Privacy Policy

The following information explains how we collect personal data when you use our website. Personal data means any information relating to you personally, such as your name, address, email addresses or user behaviour. We have implemented extensive technical and operational safeguards to protect your data against accidental or deliberate manipulation, loss, destruction and access by unauthorised persons. Our security procedures are reviewed regularly and adapted to technological developments.

1. Controller

The controller within the meaning of Article 4(7) of the EU General Data Protection Regulation (GDPR) is:

Rexx Systems GmbH
Süderstrasse 75–79
20097 Hamburg
Germany

Tel. +49 40 8 900 800

2. Contact details of the Data Protection Officer

You can contact our Data Protection Officer at datenschutz@rexx-systems.com or by mail at:

Rexx Systems GmbH
Personal/confidential, for the attention of the Data Protection Officer: Vanessa Martin
Süderstraße 75–77
20097 Hamburg

3. Your rights

You have the following rights in relation to the personal data we hold about you:

3.1 General rights

You have the right of access, rectification, erasure, restriction of processing, objection to processing and data portability. Where processing is based on your consent, you have the right to withdraw that consent at any time with effect for the future.

3.2 Rights where data is processed on the basis of legitimate interests

Under Article 21(1) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you based on Article 6(1)(e) GDPR (processing in the public interest) or Article 6(1)(f) GDPR (processing for the purposes of legitimate interests). This also applies to profiling based on those provisions. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

3.3 Rights in relation to direct marketing

Where we process your personal data for direct marketing purposes, you have the right under Article 21(2) GDPR to object at any time to the processing of personal data concerning you for such marketing. This also applies to profiling to the extent that it is related to such direct marketing.

If you object to processing for direct marketing purposes, we will no longer process your personal data for those purposes.

3.4 Right to lodge a complaint with a supervisory authority

You also have the right to lodge a complaint with a competent data protection supervisory authority about our processing of your personal data.

4. Collection of personal data when you visit our website

If you use our website for information purposes only, meaning that you do not register or otherwise provide us with information, we collect only the personal data that your browser transmits to our server. When you visit our website, we collect the following data, which is technically necessary to display the website and ensure its stability and security. The legal basis is Article 6(1)(f) GDPR: IP address, date and time of the request, time zone difference from Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, volume of data transferred in each case, website from which the request originates, browser, operating system and its interface, and language and version of the browser software.

5. Contacting us by email or contact form

When you contact us by email or via a contact form, we store the data you provide (your name, email address, company name and area of interest) in order to answer your questions.
Where our contact form requests information that is not necessary for us to contact you, we always mark this as optional. This information helps us to clarify your enquiry and deal with your request more effectively. You provide this information on an expressly voluntary basis and with your consent under Article 6(1)(a) GDPR. Where this information relates to communication channels (such as your email address or telephone number), you also consent to us contacting you via that channel where appropriate to respond to your request. You may, of course, withdraw this consent at any time with effect for the future.

We delete the data collected in this context once it is no longer necessary to retain it, or restrict its processing where statutory retention obligations apply.

6. Use of reCAPTCHA v3

To protect our forms against misuse, we use the reCAPTCHA v3 service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This service analyses whether an entry is made by a natural person or through automated, abusive access.

reCAPTCHA v3 operates in the background and evaluates user behaviour using various types of information to generate a security score. The data processed may include:

  • IP address
  • Referrer URL
  • Time spent on the page
  • Mouse and keyboard interactions
  • Device and browser information
  • Google cookies

Processing is based on Article 6(1)(f) GDPR. Our legitimate interest is to protect our website and its underlying IT infrastructure against automated attacks and spam.

Google may also transfer the data collected to the USA. Such transfers are subject to the applicable data protection requirements, including appropriate safeguards under Article 44 et seq. GDPR. Further information about Google’s processing of data is available in Google’s privacy policy.

The use of reCAPTCHA v3 is necessary to ensure that our forms function properly. Without this security measure, form submissions could be excessively restricted or subject to misuse.

7. Job applications

You can apply for a position with our company via our recruitment portal at https://www.rexx-systems.com/jobs/. Please note that emails sent without encryption are not protected against unauthorised access during transmission.

Your information is used to process your application and decide whether to enter into an employment relationship. The legal basis is Article 6(1)(b) GDPR. Your personal data may also be processed where necessary to defend against legal claims brought against us in connection with the recruitment process. The legal basis for this is Article 6(1)(f) GDPR. The purposes stated also constitute our legitimate interest in the processing.

If an employment relationship is established between you and us, we may continue to process the personal data already received from you for employment purposes under Article 6(1)(b) GDPR, where this is necessary to perform or terminate the employment relationship. Your application data will not be processed beyond the uses described above.

Your personal data will be deleted no later than six months after the recruitment process has ended, unless other legitimate interests on our part prevent deletion or you have consented to a longer retention period. Other legitimate interests in this context include, for example, an obligation to provide evidence in proceedings under the German General Equal Treatment Act (AGG). Further information is available in our ‘Privacy information for applicants’.

We use open-source AI software installed in our own data centre to support the assessment of applications. This helps us to compare qualifications and experience against the requirements of the advertised position and identify relevant information in CVs. The data does not leave our network for AI analysis.

The AI is used solely to support our recruitment staff; it does not make automated decisions. The final assessment and selection are always carried out by people.

Voluntary use when uploading a CV:
When uploading their CV, applicants can choose whether to use AI assistance to fill in form fields automatically (for example, to transfer basic personal details from the CV).

This function is optional and can be deselected at any time without affecting the application.

8. Newsletter

With your consent under Article 6(1)(a) GDPR, you can subscribe to our newsletter, which provides information about our current offers.

We use a double opt-in procedure for newsletter subscriptions. This means that, after you register, we send an email to the address you provided asking you to confirm that you wish to receive the newsletter. If you do not confirm your subscription within 24 hours, your information will be blocked and automatically deleted after one month.

We also store the IP addresses used and the dates and times of registration and confirmation. The purpose of this procedure is to provide evidence of your registration and, where necessary, investigate any possible misuse of your personal data.

The only information required to receive the newsletter is your email address. Any other information, marked separately, is voluntary and is used to address you personally. Once you have confirmed your subscription, we store your email address for the purpose of sending you the newsletter. The legal basis is Article 6(1)(a) GDPR.

You can withdraw your consent to receive the newsletter and unsubscribe at any time. You can do so by clicking the link provided in every newsletter email or by contacting the Data Protection Officer named above.

9. Participation in prize draws and competitions

If you take part in one of our prize draws or competitions, we collect the data necessary to run it. This will generally include an individual entry (such as a comment or photograph), as well as your name and contact details. We may share your data with our competition partners, for example to send you your prize. Data processing and sharing may vary depending on the competition and are therefore described in detail in the relevant terms and conditions of participation. Participation and the associated collection of data are, of course, voluntary. The legal basis for processing is your consent under Article 6(1)(a) GDPR, which you may withdraw at any time with effect for the future. Your data will be deleted after the competition has ended.

10. Use of cookies

When you use our website, cookies are stored on your computer. Cookies are data placed on your computer by a website you visit, allowing your browser to be recognised again. Cookies transmit information to the party that sets them.

Cookies can store various types of information, such as your language settings, the length of your visit to our website or information you enter on it. This avoids, for example, the need to re-enter required form data every time you use the website. Information stored in cookies can also be used to identify preferences and tailor content to areas of interest.

There are different types of cookies: session cookies are data stored temporarily in working memory and deleted when you close your browser. Permanent or persistent cookies are deleted automatically after a specified period, which may vary depending on the cookie. With this type of cookie, information may also be stored in text files on your computer. You can also delete these cookies at any time through your browser settings.

First-party cookies are set by the website you are currently visiting. Only that website may read information from these cookies. Third-party cookies are set by organisations other than the operator of the website you are visiting. These cookies are used by marketing companies, for example.

The legal bases for any processing of personal data using cookies, and their retention periods, may vary. Where you have given us your consent, the legal basis is Article 6(1)(a) GDPR and section 25(1) TDDDG. Where processing is based on our overriding legitimate interests, the legal basis is Article 6(1)(f) GDPR and section 25(2), point 2 TDDDG. In that case, the stated purpose corresponds to our legitimate interest.

You can configure your browser settings to suit your preferences, for example by refusing third-party cookies or all cookies. Please note that you may then be unable to use all the functions of this website. We use cookies to ensure that the website operates properly, provide basic functionality, measure audience reach and, with your consent, tailor our services to your preferred areas of interest. We use both transient and persistent cookies for these purposes.

This website uses the following types of cookies, the scope and operation of which are explained below.

11. Website analytics

We use various services, described below, to analyse and optimise our websites. These allow us, for example, to analyse how many users visit our website, which information is most popular and how users find our services. Among other things, we collect data about the website from which a person arrived at a website (the referrer), which subpages were accessed, and how often and for how long a subpage was viewed. This helps us to make our services more user-friendly and improve them.

11.1 Matomo

Our website uses the open-source web analytics service Matomo, a service provided by InnoCraft Ltd, a company based at 7 Waterloo Quay, PO625 Wellington, New Zealand. As InnoCraft is based outside the EU, it has appointed a representative in the EU: ePrivacy Holding GmbH, Große Bleichen 21, 20354 Hamburg (privacy@innocraft.com).

Web analytics for error analysis
We use the data collected by Matomo to ensure the functionality and stability of the website by processing JavaScript error messages, recording your page views and relevant interactions in the process.

The legal basis for this processing is section 25(2), point 2 TDDDG.

We retain analytics data only for as long as required for the purpose of processing, and for a maximum of 5 months and 28 days. Information about Matomo’s retention periods is available from the provider or here.

Other uses

We also use the data collected by Matomo for statistical analysis of user behaviour to optimise the functionality and stability of the website, and for marketing purposes. Our interest in and purpose of processing the data is to optimise our website, adapt its content and improve our services.

The legal basis for this processing is your consent under Article 6(1), first sentence, point (a) GDPR and section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future by opening the cookie settings in our consent management platform and changing your selection.

Matomo uses cookies to enable analysis of website use. For this purpose, the usage information recorded in the cookie (including your truncated IP address) is transferred to Matomo’s server located in the EU and stored for usage analysis. Matomo does not transfer any data to servers outside our control. Your IP address is anonymised immediately during this process, so that we cannot identify you as a user. The information collected about your use of this website is not shared with third parties.

We retain analytics data only for as long as required for the purpose of processing, and for a maximum of 5 months and 28 days. Information about Matomo’s retention periods is available from the provider or here.

You can prevent individual cookies or all cookies from being set by adjusting your browser settings. However, you may then be unable to use all the functions of this website in full. If you do not agree to the storage and analysis of usage data from your visit to our website, you can also prevent Matomo from collecting your data at any time by clicking below. An opt-out cookie will then be set in your browser, preventing Matomo from collecting any session data. Please note: if you delete your cookies, the opt-out cookie will also be deleted and you will need to set it again.

11.2 Google Analytics

Where you have given your consent, we use Google Analytics, a web analytics service provided by Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’).
Google Analytics uses cookies to analyse your use of our websites. The information generated by these cookies about your use of this website is generally transferred to a Google server in the USA and stored there.

We use the User-ID feature. This allows us to assign a unique, persistent ID to one or more sessions (and the activities within those sessions) and analyse user behaviour across devices.

We use Google signals. This enables Google Analytics to collect additional information about users who have enabled personalised advertising (interests and demographic data), and allows advertisements to be shown to these users as part of remarketing campaigns across devices.[MM1]

We use the ‘anonymizeIP’ function (IP masking). As IP anonymisation is enabled on this website, Google truncates your IP address within Member States of the European Union or other states party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and truncated there. The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data.

During your visit to the website, the following data, among other things, is collected:

  • The pages you visit and your click path
  • Achievement of website goals (conversions, such as newsletter subscriptions or downloads)
  • Your user behaviour (such as clicks, time spent on the website and bounce rates)
  • Your approximate location (region)
  • Your IP address (in truncated form)
  • Technical information about your browser and the devices you use (such as language settings and screen resolution)
  • Your internet service provider
  • The referrer URL (the website or advertisement through which you reached this website)

On behalf of the operator of this website, Google uses this information to evaluate your use of the website and compile reports on website activity. The reports provided by Google Analytics are used to analyse the performance of our website and the success of our marketing campaigns.

The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, acting as a processor. We have entered into a data processing agreement with Google for this purpose.
Google LLC, based in California, USA, may also have access to the data stored by Google. Where data is processed outside the EU/EEA, Google LLC is certified under the Data Privacy Framework (DPF) programme and is included in the Data Privacy Framework List maintained by the International Trade Administration (ITA). This means that Google LLC has publicly committed to complying with the DPF obligations, and any transfer of data to the USA is considered safe on the basis of the European Commission’s current adequacy decision of 10 July 2023.

The data sent by us and linked to cookies is automatically deleted after 365 days. Data that has reached the end of its retention period is deleted automatically once a month.

You can also prevent cookies from being stored by adjusting your browser settings. However, configuring your browser to reject all cookies may restrict functionality on this and other websites.

Further information about the terms of use for Google Analytics and data protection at Google is available here.

11.3 Google Ads

This website uses Google Ads. Google Ads is an online advertising programme provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’).

This means that we place Google Ads advertisements and also use Google Remarketing and conversion tracking as part of these activities. Advertisements are displayed following search queries on websites within the Google advertising network. We also use Ads remarketing lists for search ads. This enables us to adapt search advertising campaigns for users who have previously visited our website. These services allow us to combine our advertisements with specific search terms or show previous visitors advertisements promoting, for example, services they have viewed on our website. This allows us to show interest-based advertising to users of our website on other websites within the Google advertising network (as a ‘Google ad’ in Google Search or on other websites).

Interest-based offers require analysis of online user behaviour. Google uses cookies to carry out this analysis. When a user clicks an advertisement or visits our website, Google places a cookie on the user’s computer. These cookies remain valid for 90 days. The information collected through the relevant cookie is used to target the visitor during a subsequent search. Further information about the cookie technology used is available in Google’s information about website statistics and its privacy policy.

This technology provides Google and us, as its customer, with information showing that a user has clicked an advertisement and been redirected to our websites. The information obtained is used exclusively for statistical analysis to optimise advertisements. We do not receive any information that allows us to identify visitors personally. Your IP address is transferred to Google; however, as we use Google’s IP masking on this website as part of Google Analytics, your IP address is anonymised. The statistics provided to us by Google include the total number of users who have clicked one of our advertisements and, where applicable, whether they were redirected to a page on our website containing a conversion tag. These statistics allow us to identify which search terms most frequently result in clicks on our advertisements and which advertisements lead users to contact us via the contact form.

Further information about data protection in connection with Google Ads is available at: https://policies.google.com/technologies/ads?hl=de.

If you do not want this processing to take place, you can prevent the cookie required for these technologies from being stored, for example through your browser settings. Your visit will then not be included in the user statistics.

You can also use the Ads Settings to select the types of Google advertisements you see or disable interest-based advertising on Google. Alternatively, you can disable the use of cookies by third parties using the Network Advertising Initiative’s opt-out tool.

However, Google and we will continue to receive statistical information about how many users visited this page and when. If you do not wish to be included in these statistics either, you can prevent this by using additional software for your browser (such as the Privacy Badger add-on).

11.4 Google Tag Manager

For transparency, please note that we use Google Tag Manager. This is a tag management system for managing JavaScript and HTML tags used to implement tracking and analytics tools. It is a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The controller in the EU/EEA is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Google Tag Manager does not itself collect personal data. Tag Manager makes it easier for us to integrate and manage our tags. Tags are small pieces of code used, among other things, to measure traffic and visitor behaviour, assess the impact of online advertising and social channels, set up remarketing and audience targeting, and test and optimise websites. If you have opted out, Google Tag Manager respects that choice.

The recipients of the data are Google Ireland Limited, EU; Google LLC, USA; and Alphabet Inc., USA. Where data is processed outside the EU/EEA, Google LLC is certified under the Data Privacy Framework (DPF) programme and is included in the Data Privacy Framework List maintained by the International Trade Administration (ITA). This means that Google LLC has publicly committed to complying with the DPF obligations, and any transfer of data to the USA is considered safe on the basis of the European Commission’s current adequacy decision of 10 July 2023.

Further information about Google Tag Manager is available here.

11.5 ChatGPT Ads (OpenAI conversion measurement)

We advertise our services through the ‘ChatGPT Ads’ advertising programme provided by OpenAI. To measure the success of these advertising activities, we have integrated OpenAI measurement technology (a ‘pixel’ or measurement tag) into our website. This is technically implemented via Google Tag Manager.

Processing serves the following purposes:

  • Conversion measurement: we identify whether you reached our website through an advertisement in ChatGPT and subsequently took an action relevant to us (such as submitting a contact form).
  • Campaign performance evaluation and budget management: we receive aggregated statistical reports from OpenAI (such as the number of impressions, clicks, costs and conversions) to assess which advertisements are cost-effective.
  • Optimisation of ad delivery: OpenAI uses the reported events to target advertisements more effectively at users who are likely to take a corresponding action.

The following personal data is processed:

  • Information about whether and when you visited our website after clicking an advertisement in ChatGPT, including campaign identifiers appended to the URL (such as click IDs and UTM parameters)
  • An identifier stored in your browser or device to recognise you across multiple page views (a cookie and/or comparable storage technology such as local storage); see the ‘Retention period’ section
  • Your IP address
  • Information about your device and browser (such as browser type and version, operating system, device type, language settings and screen resolution)
  • Pages visited on our website, referrer URL and access times
  • Details of the event triggered, including, where applicable, transaction data such as order or shopping basket value, currency and order or transaction identifiers
  • Contact details transmitted for matching purposes: a cryptographically hashed email address or telephone number

According to OpenAI, advertisers do not have access to your conversations, chat history or the profile and contact details you have stored with OpenAI. We ourselves receive only aggregated campaign reports from OpenAI that cannot be traced back to you as an individual.

The legal basis for storing information on your device and accessing information already stored on it is section 25(1) TDDDG, as this storage and access are not strictly necessary for measuring advertising performance and we obtain your consent. The legal basis for the subsequent processing of your personal data is Article 6(1)(a) GDPR (consent).

We load OpenAI’s measurement technology only if you have given us your prior consent via our consent banner. Without your consent, the service is not integrated and no data is transferred to OpenAI for advertising measurement purposes.

There is no statutory or contractual obligation to give this consent. Consent is voluntary and is not required to use our website. If you do not give consent, or withdraw it later, you can continue to use our website with all its functions unchanged. In that case, we simply lack the statistical information needed to evaluate our advertising campaigns.

You can withdraw your consent at any time with effect for the future. This does not affect the lawfulness of processing carried out before withdrawal. Withdrawing consent will not disadvantage you. In particular, you can withdraw consent as follows: open our cookie or consent settings using the consent widget in the bottom left-hand corner of your browser window and disable the ‘Anzeigen / Ads’ category or the ‘ChatGPT Pixel’ toggle. Once consent has been withdrawn, the service will no longer be loaded. You can also delete cookies and comparable information already stored through your browser settings and prevent new cookies from being set there.

The recipients of the personal data are:

  • OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland, and its affiliated company OpenAI OpCo, LLC, 1455 3rd Street, San Francisco, CA 94158, USA. OpenAI processes the event data transmitted through the measurement technology on our behalf under a data processing agreement concluded with us (Ad Tools Data Processing Addendum). OpenAI acts as an independent controller for the processing of data relating to the use of ChatGPT itself.
  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as the provider of Google Tag Manager, through which the measurement technology is technically integrated and triggered. Google acts as our processor in this context.

Personal data is transferred to the USA as part of this service. Although OpenAI Ireland Limited is initially the entity processing data for users in the European Economic Area, the data may be passed to OpenAI OpCo, LLC in the USA and processed there.

There is no European Commission adequacy decision covering the recipient for this transfer to the USA. The transfer therefore takes place on the basis of the standard contractual clauses adopted by the European Commission under Article 46(2)(c) GDPR, supplemented by additional technical and organisational safeguards. You can request a copy of the standard contractual clauses used via the contact details provided in this privacy policy.

Cookies or comparable identifiers set by the measurement technology are stored for up to 90 days. A complete overview of the cookies used, including their names, purposes and lifespans, is available in our cookie settings. You can also delete this information at any time through your browser settings.

Event and conversion data held by OpenAI is stored and subsequently deleted or aggregated in such a way that it can no longer be linked to you personally.

The statistical reports made available to us contain no personal data and are retained by us for documentation and comparison purposes.

Further information about the provider’s processing of data is available in OpenAI’s privacy policy for the European Economic Area at https://openai.com/policies/eu-services-privacy-policy/, in the information about advertising in ChatGPT at https://help.openai.com/en/articles/20001207-ads-in-chatgpt-the-basics, and in the Ad Tools Data Processing Addendum at https://openai.com/policies/ad-tools-dpa/.

12. Google Web Fonts (offline version)

This website uses web fonts provided by Google to ensure consistent typography. When you open a page, your browser loads the required web fonts into its cache to display text and fonts correctly. We have chosen the offline version, in which Google Fonts are stored locally on our web server. The fonts can then be managed using CSS in the same way as any other font family. No IP address or other data is transferred to Google.

Google Web Fonts are used in the interest of presenting our online services consistently and attractively, taking efficiency and cost savings into account. This constitutes a legitimate interest within the meaning of Article 6(1), first sentence, point (f) GDPR. If your browser does not support web fonts, a standard font from your computer will be used.

Further information about Google Web Fonts is available here and in Google’s privacy policy.

13. Use of social plugins

This website uses social plugins from the following providers:

Facebook (operator: Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA)
Instagram (operator: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland)
LinkedIn (operator: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland)
YouTube (operator: YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA)

These plugins normally collect data about you by default and transmit it to the respective provider’s servers. To protect your privacy, we have taken technical measures to ensure that the providers of the respective plugins cannot collect your data without your consent. When you open a page containing these plugins, they are initially disabled. Only when you click the relevant icon are the plugins activated, at which point you consent to your data being transferred to the respective provider. The legal basis for using the plugins is your consent under Article 6(1)(a) GDPR, and section 25(1) TDDDG for storing information on the device you use, such as a laptop or smartphone, and accessing information already stored on that device.

Insight Tags & Retargeting

Once activated, these services also collect personal data (such as your IP address, device information, IP address, referrer URL, timestamp, time zone, browser information, ad visibility, ad clicks, conversion tracking, user network, user agent, language and website visited) and send it to the respective provider’s servers, where it is stored.

Activated social plugins also set a cookie with a unique identifier when you visit the relevant website. This allows providers to create profiles of your usage behaviour and enables us to show personalised advertisements to these users. We also receive reports that are pseudonymous to us on advertising performance and information about website interactions. This happens even if you are not a member of the respective provider’s social network. If you are a member and are logged in to that social network while visiting this website, your data and information about your visit may be linked to your profile on the social network.

We have no influence over the precise extent of the data collected about you by the respective provider. For more information about the scope, nature and purpose of processing, and your rights and settings options to protect your privacy, please refer to the privacy information provided by the respective social network provider. This is available at the following addresses:

Facebook: https://www.facebook.com/policy/
Instagram: https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect
LinkedIn: https://www.linkedin.com/legal/privacy-policy
YouTube: https://policies.google.com/privacy?hl=de&gl=de

Where data is processed outside the EU/EEA, Meta Platforms, Inc., LinkedIn Corporation and Google LLC (as the parent company of YouTube LLC) are certified under the Data Privacy Framework (DPF) programme and are included in the Data Privacy Framework List maintained by the International Trade Administration (ITA). This means that Meta Platforms, Inc., LinkedIn Corporation and Google LLC have publicly committed to complying with the DPF obligations, and any transfer of data to the USA is considered safe on the basis of the European Commission’s current adequacy decision of 10 July 2023.
As matters currently stand, Twitter is not yet certified under the Data Privacy Framework (DPF) programme. Where data is processed outside the EU/EEA in connection with Twitter, we have concluded the standard data protection clauses adopted by the European Commission under Article 46 GDPR with the service provider to establish an adequate level of data protection. These clauses permit the transfer of personal data to a third country in individual cases.

14. Vimeo

We have embedded videos provided by Vimeo LLC, whose head office is at 555 West 18th Street, New York, New York 10011.

When you visit our website, a connection is established to Vimeo’s servers. This informs the Vimeo server which of our web pages you have visited. If you are logged in as a Vimeo member, Vimeo links this information to your personal user account. When you click a video’s play button, this information may also be linked to an existing user account. You can prevent this by logging out of your Vimeo account before using our website and deleting the relevant Vimeo cookies.

We use this service as part of our online offering on the basis of a legitimate interest in analysing, optimising and operating our online offering economically. The legal basis is Article 6(1)(a) GDPR.

Further information about data processing and privacy at Vimeo is available here.

Vimeo also loads the Google Analytics tracker via the iframe in which the video is opened. This is Vimeo’s own tracking, to which we have no access.

15. YouTube

We use services on our website provided by YouTube, LLC, 901 Cherry Ave., 94066 San Bruno, CA, USA, a subsidiary of Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA. For users habitually resident in the European Economic Area or Switzerland, the controller responsible for your data is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland.

To protect your personal data, we use the privacy-enhanced mode provided by YouTube. When you open a page containing an embedded YouTube video, a connection is established to YouTube’s servers and the content is displayed on the website by communicating with your browser. According to YouTube, however, in privacy-enhanced mode data is only transmitted to the YouTube server when you actively start the video. If you are logged in to YouTube at that time, information about the videos you watch is linked to your YouTube member account. You can prevent this by logging out of your member account before visiting our website.

Where data is processed outside the EU/EEA, Google LLC is certified under the Data Privacy Framework (DPF) programme and is included in the Data Privacy Framework List maintained by the International Trade Administration (ITA). This means that Google LLC has publicly committed to complying with the DPF obligations, and any transfer of data to the USA is considered safe on the basis of the European Commission’s current adequacy decision of 10 July 2023.

Further information about privacy at YouTube is provided by Google here.

16. Data transfers

As a rule, we do not transfer your data to third parties unless we are legally obliged to do so, the transfer is necessary to perform the contractual relationship, or you have expressly consented to the transfer of your data in advance.

Where our external service providers have access to your personal data, we ensure, through processing arrangements under Article 28 GDPR, that they comply with data protection legislation to the same extent. Please also refer to the respective providers’ privacy information. Each service provider is responsible for the content of its own services; we review the services for compliance with legal requirements to the extent reasonably practicable.

We attach importance to processing your data within the EU/EEA. However, we may use service providers that process data outside the EU/EEA. In such cases, we ensure that an adequate level of data protection is established at the recipient before your personal data is transferred. This means achieving a level of data protection comparable to the standards within the EU through an adequacy decision, such as the EU–US Data Privacy Framework, or through EU standard data protection clauses.

17. Data security

We have implemented extensive technical and operational safeguards to protect your data against accidental or deliberate manipulation, loss, destruction and access by unauthorised persons. Our security procedures are reviewed regularly and adapted to technological developments.

Last updated: October 2026