Contact details of the responsible person
Authorized representatives: Jörg Schreiber, Girish Bangalore
Name and contact details of the data privacy officer
We welcome you to our website. The protection of your data is very important to us. Therefore, we will show you below how we process your personal data.
Data categories; data sources
In principle, we process the personal data that you provide to us in the context of an inquiry, a pre-contractual legal relationship or a contractual relationship. In individual cases and insofar as this is necessary in the context of the performance of the contract, we also process personal data that has been permissibly taken from publicly accessible sources (e.g. commercial registers, debtor directories, Internet) or permissibly transmitted to us by third parties (e.g. credit agencies).
This may include personal data (name, birthday, legal representative), address data (address, e-mail address, contact person), financial data (name of account holder, IBAN, BIC), contract data (contract term, purchased services, cancellations), communication data (correspondence, e-mail traffic), advertising data (advertising letters) and other comparable categories of personal data.
General processing of visitor data
The use of our website is generally possible without providing personal data.
However, we would like to point out that access data is also collected in this case and stored in the server log files. In particular, this involves the following data:
- Browser type / your browser version,
- operating system,
- Date and time of your visit,
- your IP address.
We generally evaluate this information in an anonymized form, also to defend against attacks and to improve our offering (processing of personal data in the context of a balancing of interests pursuant to Art. 6 para. 1 p. 1 lit. f) DSGVO) and subsequently delete it. The data is regularly not traceable to your person and is not merged with other data.
However, in the event of concrete indications of unlawful use, we reserve the right to subsequently evaluate the data.
Processing of personal data after consent (Art. 6 para. 1 p. 1 lit. a) DSGVO)
We obtain consent from you in individual cases for certain purposes expressly designated in connection with the collection of data (e.g. contacting us, using a contact form).
Data processing only takes place if you give us your consent. It may be that the processing of your request is not possible without your consent and must therefore be made dependent on it. The data will be processed exclusively for the purpose(s) expressly stated.
You can revoke the consent you have given at any time with effect for the future. The revocation has no influence on the lawfulness of the processing until the time of revocation.
Consents obtained specifically
Within the scope of our Internet presence, you may have given us the following consents:
– In the context of the general contact form:
Processing of personal data in the context of a balancing of interests (Art. 6 para. 1 p. 1 lit. f) DSGVO).
We process personal data after weighing interests, insofar as this is necessary to protect our interests or the interests of third parties.
Examples of such purposes are:
- Ensuring the IT security and integrity of our systems,
- Prevention or investigation of criminal offences,
- Assertion of or defense against legal claims.
If you contact us by e-mail or telephone, we process the personal data you provide in order to respond to your inquiry. We delete the data after the final processing of your inquiry, unless there is a contractual or legal obligation to retain the data.
If you send us an inquiry via our contact form, we process the data you provide based on your consent pursuant to Art. 6 para. 1 p. 1 lit. a) DSGVO in order to process your inquiry. In principle, your data will be deleted after processing the request, unless there is a contractual or legal obligation to retain it. If you provide us with contractually relevant information, we will transfer it to our inventory system.
You can revoke your consent at any time with effect for the future using any of the contact details provided.
Processing of personal data for contract execution or contract initiation (Art. 6 para. 1 p. 1 lit. b) DSGVO).
If a contract is concluded with us, we use personal data insofar as this is necessary for the performance of the contract or for the implementation of pre-contractual measures. The purposes of the data processing depend on the concrete contents of the contract, which you can find in the contract documents.
If a contract already exists with us, we process your data in order to verify that you are our contractual partner and in order to properly provide the contractual service owed.
If you have registered for our newsletter, we process the data you have provided based on your consent pursuant to Art. 6 (1) p. 1 lit. a) DSGVO in order to send you our newsletter on a regular basis. To register, it is sufficient to provide an e-mail address. The other information is provided voluntarily.
We use the so-called double opt-in procedure for registration, in which you must explicitly confirm your e-mail address again in a second step after you have agreed to receive the newsletter. Only then will the service be activated.
For legal reasons, we also store the IP address and the date of registration.
Our newsletter is sent using the Hubspot service, a service provided by HubSpot, Inc., 25 First Street, Cambridge, MA 02141 USA („Hubspot“). We have concluded an order processing agreement with the provider. The data transfer to the USA is legitimized based on your consent according to Art. 49 (1) a) DSGVO. When registering, we use the so-called double opt-in procedure, which requires you to explicitly confirm your e-mail address again in a second step after you have given your consent to receive the newsletter. Only then will the service be activated.
The data you provide during registration is transferred to Hubspot and stored there. We do this to increase the attractiveness of our newsletter and to check our marketing measures. This data processing is based on your consent.
You can find more detailed information on data protection at Hubspot at
You can also revoke your consent at any time with effect for the future. A link for revocation can be found at the end of each newsletter email. Of course, you can also revoke your consent via the other contact options offered.
In the course of your visit to our website, various cookies may be used. These are text files that are placed on your computer and, among other things, enable a smooth visit to our website.
In some cases, cookies are necessary to ensure the functionality or IT security of our website. The use of such cookies is based on a legitimate interest in enabling the use of our website including its functions according to Art. 6 para. 1 p. 1 lit. f DSGVO.
We may use other – unnecessary – cookies on the basis of Art. 6 para. 1 p. 1 lit. a DSGVO and thus on the basis of your consent. The purposes of the cookies used in each case may include:
The enabling of the use of special functions,
The (pseudonymized) analysis of user behavior in order to optimize our website,
Increasing the attractiveness as well as the user comfort of our website,
Improving and designing our offer to meet the needs of our customers,
Most of the cookies we use are deleted from your computer again after closing the browser (session cookies). Other types of cookies can remain on your computer and allow us to recognize your computer by means of the created usage profile the next time you visit our site (persistent cookies).
You can declare your consent by confirming our cookie banner when you visit our website. Once you have given your consent, you can revoke it at any time with future effect by clicking on the „Privacy Settings“ button at the bottom left of the window.
If you consent to the processing of your data within the scope of the opt-in procedure (confirmation of the cookie banner), the lawfulness of the processing of your data is based on consent pursuant to Art. 6 (1) p. 1 lit. a) DSGVO, so that we use your data to the extent of the consent you have given for the purposes of marketing and the evaluation of your usage behavior.
The information generated by the cookie about your use of this website is usually transmitted to a Google LLC server in the USA and stored there. If applicable, information about the use of this website and your IP address will be transmitted to a Google server in the USA and also stored on this server. The data transfer is permissible based on your consent in accordance with Art. 49 Para. 1 lit. a) DSGVO. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google, unless you have configured the web and app activity settings in the settings of a Google account to allow Google to merge.
Links to other websites
Our website contains links to other external websites (Twitter, YouTube, LinkedIn). These are not so-called social plugins. If you click on a link, you will call up the corresponding website and will be forwarded to it.
Insofar as we process your data on these external websites (for example, by you contacting us via these websites), our data protection provisions apply.
In addition, the linked websites process your personal data for their own purposes. We cannot make any statement about the manner of processing, the purposes or the storage period of your personal data by these providers. Please refer to the data protection provisions of the respective provider to obtain further information about the processing of your personal data by them. You can find these at:
– Twitter: https://twitter.com/en/privacy (English) / https://twitter.com/de/privacy (German)
– YouTube: https://policies.google.com/privacy?hl=en (English) / https://policies.google.com/privacy?hl=de&gl=de (German)
– LinkedIn: https://www.linkedin.com/legal/privacy-policy?_l=en_EN (English) / https://www.linkedin.com/legal/privacy-policy?_l=de_DE (German)
Use of Google Fonts
For the display of external fonts, we use Google Fonts in the so-called „online“ mode. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In this context, a server call is made, during which data (including your IP address) and the page from which the call is made are transmitted to a Google server in the USA. Details of the processing by Google are not known to us.
The transfer of data to the USA is permissible based on your consent in accordance with Art. 49 (1) a) DSGVO. The processing is necessary for the proper presentation of our website and is therefore in our interest as well as yours. The legal basis of the processing is therefore Art. 6 para. 1 sentence 1 lit. f) DSGVO related to the external appearance of the company through a functional website.
You can find more information on Google’s websites under the following links:
We use a plugin of the Internet service Google Maps on our website. The operator of Google Maps is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“).
We have no knowledge of the exact content of the transmitted data, nor of their use by Google. The company denies in this context the connection of the data with information from other Google services and the collection of personal data. However, Google may transmit the information to third parties.
We pass on data to other third parties if and to the extent that we have delegated the performance of tasks to them. The data is only passed on if this is necessary for the fulfillment of the assigned tasks.
We work together with the following companies:
68789 St. Leon-Rot
Furthermore, service providers may be entrusted with tasks in the following areas, for example:
- IT maintenance
- IT development
- IT provision
The data transfer always takes place on the basis of a legal standard or a suitable contract in accordance with Art. 26 or 28 DS-GVO, which ensures compliance with all data protection requirements.
Apart from that, data will only be forwarded in the cases provided for by law, for example in the case of a legal obligation to provide information to law enforcement authorities. In these cases, the data transfer is legitimized according to Art. 6 para. 1 p. 1 lit. c) DSGVO.
Data transfer to a third country
A data transfer to a third country is intended. This transfer will take place on the basis of the consent provided by you. Recipients of the data provided by you are the following companies:
HubSpot, Inc, 25 First Street, Cambridge, MA 02141 USA
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
If data is transferred to a third country on the basis of consent without an adequacy decision or other suitable guarantees being in place at the same time, it must be pointed out on the basis of Art. 49 (1) p. 1 lit. a) DSGVO that this entails an increased risk of data processing in the context of the transfer. However, we would like to assure you that thanks to careful selection and constant review of the standards of our contractual partners, potential risks are successfully minimized.
Duration of data storage
Your personal data will be deleted by us immediately as soon as the data is no longer required for the fulfillment of contractual and legal obligations.
Personal data will be stored at least as long as necessary for the fulfillment of contractual obligations and the exercise of contractual rights. This period may extend beyond the actual contractual period, as the data may still be relevant after the end of the contract within the framework of the limitation periods. In addition, deletion can only take place once any retention periods under tax and commercial law have expired.
Data subject rights
As a person affected by the processing of personal data, you have the following rights:
You have the right to request confirmation as to whether personal data is being processed. If this is the case, you have a right to information about the personal data and to the information listed in detail in Article 15 of the GDPR.
You have the right to request from the controller without undue delay the rectification of any inaccurate personal data concerning you and, where applicable, the completion of any incomplete personal data (Art. 16 GDPR).
You have the right to demand from the controller that personal data concerning you be deleted without undue delay, provided that one of the reasons listed in detail in paragraph 17 of the GDPR applies, e.g. if the data is no longer needed for the purposes pursued (right to erasure).
You have the right to request the controller to restrict processing if one of the conditions listed in Art. 18 DSGVO applies, e.g. if you have objected to the processing, for the duration of the controller’s review.
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transfer this data to another controller without hindrance from us, provided that the processing of this data is based on your consent or on a contract and the processing is carried out with the help of automated procedures (Art. 20 DSGVO). When exercising the right to data portability, you have the right to obtain that the personal data be transferred directly from us to another controller, insofar as this is technically feasible (right to data portability).
You have the right to object to the processing of personal data concerning you at any time on grounds relating to your particular situation. The controller will then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims (Article 21 DSGVO).
Regarding the exercise of your rights, you can contact us at any time via the contact options provided on our website.
Right of objection in the case of direct advertising
In individual cases, we process personal data in order to conduct direct advertising. In this case, you have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising (Article 21 DSGVO).
If you object to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes.
Right of appeal
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes the GDPR (Article 77 GDPR). You can assert this right at a supervisory authority in the member state of your residence, workplace or the place of the alleged infringement. In Baden-Württemberg, the competent supervisory authority is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg.
You can obtain more information at the following link:
However, you can of course also contact us directly if you are dissatisfied or have questions about data protection. The quickest way to reach our internal contact person on the subject of data protection is to use the following contact details:
Obligation to provide data
In principle, there is no obligation to provide data. However, the provision of data may be necessary for the use of certain functions or for the conclusion of a contract. If you do not provide the required data, you will not be able to use certain functions or services or a contract cannot be concluded.