Privacy Policy:
Data processing Cookies Tools Rights

Name and address of the responsible party

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is the:

sizzly
Böheimstraße 101B
70199 Stuttgart
Germany

Tel.: +49 (0) 711 2552894
Email:sizzly
Website:sizzly

General information on data processing

1. scope of the processing of personal data

We only process our users' personal data insofar as this is necessary to provide a functional website and our content and services. The processing of our users' personal data only takes place regularly with the user's consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.

2. legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis.
Art. 6 para. 1 lit. b GDPR serves as the legal basis for the processing of personal data necessary for the performance of a contract to which the data subject is a party. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
Insofar as the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.

3. data erasure and storage duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

Provision of the website and creation of log files

1. description and scope of data processing

Every time you visit our website, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:

  • Information about the browser type and version used
  • The user's operating system
  • The user's internet service provider
  • The IP address of the user
  • Date and time of access
  • Websites from which the user's system accesses our website
  • Websites that are accessed by the user's system via our website

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

2. legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.

3. purpose of data processing

Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

Data is stored in log files to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. The data is not analyzed for marketing purposes in this context.

These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f GDPR.

4. duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymized so that it is no longer possible to identify the accessing client.

5. possibility of objection and removal

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no option to object.

Use of cookies

1. description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

We use cookies that are necessary for the operation of our website. The following data is stored and transmitted in the cookies:

  • Language settings
  • Articles in a shopping cart
  • Log-in information
  • Payment information

We also use cookies on our website that enable an analysis of the user's surfing behavior. The following data can be transmitted in this way:

  • Search terms entered
  • Frequency of page views
  • Use of website functions

When visiting our website, users are informed about the use of cookies for analysis purposes and their consent is obtained for the processing of personal data used in this context. In this context, reference is also made to this Privacy Policy.

When you visit our website for the first time, a banner appears asking for your consent to the use of optional cookies. If you give your consent, we will store a cookie on your computer and the banner will no longer be displayed until the validity period of the cookie has expired. Once the validity period has expired or if you delete the cookie manually, the banner will be displayed again the next time you visit our website and you will have the opportunity to save your preferences again. You also have the option to change or withdraw your consent at any time by accessing the cookie banner settings interface via the button at the bottom left of the screen.

2. legal basis for data processing

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f GDPR.

The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 para. 1 lit. a GDPR if the user has given consent to this.

3. purpose of data processing

The purpose of using technically necessary cookies is to enable the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognized even after a page change.

We need cookies for the following applications:

  • Shopping cart
  • Transfer of language settings
  • Remembering search terms
  • Processing of payments

Analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus constantly optimize our offer. These purposes also constitute our legitimate interest in the processing of personal data in accordance with Art. 6 para. 1 lit. f GDPR.

4. duration of storage, possibility of objection and removal

Cookies are stored on the user's computer and transmitted by it to our website. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

Registration

1. description and scope of data processing

On our website, we offer users the opportunity to register by providing personal data. The data is entered into an input mask and transmitted to us and stored. The data is not passed on to third parties. The following data is collected as part of the registration process:

  • Name
  • E-mail address
  • Phone number

As part of the registration process, the user's consent to the processing of this data is obtained.

2. legal basis for data processing

The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if the user has given consent.

3. purpose of data processing

User registration is required for the provision of certain functions on our website. These include

  • Automated data transfer from the user profile during the ordering process
  • Storage of payment information

4. duration of storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected.

This is the case for the data collected during the registration process if the registration on our website is canceled or modified.

5. possibility of objection and removal

As a user, you have the option of canceling your registration at any time. You can change the data stored about you at any time.

ordering process

As part of the ordering process, we collect and process the personal data collected from you in order to process and execute your order.

1. description and scope of data processing

To process your order, we collect the following data, some of which is optional:

  • Name
  • Phone number
  • E-mail address
  • Payment information
  • Ordered articles

2. legal basis for data processing

The legal basis for the processing of the data is your consent in accordance with Art. 6 para. 1 lit. a GDPR.

Furthermore, the processing of the aforementioned data serves the fulfillment of a contract with you, additional legal basis for the processing of the data is therefore Art. 6 para. 1 lit. b GDPR.

3. purpose of data processing

The purpose of data processing is to correctly record, process and execute your order or, if necessary, to reverse it.

4. duration of storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected.

This is the case during the execution period of the order to fulfill a contract if the data is no longer required for the execution of the contract. Even after conclusion of the contract, it may be necessary to store your personal data in connection with the order in order to comply with contractual or legal obligations.

5. possibility of objection and removal

You can request the deletion of your data in connection with an order placed with us. To do so, please use the contact options Legal notice in Legal notice . However, premature deletion of the data is only possible if there are no contractual or legal obligations that prevent deletion.

Payment / Processing of online payments

In the course of processing orders, the payment process is regularly handled digitally (online payment); we use external service providers for this purpose.

1. description and scope of data processing

The specific data processed varies depending on the payment provider used and the payment method selected for payment. However, information such as personal data (name, address), bank information (account number, credit card number, passwords) is essentially collected as an essential prerequisite for processing transactions. In addition, other user data, such as information about website visits, preferred content, and subpages accessed, may be stored. Furthermore, the user's IP address and details about the device used may be processed by the payment providers.
The data is usually stored and processed on the servers of the respective payment providers. As the operator of our website, we have no access to this information. We are only informed about the success or failure of the payment made. In the context of identity and credit checks, it is possible that the payment provider may forward data to the relevant authorities. It should be emphasized that all payment transactions are always subject to the terms and conditions and privacy policies of the respective provider. For this reason, we strongly recommend that you carefully review both the terms and conditions and the Privacy Policy payment providers we use.
Please note that you have the right to request the deletion or correction of your data at any time. We ask you contact relevant service provider directly regarding your rights (such as the right of withdrawal, right to information, and right to notification).

2. legal basis

The processing of the aforementioned data serves to fulfill a contract with you, the legal basis for the processing of the data is therefore Art. 6 para. 1 lit. b GDPR.

3. purpose of data processing

The purpose of data processing is to correctly record, process and execute the online payment associated with your order or, if necessary, to reverse it.

4. duration of storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected.

This is the case during the execution period of the online payment to fulfill a contract if the data is no longer required for the execution of the contract. Even after conclusion of the contract, it may be necessary to store your personal data in connection with the online payment in order to comply with contractual or legal obligations.

5. possibility of objection and removal

You can request the deletion of your data in connection with a payment made to us. To do so, please use the contact options Legal notice in Legal notice . However, premature deletion of the data is only possible if there are no contractual or legal obligations preventing deletion.

In addition, you can contact payment providers we use directly at any time and request the relevant information. You can find the contact details on the respective websites of the payment service providers listed in the next section.

6th service provider

We use the following service providers to process digital payments:

Adyen N.V.

The service provider is the company Adyen N.V., Simon Carmiggeltstraat 6-50, 1011 DJ Amsterdam, The Netherlands.

You can access Adyen N.V.'s privacy policy via the following link and find out how Adyen processes the data it receives: https://www.adyen.com/policies-and-disclaimer/privacy-policy

Data transfer to restaurants

For the processing and correct provision of your order, we pass on your personal data (name, telephone number, e-mail address, order) to the restaurant commissioned by you. The restaurant has its own responsibility and obligations with regard to the processing of your personal data, as you are a direct customer of the restaurant. If you have any questions about the handling of your personal data, please contact the restaurant directly.

Communication during the execution of an order or online payment

In the course of carrying out and processing an order or online payment, automated communication of the processing progress takes place, for example via SMS and e-mail, for which purpose we use external service providers.

1. description and scope of data processing

To inform you about the current status or processing progress of an order or the result of an online payment, for example, we will send you SMS or e-mail messages. To do this, we use the contact details that you provided when placing the order or making the online payment.

2. legal basis

The processing of the aforementioned data serves to fulfill a contract with you, the legal basis for the processing of the data is therefore Art. 6 para. 1 lit. b GDPR.

3. purpose of data processing

The purpose of data processing is to inform you about the current processing status of your order or the online payment associated with it, to clarify any queries that may arise or to request further information that is necessary for the correct execution or, if applicable, reversal of the transaction.

4. duration of storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected.

This is the case during the execution period of the order or online payment for the fulfillment of a contract if the data is no longer required for the execution of the contract. Even after conclusion of the contract, it may be necessary to store your personal data in connection with the communication relating to your order or online payment in order to comply with contractual or legal obligations.

5. possibility of objection and removal

You can request that we delete your data relating to communications that took place during the execution of an order or an online payment. To do so, please use the contact options Legal notice in Legal notice . However, premature deletion of data is only possible if there are no contractual or legal obligations preventing deletion.

In addition, you can contact service providers we use directly at any time and request the relevant information. You can find the contact details on the respective websites of the service providers listed in the next section.

6th service provider

We use the following service providers to send text messages and e-mails in connection with the communication of the processing progress of your order or online payment:

Twilio

The service provider of this platform is the American company Twilio Inc., based at 101 Spear Street, 5th Floor, San Francisco, California, 94105, USA.

In the course of its services, Twilio also processes your personal data, part of which is processed in the United States of America. We would like to point out that the European Court of Justice currently does not consider the level of protection for the transfer of personal data to the USA to be sufficient. This finding may potentially entail various risks for the lawfulness and security of data processing.

Twilio relies on standard contractual clauses, as described in Article 46(2) and (3) of the General Data Protection Regulation (GDPR), as the basis for data processing for recipients in third countries (i.e., countries outside the European Union, including Iceland, Liechtenstein, and Norway) or for the transfer of such data to such countries. These standard contractual clauses, also known as Standard Contractual Clauses (SCC), are model clauses provided by the European Commission that aim to ensure that personal data, even when transferred to and stored in third countries such as the US, complies with EU data protection standards. By implementing these clauses, Twilio commits to maintaining the European level of data protection when processing relevant data, even if the data is stored, processed, and managed in the US. These clauses have their legal basis in an implementing decision by the European Commission. Further details on this decision and the associated standard contractual clauses can be found at the following link: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

Additional information about the Standard Contractual Clauses and Twilio's data processing can be found at https://www.twilio.com/en-us/legal/privacy.

age

Our website is not intended for persons under the age of 16 and we do not intend to collect personal data from visitors to the website who are under the age of 16. However, we have no way of verifying the age of visitors. We therefore recommend that parents monitor their children's online activities to prevent their personal data from being collected without parental consent. Please contact us if you suspect that we are collecting personal data from minors so that we can arrange for this data to be deleted if necessary.

Use of CookieHub (consent management platform)

1. scope of the processing of personal data

We use CookieHub, a consent management platform, to manage your consent to the use of cookies and other tracking technologies on our website. This may involve the processing of personal data such as your IP address, cookie preferences, and other technical information.

2. legal basis for data processing

The processing of personal data is based on your consent in accordance with Art. 6 (1) (a) GDPR.

3. purpose of data processing

CookieHub is used to collect, store, and manage your consent in accordance with data protection regulations, as well as to control the use of cookies and tracking technologies according to your preferences.

4. duration of storage

Your consent data will be stored until you revoke your consent or adjust your cookie settings.

5. possibility of objection and removal

You can change or withdraw your consent at any time via the cookie settings on our website. For more information about data protection at CookieHub, please visit: https://www.cookiehub.com/privacy-policy/.

6. Legal protection
CookieHub has a Data Processing Agreement (DPA) that regulates the processing of your personal data in accordance with data protection regulations. Standard contractual clauses (SCC) may apply if data is transferred to third countries outside the EU.

Contact form andcontact

1. description and scope of data processing

Contact forms are available on our website which can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored. These data are (if entered):

  • Name
  • E-mail address
  • Phone number

For the processing of the data, your consent will be obtained during the sending process and Privacy Policy to this Privacy Policy .

Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored.

No data will be passed on to third parties in this context. The data is used exclusively for processing the conversation.

2. legal basis for data processing

The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if the user has given consent.

The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 lit. f GDPR. If thecontact is aimedcontact concluding a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

3. purpose of data processing

The processing of the personal data from the input mask serves us solely to process the contact. In the case of contact by email, this also constitutes the necessary legitimate interest in the processing of the data.
The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input screen of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

5. possibility of objection and removal

The user may revoke their consent to the processing of personal data at any time. If the user contact by email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

All personal data stored in the course of contacting us will be deleted in this case.

Web analytics by Matomo (formerly Piwik)

1. scope of the processing of personal data

We use the software "Matomo" (www.matomo.org) on this website, a service provided by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand. The software places a cookie (a text file) on your computer that can be used to recognize your browser. When subpages of our website are accessed, the following data is stored:

  • the IP address of the user, shortened by the last two bytes (anonymized)
  • the subpage accessed and the time of access
  • the page from which the user reached our website (referrer)
  • which browser with which plugins, which operating system and which screen resolution is used
  • the time spent on the website
  • the pages that are accessed from the accessed subpage

Users' personal data is stored exclusively within the European Union. The data will not be passed on to third parties.

Further information on Matomo's terms of use and data protection regulations can be found at: https://matomo.org/privacy/

2. legal basis for the processing of personal data

The legal basis for the processing of users' personal data is Art. 6 para. 1 lit. a of the GDPR.

3. purpose of data processing

The processing of users' personal data enables us to analyze the surfing behavior of our users. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to constantly improve our website and its user-friendliness. Our legitimate interest pursuant to Art. 6 para. 1 lit. a GDPR lies in these purposes. By anonymizing the IP address, we take into account the user's interest in the protection of personal data. The data is never used to personally identify the user of the website and is not merged with other data.

4. duration of storage

The data will be deleted as soon as it is no longer required for our recording purposes.

5. possibility of objection and removal

Cookies are stored on the user's computer and transmitted by it to our website. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

You have the option to prevent your actions here from being analyzed and linked. This will protect your privacy, but will also prevent the owner from learning from your actions and improving usability for you and other users.

Use of Google reCAPTCHA

We integrate the service reCAPTCHA v3 of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

1. scope of the processing of personal data

reCAPTCHA sends various types of information, some of which is personal, to Google, such as the browser type used, the referrer URL, information about the operating system used, and the IP address. Google does not provide a complete list of the information transmitted. ReCAPTCHA also sets so-called "cookies," which are text files stored on your computer. The information generated by the cookie is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymization on this platform, your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. On our behalf, Google will use this information to provide the reCAPTCHA service. The IP address transmitted by your browser via reCAPTCHA will not be merged with other Google data. The use of reCAPTCHA is subject to the Privacy Policy and Google'sTerms of Service.

2. legal basis for the processing of personal data

The legal basis for the processing of users' personal data is Art. 6 para. 1 lit. f GDPR.

3. purpose of data processing

ReCAPTCHA is a service for checking whether our site is accessed by a human or automatically by a machine ("bot") and therefore serves to protect us against unjustified access and spam messages.

4. duration of storage

Google does not specify the exact storage period for the data transmitted to Google. Further information about Google reCAPTCHA is available at https://www.google.com/recaptcha/intro/v3.html.

5. possibility of objection and removal

Cookies are stored on the user's computer and transmitted by it to our website. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

Verwendung von hCAPTCHA

Wir binden den Service hCaptcha des Anbieters Intuition Machines, Inc., 1065 SW 8th St #704, Miami FL 33130, USA ein. Weitere Informationen finden Sie unter: https://www.hcaptcha.com.

1. scope of the processing of personal data

hCaptcha überprüft automatisch, ob der Zugriff auf unsere Formulare durch einen Menschen oder einen automatisierten Bot erfolgt. Dabei werden verschiedene, teils personenbezogene Informationen erhoben, beispielsweise:

  • Technische Verbindungsdaten des Serverzugriffs (IP-Adresse, Datum, Uhrzeit, abgefragte Seite, Browser-Informationen)

  • Informationen über die Nutzung der Website sowie Protokollierung von Klicks auf einzelne Elemente

Eine vollständige Auflistung der übermittelten Informationen wird seitens hCaptcha nicht bereitgestellt. hCaptcha setzt außerdem Cookies, Textdateien, die auf Ihrem Computer gespeichert werden. Die durch den Cookie erzeugten Informationen werden in der Regel an einen Server von hCaptcha übertragen und dort gespeichert. Im Auftrag des Website-Betreibers nutzt hCaptcha diese Informationen, um den Captcha-Service bereitzustellen. Eine Zusammenführung der übermittelten IP-Adresse mit anderen Daten durch hCaptcha erfolgt nicht. Im Gegensatz zu Google reCAPTCHA werden bei hCaptcha keine Schriftarten oder Google Fonts geladen.

2. legal basis for the processing of personal data

Rechtsgrundlage ist Art. 6 Abs. 1 lit. f DSGVO. Unser berechtigtes Interesse besteht in einem sicheren und funktionierenden Betrieb der Website und der technischen Systeme, wobei dieses Interesse die Rechte und Freiheiten der betroffenen Personen überwiegt.

3. purpose of data processing

Zweck der Verarbeitung ist die Vermeidung nicht menschlicher und automatisierter Eingaben (Bots, Spam) und der Schutz des sicheren und funktionierenden Betriebs unserer technischen Systeme.

Eine Übermittlung der Daten erfolgt an den Auftragsverarbeiter Intuition Machines, Inc., Miami, FL, USA. Dabei kann es sich um personenbezogene Daten handeln, die in ein Land außerhalb der Europäischen Union übermittelt werden. Die Übermittlung erfolgt auf Grundlage von Art. 45 DSGVO in Verbindung mit der Angemessenheitsentscheidung C(2023) 4745 der Europäischen Kommission, da sich der Datenempfänger zur Einhaltung der Grundsätze des Data Privacy Framework (DPF) verpflichtet hat.

Weitere Informationen zur Datenverarbeitung durch hCaptcha finden Sie unter: https://www.hcaptcha.com/privacy.

4. duration of storage

Eine genaue Ausführung der Speicherdauer der an hCaptcha übermittelten Daten wird von hCaptcha nicht bereitgestellt.

5. possibility of objection and removal

Cookies werden auf dem Rechner des Nutzers gespeichert und an unsere Seite übermittelt. Sie haben die volle Kontrolle über die Verwendung von Cookies. Durch eine Änderung der Einstellungen in Ihrem Internetbrowser können Sie die Übertragung von Cookies deaktivieren oder einschränken. Bereits gespeicherte Cookies können jederzeit gelöscht werden. Wird die Nutzung von Cookies deaktiviert, können möglicherweise nicht mehr alle Funktionen der Website vollumfänglich genutzt werden.

Using Calendly

1. scope of the processing of company-related data

When you book an appointment via Calendly on our website, Calendly may process your name, business email address, phone number, and other contact and appointment details you provide.

2. legal basis for data processing

Processing is carried out on the basis of Art. 6 (1) (b) GDPR (pre-contractual/contractual communication) or, where necessary, on the basis of legitimate interest (Art. 6 (1) (f) GDPR).

3. purpose of data processing

The purpose is to arrange and organize appointments and related communication.

4. duration of storage

The data will remain with us until the purpose of the appointment has been fulfilled or you request its deletion or revoke your consent. Other necessary statutory retention periods remain unaffected.

5. possibility of objection and removal

You can revoke your consent at any time with future effect. For details, please refer to Privacy Policy :
https://calendly.com/de/pages/privacy and, if applicable, the Data Processing Agreement (DPA): https://calendly.com/pages/dpa

Using Microsoft Bookings

1. scope of the processing of personal data

We use the Microsoft Bookings service from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, to schedule appointments online. Data is only collected and transmitted if you access the booking form by clicking on the corresponding button (e.g.,Schedule a demo), fill it out, and submit it.

2. legal basis for the processing of personal data

The legal basis for the processing of users' personal data is Art. 6 para. 1 lit. a GDPR.

3. purpose of data processing

The data is processed and used to arrange, organize and carry out (online) appointments and to make the necessary contact with you.

4. duration of storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected.

5. possibility of objection and removal

You have the option of withdrawing your consent to data processing or objecting to the use of your data at any time. In this case, the intended contact with you is no longer possible or communication that has already begun can no longer be continued.

Using LinkedIn Insight Tag

1. scope of the processing of personal data

If you have given your consent, LinkedIn Insight Tag, a tracking service of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, is used on this site. We use this service to analyze the surfing behavior of our users. LinkedIn places a cookie on the user's computer (for cookies, see above). By using LinkedIn Insight Tag, the following data is collected and transmitted to LinkedIn

  • URL
  • Referrer URL
  • IP address
  • Device and browser properties (user agent)
  • Timestamp

We, sizzly GmbH, have no access to the data collected at any time, nor do we have any influence on the type and scope of further use of the data collected by LinkedIn.

For us, sizzly , the data collected is anonymous; we cannot draw any conclusions about the identity of users. However, LinkedIn may store and process the data so that it can be linked to the respective LinkedIn user profile. LinkedIn mayPrivacy Policy the data in accordance with thePrivacy Policy , which can be accessed at: https://www.linkedin.com/legal/privacy-policy

2. legal basis for the processing of personal data

The legal basis for the processing of users' personal data is Art. 6 para. 1 lit. a GDPR.

3. purpose of data processing

The LinkedIn Insight Tag collects information about our website visitors and enables us to track our LinkedIn campaigns. In particular, the LinkedIn Insight Tag allows us to track the actions of users who have visited our website via a LinkedIn ad, for example. This process helps us to evaluate our advertising measures and optimize them in the future, and we can also use the evaluations provided by LinkedIn for market research purposes.

4. duration of storage

According to the information provided by LinkedIn in itsPrivacy Policy available at https://www.linkedin.com/legal/privacy-policy), LinkedIn removes the direct identifiers of LinkedIn members within seven days in order to pseudonymize the data. The remaining pseudonymized data is then deleted by LinkedIn within 180 days.

We, sizzly GmbH, do not have access to the collected data at any time; no storage takes place on our systems. We also have no influence on the type and scope of further use of the data collected by LinkedIn.

5. possibility of objection and removal

Cookies are stored on the user's computer and transmitted by it to our website. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

You can object to the data processing described by LinkedIn and the use of this data for the display of LinkedIn Ads. As a LinkedIn member, you can use this website to set which types of advertisements are displayed to you within LinkedIn: https://www.linkedin.com/psettings/advertising. You can also opt out of interest-based advertising by LinkedIn and the LinkedIn Insight Conversion Tool by clicking on the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Using Lime Connect (Userlike) Chatbot

1. scope of the processing of company-related data

sizzly chat software from Lime Connect (Userlike) GmbH, Probsteigasse 44-46, 50670 Cologne, Germany. You can use the chat like a contact form to chat with our employees in near real time. The following personal data is collected on Home :• Date and time of access,
• Browser type/version,
• IP address,
• Operating system used,
• URL of the previously visited website,
• Amount of data sent.
• And if provided: first name, last name, and email address.

Depending on the course of the conversation with our employees, further personal data may be collected in the chat and entered by you. The nature of this data depends largely on your query or the problem you describe to us. The purpose of processing all this data is to provide you with a quick and efficient means of contact and thus improve our customer service.

All of our employees have been and continue to be trained in data protection and instructed in the secure and confidential handling of customer data. All of our employees are obliged to maintain confidentiality and have signed an addendum in their employee contracts to the obligation to maintain confidentiality and to observe data protection.

By accessing the website sizzly.de, the chat widget is loaded in the form of a JavaScript file from AWS Cloudfront. The chat widget technically represents the source code that is executed on your computer and enables the chat.

For the processing of the data, your consent will be obtained during the sending process and Privacy Policy to this Privacy Policy .

Acceptance of this Privacy Policy your consent are mandatory requirements for starting the chat. By accessing the Home , you agree to the processing of your data under the conditions stated here. If you do not give us your consent, we will unfortunately be unable to provide you with the chat function. In this case, please use the regular contact options: telephone, email, or our contact form.

In this case, the user's personal data transmitted with the e-mail will be stored. The data will not be passed on to third parties in this context. The data is used exclusively for processing the conversation.

2. legal basis for data processing

In addition, sizzly stores the chat history for a period of 12 months. This serves the purpose of sparing you extensive explanations of the history of your request and for the constant quality control of our chat offer. Processing is therefore permitted in accordance with Art. 6 para. 1 letter f GDPR. If you do not wish this, you are welcome to inform us using the contact details below. We will then delete saved chats immediately.

The storage of chat data also serves the purpose of ensuring the security of our information technology systems. This is also our legitimate interest, which is why processing is permitted under Art. 6 (1) (f) GDPR.

For more information, please refer to theprivacy policy of Lime Connect (Userlike) GmbH.

3. purpose of data processing

Diese Website verwendet die Live-Chat Software von Lime Connect (Userlike), zur persönlichen und unkomplizierten Kontaktaufnahme mit uns. Lime Connect (Userlike) verwendet Cookies, um beim Surfen auf der Website die Chatinhalte vorzuhalten und Sie bei einem erneuten Chat nach Möglichkeit mit demselben Operator zu verbinden. Sofern die Nachricht eines Nutzers während des Chats in die Sprache des Operators und die Nachricht des Operators in die Sprache des Endnutzers übersetzt werden soll, kann diese Übersetzung durch den Einsatz einer maschinellen Übersetzungssoftware ermöglicht werden. Die erhobenen Daten werden nicht dazu genutzt, den Besuchenden dieser Website persönlich zu identifizieren, und nicht mit personenbezogenen Daten über den Träger des Pseudonyms zusammen zu führen, es sei denn es werden personenbezogene Daten freiwillig bei der Nutzung des Live-Chats mitgeteilt.

The provision of your personal data is necessary for the performance of the contract or a situation similar to a contract. You are not obliged to provide your personal data. If you do not provide your personal data, you will not be able to use the service described.

4. duration of storage

In addition, sizzly stores the chat history for a period of 12 months. The purpose of this is to save you from having to provide extensive explanations about the history of your request and to ensure constant quality control of our chat service.

5. possibility of objection and removal

The user may revoke their consent to the processing of personal data at any time. If the usercontact bycontact , they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

All personal data stored in the course of making contact, as well as stored chats, will be deleted immediately in this case.

If you do not wish this, you are welcome to inform us using the contact details below. Saved chats will then be deleted by us immediately.

Using Apollo

1. scope of the processing of company-related data

We use the "Apollo" service provided by Apollo.io to research and organize publicly available company information and contact and communication data of decision-makers and to prepare it for sales and communication purposes. In particular, company names, industry affiliation, business contact details such as email addresses, telephone numbers, and information on business roles or functions may be processed.

2. legal basis for data processing

The legal basis for processing is Art. 6 (1) (f) GDPR (legitimate interest), as we have a legitimate economic interest in researching and contacting potential business contacts.

3. purpose of data processing

Diese Website verwendet die Live-Chat Software von Userlike, zur persönlichen und unkomplizierten Kontaktaufnahme mit uns. Userlike verwendet Cookies, um beim Surfen auf der Website die Chatinhalte vorzuhalten und Sie bei einem erneuten Chat nach Möglichkeit mit demselben Operator zu verbinden. Sofern die Nachricht eines Nutzers während des Chats in die Sprache des Operators und die Nachricht des Operators in die Sprache des Endnutzers übersetzt werden soll, kann diese Übersetzung durch den Einsatz einer maschinellen Übersetzungssoftware ermöglicht werden. Die erhobenen Daten werden nicht dazu genutzt, den Besuchenden dieser Website persönlich zu identifizieren, und nicht mit personenbezogenen Daten über den Träger des Pseudonyms zusammen zu führen, es sei denn es werden personenbezogene Daten freiwillig bei der Nutzung des Live-Chats mitgeteilt.

The provision of your personal data is necessary for the performance of the contract or a situation similar to a contract. You are not obliged to provide your personal data. If you do not provide your personal data, you will not be able to use the service described.

4. duration of storage

In addition, sizzly stores the chat history for a period of 12 months. The purpose of this is to save you from having to provide extensive explanations about the history of your request and to ensure constant quality control of our chat service.

5. possibility of objection and removal

The user may revoke their consent to the processing of personal data at any time. If the usercontact bycontact , they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

All personal data stored in the course of making contact, as well as stored chats, will be deleted immediately in this case.

If you do not wish this, you are welcome to inform us using the contact details below. Saved chats will then be deleted by us immediately.

Use of Google Ads (provider: Google Ireland Limited)

1. scope of the processing of personal data

Wir setzen Google Ads ein, um Online-Werbung zu schalten und deren Erfolg zu messen. Dabei können Daten wie IP-Adresse, Geräte- / Browserinformationen, Online-Kennungen (Cookies), Nutzungs- und Interaktionsdaten verarbeitet werden. Die Einbindung erfolgt unter Nutzung des Consent Mode über CookieHub, der sicherstellt, dass die Datenverarbeitung nur nach Ihrer Einwilligung erfolgt.

2. legal basis for data processing

The processing is based on your consent in accordance with Art. 6 (1) (a) GDPR, which you can control via CookieHub. For technically necessary processing, there may be a legitimate interest in accordance with Art. 6 (1) (f) GDPR, but only within the framework of data protection regulations.

3. purpose of data processing

The purpose is to carry out advertising campaigns, measure success (e.g., conversion tracking), analyze reach, and optimize our marketing measures.

4. duration of storage

Data is processed in accordance with Google's retention policy. We only store personal data for as long as is necessary for analysis and campaign optimization, or until you withdraw your consent.

5. possibility of objection and removal

You can revoke your consent at any time (e.g., via our cookie settings). To deactivate personalized advertising on Google: https://www.google.com/settings/ads/onweb/ For more information, please refer toPrivacy Policy: https://policies.google.com/privacy

6. Legal protection
A Data Processing Agreement (DPA) is in place with Google and, if data is transferred to third countries, the European Commission's Standard Contractual Clauses (SCC) apply.

Use of Google Tag Manager (provider: Google Ireland Limited)

1. scope of the processing of personal data

We use Google Tag Manager to manage various tracking and marketing tags on our website. Google Tag Manager itself does not process any personal data, but enables the control of other tools. Tags are activated using Consent Mode via CookieHub, so that personal data is only processed after consent has been given.

2. legal basis for data processing

Processing is based on your consent in accordance with Art. 6 (1) (a) GDPR, controlled via CookieHub. A legitimate interest may exist for technically necessary functions (Art. 6 (1) (f) GDPR).

3. purpose of data processing

Google Tag Manager is used for the efficient management and triggering of tracking tags without storing any personal data.

4. duration of storage

Since Google Tag Manager itself does not store any personal data, no separate storage takes place. Data from other services triggered by Tag Manager is processed in accordance with their guidelines.

5. possibility of objection and removal

You can revoke or adjust your consent at any time via CookieHub to control the activation of tracking tags. To disable personalized advertising on Google: https://www.google.com/settings/ads/onweb/ For more information, please refer toPrivacy Policy: https://policies.google.com/privacy

6. Legal protection
A Data Processing Agreement (DPA) is in place with Google and, if data is transferred to third countries, the European Commission's Standard Contractual Clauses (SCC) apply.

Use of Google Search Console (provider: Google Ireland Limited)

1. scope of the processing of personal data

We use Google Search Console to monitor and improve the visibility of our website in Google searches. This involves processing information about the use of our website, such as search queries, clicks, and IP addresses.

2. legal basis for data processing

Processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, as the analysis of website performance is necessary to optimize our online offering.

3. purpose of data processing

The purpose is to monitor the website technically, improve user-friendliness, and optimize search results in Google Search.

4. duration of storage

The data will only be stored for as long as is necessary for the analysis and optimization of the website.

5. possibility of objection and removal

You can disable the processing of your data via the Google settings or activate IP anonymization: https://support.google.com/webmasters/answer/9012289

 
6. Legal protection
A Data Processing Agreement (DPA) is in place with Google and, if data is transferred to third countries, the European Commission's Standard Contractual Clauses (SCC) apply.
Use of Dark Visitors (B2B Intent Analysis)

1. scope of the processing of personal data

Dark Visitors is an analysis and tracking service for identifying business-related visit and usage interests (known as B2B intent analysis).
When using this service, information about visits to our website is processed. This includes, in particular:

  • the IP address of the accessing device (in abbreviated or hashed form),

  • technical information about the browser and operating system used,

  • Date and time of access,

  • pages visited and interaction data.

According to the provider, Dark Visitors does not use cookies and does not store any directly identifying personal data such as names or email addresses of website visitors. Processing is primarily carried out at an aggregated level to derive company-related usage interests.
The processed data is not merged with other data sources, nor are individual persons directly identified.

The data may be transferred to Dark Visitors servers outside the European Union. The provider states that it uses appropriate safeguards in accordance with Art. 46 GDPR (e.g., standard contractual clauses) to ensure an adequate level of data protection.

Further information on data processing by Dark Visitors can be found in the Privacy Policy .

2. legal basis for data processing

The legal basis for processing users' personal data is Art. 6(1)(f) GDPR (legitimate interest).

3. purpose of data processing

The data is processed for the purpose of analyzing the business-related interests of website visitors, better understanding the use of our website, and optimizing our offerings and content in a targeted and needs-based manner.
Our legitimate interest lies in particular in analyzing B2B usage behavior and the economic optimization of our online offerings.

4. duration of storage

The provider Dark Visitors does not specify the exact storage period for the processed data. According to the provider, IP addresses are not stored permanently, but are only processed in truncated or hashed form.
The data is only stored for as long as is necessary for the above-mentioned purposes.

5. possibility of objection and removal

Users have the right to object at any time to the processing of their personal data based on Art. 6 (1) lit. f GDPR for reasons arising from their particular situation.
The objection can be made in particular by adjusting the settings in the browser (e.g., use of script blockers or deactivation of external scripts).
Further information on options for objection is Privacy Policy the provider Dark Visitors in its Privacy Policy .

Verwendung von Sentry

Wir binden den Service Sentry des Anbieters Functional Software, Inc., 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA, (nachfolgend "Sentry") ein.

1. scope of the processing of personal data

Sentry ist ein Dienst zur Open-Source-Fehlerverfolgung und ermöglicht es uns, Fehler und Abstürze innerhalb unserer Website in Echtzeit zu erkennen, zu analysieren und zu beheben. Zu diesem Zweck verarbeitet Sentry verschiedene technische Informationen, die auch personenbezogene Daten enthalten können.

Dabei können insbesondere folgende Daten verarbeitet werden:

  • IP-Adresse (ggf. gekürzt oder anonymisiert),

  • Informationen zum verwendeten Browser, zur Browserversion und zum Gerät,

  • Informationen zum verwendeten Betriebssystem,

  • Zeitpunkt des Zugriffs,

  • Referrer-URL,

  • technische Informationen zur aufgerufenen Seite,

  • Fehlermeldungen, Stacktraces und ggf. Code-Snippets im Zusammenhang mit dem aufgetretenen Fehler.

Die erhobenen Daten werden ausschließlich zur Analyse und Behebung technischer Fehler sowie zur Optimierung der Stabilität und Sicherheit unserer Website verwendet. Eine Zusammenführung dieser Daten mit anderen Datenquellen oder eine Nutzung zu Werbezwecken findet nicht statt.

Die Verarbeitung der Daten erfolgt grundsätzlich auf Servern von Sentry. Dabei kann es zu einer Übermittlung personenbezogener Daten in die USA kommen.

Weitere Informationen zur Datenverarbeitung durch Sentry finden Sie in der Datenschutzerklärung des Anbieters unter:
https://sentry.io/privacy/

2. legal basis for data processing

Die Verarbeitung der personenbezogenen Daten erfolgt auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO. Unser berechtigtes Interesse besteht in der technischen Überwachung, Fehleranalyse sowie der Sicherstellung eines stabilen und sicheren Betriebs unserer Website.

Sofern im Einzelfall eine entsprechende Einwilligung abgefragt wurde (z. B. über ein Cookie-Consent-Tool), erfolgt die Verarbeitung ausschließlich auf Grundlage von Art. 6 Abs. 1 lit. a DSGVO sowie § 25 Abs. 1 TTDSG, soweit die Einwilligung die Speicherung von Cookies oder den Zugriff auf Informationen im Endgerät des Nutzers (z. B. für Device-Fingerprinting) umfasst. Eine erteilte Einwilligung kann jederzeit mit Wirkung für die Zukunft widerrufen werden.

3. purpose of data processing

Die Nutzung von Sentry dient der automatisierten Erkennung, Analyse und Behebung technischer Fehler und Abstürze. Dadurch sind wir in der Lage, die Funktionalität, Sicherheit und Nutzerfreundlichkeit unserer Website kontinuierlich zu verbessern und technische Probleme schneller zu beheben.

4. duration of storage

Die bei Sentry gespeicherten Daten werden nur so lange aufbewahrt, wie dies für die Analyse und Behebung der jeweiligen Fehler erforderlich ist. Die konkrete Speicherdauer wird durch die Konfiguration unseres Sentry-Accounts bestimmt. Nach Wegfall des Verarbeitungszwecks werden die Daten gelöscht.

5. Datenübermittlung in Drittländer

Sentry verarbeitet Daten unter anderem in den USA. Die Übermittlung personenbezogener Daten in die USA erfolgt auf Grundlage der von der EU-Kommission genehmigten Standardvertragsklauseln (Art. 46 Abs. 2 lit. c DSGVO).

Details zu den eingesetzten Mechanismen für Datenübermittlungen in Drittländer finden Sie unter:

6. Widerspruchs- und Beseitigungsmöglichkeit

Nutzer haben grundsätzlich das Recht, der Verarbeitung ihrer personenbezogenen Daten aus Gründen, die sich aus ihrer besonderen Situation ergeben, zu widersprechen. Zudem besteht die Möglichkeit, eine erteilte Einwilligung jederzeit zu widerrufen.
Bitte beachten Sie, dass bei einem Widerspruch oder Widerruf die Funktionalität unserer Website eingeschränkt sein kann, da die Fehleranalyse und -behebung erschwert wird.

Use of Weglot

Auf dieser Website sind Funktionen des Übersetzungsdienstes Weglot eingebunden. Anbieter ist Weglot SAS, 138, rue Pierre Joigneaux in Bois-Colombes 92270 Frankreich. Weglot wird beim Aufruf der Website geladen, so dass Sie über das Sprach-Icon in der Kopfzeile der Website die Sprache in eine andere als Deutsch ändern können. Dadurch kann beim Besuch dieser Website eine direkte Verbindung zwischen Ihrem Browser und dem Weglot-Server hergestellt werden. Weglot erhält dadurch die Information, dass Sie mit Ihrer IP-Adresse diese Website besucht haben. Die Speicherung und Analyse der Daten erfolgt auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO. Es wird eine entsprechende Einwilligung über die Cookie- und Datenschutz-Einstellungen der Website abgefragt. Die Verarbeitung erfolgt dann ausschließlich auf Grundlage von Art. 6 Abs. 1 lit. a DSGVO; die Einwilligung ist jederzeit über die Datenschutz-Einstellungen unten auf jeder Unterseite widerrufbar. Weitere Informationen hierzu finden Sie in der Datenschutzerklärung von Weglot: https://weglot.com/privacy/.

newsletter

1. Description and scope of data processing 

If you would like to receive the newsletter offered on the website with regular information about our offers and products, we need your email address and information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter. Furthermore, the data entered in the newsletter registration form will be transmitted to us and stored. This data includes: • Email address • First name • Last name • Company Additional data is provided solely for the purpose of addressing you personally in the newsletter and/or identifying you, as well as for sending the requested information if you wish to exercise your rights as a data subject, and will not be passed on to third parties. 

2. Legal basis for data processing 

The data entered in the newsletter registration form is processed exclusively on the basis of your consent (Art. 6 (1) (a) GDPR). By confirming the double opt-in procedure, you give us your consent in accordance with Art. 6 (1) (a) GDPR to use your personal data for the purpose of sending you the newsletter you have requested. 

3. Purpose of data processing 

We use the double opt-in procedure to send our newsletter. This means that we will only send you our newsletter by email once you have expressly confirmed that you agree to receive newsletters. In the first step, you will receive an email with a link that you can use to confirm that you, as the owner of the email address in question, wish to receive newsletters in the future. When you subscribe to our newsletter, we also store the date and time of your subscription. This is necessary in order to be able to prove consent and to be able to trace any possible misuse at a later date. 

4. duration of storage

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you unsubscribe. Data stored by us for other purposes remains unaffected by this.

5. Right to object and right to erasure 

You can revoke your consent to the storage of data, your email address, and its use for sending the newsletter at any time, for example via the "Unsubscribe" link at the end of each newsletter. The legality of data processing operations that have already taken place remains unaffected by the revocation. 

6th service provider

We use the following service providers to send out our newsletters, with whom we have concluded contracts for order processing (Art. 28 GDPR): Salesforce Sales Cloud 

The personal data provided when registering for the newsletter is stored in Salesforce Sales Cloud. This transfer is carried out in accordance with Art. 6 (1) (f) GDPR and serves our legitimate interest in using an effective, secure, and user-friendly newsletter system. Salesforce Sales Cloud is a CRM system that enables us, among other things, to manage existing and potential customers as well as customer and subscriber data, organize sales, marketing, and communication processes, and send out the newsletter. For more information about Salesforce Sales Cloud, please visit https://www.salesforce.com/company/legal/privacy/.

Salesforce

We use Salesforce Sales Cloud to manage customer data and to send our newsletter and automated mailings. The provider is salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich (hereinafter "Salesforce"). The data is currently stored on servers in the EU.

1. description and scope of data processing

Salesforce Sales Cloud is a CRM system that enables us, among other things, to manage existing and potential customers and customer contacts and to organize sales and communication processes. The use of the CRM system also enables us to analyze our customer-related processes. Customer data is stored on Salesforce servers. Personal data may also be transferred to the parent company of salesforce.com Germany GmbH, salesforce.com inc., Salesforce Tower, 415 Mission Street, San Francisco, CA 94105, USA. You can view Privacy Policy here:https://www.salesforce.com/de/company/privacy/.

Details about the features of Salesforce Sales Cloud can be found here:https://www.salesforce.com/de/products/sales-cloud/overview/.

The specific information required can be found on the respective input screen.

2. legal basis for data processing

The use of Salesforce Sales Cloud is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the most efficient customer and subscriber management and customer communication possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's end device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

Salesforce uses standard contractual clauses and has Binding Corporate Rules (BCR) that have been approved by the French data protection authority. These are binding internal company regulations that legitimize the internal transfer of data to third countries outside the EU and the EEA. The data processing conditions (Data Processing Addendum), which correspond to the standard contractual clauses, can be found here:
https://www.salesforce.com/de/blog/2020/07/die-binding-corporate-rules-von-salesforce-erfuellen-hoechste-da.html.

For details, please refer to Privacy Policy :
https://www.salesforce.com/de/company/privacy/.

Order processing
We have concluded an order processing contract (AVV) with the above-mentioned provider. This is a contract prescribed by data protection law, which ensures that the provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR. You can find the data processing agreement here:
https://www.salesforce.com/content/dam/web/en_us/www/documents/legal/Agreements/data-processing-addendum.pdf.

Hyperforce EU Operating Zone
We also use the Salesforce Hyperforce infrastructure. Since 2023, the "Hyperforce EU Operating Zone" has enabled us to determine the storage location of our data ourselves and thus to store and process our data on Salesforce exclusively within the European Union. The data is stored in accordance with the GDPR and Salesforce ensures that support is also provided directly by employees from the EU.
Further information on the Salesforce Hyperforce EU Operating Zone can be found at:
https://www.salesforce.com/de/blog/it/hyperforce-eu-operating-zone.html
https://www.salesforce.com/eu/products/platform/hyperforce/hyperforce-eu-oz/.

3. purpose of data processing

The Salesforce Sales Cloud uses your personal information to send and statistically analyze the newsletter on our behalf. For evaluation purposes, the emails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. This makes it possible to determine whether a newsletter message has been opened and which links have been clicked on. Conversion tracking can also be used to analyze whether a predefined action has taken place after clicking on the link in the newsletter. Technical information is also collected (e.g. time of access, IP address, browser type and operating system). The data is collected exclusively in pseudonymized form and is not linked to your other personal data; direct personal reference is excluded. This data is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to the interests of recipients.
If you wish to object to data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.

4. duration of storage

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Data stored by us for other purposes remains unaffected by this.

5. possibility of objection and removal

The user may revoke their consent to the processing of personal data at any time. If the user contact by email, they may object to the storage of their personal data at any time.

You can revoke your consent to the storage of the data, the e-mail address and its use for sending the newsletter at any time, for example via the "unsubscribe" link at the end of each newsletter.
The legality of the data processing operations already carried out remains unaffected by the revocation.

Google Fonts (local hosting)

This site uses so-called Google Fonts, which are provided by Google, for the uniform display of fonts. Google Fonts are installed locally. There is no connection to Google servers.

For more information about Google Fonts, visit:
faq

and in Privacy Policy :
https://policies.google.com/privacy?hl=de.

Rights of data subjects

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

1. right to information

You can request confirmation from the controller as to whether personal data concerning you is being processed by us.

You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

2. right to rectification

You have a right to rectification and/or completion vis-à-vis the controller if the processed personal data concerning you is incorrect or incomplete. The controller must make the correction without delay.

3. right to restriction of processing

You may request the restriction of the processing of your personal data under the following conditions: 

(1) if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;

(2) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;

(3) the controller no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims, or

(4) if you have objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet certain whether the legitimate reasons of the controller outweigh your reasons.

If the processing of personal data concerning you has been restricted, such data may only be processed - apart from being stored - with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

4. right to erasure

a) Obligation to delete

You have the right to obtain from the controller the erasure of personal data concerning you without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:

(1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.

(2) You revoke your consent on which the processing was based pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR and there is no other legal basis for the processing.

(3) You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.

(4) The personal data concerning you has been processed unlawfully.

(5) The deletion of personal data concerning you is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject.

(6) The personal data concerning you were collected in relation to information society services offered in accordance with Art. 8 para. 1 GDPR.

b) Information to third parties

If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Article 17(1) GDPR, it shall take reasonable steps, including technical measures, taking into account the available technology and the cost of implementation, to inform controllers which are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

c) Exceptions

The right to erasure does not exist if the processing is necessary

(1) to exercise the right to freedom of expression and information;

(2) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

(3) for reasons of public interest in the area of public health in accordance with Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR;

(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or

(5) for the assertion, exercise or defense of legal claims.

5. right to information

If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right to be informed about these recipients by the controller.

6. right to data portability

You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format.

7. right of objection

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions.

The controller will no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

8. right to revoke the declaration of consent under data protection law

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

9. right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.