy provisions can be found at:
https://support.google.com/analytics/topic/2919631?hl=en&ref_topic=1008008,3544742,2986333,&sjid=1881441919987619365-EU

Information on the cookies set can be found at:
https://policies.google.com/technologies/cookies

You can prevent the processing of your data by clicking the following link:
https://tools.google.com/dlpage/gaoptout

Google AdSense

Our website uses Google AdSense, an online advertising service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google AdSense uses cookies and similar technologies (e.g., web beacons) to enable the delivery and measurement of the effectiveness of advertisements. In this process, online identifiers (cookie IDs), device/browser data, usage data, as well as the IP address may be processed; a transfer to servers of Google LLC in the United States is possible.

The legal basis is your consent pursuant to Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG, which you provide via our consent banner and may withdraw at any time with effect for the future (settings in the cookie banner). Without consent, Google AdSense is not used.

Objection/deactivation options (in addition to withdrawing consent):

• browser settings to deactivate/delete cookies,
• deactivation of interest-based advertising at Google under adssettings.google.com,
• deactivation of interest-based advertising by participating providers via www.aboutads.info/choices (USA) or www.youronlinechoices.com (EU),
• where applicable, browser add-ons/plugins for permanent deactivation.

Further information on Google’s privacy practices and advertising cookies:

• https://policies.google.com/privacy/partners/
• https://policies.google.com/technologies/ads
• https://support.google.com/adsense/answer/2839090

Google Ads – Remarketing and Conversion Tracking

We use the online advertising program Google Ads of Google Ireland Limited (Ireland, EU) on our website. Through Google Ads, we place advertisements in the Google search engine and within the Google advertising network. If you reach our website via a Google advertisement, Google places a cookie on your device (“conversion cookie”). Each Google Ads customer receives their own conversion cookie, so that cookies cannot be tracked across the websites of different Ads customers. The information generated with the help of this cookie is used to compile conversion statistics, for example the total number of users who have clicked on one of our ads. Personal identification of the user through these statistics is not possible. Additionally, cookies may be used as part of Google Ads Remarketing to target users who have already visited our website with interest-based advertising. These cookies collect pseudonymised usage data (e.g., pages visited or interactions) in order to display targeted advertisements within the Google network.

Further data may be processed as part of conversion tracking, including IP addresses, device information, navigation data or—if provided by the user as part of a conversion triggered by them—personal data such as name or email address.

The processing of your data is carried out on the basis of your consent pursuant to Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

Cookies are set with your consent, which you can withdraw at any time with effect for the future via the consent management tool. When using this service, a transfer of your data to the United States cannot be excluded. Please refer to the information in the section “Transfers of data to third countries”. Further information on Google’s privacy practices can be found in Google’s privacy notice at https://policies.google.com/privacy#infocollect.

Google Tag Manager

We use the “Google Tag Manager” service on our website to efficiently manage website tags. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The legal basis for the use of Google Tag Manager is your consent pursuant to Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future.

The data processed by Google Tag Manager includes your IP address, browser and device information, as well as information about your interaction with the website. Google Tag Manager itself does not set cookies but may trigger other services that do set cookies.

The purpose of the data processing is the simplified integration and management of website tags and tracking codes for the analysis of user interactions.

Further information on the privacy provisions of Google Tag Manager can be found at:
https://policies.google.com/privacy

Information on the cookies used can be found at:
https://policies.google.com/technologies/cookies

You can prevent the processing of your data by clicking the following link:
https://tools.google.com/dlpage/gaoptout

Google Fonts

This website uses so-called Google Fonts provided by Google in order to ensure a uniform display of fonts. When you access a page, your browser loads the required fonts from servers of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) into its browser cache.

In doing so, Google becomes aware that our website has been accessed via your IP address. The IP address is transmitted to Google’s servers. According to Google, no merging of these data with other Google data takes place.

The legal basis for the use of Google Fonts is your consent pursuant to Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. The fonts are only loaded after you have given your consent via the consent banner.

The data processed by Google Fonts include your IP address, browser and device information, as well as the time of the request.

The purpose of the data processing is the optimised and uniform display of fonts on the website.

It cannot be ruled out that personal data may be transferred to unsafe third countries (USA) where a lower level of data protection than in the EU applies. Google is certified under the EU-US Data Privacy Framework, which governs the secure processing of data of EU citizens in the USA.

Further information on the privacy provisions of Google Fonts can be found at:
https://policies.google.com/privacy

Information on the cookies used can be found at:
https://policies.google.com/technologies/cookies

You can prevent the processing of your data by clicking the following link:
https://policies.google.com/privacy#infochoices

Use of Google Photos

Google Photos is a cloud service for storing, managing and organising photos and videos. We may use the web storage service Google Photos provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) on some of our websites. Its use serves to facilitate the display and integration of our images and other web content. Cookies are set in this context.

Google processes the following data when content is provided via Google services: technical data such as IP address, device and log information as well as other personal data that may be stored within the Google account.

Google Photos itself does not use stored content for advertising purposes, and personal data is not sold according to Google. Users retain control over their stored content and can adjust data processing settings within their Google account.

Photo and video data are encrypted during transmission and at rest. Google uses a multi-layered security infrastructure for this, which is also applied when using Google Photos.

The legal basis for the use of Google Photos is your consent pursuant to Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. The content is only loaded after you have given your consent via the consent banner.

Further information on how user data is handled can be found in Google’s privacy policy:
https://policies.google.com/privacy

Google Translate

To improve user friendliness, this website may use functions of Google Translate. The service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Translate enables the automatic translation of website content into various languages.

When using Google Translate, website content as well as any data entered by the user may be transmitted to and processed on Google’s servers. This may also involve a transfer to the USA. Google is responsible for the processing of personal data.

Information on Google’s data processing can be found in Google’s privacy policy:
https://policies.google.com/privacy

Use of Google Translate is voluntary. Without the use of the service, no transmission of the aforementioned data takes place.

YouTube Images

Preview images (thumbnails) for YouTube videos are embedded on our website. These are not hosted locally but are loaded via the domain ytimg.com. Ytimg.com is a content delivery network (CDN) for images and stylesheets operated by YouTube/Google; the domain belongs to YouTube’s primary domains.

When accessing a page that contains such a preview image, technically necessary connection data (e.g., IP address, browser and device information) is transmitted to Google’s servers. Storing tracking cookies by ytimg.com is generally not required in this context. However, the transfer of data to Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) already occurs when the images are loaded.

If cookies are set by YouTube, the processing of personal data is carried out on the basis of your consent pursuant to Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future. The lawfulness of the data processing carried out prior to the withdrawal remains unaffected.

YouTube NoCookie

We use the YouTube NoCookie service (also known as “YouTube with enhanced privacy mode”) on our website to embed videos without using cookies that track user behaviour. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The legal basis for the use of YouTube NoCookie is your consent pursuant to Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future.

The data processed by YouTube NoCookie includes your IP address, device information and information about video interactions. Data is stored in the browser’s web storage. The purpose of the data processing is to embed videos while minimising the use of cookies and improving user privacy.

It cannot be ruled out that personal data may be transferred to unsafe third countries (USA) where a lower level of data protection applies than in the EU. We have concluded a data processing agreement (DPA) with Google, ensuring that personal data is processed only in accordance with our instructions and in compliance with the GDPR. Google is certified under the EU-US Data Privacy Framework, which governs the secure processing of data of EU citizens in the USA.

Further information on the privacy provisions of YouTube NoCookie can be found at:
https://policies.google.com/privacy#infocollect

Information on the cookies used can be found at:
https://policies.google.com/technologies/cookies

You can prevent the processing of your data by clicking the following link:
https://policies.google.com/privacy#infochoices

Amazon Web Services

We use the “Amazon Web Services” (AWS) service on our website to host and manage our online infrastructure. The provider is Amazon EU S.à r.l. (“Amazon”), 38 Avenue John F. Kennedy, L-1855 Luxembourg.

The legal basis for the use of AWS is our legitimate interest pursuant to Article 6(1)(f) GDPR in securely hosting our website and ensuring its reliable operation, performance and protection against technical issues or misuse.

The data processed by Amazon Web Services includes your IP address, device and browser information, usage data and log data; cookies may also be set for authentication and to ensure the functionality of the service.

The purpose of the data processing is the provision of cloud computing infrastructure and services, including storage, hosting and data management.

It cannot be ruled out that personal data may be transferred to unsafe third countries (USA) where a lower level of data protection applies than in the EU. Amazon is certified under the EU-US Data Privacy Framework, which governs the secure processing of data of EU citizens in the USA. We have concluded a data processing agreement (DPA) with Amazon, ensuring that personal data is processed only in accordance with our instructions and in compliance with the GDPR.

Further information on the privacy provisions of AWS can be found at:
https://aws.amazon.com/privacy/

OpenStreetMap

We use a map section from OpenStreetMap (https://www.openstreetmap.de) on our website in order to display the route to our company and to make it easier for you to plan your journey. This is an open-source mapping tool. To display the map, your IP address is transmitted to OpenStreetMap. Information on how OpenStreetMap stores your data can be found on the OpenStreetMap privacy page at https://wiki.openstreetmap.org/wiki/DE:Datenschutz and https://wiki.openstreetmap.org/wiki/DE:Legal_FAQ.

Meta Pixel

We use the “Meta Pixel” service (also known as the “Facebook Pixel”) on our website to analyse user behaviour and measure the effectiveness of our advertising campaigns. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

The legal basis for the use of Meta Pixel is your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

The data processed by Meta Pixel includes IP address, browser information, operating system, device information, location data, referrer URL, interactions on the website, Facebook user ID (if users are logged in to Facebook), and cookies are set.

Meta Pixel collects user data that may be used to create user profiles for targeted advertising purposes.

The purpose of the data processing is the analysis of user behaviour, measurement of advertising effectiveness, creation of target groups and personalised advertising.

It cannot be ruled out that personal data may be transferred to unsafe third countries (USA) where a lower level of data protection applies than in the EU. Meta is certified under the EU-US Data Privacy Framework, which governs the secure processing of data of EU citizens in the USA. We have concluded a data processing agreement with Meta, ensuring that personal data is processed only in accordance with our instructions and in compliance with the GDPR.

Further information on the privacy provisions of Meta Pixel can be found at:
https://www.facebook.com/privacy/policy

Information on the cookies used can be found at:
https://www.facebook.com/policies/cookies/

You can prevent the processing of your data by clicking the following link:
https://www.facebook.com/settings?tab=ads

Microsoft Advertising

We use the Microsoft Advertising service (formerly Bing Ads) on our website to display targeted advertising. The provider is Microsoft Ireland Operations Limited (“Microsoft”), One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

The legal basis for the use of Microsoft Advertising is your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

The data processed by Microsoft Advertising includes your IP address, location data, device and browser information, search queries, interactions with ads, and cookies are set. Microsoft Advertising may collect data to create user profiles for personalised advertising purposes. The purpose of the data processing is the display of personalised advertising and the measurement of advertising effectiveness.

Microsoft Advertising stores data for a standard period of 390 days. This information can be found in the Microsoft Advertising Privacy Statement under the section “Data Retention”:
https://about.ads.microsoft.com/de-de/policies/privacy

It cannot be ruled out that personal data may be transferred to unsafe third countries (USA) where a lower level of data protection applies than in the EU. Microsoft is certified under the EU-US Data Privacy Framework, which governs the secure processing of data of EU citizens in the USA. We have concluded a data processing agreement (DPA) with Microsoft, ensuring that personal data is processed only in accordance with our instructions and in compliance with the GDPR.

Further information on the privacy provisions of Microsoft Advertising can be found at:
https://privacy.microsoft.com/en-us/privacystatement#mainadvertisingmodule

Microsoft Clarity

We use the “Microsoft Clarity” service on our website to analyse user interactions and improve the user experience. The provider is Microsoft Ireland Operations Limited (“Microsoft”), One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

The legal basis for the use of Clarity is your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

The data processed by Microsoft Clarity includes your IP address, location, time of visit, device information, information about interactions with the website, and cookies are set to collect these data. The purpose of the data processing by Microsoft Clarity is the statistical analysis of user interactions and the creation of anonymised user behaviour profiles to optimise the user-friendliness of the website.

Microsoft Clarity stores data for a standard period of 13 months.

Further information on the privacy provisions of Clarity can be found at:
https://privacy.microsoft.com/en-us/privacystatement

Processing of data in the United States:

When using the aforementioned external services, personal data may be transmitted to servers in the United States. It is important to note in connection with data processing in the USA: according to the case law of the Court of Justice of the European Union, the level of data protection in the United States is considered insufficient, and there is a risk that your data may be processed by US authorities for monitoring and surveillance purposes, possibly without effective legal remedies. The respective external service provider provides sufficient safeguards within the scope of its data processing pursuant to Article 28 GDPR in conjunction with the provisions of Chapter 5 GDPR to take appropriate mitigating measures.

Social-Media-Profile

We maintain online profiles on the following social networks (collectively referred to as “social media”) in order to communicate with customers, interested parties and the public, and to draw attention to our services:

• Instagram (Meta Platforms, Inc.)
• Facebook (Meta Platforms, Inc.)
• X (formerly Twitter; X Corp.)
• LinkedIn (LinkedIn Ireland Unlimited Company)
• Xing (New Work SE)

For the scope and purpose of data processing, please refer to the respective privacy policies of the networks:

• Instagram: (https://privacycenter.instagram.com/policy)
• Facebook: (https://www.facebook.com/privacy/policy/?entry_point=facebook_page_footer)
• X (Twitter): (https://x.com/de/privacy)
• LinkedIn: (https://de.linkedin.com/legal/privacy-policy)
• Xing: (https://privacy.xing.com/de/datenschutzerklaerung)

The processing is carried out on the basis of Article 6(1)(f) GDPR, as we have a legitimate interest in modern public relations work. Where consent is required, processing is carried out on the basis of Article 6(1)(a) GDPR.

Where you transmit additional data to these services (e.g., private messages), your consent is usually required. Please note that we have no influence over the data processing carried out by the social media providers. For questions or to exercise your data subject rights (e.g., access, erasure), please contact the respective platform operator directly.

You may subscribe to or unsubscribe from our social media profiles at any time. If you do not want the operators of social media services to collect data about your visit to our profiles, please use the deactivation options in your user account (e.g., logging out, blocking advertising trackers) or install appropriate browser add-ons.

Rights of data subjects

Every data subject has the right of access pursuant to Article 15 GDPR, the right to rectification pursuant to Article 16 GDPR, the right to erasure pursuant to Article 17 GDPR, the right to restriction of processing pursuant to Article 18 GDPR, and the right to data portability pursuant to Article 20 GDPR. To exercise the aforementioned rights, you may contact the offices mentioned above.

If you have given us consent to process your data, you may withdraw this consent at any time without formal requirements. For this purpose, you may contact the office mentioned above.

If we process your data to safeguard legitimate interests, you may object to such processing at any time, without formal requirements, on grounds relating to your particular situation. You may likewise contact the offices mentioned above for this purpose.

If you exercise your rights under Articles 12 to 22 GDPR, we will process the personal data transmitted in this context for the purpose of implementing these rights and for the purposes of data protection monitoring, and otherwise restrict processing in accordance with Article 18 GDPR. These processing activities are based on the legal basis of Article 6(1)(c) GDPR.

Furthermore, you have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR).

Status: 03/2026