Privacy policy
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please refer to our privacy policy listed below this text.
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations and this privacy policy.
When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and how we use it. It also explains how and for what purpose this is done.
For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the website operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser address line changes from “http://” to “https://” and by the lock symbol in your browser’s address bar.
When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Please note that data transmission over the internet (e.g., when communicating via email) can have security vulnerabilities. A complete protection of data from access by third parties is not possible.
1. Responsible Entity
The responsible party for data processing on this website is:
Narravero GmbH
Am Mittelhafen 10
48155 Münster
Phone: +49 (0) 251 – 928 737 00
Email: office@narravero.com
The Data Protection Officer is:
Mr. Stephan Hartinger
Coseco GmbH
Phone: +49 (0) 8232 80988 70
Email: datenschutz@coseco.de
2. Hosting
We host the contents of our website with the following provider:
WIX
The provider is Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel (hereinafter “WIX”).
WIX is a tool for creating and hosting websites. When you visit our website, WIX analyzes user behavior, visitor sources, the region of website visitors, and visitor numbers. WIX stores cookies on your browser that are necessary for displaying the website and ensuring security (necessary cookies).
The data collected by WIX may be stored on servers worldwide. The servers of WIX are located, among other places, in the USA.
For details, refer to WIX’s privacy policy: https://de.wix.com/about/privacy.
Data transfer to the USA and other third countries is based on the standard contractual clauses of the EU Commission or comparable guarantees pursuant to Art. 46 GDPR, according to WIX. For details, see here: https://de.wix.com/about/privacy-dpa-users.
The use of WIX is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in ensuring reliable representation of our website. If consent has been requested, the processing is solely based on Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG if the consent includes storing cookies or accessing information on the user's device (e.g., device fingerprinting) according to the TTDSG. Consent can be withdrawn at any time.
The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA to ensure compliance with European data protection standards in data processing in the USA. Any company certified under the DPF commits to adhering to these standards. Further information can be found at: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnbGAAS&status=Active.
We have concluded a Data Processing Agreement (DPA) to use the service mentioned above. This legally required contract ensures that the service provider processes personal data of our website visitors only according to our instructions and in compliance with the GDPR.
The page provider automatically collects and stores information in so-called server log files that your browser transmits to us automatically. These include:
- Browser type and version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of server request
- IP address
3.1 Contact Form
If you contact us via the contact form, the information you provide in the form, including the contact details you provide there, will be stored for processing the request and in case of follow-up questions. We do not share this data without your consent.
The processing of this data is based on Art. 6 para. 1 lit. b GDPR if your inquiry is related to fulfilling a contract or necessary for pre-contractual measures. In other cases, the processing is based on our legitimate interest in effectively processing the inquiries sent to us (Art. 6 para. 1 lit. f GDPR) or your consent (Art. 6 para. 1 lit. a GDPR) if requested. The consent can be withdrawn at any time.
The data you enter in the contact form will remain with us until you request deletion, withdraw your consent to storage, or the purpose of data storage no longer applies (e.g., after your request has been fully processed). Mandatory legal provisions, particularly retention periods, remain unaffected.
3.2 Inquiry via Email, Phone, or Fax
If you contact us via email, phone, or fax, your inquiry, including any personal data (name, inquiry), will be stored and processed for the purpose of handling your request. We do not share this data without your consent.
The processing of this data is based on Art. 6 para. 1 lit. b GDPR if your inquiry is related to fulfilling a contract or necessary for pre-contractual measures. In other cases, the processing is based on our legitimate interest in effectively processing the inquiries sent to us (Art. 6 para. 1 lit. f GDPR) or your consent (Art. 6 para. 1 lit. a GDPR) if requested. The consent can be withdrawn at any time.
The data you send us via contact inquiries will remain with us until you request deletion, withdraw your consent to storage, or the purpose of data storage no longer applies (e.g., after processing your request). Mandatory legal provisions, especially statutory retention periods, remain unaffected.
3.3 Online Appointment Booking – Microsoft Bookings
Narravero GmbH collects and processes personal data for online booking of meetings via the "Microsoft Bookings" service by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. The connection to the service is only established when you click the “DEMO-book” button on our website.
For more information on how user data is handled, see Microsoft’s privacy statement: https://www.microsoft.com/de-de/privacy/privacystatement.
We have concluded a Data Processing Agreement with Microsoft to use the service. This legally required contract ensures that Microsoft processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.
Please note that you are not required to use Microsoft Bookings for scheduling an appointment. If you do not wish to use the service, please use another contact method for scheduling an appointment.
The legal basis for data transmission, storage, and processing is your consent (Art. 6 para. 1 lit. a) GDPR.
The data will be deleted once it is no longer needed to achieve the purpose of its collection.
You can withdraw your consent to data processing or object to the use of your data at any time. In this case, intended communication with the user will no longer be possible, or already initiated communication cannot continue.
3.4 Newsletter
If you wish to receive the newsletter offered on the website, we need an email address from you as well as information that allows us to verify that you are the owner of the provided email address and that you consent to receiving the newsletter. No additional data is collected unless voluntarily provided. We will use this data solely for sending the requested information and will not share it with third parties.
The processing of data entered in the newsletter registration form is solely based on your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw your consent to the storage of the data, email address, and its use for sending the newsletter at any time, for example, via the “unsubscribe” link in the newsletter. The lawfulness of the processing that has already occurred remains unaffected by the withdrawal.
The data stored for the purpose of receiving the newsletter will be stored until you unsubscribe from the newsletter with us or the newsletter service provider and deleted after you unsubscribe or the purpose no longer applies. We reserve the right to delete or block email addresses from our newsletter distribution list at our discretion within the framework of our legitimate interest under Art. 6 para. 1 lit. f GDPR.
3.5 eCommerce and Payment Providers
We collect, process, and use personal customer and contract data to establish, design, and modify our contractual relationships. Personal data related to the use of this website (usage data) is collected, processed, and used only to the extent necessary to allow the user to utilize the service or for billing purposes. The legal basis for this is Art. 6 para. 1 lit. b GDPR.
Customer data collected will be deleted after the completion of the order or termination of the business relationship and after the expiration of any applicable statutory retention periods. Statutory retention periods remain unaffected.
3.6 Audio and Video Conferences
For communication with our clients, we use online conference tools. The specific tools we use are listed below. When you communicate with us via video or audio conference via the internet, your personal data is collected and processed by us and the provider of the respective conference tool.
Conference tools collect all data you provide to use the tools (email address and/or your phone number). The tools also process the duration of the conference, the start and end time of participation, the number of participants, and other “contextual” information related to the communication (metadata).
Additionally, the tool provider processes all technical data required for online communication. This includes IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speaker, and connection type.
If content is exchanged, uploaded, or otherwise provided within the tool, it is also stored on the tool provider's servers. This includes cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards, and other information shared during the service use.
Please note that we do not have full control over the data processing activities of the tools used. Our influence is mainly governed by the policies of the respective service providers. For further information on the data processing by the conference tools, please refer to the privacy policies of the respective tools listed below this text.
The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6 para. 1 lit. b GDPR). Additionally, using the tools simplifies and accelerates communication with us or our company (legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR). If consent is requested, the use of the tools is based on this consent; the consent can be withdrawn at any time with future effect.
The data collected directly by us via the video and conference tools will be deleted from our systems once you request deletion, withdraw your consent to storage, or the purpose for data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory legal retention periods remain unaffected.
We have no influence over the retention period of your data stored by the conference tool operators for their own purposes. For details, please refer to the privacy policies of the respective tool providers.
We use the following conference tools:
3.6.1 Microsoft Teams
We use Microsoft Teams. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Details regarding data processing can be found in Microsoft Teams’ privacy policy: https://privacy.microsoft.com/de-de/privacystatement.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that ensures compliance with European data protection standards in data processing in the USA. Any company certified under the DPF commits to adhering to these standards. Further information can be found at: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000KzNaAAK&status=Active.
3.7 Registration / Trial Access (Double Opt-In)
If you register for the use of the free version via our registration form, we process the data you provide (in particular company name, first name, last name, and email address) for the purpose of completing your registration, providing access, and enabling subsequent contract-related communication (e.g. follow-up questions regarding your registration or sending a specific offer for the requested software).
To verify your email address, we use a double opt-in procedure. In this context, we also process verification and log data (e.g. IP address, date/time of registration and confirmation, browser/device information) in order to document the registration process and prevent misuse.
The processing is carried out on the basis of Art. 6(1)(b) GDPR (pre-contractual measures / contract). To the extent that log data is processed for IT security and the prevention of misuse, such processing is based on Art. 6(1)(f) GDPR (legitimate interest in the secure provision of services and protection against misuse).
Your registration data is also processed in our CRM system HubSpot (see section “HubSpot”) in order to centrally manage inquiries and registrations and to enable contract-related communication. Your email address will not be used for advertising purposes (e.g. newsletters) in this context unless you have given your separate consent.
The data will be deleted as soon as it is no longer required for the aforementioned purposes, unless statutory retention obligations apply.
3.8 HubSpot
We use the CRM system HubSpot on this website. The provider is HubSpot Inc., 25 First Street, Cambridge, MA 02141, USA (hereinafter “HubSpot”).
With the help of HubSpot, we manage and maintain customer relationships as well as prospect data. The system enables us to centrally record, assign, and evaluate inquiries, emails, phone calls, and interactions via social networks. This allows us to optimize communication processes with existing and potential customers and to centrally manage registrations and contract-related communication (e.g. follow-up questions regarding registrations or sending specific offers).
HubSpot also allows us to document registration and contact processes. If users register, the data provided in the registration form (e.g. name, email address, company name) is stored as a HubSpot contact after synchronization and—where technically предусмотрено—linked with associated activities (e.g. registration/confirmation events).
The use of HubSpot is based on Art. 6(1)(b) GDPR (pre-contractual measures / contract), insofar as the processing serves the management of registrations, inquiries, and contract-related communication. Where HubSpot functions are used only on the basis of consent (e.g. cookies/tracking technologies in accordance with § 25(1) TDDDG), processing is based on Art. 6(1)(a) GDPR; consent can be withdrawn at any time.
Further information on data protection at HubSpot can be found at:
https://legal.hubspot.com/privacy-policy
Data transfers to the USA are based on the Standard Contractual Clauses (SCCs) of the European Commission. Further details can be found at:
https://www.hubspot.com/data-privacy/privacy-shield
HubSpot is also certified under the EU-US Data Privacy Framework (DPF). This agreement between the European Union and the United States ensures that certified US companies comply with an adequate level of data protection.
We have concluded a Data Processing Agreement (DPA) with HubSpot in accordance with Art. 28 GDPR. This ensures that HubSpot processes personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
4. Cookies
Our websites use so-called “cookies.” Cookies are small data packets and do not harm your device. They are either temporarily stored for the duration of a session (session cookies) or permanently stored (permanent cookies). Session cookies are automatically deleted after the session ends. Permanent cookies remain stored on your device until you delete them or they are automatically deleted by your web browser.
Cookies may be first-party cookies (set by us) or third-party cookies (set by external companies). Third-party cookies allow the integration of certain services within websites (e.g., cookies for processing payments).
Cookies serve various functions. Many cookies are technically necessary as certain website features would not work without them (e.g., shopping cart functionality or video display). Other cookies may be used to evaluate user behavior or for advertising purposes.
Cookies that are necessary for conducting the electronic communication process, providing specific functions you request (e.g., shopping cart functionality), or optimizing the website (e.g., cookies to measure web audience) are stored based on Art. 6 para. 1 lit. f GDPR unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimized provision of services. If consent for storing cookies and similar recognition technologies has been requested, processing occurs solely based on this consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG); consent can be withdrawn at any time.
You can set your browser to notify you when cookies are being set and allow cookies only in specific cases, exclude the acceptance of cookies for certain cases or generally, and activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.
The cookies and services used on this website can be found in this privacy policy.
5. Analysis Tools and Advertising
5.1 Google Analytics
This website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior of website visitors. The website operator receives various usage data, such as page views, duration of stay, operating systems used, and the origin of users. These data are assigned to the respective end device. There is no assignment to a user ID.
Furthermore, with Google Analytics, we can track mouse movements, scrolling, and clicks. Google Analytics uses various modeling approaches to complement the captured data and applies machine learning technologies to data analysis.
Google Analytics uses technologies that enable the recognition of users for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). The information collected by Google about the use of this website is usually transmitted to a Google server in the USA and stored there.
The use of this service is based on your consent according to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. The consent can be withdrawn at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. For details, see here: https://privacy.google.com/businesses/controllerterms/mccs/.
The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA to ensure compliance with European data protection standards in data processing in the USA. Any company certified under the DPF commits to adhering to these standards. Further information can be found at: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active.
Google Analytics IP anonymization is enabled. This means your IP address is shortened by Google within EU member states or other signatories to the European Economic Area agreement before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of the website operator to evaluate your use of the website, compile reports on website activities, and provide other services related to website and internet usage.
You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available here: https://tools.google.com/dlpage/gaoptout?hl=de.
For more information on how user data is handled in Google Analytics, see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.
We have concluded a data processing agreement with Google and fully comply with the strict requirements of the German data protection authorities when using Google Analytics.
5.2 Google Ads
The website operator uses Google Ads. Google Ads is an online advertising program by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads allows us to display advertisements in the Google search engine or on third-party websites when users enter certain search terms (keyword targeting). Additionally, targeted ads can be shown based on user data available at Google (e.g., location data and interests) (audience targeting). As the website operator, we can quantitatively evaluate these data by analyzing which search terms triggered our ads and how many ads led to clicks.
The use of this service is based on your consent according to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. The consent can be withdrawn at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. For details, see here: https://policies.google.com/privacy/frameworks and https://business.safety.google/controllerterms/.
The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA to ensure compliance with European data protection standards in data processing in the USA. Any company certified under the DPF commits to adhering to these standards. Further information can be found at: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active.
5.3 Google Ads Remarketing
This website uses Google Ads Remarketing, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
Google Ads Remarketing allows us to categorize visitors who have interacted with our website into specific target groups, so that interest-based advertising can later be shown to them within the Google advertising network (remarketing or retargeting).
In addition, the target groups created with Google Ads Remarketing can be linked across devices. This means that personalized, interest-based ads, based on your previous browsing behavior on one device (e.g., smartphone), can also be displayed on other devices you use (e.g., tablet or PC).
If you have a Google account, you can opt out of personalized advertising here:
https://adssettings.google.com/anonymous?hl=de
The use of this service is based on your consent in accordance with Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent can be revoked at any time with future effect.
For more information about Google Ads Remarketing and Google’s data protection policies, please refer to:
https://policies.google.com/technologies/ads?hl=en
Google is also certified under the EU-US Data Privacy Framework (DPF). This framework ensures that US-based companies certified under it comply with European data protection standards when processing data.
More information about Google’s DPF certification is available here:
https://www.dataprivacyframework.gov/participant/5780
Target Group Formation via Customer Matching
For some campaigns, we also use the Customer Match feature in Google Ads Remarketing. This allows us to upload certain customer data (e.g., email addresses) from our customer lists to Google. If the individuals are Google users and logged into their accounts, Google can match the data and display relevant advertising messages within the Google network (e.g., YouTube, Gmail, or Search).
5.4 Google Conversion-Tracking
This website uses Google Conversion Tracking, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
Google Conversion Tracking allows us to determine whether visitors complete specific actions on our website. For example, we can track how often certain buttons are clicked, or which products are viewed or purchased most frequently. These insights help us generate conversion statistics and measure the effectiveness of our advertising campaigns.
We only receive aggregated data and cannot personally identify individual users. Google itself uses cookies or similar recognition technologies to perform this analysis.
The use of this service is based on your consent in accordance with Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may withdraw your consent at any time with effect for the future.
For more information about Google Conversion Tracking, please refer to Google’s data protection policy:
https://policies.google.com/privacy?hl=en
Google is also certified under the EU-US Data Privacy Framework (DPF). This agreement ensures that US-based companies certified under it comply with European data protection standards when processing data.
More information about Google’s DPF certification is available here:
https://www.dataprivacyframework.gov/participant/5780
5.5 LinkedIn Insight Tag
This website uses the LinkedIn Insight Tag, provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”).
Data Processing by LinkedIn Insight Tag
The LinkedIn Insight Tag allows us to collect statistical information about visitors to our website and to measure the effectiveness of our advertising campaigns on LinkedIn.
If a website visitor has a LinkedIn account, we may analyze aggregated professional information (e.g., career level, industry, company size, location, and job title) to better tailor our content and marketing efforts to relevant audiences.
The Insight Tag also enables us to track whether visitors complete specific actions (such as purchases or form submissions) on our website. Conversion measurement can be carried out across devices (e.g., from desktop to mobile).
Additionally, the tag includes a retargeting function, allowing targeted ads to be shown to visitors on other websites or platforms. According to LinkedIn, no direct identification of individuals occurs through this process.
LinkedIn also collects technical data such as log files (e.g., URL, referrer URL, IP address, device and browser characteristics, and time of access). IP addresses are either shortened or, when used for cross-device tracking, hashed (pseudonymized). Direct identifiers of LinkedIn members are deleted after seven days, and remaining pseudonymized data is deleted within 180 days.
The data collected cannot be used by us to identify individual visitors. LinkedIn stores the data on servers in the USA and may use it for its own advertising purposes. For more details, please refer to LinkedIn’s privacy policy:
https://www.linkedin.com/legal/privacy-policy#choices-oblig
Legal Basis
If your consent has been obtained, the use of this service is based on Art. 6(1)(a) GDPR and § 25 TDDDG. You may revoke your consent at any time.
If no consent has been obtained, processing is based on Art. 6(1)(f) GDPR, as we have a legitimate interest in effective advertising, including the use of social media platforms.
Data transfers to the United States are conducted under the Standard Contractual Clauses (SCCs) of the European Commission. Details can be found here:
https://www.linkedin.com/legal/l/dpa
https://www.linkedin.com/legal/l/eu-sccs
LinkedIn is also certified under the EU-US Data Privacy Framework (DPF). This framework ensures that certified US companies comply with European data protection standards when processing personal data.
More information about LinkedIn’s DPF certification can be found here:
https://www.dataprivacyframework.gov/participant/5448
Objection to Use
You can object to the analysis of your website behavior and the display of targeted advertising by LinkedIn here:
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
LinkedIn members can also manage the use of their personal data for advertising purposes in their account settings. To prevent LinkedIn from linking data collected on our website to your LinkedIn account, please log out of your LinkedIn account before visiting our site.
Data Processing (DPA)
We have entered into a Data Processing Agreement (DPA) with LinkedIn. This legally required contract ensures that LinkedIn processes personal data of our website visitors only according to our instructions and in compliance with the GDPR.
5.6 Leadinfo
We use the Lead-generation service from Leadinfo B.V., Rotterdam, Netherlands. This service detects company visits to our website based on IP addresses and shows us publicly available information, such as company names or addresses. Leadinfo also uses two first-party cookies to analyze user behavior on our website and processes domains from form entries (e.g., “leadinfo.com”) to correlate IP addresses with companies and improve the service. Further information is available at www.leadinfo.com. On this page: www.leadinfo.com/en/opt-out, you can opt-out. If you opt out, Leadinfo will no longer capture your data.
5.7 Pipedrive
We use Pipedrive as our CRM tool for processing and storing contact data. Pipedrive is a service of Pipedrive OÜ, Paldiski mnt 80, Tallinn, 10617, Estonia. Pipedrive is a subsidiary of Pipedrive US and serves the efficient management and processing of customer inquiries as well as optimizing our existing and new customer business.
The integration of Pipedrive is used to process and manage inquiries received through our contact form or via email. The data transmitted when using the contact form is forwarded to Pipedrive and stored on their servers. This includes personal data such as name, email address, and the content of the inquiry.
Processing of this data occurs based on Art. 6 para. 1 lit. b GDPR if the inquiry relates to fulfilling a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in efficiently processing the inquiries (Art. 6 para. 1 lit. f GDPR).
To ensure an appropriate level of data protection, we have concluded a Data Processing Agreement with Pipedrive in accordance with Art. 28 GDPR. This ensures that Pipedrive processes personal data only according to our instructions and in compliance with the EU data protection requirements. Pipedrive also uses standard contractual clauses according to Art. 46 GDPR for data transfer to ensure an adequate level of data protection.
For more information on Pipedrive’s data processing, please refer to Pipedrive’s privacy policy: https://www.pipedrive.com/en/privacy.
Your data will be deleted from our CRM tool Pipedrive once the storage purpose no longer applies, e.g., after the inquiry has been fully processed, unless statutory retention periods apply. You can request information on the data stored about you or request its deletion at any time.
5.8 Google reCAPTCHA
We use the “reCAPTCHA” service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, on our website. For users in the European Economic Area, the responsible entity is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
reCAPTCHA is used to determine whether data entered on our website (e.g. in forms) is provided by a human or by automated programs. This helps us protect our forms against misuse and spam.
For this purpose, reCAPTCHA analyzes various information (e.g. IP address, time spent on the website, mouse movements, and other technical data used by Google for risk assessment). The analysis starts automatically as soon as you access a page with reCAPTCHA enabled.
The data collected in this process is transmitted to Google and processed there. A transfer of personal data to the USA cannot be excluded. Google is certified under the EU-US Data Privacy Framework (DPF).
The use of reCAPTCHA is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in protecting our website against abusive automated data scraping and spam.
Further information about Google reCAPTCHA and Google’s data processing can be found at:
https://policies.google.com/privacy
https://policies.google.com/terms
6. Deletion, Blocking, and Duration of Storage of Personal Data
We process and store your personal data only for as long as necessary to achieve the respective storage purpose or as required by the various retention periods prescribed by law.
Once the storage purpose no longer applies or once the retention period prescribed by law has expired, personal data will be routinely blocked or deleted in accordance with legal regulations for further processing.
7. Data Protection Rights of the Affected Person
If you have any questions regarding your personal data, you can contact us in writing at any time.
You have the following rights under the GDPR:
• The right to access (Article 15 GDPR)
• The right to rectification (Article 16 GDPR)
• The right to erasure (Article 17 GDPR)
• The right to restriction of processing (Article 18 GDPR)
• The right to data portability (Article 20 GDPR)
• The right to object (Article 21 GDPR)
• The right to lodge a complaint with the supervisory authority (Article 77 GDPR in conjunction with § 19 BDSG)
• The right to withdraw consent for data processing (Article 7(3) GDPR)
8. Existence of Automated Decision-Making
As a responsible company, we do not engage in automated decision-making or profiling in our business relationships.
9. Additional Information
In addition to these web-specific data protection notices, you have the opportunity to view our transparent information.