Privacy Policy

The following information gives you an overview of what happens to your personal data when you visit our website www.yuvenda-payment.com and/or contact us as a prospective customer. Personal data is any data that can be used to personally identify you.

1. Controller

The controller responsible for data processing is:

YUVENDA Enterprise Solutions GmbH

Querstraße 18

04103 Leipzig, Germany

Email: info@alvara.eu

1.1 Contact Details of the Data Protection Officer

We have appointed an external data protection officer for our company. For questions relating to data protection, you can reach them using the contact details below:

datenschutz süd GmbH

Wörthstraße 15

97082 Würzburg

Website: https://www.dsn-group.de/

Email: office@datenschutz-sued.de

When contacting our data protection officer, please also state the name of the controller listed in our legal notice.

2. Usage Data

When you visit our websites, so-called usage data is temporarily logged and evaluated on our web server for statistical purposes, in order to improve the quality of our websites. This data set consists of: the name and address of the content requested, the date and time of the request, the amount of data transferred, the access status (content transferred, content not found), a description of the web browser and operating system used, and the referral link indicating which page you came from to reach ours.

The legal basis for processing the usage data is Art. 6 (1) sentence 1 (f) GDPR. This processing takes place in our legitimate interest of providing the website's content and ensuring a device- and browser-optimized display.

If you contact us as a prospective customer, we process the personal data necessary to handle your specific inquiry, carry out pre-contractual measures, or provide you with the requested information. The specific data collected depends on the nature and scope of your inquiry and the inquiry or contact form used.

As a rule, we process the following data in particular: first and last name, business email address, phone number (if applicable), company name and job function, and the content of the inquiry or the information submitted.

Depending on your specific inquiry, additional voluntary information may also be processed if you provide it to us. This data is processed exclusively for the purposes described in this privacy policy.

3. Purpose and Legal Basis for Data Processing

3.1 Storage of IP Address for Security Purposes

We also store the full IP address transmitted by your web browser for a strictly limited period of seven days, in our legitimate interest of being able to detect, contain, and remediate attacks on our websites. Once this period has elapsed, we delete or anonymize the IP address. The legal basis for this processing is Art. 6 (1) sentence 1 (f) GDPR.

3.2 Newsletter Sign-Up and Tracking

You can subscribe to a newsletter on our websites. Please note that we require certain data (at minimum, your email address) to process your newsletter sign-up.

The newsletter is only sent if you have given us your express consent. After you sign up, you will receive a confirmation email at the address you provided (the so-called double opt-in procedure). You may withdraw your consent at any time. A simple way to do so is, for example, the unsubscribe link included in every newsletter.

As part of the newsletter sign-up, we store additional data beyond what is mentioned above, where necessary to prove that you subscribed to our newsletter. This may include storing the full IP address at the time of sign-up or confirmation, as well as a copy of the confirmation email we sent. This processing is carried out on the basis of Art. 6 (1) sentence 1 (f) GDPR and in our legitimate interest of being able to demonstrate the lawfulness of our newsletter distribution.

We also embed individual tracking pixels in our newsletters, which let us see when a newsletter sent to you was retrieved or opened, and we individualize the links contained in the newsletter so we can evaluate when you clicked on which link. This tracking data is stored for as long as the contact relationship exists and for the purpose of evaluating and optimizing our marketing activities, but only for as long as necessary for these purposes. Inactive contacts are reviewed regularly and deleted or anonymized in accordance with our internal deletion and retention policies.

If you wish to withdraw your consent, please use the unsubscribe link included in every newsletter, or the link to adjust your consent.

We use the service HubSpot to store your contact details and to send and track our newsletter. HubSpot is technically administered by our parent company, YUVENDA GmbH. We have entered into a corresponding data processing agreement under Art. 28 GDPR with YUVENDA GmbH. In addition, YUVENDA GmbH and HubSpot Inc. have a data processing agreement under Art. 28 GDPR covering the hosting and support of the HubSpot system. Within this framework, a transfer of your data to the United States cannot be ruled out. HubSpot is certified under the EU-U.S. Data Privacy Framework, which ensures an adequate level of data protection.

3.3 Contact Forms / Online Demo

Our websites contain forms through which you can contact us. To use our contact form or online demo request form, we first require the data marked as mandatory fields, such as your name and email address. We use this data on the basis of Art. 6 (1) sentence 1 (f) GDPR in order to respond to your inquiry.

Beyond this, you may decide for yourself whether to share additional information with us. Providing this information is voluntary and not required to contact us. We process your voluntary information on the basis of your consent. You may withdraw your consent to the processing of voluntary information at any time. To do so, please contact the email address listed in our legal notice, or reach out centrally at datenschutz@yuvenda.com.

Your contact details are stored in our CRM system, HubSpot. HubSpot is technically administered by our parent company, YUVENDA GmbH. We have entered into a corresponding data processing agreement under Art. 28 GDPR with YUVENDA GmbH. In addition, YUVENDA GmbH and HubSpot Inc. have a data processing agreement under Art. 28 GDPR covering the hosting and support of the HubSpot system. Within this framework, a transfer of your data to the United States cannot be ruled out. HubSpot is certified under the EU-U.S. Data Privacy Framework, which ensures an adequate level of data protection.

3.4 Consultation Call

Prospective customers can use the website to schedule a no-obligation consultation call with our head of sales. Booking an appointment requires the mandatory information of name, email address, and company name.

We use this data on the basis of Art. 6 (1) sentence 1 (b) GDPR, since this processing is necessary to prepare for and conduct the consultation appointment and to clarify any follow-up questions.

Beyond this, you may decide for yourself whether to share additional information with us. Providing this information is voluntary and not required for the appointment to take place. We process your voluntary information on the basis of your consent under Art. 6 (1) (a) GDPR.

You may withdraw your consent to us at any time, for example by contacting datenschutz@yuvenda.com. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

We use Zoom / Microsoft Teams to conduct the appointment. We have also entered into a data processing agreement under Art. 28 GDPR with the provider of this video conferencing tool.

Your contact details are stored in our CRM system, HubSpot, under the same terms described above.

3.5 Whitepapers / Case Studies

As part of our marketing activities, we produce and publish so-called “whitepapers.” These are documents containing practical examples and ROI building blocks. To send you the PDF document, we require contact details such as your name, email address, and optionally your company name. This data is collected in order to send you the whitepaper and is based on Art. 6 (1) (b) GDPR.

Your contact details are stored in our CRM system, HubSpot, under the same terms described above.

3.6 Direct Marketing

As part of our business activities, we also process the personal data of prospective customers for direct marketing purposes. This includes, in particular, informing you about our own products, services, events, webinars, industry information, and similar content. Direct marketing may take place through various communication channels, in particular by email, telephone, or post.

Direct Marketing Based on Consent

If you have given us express consent, we process your personal data for direct marketing purposes on the basis of Art. 6 (1) sentence 1 (a) GDPR. You may withdraw your consent at any time with effect for the future, for example via the unsubscribe link included in every marketing email or by notifying us directly. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Direct Marketing Toward Prospective Customers

Toward prospective customers, direct marketing is also carried out on the basis of our legitimate interest under Art. 6 (1) sentence 1 (f) GDPR, where no consent has been given and no objection is evident. Our legitimate interest lies, in particular, in initiating business relationships and informing you about our own, topically relevant products and services.

You may object to the processing of your personal data for direct marketing purposes at any time in accordance with Art. 21 GDPR.

4. Data Security

To protect your data as comprehensively as possible against unwanted access, we take technical and organizational measures. We use an encryption method on our websites. Your data is transmitted between your computer and our server, and vice versa, over the internet using TLS encryption. You can generally recognize this by the closed padlock icon in your browser's status bar and by the address bar beginning with https://.

5. Analytics Tools

5.1 Google Tag Manager

This website uses “Google Tag Manager,” a service provided by: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”).

Google Tag Manager provides a technical foundation for bundling various web applications, including tracking and analytics services, and for calibrating, controlling, and setting conditions for them through a single interface. Google Tag Manager itself does not store or read information on user devices, nor does it perform any independent data analysis. However, when a page is loaded, Google Tag Manager transmits your IP address to Google, where it may be stored. A transfer to Google LLC's servers in the United States is also possible.

This processing only takes place if you have given us your express consent in accordance with Section 25 TDDDG in conjunction with Art. 6 (1) (a) GDPR. Without this consent, Google Tag Manager is not used during your visit to the site. You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service in the “Cookie Consent Tool” provided on the website.

A data processing agreement has been concluded with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

Where data is processed outside the EU or the EEA in this context (in particular in the United States), an adequate level of data protection is ensured by Google's certification under the Data Privacy Framework.

5.2 Website Analysis with Google Analytics

To design and optimize our website according to user needs, we use the web analytics tool “Google Analytics 4.” Google Analytics creates usage profiles based on pseudonyms. To do this, permanent cookies are stored on and read from your device. This allows returning visitors to be recognized and counted as such.

As part of the Google Analytics service, Google Ireland Limited supports us as a data processor under Art. 28 GDPR. Data processing may also take place through Google outside the EU or the EEA (in particular in the United States). With regard to Google, an adequate level of data protection is ensured through the adequacy decision (EU-U.S. Data Privacy Framework). Google also commits to entering into standard contractual clauses with any further subprocessors.

This processing only takes place if you have given us your express consent in accordance with Section 25 TDDDG in conjunction with Art. 6 (1) (a) GDPR. Without this consent, Google Analytics is not used during your visit to the site. You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service in the “Cookie Consent Tool” provided on the website.

5.3 Google Ads Remarketing

We use the online advertising program Google Ads, provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads Remarketing allows us to reach visitors to our website again after their visit with targeted advertisements, whether in Google Search, on YouTube, or on other websites. User behavior on our website is recorded using cookies or similar technologies, allowing users to be recognized later and shown relevant ads. In addition, audience targeting allows ads to be delivered based on user data available to Google, such as location, interests, or demographic characteristics. This data comes from the user's Google account or their browsing behavior and is provided by Google in aggregated form.

As the website operator, we receive quantitative evaluations through Google Ads, for example on which search terms led to our ads being shown, how many users clicked on the ads, and whether this resulted in conversions. This information helps us analyze and optimize the performance of our campaigns.

This service is used on the basis of your consent under Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. Consent may be withdrawn at any time.

The transfer of data to the United States is based on the European Commission's standard contractual clauses. Details can be found here: https://policies.google.com/privacy/frameworks and https://business.safety.google/controllerterms/.

The company holds a certification under the “EU-U.S. Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing carried out in the United States. Every company certified under the DPF commits to complying with these data protection standards. Further information is available from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

5.4 Google Ads Conversion Tracking

This website uses Google Conversion Tracking, a service of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

This tracking tool allows us to see whether users took certain actions on our website after clicking one of our Google ads, such as clicking specific buttons, viewing products, or completing a purchase. This information is used to create conversion statistics, which let us evaluate and optimize the effectiveness of our advertising campaigns.

We only receive aggregated evaluations, for example on the total number of users who clicked our ads and which actions they subsequently took. No personal data that would allow the direct identification of individual users is transmitted.

Google uses cookies or comparable technologies to recognize users. This data is only processed after prior consent given via our consent banner in accordance with the GDPR and TDDDG. Further information on data processing by Google can be found in Google's privacy policy.

This service is used on the basis of your consent under Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. Consent may be withdrawn at any time. The company holds a certification under the “EU-U.S. Data Privacy Framework” (DPF), as described above. Further information: https://www.dataprivacyframework.gov/participant/5780.

5.5 Website Analysis with HubSpot

We also use website analytics from the provider HubSpot Ireland Ltd. to analyze the use of our website. This allows us to continuously improve and optimize our marketing activities and our online offering. The data obtained may be used to build audiences and, via connected advertising platforms (e.g. Facebook, Google, or LinkedIn), for remarketing campaigns.

This data processing takes place exclusively on the basis of your express consent given via our cookie banner in accordance with Section 25 TDDDG in conjunction with Art. 6 (1) (a) GDPR. You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service in the “Cookie Consent Tool” provided on the website.

For the purpose of website analysis, HubSpot places cookies on your device that enable your use of our website to be recorded. The information collected in this way, such as IP address, timestamp, VID, and pages visited, is stored on HubSpot's servers.

If you provide us with personal data through a form on the website (e.g., the contact form), such as your name or email address, HubSpot may combine this information with the usage data previously collected.

In connection with the storage of data at HubSpot, data processing by HubSpot may take place outside the EU or the EEA (in particular in the United States). With regard to HubSpot, an adequate level of data protection is ensured through the adequacy decision (EU-U.S. Data Privacy Framework).

5.6 LinkedIn Insight Tag

This website uses the LinkedIn Insight Tag, a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

The Insight Tag is a JavaScript code embedded on our website to enable statistical evaluations of website usage in connection with LinkedIn advertising campaigns. Using the tag, we receive information about how visitors interact with our website, in particular whether they took certain actions after clicking a LinkedIn ad (so-called “conversions”). Conversion measurement can also take place across devices, for example from smartphone to desktop.

The Insight Tag also enables the creation of retargeting audiences, so that website visitors can later be specifically targeted with ads again via LinkedIn. According to LinkedIn, this does not involve the direct identification of individual users.

We also receive aggregated information about the professional characteristics of our website visitors, provided they are registered and logged in on LinkedIn. This includes, for example, career level, industry, job title, company size, location, and country. This data helps us better target our content and advertising to relevant audiences.

This service is used on the basis of your consent under Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. Consent may be withdrawn at any time.

The transfer of data to the United States is based on the European Commission's standard contractual clauses. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

The company holds a certification under the “EU-U.S. Data Privacy Framework” (DPF), as described above. Further information: https://www.dataprivacyframework.gov/participant/5448. A data processing agreement under Art. 28 GDPR has been concluded between LinkedIn and the website operator.

5.7 Meta Pixel

This website uses the Meta Pixel, a service of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland.

The Meta Pixel is a JavaScript code embedded on our website to enable statistical evaluations of website usage in connection with advertising campaigns on Facebook and Instagram. Using the pixel, we receive information about how visitors interact with our website, in particular whether they took certain actions after clicking a Meta ad (so-called “conversions”). Conversion measurement can also take place across devices, for example from smartphone to desktop.

The Meta Pixel also enables the creation of retargeting audiences, so that website visitors can later be specifically targeted with ads again via Facebook and Instagram. According to Meta, this does not involve the direct identification of individual users.

We also receive aggregated information about the professional characteristics of our website visitors, provided they are registered and logged in on Meta platforms. This includes, for example, career level, industry, job title, company size, location, and country. This data helps us better target our content and advertising to relevant audiences.

This service is used on the basis of your consent under Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. Consent may be withdrawn at any time via the consent banner.

Meta Platforms, Inc. holds a certification under the “EU-U.S. Data Privacy Framework” (DPF), as described above. Further information: https://www.dataprivacyframework.gov/list.

5.8 Microsoft Universal Event Tracking (UET)

This website uses conversion tracking provided by Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18.

For conversion tracking purposes, our website includes a single UET code snippet (tag) that both sets tracking cookies on your device and uses the browser's web storage. Using the cookies and information stored in web storage, we receive information about how visitors interact with our website, in particular whether they took certain actions on our website after clicking an ad via Microsoft Advertising (formerly “Bing Ads”) (so-called “conversions”). Conversion measurement can also take place across devices, for example from smartphone to desktop. This data enables us to carry out statistical evaluations of our website's use in connection with advertising campaigns on the Yahoo and Bing search engines.

UET also enables the creation of retargeting audiences, so that website visitors can later be specifically targeted with ads again via Microsoft Advertising. According to Microsoft, this does not involve the direct identification of individual users.

This service is used on the basis of your consent under Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. Consent may be withdrawn at any time via the consent banner.

Microsoft Corporation, headquartered in Redmond, USA, holds a certification under the “EU-U.S. Data Privacy Framework” (DPF), as described above. Further information: https://www.dataprivacyframework.gov/list.

5.9 SalesViewer

We have integrated SalesViewer on this website. The provider is SalesViewer GmbH, Hueststr. 30, 44787 Bochum (hereinafter “SalesViewer”). A data processing agreement under Art. 28 GDPR is in place.

SalesViewer allows us to record visits by employees of other companies to our website. For this purpose, the website visitor's IP address is matched against the company IP addresses stored in SalesViewer's company database. If the IP address belongs to a company, that visit and the associated user behavior are recorded. IP addresses that are not found in SalesViewer's database are deleted immediately, meaning that website visits by private individuals are disregarded by SalesViewer.

SalesViewer offers an opt-out procedure to enhance data protection. Further details are available at the provider's link: https://www.salesviewer.com/de/opt-out/.

SalesViewer is used on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in recording company visits to our website and the associated user behavior. Where corresponding consent has been requested, processing takes place exclusively on the basis of Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user's device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.

Further details are available in the provider's privacy policy at https://www.salesviewer.com/de/plattform/datenschutz/.

6. Google Maps

This page uses the map service Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. This service allows us to embed map material on our website.

To use the functions of Google Maps, it is necessary to store your IP address. This information is generally transmitted to and stored on a Google server in the United States. The operator of this website has no influence over this data transfer. When Google Maps is activated, Google may use Google Fonts to ensure a consistent display of fonts. When Google Maps is loaded, your browser downloads the required web fonts into its browser cache in order to display text and fonts correctly.

The use of Google Maps serves our interest in presenting our online offering in an appealing way and making the locations listed on our website easy to find. This constitutes a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. Where corresponding consent has been requested, processing takes place exclusively on the basis of Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user's device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.

The transfer of data to the United States is based on the European Commission's standard contractual clauses. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

More information on how user data is handled can be found in Google's privacy policy: https://policies.google.com/privacy?hl=de.

The company holds a certification under the “EU-U.S. Data Privacy Framework” (DPF), as described above. Further information: https://www.dataprivacyframework.gov/participant/5780.

7. Joint Controllership Within the YUVENDA Group

Your personal data may be shared with affiliated companies within the YUVENDA Group.

All affiliated companies within the YUVENDA Group have equal access to your contact data in HubSpot, which you provided to us through the collection forms described on the website. This access serves the purposes of centralized lead generation within the group, avoiding redundant data records, and enabling us to recommend products from our affiliated companies that may also be useful to you during our conversations. These purposes likewise constitute the legitimate interests for transferring data to affiliated companies within the YUVENDA Group on the basis of Art. 6 (1) (f) GDPR.

In addition, YUVENDA GmbH carries out online and performance marketing centrally for all affiliated companies within the YUVENDA Group and their websites, and accordingly has access to the analytics and tracking data processed through the use of the analytics and tracking tools described above. The transfer of this data to YUVENDA GmbH, and its processing by YUVENDA GmbH, serves the purposes of centrally managing and configuring the analytics and tracking tools and the campaigns for the YUVENDA Group's websites, and thus of optimizing advertising and campaigns group-wide. By giving your consent to the collection and further processing of your personal data via our consent banner, you also consent to the transfer of data to YUVENDA GmbH. The legal basis is therefore Art. 6 (1) (a) GDPR.

With regard to the purposes described above, the affiliated companies within the YUVENDA Group are joint controllers within the meaning of Art. 26 GDPR. For further information, including the essence of the arrangement concluded under Art. 26 (2) GDPR, please contact datenschutz@yuvenda.com.

8. Additional Data Processors

We share your data, under a data processing arrangement pursuant to Art. 28 GDPR, with service providers who support us in operating our websites and the related processes. These include, for example, hosting providers. Our service providers are strictly bound by our instructions and contractually obligated accordingly.

Below, we list the data processors we work with, to the extent we have not already named them earlier in this privacy policy. Where data may be processed outside the EU or the EEA in this context, we inform you of this in the table below.

9. Retention Period

Unless we have already informed you of a specific retention period, we delete personal data once it is no longer required for the processing purposes described above and no legitimate interests or other (statutory) retention obligations stand in the way of deletion.

10. Your Rights as a Data Subject

When we process your personal data, the GDPR grants you, as a data subject, certain rights:

Right of Access (Art. 15 GDPR)

You have the right to obtain confirmation as to whether personal data concerning you is being processed; if so, you have the right to access that personal data and the information specified in detail in Art. 15 GDPR.

Right to Rectification (Art. 16 GDPR)

You have the right to request the immediate rectification of inaccurate personal data concerning you and, where applicable, the completion of incomplete data.

Right to Erasure (Art. 17 GDPR)

You have the right to request that personal data concerning you be deleted without delay, provided one of the grounds set out in detail in Art. 17 GDPR applies.

Right to Restriction of Processing (Art. 18 GDPR)

You have the right to request the restriction of processing where one of the conditions set out in Art. 18 GDPR is met, for example if you have objected to the processing, for the duration of the controller's review.

Right to Data Portability (Art. 20 GDPR)

In certain cases specified in detail in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format, or to request that this data be transferred to a third party.

Right to Withdraw Consent (Art. 7 GDPR)

Where data processing is based on your consent, you are entitled under Art. 7 (3) GDPR to withdraw your consent to the use of your personal data at any time. Please note that withdrawal only takes effect for the future. Processing carried out before the withdrawal is not affected.

Right to Object (Art. 21 GDPR)

Where data is collected on the basis of Art. 6 (1) sentence 1 (f) GDPR (processing to safeguard legitimate interests) or Art. 6 (1) sentence 1 (e) GDPR (processing in the public interest or in the exercise of official authority), you have the right, for reasons arising from your particular situation, to object to the processing at any time. In that case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)

Under Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of data concerning you violates data protection law. This right may be exercised, in particular, with a supervisory authority in the member state of your habitual residence, your place of work, or the place of the alleged infringement.

Exercising Your Rights

Unless otherwise described above, please contact datenschutz@yuvenda.com to exercise your rights as a data subject.

This mailbox is managed by YUVENDA Enterprise Solutions GmbH as the central administrative point for data subject requests within the YUVENDA Group. However, you may always also exercise your data protection rights directly with the company named in our legal notice.

Your data subject requests are answered by YUVENDA Enterprise Solutions GmbH under a data processing arrangement pursuant to Art. 28 GDPR on behalf of the other companies.

11. Use of Cookies

11.1 Cookie Consent Tool

On our websites, we use a consent management platform (consent, or cookie, banner). The provider of this technology is Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter “Cookiebot”).

The processing involved in using Cookiebot and in logging the settings you select is carried out on the basis of Art. 6 (1) sentence 1 (f) GDPR, in our legitimate interest of displaying content in line with your preferences and of being able to demonstrate the consent(s) you have given. Your selected settings, the consents given as a result, and parts of your usage data are stored in a cookie. This allows the cookie to persist across subsequent page requests, so your consents remain traceable.

Cookiebot is used to obtain the legally required consents for the use of cookies. The legal basis for this is Art. 6 (1) (c) GDPR.

11.2 Necessary Cookies

On our websites, we use cookies that are necessary for the use of our websites.

Cookies are small text files that can be stored on and read from your device. A distinction is made between session cookies, which are deleted once you close your browser, and persistent cookies, which are stored beyond the individual session.

We do not use these necessary cookies for analytics, tracking, or advertising purposes.

Some of these cookies contain only information about certain settings and cannot be linked to a specific person. They may also be necessary to enable site navigation, security, and functionality.

We use these cookies on the basis of our legitimate interest under Art. 6 (1) sentence 1 (f) GDPR.

You can configure your browser to notify you when cookies are placed. You can also delete cookies at any time through the relevant browser settings and prevent new cookies from being set. Please note that, in this case, our websites may no longer display correctly and some functions may no longer be technically available.

11.3 List of All Cookies