{"id":2203,"date":"2026-10-01T14:13:27","date_gmt":"2026-10-01T12:13:27","guid":{"rendered":"https:\/\/dev.kogit.de:8443\/privacy-policy\/"},"modified":"2026-10-28T13:29:09","modified_gmt":"2026-10-28T12:29:09","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.kogit.de\/en\/privacy-policy\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"<section class=\"kogit-subpage-hero alignfull wp-block-kogit-subpage-hero\">\n\t\t\t<nav class=\"kogit-subpage-hero__crumbs\" aria-label=\"Breadcrumb\">\n\t\t\t<p class=\"kogit-subpage-hero__crumbs-line\"><span class=\"kogit-subpage-hero__crumb kogit-subpage-hero__crumb--current\" aria-current=\"page\">Privacy policy<\/span><\/p>\n\t\t<\/nav>\n\t\n\t\t\t\t\t\t<div class=\"kogit-subpage-hero__container\">\n\t\t\t\t<h1 class=\"kogit-subpage-hero__heading kogit-type-h2\">Privacy policy<\/h1>\n\t\t\t<\/div>\n\t\t\t<\/section>\n<section class=\"kogit-ic alignfull has-light-gray-background-color has-background wp-block-kogit-impressum-content\">\n\t<div class=\"kogit-ic__inner\">\n\t\t<div class=\"kogit-ic__wrap\">\n\t\t\t<aside class=\"kogit-ic__aside\">\n\t\t\t\t<div class=\"kogit-ic__aside-inner\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"kogit-ic__aside-body kogit-type-eyebrow kogit-rte-body\"><p><strong>KOGIT GmbH<\/strong><br \/>Rheinstr. 40-42, 64283 Darmstadt<br \/>Tel. <a href=\"tel:+49615178690\" class=\"kogit-rte-link\">+49 61 51 \/ 78 69 \u2013 0<\/a><\/p>\n<p><a href=\"mailto:info@kogit.de\" class=\"kogit-rte-link\">info@kogit.de<\/a><\/p>\n<p><strong>Controller and contact details of the data protection officer<\/strong><\/p>\n<p>The controller is<\/p>\n<p>KOGIT GmbH<br \/>Rheinstra\u00dfe 40 \u2013 42<br \/>64283 Darmstadt<br \/>Email: datenschutz@kogit.de<\/p>\n<p>(hereinafter also referred to as the <strong><em>\u201cCompany\u201d<\/em><\/strong>)<\/p>\n<p>You can reach our external data protection officer at<\/p>\n<p>Wodianka privacy legal GmbH<br \/>Dr. Volker Wodianka, LL.M.<br \/>Dockenhudener Stra\u00dfe 12a<br \/>22587 Hamburg<\/p><\/div>\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t<\/aside>\n\n\t\t\t<div class=\"kogit-ic__content\">\n\t\t\t\t\t\t\t\t\t<div class=\"kogit-ic__section kogit-ic__section--details\">\n\t\t\t\t\t\t<div class=\"kogit-ic__details kogit-type-eyebrow kogit-rte-body\"><h1>Privacy notice for website visitors, clients, suppliers, prospective clients and applicants<\/h1>\n<p>With the following information, we would like to give you \u2013 as a visitor to our online services, as a client or prospective client for our services, as a supplier, as an applicant or as any other data subject \u2013 an overview of the processing of your personal data by KOGIT GmbH and of your rights under data protection law. Which data is processed in detail and how it is used depends largely on the services agreed. Therefore, not all parts of this information will apply to you.<\/p>\n<h2>2. Processing of personal data in connection with your use of our websites, applications and online platforms<\/h2>\n<h3>a. Data categories, purpose of processing and legal basis<\/h3>\n<p>In the context of your use of the Company\u2019s websites, applications or online tools (hereinafter collectively referred to as \u201conline services\u201d), we process the following personal data:<\/p>\n<ul class=\"kogit-rte-list kogit-rte-list--bullets\">\n<li>Personal data that you voluntarily enter yourself in the context of an online service (e.g. when registering, making contact requests or participating in surveys, etc.), such as first name and surname, email address, telephone number, information provided in the context of a support request, comments or forum posts, and<\/li>\n<li>Information that is automatically sent to us by your web browser or device, such as your IP address, device type, browser type, previously visited websites, subpages visited or the date and times of the respective visitor request.<\/li>\n<\/ul>\n<p>We process your personal data for the following purposes:<\/p>\n<ul class=\"kogit-rte-list kogit-rte-list--bullets\">\n<li>Technical administration of the website (prevention and detection of fraudulent or similar acts, including attacks on our IT infrastructure, enabling user authentication)<\/li>\n<\/ul>\n<p>The legal basis for the processing of personal data for the above-mentioned purpose is Art. 6 (1) lit. b GDPR, insofar as a contractual relationship exists with you. Insofar as no contractual relationship exists between the Company and you, the legal basis for the data processing is Art. 6 (1) lit. f GDPR. The transmission of personal data (e.g. the IP address) is necessary to establish the connection and to display the content of the website.<\/p>\n<ul class=\"kogit-rte-list kogit-rte-list--bullets\">\n<li>Services (enabling the use of the services and functions of our online services, handling of enquiries, sending marketing information upon corresponding request)<\/li>\n<\/ul>\n<p>The legal basis for the processing of personal data for the above-mentioned purpose is Art. 6 (1) lit. b and lit. f GDPR. We provide our services in fulfilment of contractual obligations. Without the processing of personal data, we cannot perform the existing contract with you.<\/p>\n<p>In some cases, we expressly ask you for your consent to the processing of your personal data. In this case, the legal basis for the processing of your personal data is the consent you have given pursuant to Art. 6 (1) lit. a GDPR in conjunction with Art. 7 GDPR.<\/p>\n<h3>b. Hosting<\/h3>\n<p><strong>Provider:<\/strong> Hetzner Online GmbH, Gunzenhausen, Germany (live website); Mittwald CM Service GmbH &amp; Co. KG, Espelkamp, Germany (test and development environment).<\/p>\n<p><strong>Purpose and function:<\/strong> Provision of our online services on the providers\u2019 servers. All data generated when you visit our website is processed on these servers.<\/p>\n<p><strong>Data processed:<\/strong> All data collected via our website, in particular server log files (see section 2c) and form entries.<\/p>\n<p><strong>Classification under the TDDDG:<\/strong> Not applicable, as there is no access to your device.<\/p>\n<p><strong>Legal basis and role of the provider:<\/strong> Art. 6 (1) lit. f GDPR; our legitimate interest lies in the secure and reliable provision of our online services. The providers act as processors on our behalf (Art. 28 GDPR).<\/p>\n<p><strong>Third-country transfer:<\/strong> No transfer to third countries is intended.<\/p>\n<p><strong>Storage period:<\/strong> See the respective sections of this privacy notice.<\/p>\n<h3>c. Server log files<\/h3>\n<p><strong>Purpose and function:<\/strong> Each time our website is accessed, our hosting provider automatically records access data in so-called server log files. We need these in order to deliver the website technically, to analyse errors and to detect and fend off attacks.<\/p>\n<p><strong>Data processed:<\/strong> IP address, date and time of access, page or file accessed, volume of data transferred, status code, referrer URL, browser type and version, and operating system. This data is not combined with other data sources.<\/p>\n<p><strong>Classification under the TDDDG:<\/strong> Not applicable, as there is no access to your device.<\/p>\n<p><strong>Legal basis:<\/strong> Art. 6 (1) lit. f GDPR; our legitimate interest lies in the stability and security of our online services.<\/p>\n<p><strong>Third-country transfer:<\/strong> No transfer to third countries is intended.<\/p>\n<p><strong>Storage period:<\/strong> The storage period of the server log files depends on the period required for technical error analysis and for the detection and prevention of abusive access. The log files are then deleted. Where individual log data is required to investigate a specific error or security incident, we store only the data required for this purpose until the investigation and any associated legal action have been concluded.<\/p>\n<h3>d. SSL or TLS encryption<\/h3>\n<p>For security reasons, this website uses SSL or TLS encryption. You can recognise an encrypted connection by \u201c<a href=\"https:\/\/\u201c\" class=\"kogit-rte-link\">https:\/\/\u201c<\/a> in the address bar and by the padlock symbol in your browser. This means that data you transmit to us cannot be read by third parties.<\/p>\n<h3>e. Cookies<\/h3>\n<p>As part of our online services, we also use so-called cookies. Cookies are small text files that are stored on your device by your browser when you visit our website. Cookies contain information arising in each case in connection with the context of use and your device.<\/p>\n<p>Renew or change your cookie consent<\/p>\n<p>Depending on their type, cookies may be used either without consent or subject to consent. Cookies not requiring consent are, in particular, those that are necessary to provide our online services. The legal basis for storing and accessing such cookies is \u00a7 25 (2) no. 2 TDDDG. The legal basis for further data processing in these cases is Art. 6 (1) lit. f GDPR (legitimate interests in providing the online services and in IT security).<\/p>\n<p>By contrast, cookies requiring consent serve, on the one hand, to adapt the use of our services individually to your preferences. You give your consent in this regard when you access our online services and our \u201ccookie banner\u201d is displayed. By clicking a button, you can declare your consent to the use of cookies on this website.<\/p>\n<p>For example, we use cookies to recognise that you have already visited our online services. In addition, also for the purpose of user-friendliness, we use temporary cookies that are stored on your device for a specific, defined period. If you visit our site again, the fact of your visit and your entries are automatically recognised and, where applicable, completed.<\/p>\n<p>Furthermore, we use cookies to record and optimise the use of our online services statistically and to evaluate it for you. The legal basis for data processing for cookies requiring consent, or for the data obtained from them, is your consent pursuant to \u00a7 25 (1) TDDDG and Art. 6 (1) lit. a GDPR in conjunction with Art. 7 GDPR. This data includes, among other things, page views, length of stay, origin, country and more. We analyse this statistical information in order to optimise our services.<\/p>\n<p>An always up-to-date overview of the cookies and similar technologies used on this website, with details of the provider, purpose and storage period, can be found in our cookie settings, which you can access at any time via the \u201cCookie settings\u201d link at the bottom of every page.<\/p>\n<p>\u201cYou can change your decision regarding the use of cookies on our website at any time via the cookie settings. This also allows you to withdraw consent you have given at any time. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of the consent before its withdrawal.\u201d<\/p>\n<h3>f. Consent management with Borlabs Cookie<\/h3>\n<p><strong>Provider:<\/strong> Borlabs GmbH, Hamburg, Germany. The software is operated on our own web server.<\/p>\n<p><strong>Purpose and function:<\/strong> Obtaining, managing and documenting your consent to the use of cookies and similar technologies, and providing the option to withdraw it.<\/p>\n<p><strong>Data processed:<\/strong> Your selection, a randomly generated pseudonymous identifier, the date and time of your decision, and the version of the cookie banner.<\/p>\n<p><strong>Classification under the TDDDG:<\/strong> Storing your selection in a cookie is strictly necessary and therefore does not require consent (\u00a7 25 (2) no. 2 TDDDG).<\/p>\n<p><strong>Legal basis:<\/strong> Art. 6 (1) lit. c GDPR in conjunction with Art. 7 (1) GDPR (proof of consent) and Art. 6 (1) lit. f GDPR (legitimate interest in legally compliant consent management).<\/p>\n<p><strong>Third-country transfer:<\/strong> No transfer to third countries is intended.<\/p>\n<p><strong>Storage period:<\/strong> The lifetime of the consent cookie stored on your device is specified in the cookie settings. We retain the server-side record of your decision for as long as we carry out processing based on it and the record is subsequently required to fulfil our accountability obligations or to establish, exercise or defend legal claims. The record is then deleted. A withdrawal ends the processing based on the consent but does not automatically result in the deletion of the record of the consent previously given.<\/p>\n<p><strong>Withdrawal:<\/strong> At any time via the \u201cCookie settings\u201d link at the bottom of every page.<\/p>\n<h3>g. Google Tag Manager<\/h3>\n<p><strong>Provider:<\/strong> Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (\u201cGoogle\u201d).<\/p>\n<p><strong>Purpose and function:<\/strong> We use Google Tag Manager to integrate and manage other services (e.g. analytics and marketing services) on our website. Google Tag Manager itself does not evaluate any usage data.<\/p>\n<p><strong>Data processed:<\/strong> IP address and technical information about your browser, which are transmitted to Google when Google Tag Manager is loaded.<\/p>\n<p><strong>Classification under the TDDDG:<\/strong> Google Tag Manager is only loaded after you have given your consent (\u00a7 25 (1) TDDDG).<\/p>\n<p><strong>Legal basis and role of the provider:<\/strong> Art. 6 (1) lit. a GDPR. Google acts as a processor on our behalf.<\/p>\n<p><strong>Third-country transfer:<\/strong> A transfer to the USA cannot be ruled out. Google LLC is certified under the EU-U.S. Data Privacy Framework; the transfer takes place on the basis of the European Commission\u2019s adequacy decision of 10 July 2023 (Art. 45 GDPR).<\/p>\n<p><strong>Storage period:<\/strong> Google Tag Manager itself does not store any usage data. The respective sections of this privacy notice apply to the integrated services.<\/p>\n<p><strong>Withdrawal:<\/strong> At any time via the \u201cCookie settings\u201d link at the bottom of every page.<\/p>\n<p><strong>Further information:<\/strong> <a href=\"https:\/\/policies.google.com\/privacy?hl=de\" class=\"kogit-rte-link\" target=\"_blank\" rel=\"noopener\">https:\/\/policies.google.com\/privacy?hl=de<\/a><\/p>\n<h3>h. Google Analytics 4<\/h3>\n<p><strong>Provider:<\/strong> Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (\u201cGoogle\u201d).<\/p>\n<p><strong>Purpose and function:<\/strong> Statistical evaluation of the use of our website in order to improve our online services and our advertising measures.<\/p>\n<p><strong>Data processed:<\/strong> Pages accessed, interactions on the website, approximate location (country and city), technical information about browser and device, the origin of your visit, and a randomly generated user identifier. According to Google, IP addresses are used only to determine the approximate location and are not stored.<\/p>\n<p><strong>Classification under the TDDDG:<\/strong> Requires consent (\u00a7 25 (1) TDDDG).<\/p>\n<p><strong>Legal basis and role of the provider:<\/strong> Art. 6 (1) lit. a GDPR. Google acts as a processor on our behalf.<\/p>\n<p><strong>Third-country transfer:<\/strong> A transfer to the USA cannot be ruled out. Google LLC is certified under the EU-U.S. Data Privacy Framework; the transfer takes place on the basis of the European Commission\u2019s adequacy decision of 10 July 2023 (Art. 45 GDPR).<\/p>\n<p><strong>Storage period:<\/strong> The retention period for user and event data is set to 14 months in our Google Analytics property. Resetting the retention period upon new user activity is deactivated. You can find the lifetime of the cookies used in the cookie settings.<\/p>\n<p><strong>Withdrawal:<\/strong> You can withdraw your consent at any time with effect for the future via the cookie settings (see section 2e). In addition, you can use Google\u2019s browser add-on: <a href=\"https:\/\/tools.google.com\/dlpage\/gaoptout?hl=de\" class=\"kogit-rte-link\" target=\"_blank\" rel=\"noopener\">https:\/\/tools.google.com\/dlpage\/gaoptout?hl=de<\/a><\/p>\n<p><strong>Further information:<\/strong> <a href=\"https:\/\/support.google.com\/analytics\/answer\/6004245?hl=de\" class=\"kogit-rte-link\" target=\"_blank\" rel=\"noopener\">https:\/\/support.google.com\/analytics\/answer\/6004245?hl=de<\/a><\/p>\n<h3>i. Links to other websites<\/h3>\n<p>Our online services may contain links to third-party websites and applications that may be of interest to you. We are not responsible for the collection, processing and use of your data in the context of websites or applications that are not operated by us, nor for their content.<\/p>\n<h3>j. Newsletter<\/h3>\n<p>If you would like to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter (double opt-in procedure). To personalise the newsletter, we store personal data such as first name, last name and company. We process this data on the basis of your consent (Art. 6 (1) lit. a GDPR). We use the data to send the requested information and to document your consent. You can withdraw the consent you have given to the storage of the data and the email address and to their use for sending the newsletter at any time with effect for the future, for example via the \u201cunsubscribe\u201d link in the newsletter. We use the ActiveCampaign service to manage and send our newsletter. The following information applies in this regard.<\/p>\n<p><strong>Provider:<\/strong> ActiveCampaign, LLC, Chicago, USA.<\/p>\n<p><strong>Purpose and function:<\/strong> Management of our newsletter recipients and sending of the newsletter. Insofar as you have consented to this, we also evaluate whether and when you open the newsletter and which links you click in order to improve our content.<\/p>\n<p><strong>Data processed:<\/strong> Email address, name, company, double opt-in details (time, IP address) and, where applicable, open and click data.<\/p>\n<p><strong>Classification under the TDDDG:<\/strong> Opens and clicks are only evaluated with your consent (\u00a7 25 (1) TDDDG).<\/p>\n<p><strong>Legal basis and role of the provider:<\/strong> Art. 6 (1) lit. a GDPR. ActiveCampaign acts as a processor on our behalf.<\/p>\n<p><strong>Third-country transfer:<\/strong> A transfer to the USA cannot be ruled out. ActiveCampaign is certified under the EU-U.S. Data Privacy Framework; the transfer takes place on the basis of the European Commission\u2019s adequacy decision of 10 July 2023 (Art. 45 GDPR).<\/p>\n<p><strong>Storage period:<\/strong> Until you unsubscribe. After you unsubscribe, we store your email address in a block list to ensure that you do not receive any further newsletters (Art. 6 (1) lit. f GDPR).<\/p>\n<p><strong>Withdrawal:<\/strong> Via the unsubscribe link in every newsletter or by email to <a href=\"mailto:datenschutz@kogit.de\" class=\"kogit-rte-link\">datenschutz@kogit.de<\/a>.<\/p>\n<p><strong>Further information:<\/strong> <a href=\"https:\/\/www.activecampaign.com\/legal\/privacy-policy\" class=\"kogit-rte-link\" target=\"_blank\" rel=\"noopener\">https:\/\/www.activecampaign.com\/legal\/privacy-policy<\/a><\/p>\n<h3>k. Contacting us<\/h3>\n<p>Our website contains contact forms that can be used to contact us electronically. If a user takes advantage of these options, the data entered in the input mask is transmitted to us and some of the data is stored. The same applies if you contact us by email, telephone or fax; in this case, we process the data you provide to us (e.g. name, contact details and the content of your enquiry).<\/p>\n<p>In this context, the data is not passed on to third parties outside the Company, with the exception of the processors we use (in particular our CRM system, see section 3c, and the services for protection against spam, see section 2l). The data is used exclusively for processing the correspondence.<\/p>\n<p>The legal basis for the processing of data transmitted in the course of sending an email or via the contact form, by telephone or by fax is Art. 6 (1) lit. f GDPR. If the contact is aimed at concluding a contract, Art. 6 (1) lit. b GDPR is an additional legal basis for the processing. We process the personal data from the input mask in order to handle the contact and to prevent misuse of the contact form.<\/p>\n<p>You have the right to object to the processing of your personal data at any time. In such a case, the correspondence cannot be continued. Please send your request for deletion by email to <a href=\"mailto:datenschutz@kogit.de\" class=\"kogit-rte-link\">datenschutz@kogit.de<\/a>. In this case, all personal data stored in the course of contacting us will be deleted. Otherwise, we delete the data as soon as your enquiry has been conclusively dealt with and no statutory retention obligations prevent this.<\/p>\n<h3>l. Protection against spam (Google reCAPTCHA and hCaptcha)<\/h3>\n<p><strong>Provider:<\/strong> Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (\u201cGoogle\u201d) (Google reCAPTCHA); Intuition Machines, Inc., USA (hCaptcha), each as a processor within the meaning of Art. 28 GDPR.<\/p>\n<p><strong>Purpose and function:<\/strong> Protection of our forms against spam and abusive automated access. Based on various characteristics, the services check whether an entry originates from a human or from an automated program.<\/p>\n<p><strong>Data processed:<\/strong> IP address, browser and device information, length of stay, and mouse and keyboard input.<\/p>\n<p><strong>Classification under the TDDDG:<\/strong> Requires consent (\u00a7 25 (1) TDDDG). Without consent, you can reach us at any time by email or telephone.<\/p>\n<p><strong>Legal basis:<\/strong> Art. 6 (1) lit. a GDPR. The recipient of the data is the respective provider.<\/p>\n<p><strong>Third-country transfer:<\/strong> A transfer to the USA cannot be ruled out. Google LLC and Intuition Machines, Inc. are certified under the EU-U.S. Data Privacy Framework; the transfer takes place on the basis of the European Commission\u2019s adequacy decision of 10 July 2023 (Art. 45 GDPR).<\/p>\n<p><strong>Storage period:<\/strong> In accordance with the providers\u2019 privacy policies.<\/p>\n<p><strong>Withdrawal:<\/strong> You can withdraw your consent at any time with effect for the future via the cookie settings (see section 2e).<\/p>\n<p><strong>Further information:<\/strong> <a href=\"https:\/\/policies.google.com\/privacy?hl=de\" class=\"kogit-rte-link\" target=\"_blank\" rel=\"noopener\">https:\/\/policies.google.com\/privacy?hl=de<\/a>; <a href=\"https:\/\/www.hcaptcha.com\/privacy\" class=\"kogit-rte-link\" target=\"_blank\" rel=\"noopener\">https:\/\/www.hcaptcha.com\/privacy<\/a><\/p>\n<h3>m. SalesViewer<\/h3>\n<p><strong>Provider:<\/strong> SalesViewer GmbH, Bochum, Germany.<\/p>\n<p><strong>Purpose and function:<\/strong> Identification of organisations visiting our website (B2B visitor identification) for marketing, sales and optimisation purposes. For this purpose, the IP address is used to check whether the access originates from an organisation\u2019s network. Individual persons are not identified.<\/p>\n<p><strong>Data processed:<\/strong> IP address (which is immediately hashed, i.e. rendered unrecognisable), pages accessed, length of stay and origin of the visit.<\/p>\n<p><strong>Classification under the TDDDG:<\/strong> Requires consent (\u00a7 25 (1) TDDDG).<\/p>\n<p><strong>Legal basis and role of the provider:<\/strong> Art. 6 (1) lit. a GDPR. SalesViewer acts as a processor on our behalf.<\/p>\n<p><strong>Third-country transfer:<\/strong> No transfer to third countries is intended.<\/p>\n<p><strong>Storage period:<\/strong> The storage period depends on how long the visit data collected is needed for evaluating website usage and for the marketing and sales measures based on it. The decisive factor is whether the data is still relevant for an ongoing evaluation or measure. Once this relevance no longer applies, the data is deleted. If you withdraw your consent, we delete the personal data processed on this basis unless another legal basis permits its further storage.<\/p>\n<p><strong>Withdrawal:<\/strong> You can withdraw your consent at any time with effect for the future via the cookie settings (see section 2e).<\/p>\n<p><strong>Further information:<\/strong> <a href=\"https:\/\/www.salesviewer.com\/de\/plattform\/datenschutz\/\" class=\"kogit-rte-link\" target=\"_blank\" rel=\"noopener\">https:\/\/www.salesviewer.com\/de\/plattform\/datenschutz\/<\/a><\/p>\n<h3>n. YouTube videos<\/h3>\n<p><strong>Provider:<\/strong> Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (\u201cGoogle\u201d).<\/p>\n<p><strong>Purpose and function:<\/strong> Embedding of videos on our website. We use YouTube\u2019s privacy-enhanced mode. The video is only loaded once you have consented to this.<\/p>\n<p><strong>Data processed:<\/strong> Once the video is loaded, in particular IP address, page accessed, browser and device information, and entries in your browser\u2019s local storage. If you are logged in to YouTube, YouTube can assign the usage to your account.<\/p>\n<p><strong>Classification under the TDDDG:<\/strong> Requires consent (\u00a7 25 (1) TDDDG).<\/p>\n<p><strong>Legal basis and role of the provider:<\/strong> Art. 6 (1) lit. a GDPR. Google processes the data as an independent controller.<\/p>\n<p><strong>Third-country transfer:<\/strong> A transfer to the USA cannot be ruled out. Google LLC is certified under the EU-U.S. Data Privacy Framework; the transfer takes place on the basis of the European Commission\u2019s adequacy decision of 10 July 2023 (Art. 45 GDPR).<\/p>\n<p><strong>Storage period:<\/strong> You can find the lifetime of the cookies used in the cookie settings. The provider\u2019s privacy policy applies to further processing by the provider.<\/p>\n<p><strong>Withdrawal:<\/strong> You can withdraw your consent at any time with effect for the future via the cookie settings (see section 2e).<\/p>\n<p><strong>Further information:<\/strong> <a href=\"https:\/\/policies.google.com\/privacy?hl=de\" class=\"kogit-rte-link\" target=\"_blank\" rel=\"noopener\">https:\/\/policies.google.com\/privacy?hl=de<\/a><\/p>\n<h2>3. Processing of personal data of business partners<\/h2>\n<h3>a. Data categories, purpose of processing and legal basis<\/h3>\n<p>In the context of its cooperation with business partners, the Company processes personal data of contact persons at clients, suppliers, prospective clients, sales partners and cooperation partners (hereinafter \u201cbusiness partners\u201d):<\/p>\n<ul class=\"kogit-rte-list kogit-rte-list--bullets\">\n<li>Contact information, such as first names and surnames, business address, business telephone number, business mobile number, business fax number and business email address,<\/li>\n<li>Payment data, such as information required for processing payment transactions or for fraud prevention,<\/li>\n<li>Further information whose processing is necessary in the context of a contractual relationship and which is provided voluntarily by business partners, such as orders, enquiries or project details,<\/li>\n<li>Personal data collected from publicly available sources, information databases or credit agencies, and<\/li>\n<li>Where legally required in the context of compliance screenings: date of birth, identity document and identity document numbers, information on relevant court proceedings or other legal disputes in which business partners are involved.<\/li>\n<\/ul>\n<p>Furthermore, personal data is processed for the following purposes:<\/p>\n<ul class=\"kogit-rte-list kogit-rte-list--bullets\">\n<li>Communication with business partners about products, services and projects, for example to handle enquiries from the business partner or to provide technical information about products,<\/li>\n<li>Planning, performance and management of the contractual business relationship, for example to process orders for products and services, to collect payments, for accounting and invoicing purposes and to carry out deliveries, maintenance activities or repairs,<\/li>\n<li>Conducting customer surveys, marketing campaigns, market analyses, prize draws, etc.,<\/li>\n<li>Conducting customer satisfaction surveys and direct marketing as described in more detail in section 5 below,<\/li>\n<li>Maintaining and protecting the security of our products and services and of our websites, preventing and detecting security risks, fraudulent conduct or other criminal acts or acts committed with intent to cause harm,<\/li>\n<li>Screening personal data against sanctions lists on the basis of Regulations (EC) No. 2580\/2001 and (EC) No. 881\/2002,<\/li>\n<li>Compliance with (i) legal requirements (e.g. retention obligations under tax and commercial law), (ii) existing obligations to carry out compliance screenings (in order to prevent white-collar crime or money laundering) and (iii) guidelines and industry standards, and<\/li>\n<li>Settling legal disputes, enforcing existing contracts and establishing, exercising and defending legal claims.<\/li>\n<\/ul>\n<p>The processing of personal data is necessary to achieve the aforementioned purposes. Unless expressly stated otherwise when the personal data is collected, the legal basis for the data processing is:<\/p>\n<ul class=\"kogit-rte-list kogit-rte-list--bullets\">\n<li>the performance and fulfilment of a contract with you pursuant to Art. 6 (1) lit. b GDPR,<\/li>\n<li>compliance with legal obligations to which the Company is subject pursuant to Art. 6 (1) lit. c GDPR, or<\/li>\n<li>the protection of legitimate interests pursuant to Art. 6 (1) lit. f GDPR. The legitimate interest lies in the initiation, performance and handling of the business relationship.<\/li>\n<\/ul>\n<p>If, in an individual case, you have expressly given your consent to the processing of your personal data, this consent is the legal basis for the processing pursuant to Art. 6 (1) lit. a GDPR.<\/p>\n<h3>b. Film and photo recordings<\/h3>\n<p>If you attend an event held by the Company, film and photo recordings may be made which are used for marketing purposes.<\/p>\n<p>This personal data is processed on the basis of Art. 6 (1) lit. f GDPR. We would like to point out that, pursuant to Art. 21 (1) GDPR, you may object to this processing on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.<\/p>\n<p>The objection must be addressed to the contact details stated in section 1.<\/p>\n<h3>c. Salesforce CRM system<\/h3>\n<p><strong>Provider:<\/strong> Salesforce, Inc., San Francisco, USA, or its European group companies.<\/p>\n<p><strong>Purpose and function:<\/strong> Management of our contacts with clients, prospective clients and business partners and documentation of our communication and sales activities (CRM system).<\/p>\n<p><strong>Data processed:<\/strong> Contact and company data, communication history and details of enquiries, quotations and projects.<\/p>\n<p><strong>Legal basis and role of the provider:<\/strong> Art. 6 (1) lit. b GDPR, insofar as the processing serves the initiation or performance of a contract, otherwise Art. 6 (1) lit. f GDPR; our legitimate interest lies in the structured management of our business relationships. Salesforce acts as a processor on our behalf.<\/p>\n<p><strong>Third-country transfer:<\/strong> A transfer to the USA cannot be ruled out. It takes place on the basis of the European Commission\u2019s adequacy decision of 10 July 2023 (EU-U.S. Data Privacy Framework, Art. 45 GDPR) and, in addition, on the basis of EU standard contractual clauses (Art. 46 (2) lit. c GDPR).<\/p>\n<p><strong>Storage period:<\/strong> For the duration of the business relationship; thereafter, the information in section 14 applies.<\/p>\n<p><strong>Further information:<\/strong> <a href=\"https:\/\/www.salesforce.com\/de\/company\/privacy\/\" class=\"kogit-rte-link\" target=\"_blank\" rel=\"noopener\">https:\/\/www.salesforce.com\/de\/company\/privacy\/<\/a><\/p>\n<h3>d. Online meetings with Microsoft Teams<\/h3>\n<p><strong>Provider:<\/strong> Microsoft Ireland Operations Limited, Dublin, Ireland.<\/p>\n<p><strong>Purpose and function:<\/strong> Holding online meetings, video conferences and webinars.<\/p>\n<p><strong>Data processed:<\/strong> Name, email address, meeting metadata (e.g. date, time, duration, participants, IP address, device information), image and audio data if you activate your camera or microphone, and chat content. Recordings and transcriptions are only made after prior notice and, where required, with your consent.<\/p>\n<p><strong>Classification under the TDDDG:<\/strong> Microsoft\u2019s information applies in addition. If you use the Teams application, you or your organisation have concluded a separate contract with Microsoft.<\/p>\n<p><strong>Legal basis and role of the provider:<\/strong> Art. 6 (1) lit. b GDPR, insofar as the meeting takes place in the context of a contractual relationship or its initiation, otherwise Art. 6 (1) lit. f GDPR (legitimate interest in efficient communication); for recordings and transcriptions, likewise Art. 6 (1) lit. f GDPR or, where required, Art. 6 (1) lit. a GDPR. Microsoft acts as a processor on our behalf.<\/p>\n<p><strong>Third-country transfer:<\/strong> A transfer to the USA cannot be ruled out. Microsoft Corporation is certified under the EU-U.S. Data Privacy Framework; the transfer takes place on the basis of the European Commission\u2019s adequacy decision of 10 July 2023 (Art. 45 GDPR).<\/p>\n<p><strong>Storage period:<\/strong> As a rule, meeting content is not stored. We delete recordings and chat histories as soon as they are no longer required for the respective purpose.<\/p>\n<p><strong>Further information:<\/strong> <a href=\"https:\/\/privacy.microsoft.com\/de-de\/privacystatement\" class=\"kogit-rte-link\" target=\"_blank\" rel=\"noopener\">https:\/\/privacy.microsoft.com\/de-de\/privacystatement<\/a><\/p>\n<h2>4. Processing of personal data of applicants<\/h2>\n<h3>a. Data categories and purpose of data processing<\/h3>\n<p>In the context of the application process, we generally process the following categories of personal data:<\/p>\n<ul class=\"kogit-rte-list kogit-rte-list--bullets\">\n<li>Personal details (first name and surname, date of birth, address, school-leaving qualification)<\/li>\n<li>Communication data (telephone number, mobile number, fax number, email address)<\/li>\n<li>Data on assessment and evaluation in the application process<\/li>\n<li>Data on education (school, vocational training, civilian\/military service, university studies, doctorate)<\/li>\n<li>Data on previous professional career, training and employment references<\/li>\n<li>Information on other qualifications (e.g. language skills, IT skills, voluntary activities)<\/li>\n<li>Application photo<\/li>\n<li>Social media links (link to Xing or LinkedIn profile, if data import from these profiles was selected)<\/li>\n<\/ul>\n<p>Personal data that you provide to us in the context of your application is stored and used exclusively for the purpose of processing the application and, where applicable, for the performance of any subsequent employment relationship<\/p>\n<h3>b. Legal basis for data processing<\/h3>\n<p>Your personal data is processed in the context of the application process on the basis of Art. 6 (1) lit. b GDPR (establishment and performance of a contract) and Art. 6 (1) lit. f GDPR (legitimate interest).<\/p>\n<h3>c. Disclosure of data<\/h3>\n<p>Your data is made accessible to the responsible employees of the HR department and to the responsible employees or managers of the specialist department(s) for the position for which you have applied.<\/p>\n<p>In the case of a speculative application, your documents are made available to the responsible employees of the HR department and to the responsible employees or managers of the relevant specialist departments for which your application could be of interest.<\/p>\n<p>We do not pass on your applicant data to affiliated subsidiaries or parent companies unless your application also relates to these companies. Furthermore, we use processors (e.g. IT service providers and the provider of our applicant management system, see section 4e). Your data is passed on to them in strict compliance with the obligation of confidentiality and the requirements of the GDPR. The processors commissioned by us may only process the data on our behalf and not for their own purposes. In these cases, responsibility for the data processing remains with us.<\/p>\n<p>Data is also disclosed if we are obliged to do so on the basis of statutory provisions and\/or orders by authorities or courts.<\/p>\n<h3>d. Deletion periods for applicant data<\/h3>\n<p>If no employment relationship is established, the application documents are deleted six months after the refusal of admission to the applicant pool. The legal basis for this storage is Art. 6 (1) lit. f GDPR. Our legal interest in this respect is the defence against any claims under the German General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz, \u201cAGG\u201d). In all other respects, the general deletion periods and information in section 14 apply.<\/p>\n<h3>e. HRworks applicant management system<\/h3>\n<p><strong>Provider:<\/strong> HRworks GmbH, Waldkircher Stra\u00dfe 28, 79106 Freiburg im Breisgau, Germany.<\/p>\n<p><strong>Purpose and function:<\/strong> Receipt and processing of applications via our applicant management system.<\/p>\n<p><strong>Data processed:<\/strong> All information and documents that you send us as part of your application (see section 4a).<\/p>\n<p><strong>Legal basis and role of the provider:<\/strong> As stated in section 4b. HRworks acts as a processor on our behalf.<\/p>\n<p><strong>Third-country transfer:<\/strong> No transfer to third countries is planned.<\/p>\n<p><strong>Storage period:<\/strong> As stated in section 4d.<\/p>\n<p><strong>Further information:<\/strong> <a href=\"https:\/\/www.hrworks.de\/datenschutz\/\" class=\"kogit-rte-link\" target=\"_blank\" rel=\"noopener\">https:\/\/www.hrworks.de\/datenschutz\/<\/a><\/p>\n<h2>5. Processing of personal data for customer satisfaction surveys and direct marketing<\/h2>\n<p>Where you have given us your consent or where we are entitled to do so within the scope of existing customer relationships, your contact details will also be used for direct marketing purposes (such as trade fair invitations, newsletters) or to carry out customer satisfaction surveys. You have the right to object at any time to the use of your contact details for these purposes. If you wish to exercise your right to object in this regard, send us an email at <a href=\"mailto:datenschutz@kogit.de\" class=\"kogit-rte-link\">datenschutz@kogit.de<\/a> or follow the corresponding instructions you have received from us in any promotional email. The legal basis for processing your data for advertising purposes is Art. 6 (1) lit. f GDPR in the case of existing customer relationships, or Art. 6 (1) lit. a GDPR if you have given us your consent.<\/p>\n<p>If we have received your email address in connection with the sale of goods or services, we may use it to advertise our own similar goods or services (Section 7 (3) UWG \u2013 German Act against Unfair Competition). You may object to this use at any time without incurring any costs other than the transmission costs at the basic rates.<\/p>\n<p>Objection to promotional emails: We hereby object to the use of the contact details published as part of our legal notice obligation for sending advertising and information materials that have not been expressly requested.<\/p>\n<h2>6. Data processing by social networks<\/h2>\n<p>The company operates publicly accessible profiles on social networks. The individual social networks we use, as well as specific information on each of them, can be found below.<\/p>\n<p>Social networks such as Facebook can generally analyse your user behaviour comprehensively as soon as you visit their website. Visiting our social media presences also triggers numerous processing operations relevant to data protection.<\/p>\n<p>If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, however, your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. In this case, the data is collected, for example, by recording your IP address or via cookies stored on your device. Using the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored.<\/p>\n<p>Please note that we cannot trace all processing operations on the social media portals. Depending on the provider, further processing operations may be carried out by the operators of the social media portals. For example, you may be shown interest-based advertising on the social media portal but also on other websites. Details on this can be found in the terms of use and privacy policies of the respective social media portals.<\/p>\n<h3>a. Legal basis<\/h3>\n<p>Our social media presences are intended to ensure the broadest possible presence on the internet. In this context, we process your data in order to be able to contact you in response to your enquiries or posts, and to identify usage preferences (e.g. number of so-called followers, number of views of individual page sections, user statistics by age, geography and language) so that we can adapt and improve the content of our social media presence to suit our target groups as closely as possible. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. The analysis processes initiated by the social networks may be based on different legal bases, which are to be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 (1) lit. a GDPR).<\/p>\n<h3>b. Storage period<\/h3>\n<p>The data collected directly by us via the social media presence is deleted from our systems as soon as the purpose for its storage ceases to apply, you ask us to delete it, you withdraw your consent to its storage, or the purpose for the data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory statutory provisions \u2013 in particular retention periods \u2013 remain unaffected.<\/p>\n<p>We have no influence on the storage period of your data that is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).<\/p>\n<h3>c. Facebook fan page<\/h3>\n<p>We have a profile on Facebook. Meta Platforms Ireland Limited, Dublin, Ireland (\u201cFacebook\u201d) is generally responsible for the collection and further processing of personal user data on the Facebook websites. For detailed information on the processing of personal data by Facebook, please refer to Facebook\u2019s data policy (Privacy Policy).<\/p>\n<p>As the operator of this Facebook page, we can only view your public profile on Facebook. Which information is visible here depends on the settings in your profile. In addition, we process your personal data (such as your name and the content of your messages, enquiries or other posts to us) when you contact us via our Facebook page.<\/p>\n<p>In addition, Facebook provides us with so-called Page Insights data. This data consists of anonymous statistics that help us assess the quality of our Facebook page and our content. These statistics are compiled on the basis of usage data that Facebook collects about your interaction with our Facebook page; we have no access to this usage data. Facebook and we process the personal data for the creation of the Page Insights data as joint controllers within the meaning of Art. 26 GDPR and have concluded a corresponding joint controller agreement for this purpose. The essential information on the corresponding agreement pursuant to Art. 26 GDPR between us and Facebook can be found at <a href=\"https:\/\/www.facebook.com\/legal\/terms\/information_about_page_insights_data\" class=\"kogit-rte-link\" target=\"_blank\" rel=\"noopener\">https:\/\/www.facebook.com\/legal\/terms\/information_about_page_insights_data<\/a> or <a href=\"https:\/\/www.facebook.com\/legal\/terms\/page_controller_addendum\" class=\"kogit-rte-link\" target=\"_blank\" rel=\"noopener\">https:\/\/www.facebook.com\/legal\/terms\/page_controller_addendum<\/a>.<\/p>\n<p>You can generally assert your rights (access, rectification, erasure, restriction of processing, data portability and complaint) both against us and against Facebook.<\/p>\n<p>Please note that, despite the joint controllership with Facebook, we do not have full influence over the data processing operations at Facebook. Our options are largely determined by the corporate policy of the respective provider.<\/p>\n<p>If you have any questions, you can reach us at <a href=\"mailto:datenschutz@kogit.de\" class=\"kogit-rte-link\">datenschutz@kogit.de<\/a>.<\/p>\n<h3>e. XING and LinkedIn<\/h3>\n<p>This website also links to our presences on the social platforms XING and LinkedIn, which serve to initiate and establish professional contacts and for recruiting. Further information on this can be found in the privacy policy of XING: <a href=\"https:\/\/privacy.xing.com\/de\/datenschutzerklaerung\" class=\"kogit-rte-link\" target=\"_blank\" rel=\"noopener\">https:\/\/privacy.xing.com\/de\/datenschutzerklaerung<\/a> and LinkedIn: <a href=\"https:\/\/www.linkedin.com\/legal\/privacy-policy?trk=homepage-basic_footer-privacy-policy\" class=\"kogit-rte-link\" target=\"_blank\" rel=\"noopener\">https:\/\/www.linkedin.com\/legal\/privacy-policy?trk=homepage-basic_footer-privacy-policy<\/a>.<\/p>\n<p>We are jointly responsible with LinkedIn Ireland Unlimited Company, Dublin, Ireland, for the processing of personal data to create statistics about our LinkedIn company page (Page Insights) (Art. 26 GDPR). At <a href=\"https:\/\/legal.linkedin.com\/pages-joint-controller-addendum\" class=\"kogit-rte-link\" target=\"_blank\" rel=\"noopener\">https:\/\/legal.linkedin.com\/pages-joint-controller-addendum<\/a> LinkedIn provides the essential content of the agreement concluded for this purpose. You can assert your data subject rights both against us and against LinkedIn.<\/p>\n<h3>f. Instagram<\/h3>\n<p>We also maintain a profile on Instagram, a service of Meta Platforms Ireland Limited, Dublin, Ireland. We are jointly responsible with Meta for the processing of personal data to create statistics about our Instagram profile (Insights) (Art. 26 GDPR); the explanations in section 6c apply accordingly. Further information can be found in Instagram\u2019s privacy policy: <a href=\"https:\/\/privacycenter.instagram.com\/policy\" class=\"kogit-rte-link\" target=\"_blank\" rel=\"noopener\">https:\/\/privacycenter.instagram.com\/policy<\/a>.<\/p>\n<h2>7. Google Ads with conversion tracking<\/h2>\n<p><strong>Provider:<\/strong> Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (\u201cGoogle\u201d).<\/p>\n<p><strong>Purpose and function:<\/strong> We place advertisements via Google Ads and measure whether users perform certain actions on our website after clicking on an advertisement (conversion tracking).<\/p>\n<p><strong>Data processed:<\/strong> Click identifiers, pages visited, actions performed, IP address, browser and device information, and cookie identifiers.<\/p>\n<p><strong>Classification under the TDDDG:<\/strong> Requires consent (Section 25 (1) TDDDG).<\/p>\n<p><strong>Legal basis and role of the provider:<\/strong> Art. 6 (1) lit. a GDPR. Google also processes the data for its own purposes as an independent controller.<\/p>\n<p><strong>Third-country transfer:<\/strong> A transfer to the USA cannot be ruled out. Google LLC is certified under the EU-U.S. Data Privacy Framework; the transfer takes place on the basis of the European Commission\u2019s adequacy decision of 10 July 2023 (Art. 45 GDPR).<\/p>\n<p><strong>Storage period:<\/strong> You can find the lifetime of the cookies used in the cookie settings. The provider\u2019s privacy policy applies to further processing by the provider.<\/p>\n<p><strong>Withdrawal:<\/strong> You can withdraw your consent at any time with effect for the future via the cookie settings (see section 2e). At <a href=\"https:\/\/adssettings.google.com\" class=\"kogit-rte-link\" target=\"_blank\" rel=\"noopener\">https:\/\/adssettings.google.com<\/a> you can also deactivate personalised advertising.<\/p>\n<p><strong>Further information:<\/strong> <a href=\"https:\/\/business.safety.google\/privacy\/\" class=\"kogit-rte-link\" target=\"_blank\" rel=\"noopener\">https:\/\/business.safety.google\/privacy\/<\/a><\/p>\n<h2>8. Google Remarketing<\/h2>\n<p>On this website, we use Google Remarketing from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (\u201cGoogle\u201d) (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).<\/p>\n<p>Google Remarketing analyses your usage behaviour on our website in order to assign you to specific advertising target groups and to show you tailored advertising when you visit other online services (remarketing or retargeting). Furthermore, the advertising target groups created with Google Remarketing can be linked to Google\u2019s cross-device functions. In this way, interest-based, personalised advertising messages can also be displayed on another device on the basis of previous usage and browsing behaviour.<\/p>\n<p>The legal basis for the processing of personal data described here is your consent (Art. 6 (1) lit. a GDPR).<\/p>\n<p>You can withdraw your consent at any time without giving reasons. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent before its withdrawal.<\/p>\n<p>To do so, you can simply change your cookie settings as explained above in section 2e. As a result, we will no longer transmit any data to Google in this respect.<\/p>\n<p>At <a href=\"https:\/\/support.google.com\/ads\/answer\/2662922?hl=de\" class=\"kogit-rte-link\" target=\"_blank\" rel=\"noopener\">https:\/\/support.google.com\/ads\/answer\/2662922?hl=de<\/a> you can deactivate the settings for personalised advertising.<\/p>\n<p>Further information can be found in Google\u2019s privacy notice, which you can access here: <a href=\"https:\/\/www.google.com\/policies\/privacy\/\" class=\"kogit-rte-link\" target=\"_blank\" rel=\"noopener\">www.google.com\/policies\/privacy\/<\/a><\/p>\n<p>Google processes data, among other places, in the USA. The basis for the data processing is the European Commission\u2019s adequacy decision of 10 July 2023 as well as the EU standard contractual clauses in their respective current version.<\/p>\n<p>Information on Google\u2019s privacy settings can be found at <a href=\"https:\/\/privacy.google.com\/take-control.html?categories_activeEl=sign-in\" class=\"kogit-rte-link\" target=\"_blank\" rel=\"noopener\">https:\/\/privacy.google.com\/take-control.html?categories_activeEl=sign-in<\/a><\/p>\n<h2>9. Meta Pixel, Meta Conversions API and Custom Audiences<\/h2>\n<p><strong>Provider:<\/strong> Meta Platforms Ireland Limited, Dublin, Ireland (\u201cMeta\u201d).<\/p>\n<p><strong>Purpose and function:<\/strong> We measure the success of our advertisements on Facebook and Instagram and show visitors to our website interest-based advertising there. For this purpose, we use the Meta Pixel (a code snippet on our website), the Meta Conversions API (an interface through which selected events, e.g. the submission of a form, are transmitted directly from our server to Meta) and Custom Audiences (target groups that we create on the basis of this data).<\/p>\n<p><strong>Data processed:<\/strong> Pages visited, actions performed, IP address, browser and device information, cookie identifiers and, in the case of the Conversions API, contact details you have provided, where applicable, in hashed (i.e. unrecognisable) form. If you are logged into Facebook or Instagram, Meta can assign the data to your account.<\/p>\n<p><strong>Classification under the TDDDG:<\/strong> Requires consent (Section 25 (1) TDDDG).<\/p>\n<p><strong>Legal basis and role of the provider:<\/strong> Art. 6 (1) lit. a GDPR. We are jointly responsible with Meta for the collection of the data and its transmission to Meta (Art. 26 GDPR); the essential content of the agreement concluded for this purpose can be found at <a href=\"https:\/\/www.facebook.com\/legal\/controller_addendum\" class=\"kogit-rte-link\" target=\"_blank\" rel=\"noopener\">https:\/\/www.facebook.com\/legal\/controller_addendum<\/a>. Meta is solely responsible for any further processing.<\/p>\n<p><strong>Third-country transfer:<\/strong> A transfer to the USA cannot be ruled out. Meta Platforms, Inc. is certified under the EU-U.S. Data Privacy Framework; the transfer takes place on the basis of the European Commission\u2019s adequacy decision of 10 July 2023 (Art. 45 GDPR).<\/p>\n<p><strong>Storage period:<\/strong> You can find the lifetime of the cookies used in the cookie settings. The provider\u2019s privacy policy applies to further processing by the provider.<\/p>\n<p><strong>Withdrawal:<\/strong> You can withdraw your consent at any time with effect for the future via the cookie settings (see section 2e).<\/p>\n<p><strong>Further information:<\/strong> <a href=\"https:\/\/www.facebook.com\/privacy\/policy\/\" class=\"kogit-rte-link\" target=\"_blank\" rel=\"noopener\">https:\/\/www.facebook.com\/privacy\/policy\/<\/a><\/p>\n<h2>10. LinkedIn Insight Tag<\/h2>\n<p><strong>Provider:<\/strong> LinkedIn Ireland Unlimited Company, Dublin, Ireland (\u201cLinkedIn\u201d).<\/p>\n<p><strong>Purpose and function:<\/strong> Measuring the success of our advertising campaigns on LinkedIn (conversion tracking), displaying advertising on LinkedIn to visitors to our website (retargeting) and aggregated statistics on the professional composition of our website visitors. Individual visitors are not disclosed to us in the process.<\/p>\n<p><strong>Data processed:<\/strong> URL, referrer URL, IP address (truncated or hashed), device and browser properties, timestamps and cookie identifiers and, where applicable, an email address you have provided in hashed form.<\/p>\n<p><strong>Classification under the TDDDG:<\/strong> Requires consent (Section 25 (1) TDDDG).<\/p>\n<p><strong>Legal basis and role of the provider:<\/strong> Art. 6 (1) lit. a GDPR. We are jointly responsible with LinkedIn for the collection of the data and its transmission to LinkedIn (Art. 26 GDPR). LinkedIn is solely responsible for any further processing.<\/p>\n<p><strong>Third-country transfer:<\/strong> A transfer to the USA cannot be ruled out. LinkedIn Corporation is certified under the EU-U.S. Data Privacy Framework; the transfer takes place on the basis of the European Commission\u2019s adequacy decision of 10 July 2023 (Art. 45 GDPR).<\/p>\n<p><strong>Storage period:<\/strong> According to LinkedIn, direct identifiers are removed within seven days and the remaining pseudonymised data is deleted within 180 days. You can find the lifetime of the cookies in the cookie settings.<\/p>\n<p><strong>Withdrawal:<\/strong> You can withdraw your consent at any time with effect for the future via the cookie settings (see section 2e).<\/p>\n<p><strong>Further information:<\/strong> <a href=\"https:\/\/www.linkedin.com\/legal\/privacy-policy\" class=\"kogit-rte-link\" target=\"_blank\" rel=\"noopener\">https:\/\/www.linkedin.com\/legal\/privacy-policy<\/a><\/p>\n<h2>11. Recipients and categories of recipients<\/h2>\n<p>Within our company, those departments that need your data to fulfil contractual and statutory obligations are given access to it. Service providers and vicarious agents engaged by us may also receive data for these purposes, provided that they in particular maintain confidentiality and integrity. These are companies in the categories of IT services, logistics, printing services, telecommunications, debt collection, consulting, and sales and marketing.<\/p>\n<p>With regard to the disclosure of data to recipients outside our company, it should first be noted that we only disclose personal data that is necessary, in compliance with the applicable data protection regulations. As a matter of principle, we may only disclose information about you if required by law, if you have given your consent or if we are authorised to provide information. Under these conditions, recipients of personal data may be:<\/p>\n<ul class=\"kogit-rte-list kogit-rte-list--bullets\">\n<li>public bodies and institutions (e.g. tax authorities, law enforcement authorities, family courts, land registries) where there is a statutory or official obligation,<\/li>\n<li>credit and financial services institutions or comparable organisations to which we transmit personal data in the course of conducting the business relationship (e.g. banks, credit agencies),<\/li>\n<li>creditors or insolvency administrators who make enquiries in the context of enforcement proceedings,<\/li>\n<li>auditors,<\/li>\n<li>service providers we engage within the framework of data processing relationships,<\/li>\n<li>commercial agents of the company.<\/li>\n<\/ul>\n<p>Please also note the recipients specified in the other sections of this privacy notice.<\/p>\n<h2>12. Transfer to third countries<\/h2>\n<p>Data is transferred to bodies in countries outside the European Union (so-called third countries) insofar as<\/p>\n<ul class=\"kogit-rte-list kogit-rte-list--bullets\">\n<li>it is necessary to execute your orders (e.g. delivery orders),<\/li>\n<li>it is required by law (e.g. reporting obligations under tax law) or<\/li>\n<li>you have given us your consent.<\/li>\n<\/ul>\n<p>Furthermore, a transfer to bodies in third countries is envisaged in the following cases:<\/p>\n<ul class=\"kogit-rte-list kogit-rte-list--bullets\">\n<li>to maintain and ensure the IT operations and IT security of the company, and<\/li>\n<li>to combat money laundering, terrorist financing and other criminal acts.<\/li>\n<\/ul>\n<p>On 10 July 2023, the European Commission adopted an adequacy decision for the USA (EU-U.S. Data Privacy Framework). We base transfers to recipients in the USA who are certified under this framework on this decision (Art. 45 GDPR). Where a recipient is not certified or is located in another third country without an adequacy decision, we base the transfer on appropriate safeguards, in particular EU standard contractual clauses (Art. 46 (2) lit. c GDPR). You can request a copy of these safeguards using the contact details provided in section 1.<\/p>\n<p>Please also note the transfers described in the other sections of this privacy notice.<\/p>\n<h2>13. Storage period<\/h2>\n<p>We process and store your personal data for as long as is necessary to fulfil our contractual obligations and to exercise our rights.<\/p>\n<p>If the data is no longer required to fulfil contractual or statutory obligations, it is regularly deleted, unless its \u2013 temporary \u2013 further processing is necessary for the following purposes:<\/p>\n<ul class=\"kogit-rte-list kogit-rte-list--bullets\">\n<li>Fulfilment of retention obligations under commercial and tax law arising from the German Commercial Code (HGB), the German Fiscal Code (AO) and the German Money Laundering Act (GwG). The periods for retention and documentation specified therein generally range from two to ten years.<\/li>\n<li>Preservation of evidence within the framework of the statutory limitation provisions. Under Sections 195 et seq. of the German Civil Code (BGB), these limitation periods can be up to 30 years, with the regular limitation period being 3 years.<\/li>\n<\/ul>\n<h2>14. Data security<\/h2>\n<p>Our employees and the service providers we engage are obliged to maintain confidentiality and to comply with the provisions of the applicable data protection laws. The company takes appropriate technical and organisational security measures to protect your personal data against loss, alteration, destruction and access by unauthorised persons or unauthorised disclosure. Our security measures are continuously improved in line with technological developments.<\/p>\n<h2>15. Data subject rights<\/h2>\n<p>Every data subject has the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR and the right to data portability under Art. 20 GDPR.<\/p>\n<p>The restrictions under Sections 34 and 35 BDSG apply to the right of access and the right to erasure. In addition, there is a right to lodge a complaint with the competent data protection supervisory authority of the federal state of Hesse pursuant to Art. 77 GDPR in conjunction with Section 19 BDSG. The contact details are<\/p>\n<p>The Hessian Commissioner for Data Protection and Freedom of Information<\/p>\n<p>PO Box 3163<\/p>\n<p>65021 Wiesbaden<\/p>\n<p>Phone: +49 611 1408 \u2013 121<\/p>\n<p>You can withdraw any consent you have given to the processing of personal data at any time by notifying us. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent before its withdrawal.<\/p>\n<p>You also have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out in particular on the basis of Art. 6 (1) lit. f GDPR. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms. This includes, in particular, where the processing is necessary for the establishment, exercise or defence of legal claims.<\/p>\n<p>Furthermore, pursuant to Art. 22 GDPR, you have the right not to be subject to fully automated decision-making. As a matter of principle, we do not use fully automated decision-making to establish, conduct and terminate the business relationship. Should we use these procedures in individual cases (e.g. to improve our products and services), we will inform you separately about this and about your rights in this regard, insofar as this is required by law.<\/p>\n<p>Further information and explanations regarding the rights mentioned above can be found on the European Commission\u2019s \u201cRights for citizens\u201d website.<\/p>\n<h2>16. Obligation to provide data<\/h2>\n<p>Within the scope of our business relationship, you must provide the personal contract data that is necessary for the commencement, performance and termination of a business relationship and for the fulfilment of the associated contractual obligations, or which we are legally obliged to collect. Without this data, we will generally not be able to conclude, perform or terminate a contract with you.<\/p>\n<p>Accessing our online services requires the processing of certain technical data, in particular the IP address and the connection data needed to deliver the requested content. Without this processing, the website cannot be provided technically. By contrast, providing personal data for optional analytics and marketing services is voluntary. If you do not consent to these services, you can generally continue to use the website; however, individual additional functions that depend on consent may then not be available.<\/p>\n<h2>17. Profiling<\/h2>\n<p>We do not process your personal data automatically in a way that produces legal effects concerning you or similarly significantly affects you. With your consent, however, pseudonymous usage profiles are created within the scope of the analytics and marketing services described in section 2 and in sections 8 to 11, in order to evaluate our online services and to show you interest-based advertising.<\/p>\n<h2>18. Currency of and changes to this privacy policy<\/h2>\n<p>This privacy policy is currently valid and was last updated in October 2026.<\/p><\/div>\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t<\/div>\n<\/section>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":7,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"rank_math_title":"","rank_math_description":"","_kogit_meta_title":"","_kogit_meta_description":"","footnotes":""},"class_list":["post-2203","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.kogit.de\/en\/wp-json\/wp\/v2\/pages\/2203","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kogit.de\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.kogit.de\/en\/wp-json\/wp\/v2\/types\/page"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kogit.de\/en\/wp-json\/wp\/v2\/comments?post=2203"}],"version-history":[{"count":1,"href":"https:\/\/www.kogit.de\/en\/wp-json\/wp\/v2\/pages\/2203\/revisions"}],"predecessor-version":[{"id":2204,"href":"https:\/\/www.kogit.de\/en\/wp-json\/wp\/v2\/pages\/2203\/revisions\/2204"}],"wp:attachment":[{"href":"https:\/\/www.kogit.de\/en\/wp-json\/wp\/v2\/media?parent=2203"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}