Privacy

1. data processing on our website

We are glad that you visit our website. We respect your privacy. Data protection and data security when using our website are very important to us. With this privacy policy, we would like to inform you about the extent to which data is collected when you use our website and the purposes for which we use this data. We would also like to inform you about your rights in this regard.

2. definition

The data protection declaration of e.pilot GmbH is based on the terms used by the European Directive and Ordinance Maker when issuing the Data Protection Regulation (DS-GVO). Our privacy policy should be easy to read and understand for the public as well as for our customers and business partners. To ensure this, we would like to explain the terminology used in advance.

We use the following terms, among others, in this Privacy Policy:

a. personal data

Personal data is any information relating to an identified or identifiable natural person (hereinafter “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

b. Person concerned

Data subject is any identified or identifiable natural person whose personal data are processed by the controller.

c. Processing

Processing means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

d. Restriction of processing

Restriction of processing is the marking of stored personal data with the aim of limiting their future processing.

e. Profiling

Profiling is any type of automated processing of personal data that consists of using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to that natural person’s job performance, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location.

f. Pseudonymization

Pseudonymization is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separate and is subject to technical and organizational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.

g. Person responsible or in charge of the processing

Controller or data controller is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for under Union or Member State law.

h. Processor

Processor means a natural or legal person, public authority, agency or other body that processes personal data on behalf of the Controller.

i.  Receiver

Recipient means a natural or legal person, public authority, agency or other body to whom Personal Data is disclosed, whether or not a third party. However, authorities that may receive personal data in the context of a specific investigation mandate under Union or Member State law are not considered recipients.

j. Third party

Third party means a natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and the persons authorized to process the personal data under the direct responsibility of the controller or the processor.

k. Consent

Consent shall mean any indication of intention given voluntarily by the data subject for the specific case in an informed and unambiguous manner in the form of a statement or any other unambiguous affirmative act by which the data subject indicates that he or she consents to the processing of personal data relating to him or her.

3. name and address of the controller

The responsible party within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is:

e.pilot GmbH
At Mediapark 8a
50670 Cologne
Germany
Tel.: +49 221 588 329 00
E-mail: datenschutz@epilot.cloud
Website: epilot.cloud

4. our data protection officer

Certitut – Society for Compliance and Data Protection mbH
Patrick Rayermann
Marie Curie St. 1
40625 Dusseldorf
Germany
Phone 0211 97630990
p.rayermann@certitut.de

5. collection of general data and information

The website of the e.pilot GmbH collects a series of general data and information with each call-up of the website by a data subject or automated system. This general data and information is stored in the server’s log files. The following data may be collected: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system accesses our website (so-called referrer), (4) the sub-websites that are accessed via an accessing system on our website, (5) the date and time of access to the website, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system, and (8) other similar data and information that serve to avert danger in the event of attacks on our information technology systems.

When using these general data and information, the e.pilot GmbH does not draw any conclusions about the data subject. This information is rather required in order to (1) correctly deliver the contents of our website, (2) optimize the contents of our website as well as the advertising for these, (3) ensure the permanent functionality of our information technology systems and the technology of our website as well as (4) to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack. Therefore, the e.pilot GmbH analyzes anonymously collected data and information on one hand for statistical purposes and on the other hand for the purpose of increasing the data protection and data security of our enterprise, so as to ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from any personal data provided by a data subject.

6. hosting of the website

The hosting services underlying this site are provided by Mittwald CM Service GmbH & Co KG (Königsberger Straße 4-6, 32339 Espelkamp, Germany).  Mittwald CM Service GmbH & Co KG offers Software as a Service (SaaS) services within the framework of cloud hosting.

Mittwald CM Service GmbH & Co KG automatically collects and stores server log files with information that your browser sends to us. These are:

The Access logs the web server logs which page requests have taken place and when. They include the following data:
IP, directory protection user, date, time, accessed pages, logs, status code, amount of data, referer, user agent, accessed hostname.

The IP addresses are stored anonymously . This is done by removing the last three digits, i.e. 127.0.0.1 becomes 127.0.0.*. IPv6 addresses are also anonymized. The anonymized IP addresses are retained for 60 days. Information about the directory protection user used is anonymized after one day.

Error logs, which record erroneous page views, are deleted after seven days. In addition to the error messages, these contain the accessing IP address and, depending on the error, the accessed website.

Accesses via FTP are logged with anonymized information on user name and IP address and stored for 60 days.

The mail logs for sending e-mails from the web environmentare anonymized after one day and then retained for 60 days. Anonymization removes all data about the sender / recipient, etc. Only the data on the time of sending and the information on how the e-mail was processed are retained (queue ID or not sent).

Mail logs for sending via our mail servers are deleted after four weeks. The longer retention time is necessary for ensuring the functionality of mail services and spam prevention.

An individual determination of the storage period is not possible.

Mittwald CM Service GmbH & Co KG cannot assign this data to specific persons. This data is not merged with other data sources.

We have also concluded a contract for data processing agreement (DPA). This contract regulates the scope, type and purpose of Mittwald CM Service GmbH & Co. KG’s access to data. The access possibilities are limited only to necessary accesses, which are required for the fulfillment of the hosting services.

7. newsletter

a. Nature and purpose of the processing

Your data will be used exclusively to send you the subscribed newsletter by e-mail. Your name is provided in order to be able to address you personally in the newsletter and, if necessary, to identify you if you wish to exercise your rights as a data subject. To receive the newsletter, it is sufficient to provide your e-mail address.

When registering to receive our newsletter, the data you provide will be used exclusively for this purpose. Subscribers may also be informed by e-mail about circumstances relevant to the service or registration (for example, changes to the newsletter offer or technical circumstances). For an effective registration we need a valid e-mail address. In order to verify that a registration is actually made by the owner of an e-mail address, we use the “double-opt-in” procedure. For this purpose, we log the order of the newsletter, the sending of a confirmation email and the receipt of the response requested herewith. In order to optimize our newsletter, you consent to our evaluation, with which we measure how often the newsletter is opened. No other data is collected. The data will be used exclusively for the newsletter dispatch and will not be passed on to third parties.

b. Legal basis of the processing

On the basis of your expressly given consent (Art. 6 para. 1 lit. a DSGVO, Art. 7 DSGVO in conjunction with. § 107 para. 2 TKG), we will regularly send you our newsletter or comparable information by e-mail to your specified e-mail address.

c. Data categories

• E-mail address
• First and last name

d. Receiver

• IT and marketing/sales department employees
• Service provider for sending the newsletter (Hubspot)

e. Storage periods

In this context, the data will only be processed as long as the corresponding consent has been obtained. After that they will be deleted.

f. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. Without existing consent, we can unfortunately not send you our newsletter.

g. Third country transfer

Please note: If you contact us via contact forms, personal data may be passed on to service providers
in third countries are transmitted. These third countries do not have an adequate level of data protection. If the data is transferred to the U.S., there is a risk that your data may be processed by U.S. authorities for control and monitoring purposes, without you possibly having any legal remedies. The security of the transmission is regularly secured via so-called standard contractual clauses, which ensure,
that the processing of personal data is subject to a level of security that complies with the GDPR. If the standard contractual clauses are not sufficient to establish an adequate level of security, your acknowledgement of the privacy statement in the context of the contact forms shall be deemed to constitute consent within the meaning of Art. 49 para. 1 lit.a DSGVO, which justifies a data transfer to unsafe third countries.

On this website, we use the service HubSpot for various purposes. HubSpot is a software company from the USA with a branch in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Phone: +353 1 5187500. Hubspot is an integrated software solution that we use to manage various aspects of our online
marketing cover. These include: Newsletter distribution, social media publishing & reporting, reporting, contact management (e.g.user segmentation & CRM), landing pages and contact forms. Our sign-up service allows visitors to our website to learn more about our company, download content, and provide their contact information and other demographic information. This information as well as the content of our website is stored on servers of our software partner HubSpot. They can be used by us to contact visitors to our website and to determine which of our company’s services are of interest to them. All information we collect is subject to this Privacy Policy. We use all collected information exclusively to optimize our marketing measures.

Learn more about HubSpot’s privacy policy>>

More information from HubSpot regarding EU data protection regulations>>

h. Revocation of consent

You can revoke your consent to the storage of your personal data and its use for the newsletter dispatch at any time with effect for the future. You will find a corresponding link in each newsletter or you can inform us of your revocation using the contact option provided at the beginning of this privacy policy.

i. Automated decision making and profiling

As a responsible company, we do not use automatic decision-making or profiling for this data processing.

8. contact form

a. Nature and purpose of the processing

The data you enter will be stored for the purpose of individual communication with you. For this, the entry of a valid e-mail address and your personal message is mandatory. The indication of first and last names is optional and serves to simplify the assignment of the request and the subsequent response to it.

b. Legal basis of the processing

The processing of the data entered in the contact form is based on a legitimate interest (Art 6 para. 1 lit. f DSGVO). By providing the contact form, we would like to enable you to contact us in an uncomplicated way. The information you provide will be stored for the purpose of processing the request and for possible follow-up questions. If you contact us to request a quote, the data entered in the contact form will be processed to carry out pre-contractual measures (Art 6 para. 1 lit. b DSGVO).

c. Data categories

• First and last name
• Company
• E-mail address
• individual message (by means of free text input field)

d. Receiver

• Recipients of the data are internal employees of the IT and marketing/sales department

• Service provider for contact request management (Hubspot)

e. Storage periods

Data will be deleted no later than 6 months after processing the request. If a contractual relationship arises, we are subject to the statutory retention periods according to the German Commercial Code (HGB) and delete your data after these periods have expired.

f. Legal / contractual requirement

The provision of your personal data is voluntary. However, we can only process your request if you provide us with your e-mail address and the reason for the request.

g. Third country transfer

We have concluded an DPA (Data processing agreement) with Hubspot, in which
we oblige Hubspot to protect our customers’ data and not to pass it on to third
parties.

h. Revocation of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You can us at any time your revocation via the contact option provided at the beginning of this privacy notice.

i. Automated decision making and profiling

As a responsible company, we do not use automatic decision-making or profiling for this data processing.

9. other forms 

We use the services Hubspot and Calendly to provide the following online forms. For this purpose, we forward your data to Hubspot or Calendly, which process the data exclusively on our behalf. See privacy policy on “Hubspot” or “Calendly”. Please note: If you contact us via contact forms, personal data may be transferred to service providers in third countries. These third countries do not have an adequate level of data protection. If the data is transferred to the U.S., there is a risk that your data may be processed by U.S. authorities for control and monitoring purposes, without you possibly having any legal remedies. The security of the transfer is regularly safeguarded via so-called standard contractual clauses, which ensure that the processing of personal data is subject to a level of security that complies with the GDPR. If the standard contractual clauses are not sufficient to establish an adequate level of security, your acknowledgement of the privacy statement in the context of the contact forms shall be deemed to constitute consent within the meaning of Art. 49 para. 1 lit.a DSGVO, which justifies a data transfer to unsafe third countries.

9.1 Offering digital content free of charge

In order to provide you with our downloadable content (e.g. product information PDFs) or online accessible videos/recordings (e.g. past webinars, lectures etc.), we collect personal data from you. In the following we clarify about these data.

a. Nature and purpose of the processing

Personalized provision of the requested content and use of the data entered for possible contact.

b. Legal basis of the processing

The processing of the data entered in the forms is based on a legitimate interest (Art. 6 para. 1 lit. f DSGVO). By providing free digital content, we want to make it easy for you to find information and get in touch. The information you provide will be stored for the purpose of processing the request and for possible contact. If you contact us to request a quote, the data entered in the form will be processed to carry out pre-contractual measures (Art 6 para. 1 lit. b DSGVO).

c. Data categories

• Company
• E-mail address
• First name
• Last name
• Position

d. Receiver

• Recipients of the data are internal employees of the IT and marketing/sales department

• Service provider for contact request management (Hubspot)

e. Storage periods

Data will be deleted no later than 6 months after processing the request. If a contractual relationship arises, we are subject to the statutory retention periods according to the German Commercial Code (HGB) and delete your data after these periods have expired.

f. Legal / contractual requirement

The provision of your personal data is voluntary.

g. Third country transfer

h. Revocation of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You can notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.

i. Automated decision making and profiling

As a responsible company, we do not use automatic decision-making or profiling for this data processing

9.2 Web sessions

If you request an appointment for a free and non-binding web session (demonstration of our product via video telephony), then we will use your data to contact you and together we will arrange and carry out an appointment.

a. Nature and purpose of the processing

Coordination and execution of the requested web session as well as preparation and follow-up of the web session.

b. Legal basis of the processing

The processing of the data entered in the forms is based on a legitimate interest (Art. 6 para. 1 lit. f DSGVO). By offering the web sessions, we want to make it easy for you to get information and contact us. The information you provide will be stored for the purpose of processing the request and for possible queries. If you contact us to request a quote, the data entered in the form will be processed to carry out pre-contractual measures (Art 6 para. 1 lit. b DSGVO).

c. Data categories

• E-mail address (e-mail addresses of guests, if applicable)
• Name (first and last name)
• personal message

d. Receiver

• Recipients of the data are internal employees of the IT and marketing/sales department
• Service provider for contact request management (Hubspot)
• Service provider for the scheduling of web sessions (Calendly)

e. Storage periods

Data will be deleted no later than 6 months after processing the request. If a contractual relationship arises, we are subject to the statutory retention periods according to the German Commercial Code (HGB) and delete your data after these periods have expired.

f. Legal / contractual requirement

The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name and e-mail address.

g. Third country transfer

Scheduling Web Sessions:

To arrange/schedule the web sessions and send the link to participate in the web sessions of e.pilot GmbH we use the services of Calendly (Calendly LLC, BB&T Tower 271 17th St NW, Atlanta, GA 30363, USA) in the context of a lawful order processing.

A “Data Processing Addendum” (order processing agreement) has been concluded with Calendly. This obliges Calendly to protect the data of our customers and not to pass it on to third parties(https://calendly.com/pages/dpa). More information about the company’s privacy policy: https://calendly.com/pages/security. The conclusion of the “Data Processing Addendum”, together with the standard contractual clause ensures an adequate level of protection of data processing in the USA.

Management of requests for a web session:

We have concluded an DPA (Data processing agreement) with Hubspot, in which
we oblige Hubspot to protect our customers’ data and not to pass it on to third
parties.

h. Revocation of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You can us at any time your revocation via the contact option provided at the beginning of this privacy notice.

i. Automated decision making and profiling

As a responsible company, we do not use automatic decision-making or profiling for this data processing

10. online presence on social media

10.1 Online presence on LinkedIn

a. Nature and purpose of the processing

We appreciate your interest in our presence on LinkedIn. We would like to give you an overview of what data is collected, used and stored by us there.

Social networks can usually analyze your user behavior extensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media presence on Facebook triggers numerous processing operations relevant to data protection. In detail:

If you are logged into your LinkedIn account and visit our social media presence, LinkedIn can associate this visit with your user account. However, your personal data may also be collected under certain circumstances if you are not logged in or do not have an account on LinkedIn . In this case, this data collection takes place, for example, via cookies that are stored on your terminal device or by recording your IP address. With the help of the data collected in this way, LinkedIn can create user profiles in which your preferences and interests are stored. In this way, you may be shown interest-based advertising inside and outside LinkedIn . If you have an account on LinkedIn , interest-based advertising may be displayed on all devices on which you are or have been logged in. Please also note that we cannot track all processing on LinkedIn . Further processing operations may therefore be carried out by LinkedIn . For details, please refer to the Terms of Use and Privacy Policy of LinkedIn: https://www.linkedin.com/legal/privacy-policy

b. Legal basis of the processing

The processing is carried out in accordance with Art. 6 para. 1 lit. f. DSGVO on the basis of our legitimate interest of contact possibilities to our customers. The analysis processes initiated by LinkedIn may be based on different legal grounds, which are to be specified by LinkedIn (e.g. consent within the meaning of Art. 6 para. 1 lit. a DSGVO).

c. Data categories

Please refer to the data protection information of LinkedIn to find out which specific data is collected and how it is used:

LinkedIn: https://www.linkedin.com/legal/privacy-policy

d. Receiver

• Employees of the IT, HR and marketing/sales departments of their own company
• LinkedIn

e.  Storage periods

After the end of the purpose and the end of the use of LinkedIn by us, the data collected in this context will be deleted.

f. Legal / contractual requirement

The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you access to our offered content and services.

g. Third country transfer

LinkedIn processes your data in the USA, among other places.

h. Revocation of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You may notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.

i. Automated decision making and profiling

As a responsible company, we do not use automatic decision-making or profiling for this data processing.

10.2 Online presence on Xing

a. Nature and purpose of the processing

Thank you for your interest in our presence on XING. We would like to give you an overview of what data is collected, used and stored by us there.

Social networks can usually analyze your user behavior extensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media presence on Xing triggers numerous processing operations relevant to data protection. In detail:

If you are logged into your Xing account and visit our social media presence, Xing can assign this visit to your user account. However, your personal data may also be collected under certain circumstances if you are not logged in or do not have an account on Xing . In this case, this data collection takes place, for example, via cookies that are stored on your terminal device or by recording your IP address. With the help of the data collected in this way, Xing can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside Xing . If you have an account on Xing , the interest-based advertising may be displayed on all devices on which you are or were logged in. Please also note that we are not able to track all processing on Xing . Further processing operations may therefore be carried out by Xing . For details, please refer to the Terms of Use and Privacy Policy of Xing: https://www.xing.com/privacy

b. Legal basis of the processing

The processing is carried out in accordance with Art. 6 para. 1 lit. f. DSGVO on the basis of our legitimate interest of contact possibilities to our customers. The analysis processes initiated by Xing may be based on different legal grounds, which are to be specified by Xing (e.g. consent within the meaning of Art. 6 para. 1 lit. a DSGVO).

c. Data categories

Please refer to the data protection information of Xing to find out which specific data is collected and how it is used:

Xing: https://www.xing.com/privacy

d. Receiver

• Employees of the IT, HR and marketing/sales departments of their own company
• Xing

e.  Storage periods

After the end of the purpose and the end of the use of Xing by us, the data collected in this context will be deleted.

f. Legal / contractual requirement

The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you access to our offered content and services.

g. Third country transfer

Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

h. Revocation of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You may notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.

i. Automated decision making and profiling

As a responsible company, we do not use automatic decision-making or profiling for this data processing.

10.3 Online presence on Facebook

a. Nature and purpose of the processing

We appreciate your interest in our presence on Facebook. We would like to give you an overview of what data is collected, used and stored by us there.

Social networks can usually analyze your user behavior extensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media presence on Facebook triggers numerous processing operations relevant to data protection. In detail:

If you are logged into your Facebook account and visit our social media presence, Facebook can associate this visit with your user account. However, your personal data may also be collected under certain circumstances if you are not logged in or if you do not have an account on Facebook . In this case, this data collection takes place, for example, via cookies that are stored on your terminal device or by recording your IP address. With the help of the data collected in this way, can create Facebook user profiles in which your preferences and interests are stored. In this way, you can be shown interest-based advertising inside and outside Facebook . If you have an account on Facebook , the interest-based advertising may be displayed on all devices on which you are or were logged in. Please also note that we cannot track all processing on Facebook . Further processing operations may therefore be carried out by Facebook . For details, please refer to the Terms of Use and Privacy Policy of Facebook: http://www.facebook.com/policy.php

b.Legal basis of the processing

The processing is carried out in accordance with Art. 6 para. 1 lit. f. DSGVO on the basis of our legitimate interest of the contact possibilities to our customers. The analysis processes initiated by Facebook may be based on deviating legal grounds to be indicated by Facebook (e.g. consent within the meaning of Art. 6 para. 1 lit. a DSGVO).

c. Data categories

Please refer to the privacy policy of Facebook to find out which specific data is collected and how it is used:

Facebook: http://www.facebook.com/policy.php

d. Receiver

• Employees of the IT and marketing/sales department of the own company
• Facebook

e.  Storage periods

After the end of the purpose and the end of the use of Facebook by us, the data collected in this context will be deleted.

f. Legal / contractual requirement

The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you access to our offered content and services.

g. Third country transfer

Facebook processes your data in the USA, among other places.

h. Revocation of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You may notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.

i. Automated decision making and profiling

As a responsible company, we do not use automatic decision-making or profiling for this data processing.

10.4 Online presence on Instagram

a. Nature and purpose of the processing

We appreciate your interest in our presence on Instagram. We would like to give you an overview of what data is collected, used and stored by us there.

Social networks can usually analyze your user behavior extensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media presence on Instagram triggers numerous data protection-related processing operations. In detail:

If you are logged into your Instagram account and visit our social media presence, Instagram can associate this visit with your user account. However, your personal data may be collected even if you are not logged in or do not have an account on Instagram . In this case, this data collection takes place, for example, via cookies that are stored on your terminal device or by recording your IP address. With the help of the data collected in this way, Instagram can create user profiles in which your preferences and interests are stored. In this way, you may be shown interest-based advertising inside and outside Instagram . If you have an account on Instagram , the interest-based advertising may be displayed on all devices on which you are or were logged in. Please also note that we cannot track all processing on Instagram . Therefore, further processing operations may be carried out by Instagram , if applicable. For details, please refer to the terms of use and privacy policy of Instagram: https://help.instagram.com/155833707900388

b. Legal basis of the processing

The processing is carried out in accordance with Art. 6 para. 1 lit. f. DSGVO on the basis of our legitimate interest of contact possibilities to our customers. The analysis processes initiated by Instagram may be based on deviating legal grounds to be indicated by Instagram (e.g. consent within the meaning of Art. 6 (1) lit. a DSGVO).

c. Data categories

Please refer to the privacy policy of Instagram to find out which specific data is collected and how it is used:

Instagram: https://help.instagram.com/155833707900388

d. Receiver

• IT and marketing/sales department employees of own company
• Facebook
•  

e. Storage periods

After the end of the purpose and the end of the use of Instagram by us, the data collected in this context will be deleted.

f. Legal / contractual requirement

The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you access to our offered content and services.

g. Third country transfer

Facebook processes your data in the USA, among other places.

h. Revocation of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You may notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.

i. Automated decision making and profiling

As a responsible company, we do not use automatic decision-making or profiling for this data processing.

10.5 Online presence on Google/ YouTube

a. Nature and purpose of the processing

Our presence on social networks and platforms serves to improve active communication with our customers and prospects. We inform there about our products and ongoing special promotions. When visiting our online presences in social media, your data may be automatically collected and stored for market research and advertising purposes. So-called usage profiles are created from this data using pseudonyms. These may be used, for example, to serve advertisements within and outside the platforms that are presumed to match your interests. Cookies are generally used on your terminal device for this purpose. These cookies store visitor behavior and interests. This serves to protect our legitimate interests in an optimized presentation of our offer and effective communication with customers and interested parties, which outweigh our interests. If you are asked by the respective social media platform operators for consent (agreement) to the data processing, e.g. by means of a checkbox, the legal basis for the data processing is Art. 6 para. 1 lit. a GDPR. The detailed information on the processing and use of data by the providers on their pages and a contact option.

Google / YouTube: https://policies.google.com/privacy

b. Legal basis of the processing

The processing is carried out in accordance with Art. 6 para. 1 lit. f. DSGVO on the basis of our legitimate interest of the functionality of our website and the contact possibilities to our customers, as well as according to Art. 6 Abs. 1 lit. a DSGVO based on a consent of the user in the respective social media platform.

c. Data categories

You can find out which specific data is collected and how it is used in the Google/YouTube privacypolicy: policies.google.com/privacy

d. Receiver

• internal employees of the marketing department
•  Operator of the social media platform as processor Google/YouTube.

e. Storage periods

After the end of the purpose and the end of the use of the social media platform by us, the data collected in this context will be deleted.

f. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. Without the provision of your personal data, we cannot grant you access to our offered content and services.

g. Third country transfer

Google processes your data in the USA, among other places.

h. Revocation of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You may notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice. Your rights in this regard and setting options for the protection of your privacy, in particular objection options (opt-out), can be found in the privacy notices of the providers linked below. If you still need help in this regard, you can contact us.

Possibility of objection (opt-out):
Google/YouTube: https://adssettings.google.com/authenticated

i. Automated decision making and profiling

As a responsible company, we do not use automatic decision-making or profiling for this data processing.

11. use of social media plugins

11.1 Use of embedded YouTube videos

a. Nature and purpose of the processing

We embed YouTube videos on some of our websites. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit a page with the YouTube plugin, a connection to YouTube servers is established. This tells YouTube which pages you are visiting. If you are logged into your YouTube account, YouTube can assign your surfing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand. If a YouTube video is started, the provider uses cookies that collect information about user behavior. For more information on the purpose and scope of data collection and processing by YouTube, please refer to the provider’s privacy policy, where you will also find further information on your rights in this regard and settings options for protecting your privacy (https://policies.google.com/privacy).

b. Legal basis of the processing

The legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a DSGVO).

c. Data categories

You can find out what specific data is collected and how it is used in the Google/Youtube privacypolicy: policies.google.com/privacy

d. Receiver

• Recipients of the data are internal employees of the IT and marketing/sales department
•  YouTube as a service provider.

e. Storage periods

Those who have deactivated the saving of cookies for the Google Ad program will not have to deal with such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you would like to prevent this, you must block the storage of cookies in the browser. Further information on data protection at “YouTube” can be found in the provider’s privacy policy at:https://www.google.de/intl/de/policies/privacy/

f. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

g. Third country transfer

Google processes your data in the USA, among other places.

h. Revocation of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You may notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.

i. Automated decision making and profiling

As a responsible company, we do not use automatic decision-making or profiling for this data processing.

11.2 Use of Twitter plugins

a. Nature and purpose of the processing

Social plugins from Twitter are used on our website. You can recognize the plugins by the fact that they are marked with the corresponding logo.
Information, which may also include personal data, may be sent to Twitter via these plugins and may be used by it. We prevent the unknowing and unwanted collection and transmission of data to Twitter through a so-called Shariff solution. Only by clicking on the plugin, the collection of information and its transmission to Twitter is also triggered. We do not collect any personal data ourselves by means of the social plugins or via their use.

We have no influence on what data an activated plugin collects and how it is used by Twitter . Currently, it must be assumed that a direct connection to the services of Twitter is established and that at least the IP address and device-related information is collected and used. There is also the possibility that Twitter tries to save cookies on the computer used.

b. Legal basis of the processing

The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in the functionality of our website.

c. Data categories

Please refer to the privacy policy of Twitter to find out which specific data is collected and how it is used:

Twitter: https://twitter.com/privacy

d. Receiver

• Employees of the IT and marketing/sales department of the own company
• Twitter

e. Storage periods

The data collected directly by us via the social media plugins will be deleted from our systems as soon as the purpose for storing it no longer applies, you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies. Stored cookies remain on your terminal device until you delete them. Mandatory legal provisions – esp. retention periods – remain unaffected.

We have no influence on the storage period of your data, which is stored by Twitter for its own purposes. For details, please check directly with Twitter (e.g., in their privacy policy, see above).

f. Legal / contractual requirement

The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you access to our offered content and services.

g. Third country transfer

Twitter processes your data in the USA, among other places.

h. Revocation of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You may notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.

i. Automated decision making and profiling

As a responsible company, we do not use automatic decision-making or profiling for this data processing.

11.3 Use of Facebook plugins

a. Nature and purpose of the processing

Social plugins from Facebook are used on our website. You can recognize the plugins by the fact that they are marked with the corresponding logo.
Information, which may also include personal data, may be sent to Facebook via these plugins and may be used by it. We prevent the unknowing and unwanted collection and transmission of data to Facebook through a so-called Shariff solution. Only by clicking on the plugin, the collection of information and its transmission to Facebook is also triggered. We do not collect any personal data ourselves by means of the social plugins or via their use.

We have no influence on what data an activated plugin collects and how it is used by Facebook . Currently, it must be assumed that a direct connection to the services of Facebook is established and that at least the IP address and device-related information is collected and used. There is also the possibility that Facebook tries to save cookies on the computer used.

b. Legal basis of the processing

The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in the functionality of our website.

c. Data categories

Please refer to the privacy policy of Facebook to find out which specific data is collected and how it is used:

Facebook: http://www.facebook.com/policy.php

d. Receiver

• Employees of the IT and marketing/sales department of the own company
• Facebook

e. Storage periods

The data collected directly by us via the social media plugins will be deleted from our systems as soon as the purpose for storing it no longer applies, you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies. Stored cookies remain on your terminal device until you delete them. Mandatory legal provisions – esp. retention periods – remain unaffected.

We have no influence on the storage period of your data, which is stored by Facebook for its own purposes. For details, please check directly with Facebook (e.g. in their privacy policy, see above).

f. Legal / contractual requirement

The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you access to our offered content and services.

g. Third country transfer

Facebook processes your data in the USA, among other places.

h. Revocation of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You may notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.

i. Automated decision making and profiling

As a responsible company, we do not use automatic decision-making or profiling for this data processing.

11.4 Use of LinkedIn plugins

a. Nature and purpose of the processing

Social plugins from LinkedIn are used on our website. You can recognize the plugins by the fact that they are marked with the corresponding logo.
Via these plugins, information, which may also include personal data, may be sent to LinkedIn and possibly used by it. We prevent the unknowing and unwanted collection and transmission of data to LinkedIn through a so-called Shariff solution. Only the click on the plugin also triggers the collection of information and its transmission to LinkedIn . We do not collect any personal data ourselves by means of the social plugins or via their use.

We have no influence on what data an activated plugin collects and how it is used by LinkedIn . Currently, it must be assumed that a direct connection to the services of LinkedIn is established and that at least the IP address and device-related information is collected and used. Likewise, it is possible that LinkedIn attempts to store cookies on the computer used.

b. Legal basis of the processing

The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in the functionality of our website.

c. Data categories

Please refer to the data protection information of LinkedIn to find out which specific data is collected and how it is used:

LinkedIn: https://www.linkedin.com/legal/privacy-policy

d. Receiver

• Employees of the IT and marketing/sales department of the own company
• LinkedIn

e.  Storage periods

The data collected directly by us via the social media plugins will be deleted from our systems as soon as the purpose for storing it no longer applies, you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies. Stored cookies remain on your terminal device until you delete them. Mandatory legal provisions – esp. retention periods – remain unaffected.

We have no influence on the storage period of your data, which is stored by LinkedIn for its own purposes. For details, please check directly with LinkedIn (e.g., in their privacy policy, see above).

f. Legal / contractual requirement

The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you access to our offered content and services.

g. Third country transfer

LinkedIn processes your data in the USA, among other places.

h. Revocation of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You may notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.

i. Automated decision making and profiling

As a responsible company, we do not use automatic decision-making or profiling for this data processing.

11.5 Use of Vimeo video plugins

a. Nature and purpose of the processing

Content from third party providers is integrated on this website. The integration of the videos serves to protect our legitimate interests in an optimal marketing of our offer, which outweigh our interests. For videos from Vimeo that are embedded on our site, the Google Analytics tracking tool is automatically integrated. We have no influence on the tracking settings and the analysis results collected via this, nor can we view them. In addition, web beacons are set on website visitors via the embedding of Vimeo videos.
For the purpose and scope of the data collection and the further processing and use of the data by the providers, as well as your rights in this regard and setting options for protecting your privacy, please refer to the privacy policy of Vimeo: https://vimeo.com/privacy.

b. Legal basis of the processing

The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in the functionality of our website.

c. Data categories

Please refer to Vimeo’s privacy policy to find out what specific data is collected and how it is used: vimeo.com/privacy

d. Receiver

Recipients of the data are internal employees of the marketing/sales department and Vimeo as well as Google as order processor.

e. Storage periods

After the end of the purpose and the end of the use of Vimeo by us, the data collected in this context will be deleted.

f. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. Without the provision of your personal data, we cannot grant you access to our offered content and services.

g. Third country transfer

This content is provided by Vimeo LLC. Vimeo is operated by Vimeo LLC, 555 West 18th Street, New York 10011, USA. Vimeo processes your data in the USA, among other places.

h. Revocation of consent

To prevent Google Analytics tracking cookies from being set, you can prevent cookies from being stored by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link:http://tools.google.com/dlpage/gaoptout?hl=de. You can revoke your consent to the storage of your personal data at any time with effect for the future. You may notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.

i. Automated decision making and profiling

As a responsible company, we do not use automatic decision-making or profiling for this data processing.

11.6 Use of Xing plugins

a. Nature and purpose of the processing

Social plugins from Xing are used on our website. You can recognize the plugins by the fact that they are marked with the corresponding logo.
Information, which may include personal data, may be sent to Xing via these plugins and may be used by it. We prevent the unknowing and unwanted collection and transmission of data to Xing through a so-called Shariff solution. Only by clicking on the plugin, the collection of information and its transmission to Xing is triggered. We do not collect any personal data ourselves by means of the social plugins or via their use.

We have no influence on what data an activated plugin collects and how it is used by Xing . At present, it must be assumed that a direct connection to the services of Xing is established and that at least the IP address and device-related information is recorded and used. There is also the possibility that Xing tries to save cookies on the computer used.

b. Legal basis of the processing

The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in the functionality of our website.

c. Data categories

Please refer to the data protection information of Xing to find out which specific data is collected and how it is used:

Xing: https://www.xing.com/privacy

d. Receiver

• Employees of the IT and marketing/sales department of the own company
• Xing

e.  Storage periods

The data collected directly by us via the social media plugins will be deleted from our systems as soon as the purpose for storing it no longer applies, you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies. Stored cookies remain on your terminal device until you delete them. Mandatory legal provisions – esp. retention periods – remain unaffected.

We have no influence on the storage period of your data, which is stored by Xing for its own purposes. For details, please contact Xing  directly (e.g. in their privacy policy, see above).

f. Legal / contractual requirement

The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you access to our offered content and services.

g. Third country transfer

Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

h. Revocation of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You may notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.

i. Automated decision making and profiling

As a responsible company, we do not use automatic decision-making or profiling for this data processing.

11.7 Use of YouTube plugins

a. Nature and purpose of the processing

Social plugins from YouTube are used on our website. You can recognize the plugins by the fact that they are marked with the corresponding logo.
Information, which may also include personal data, may be sent to YouTube via these plugins and may be used by it. We prevent the unknowing and unwanted collection and transmission of data to YouTube through a so-called Shariff solution. Only by clicking on the plugin, the collection of information and its transmission to YouTube is also triggered. We do not collect any personal data ourselves by means of the social plugins or via their use.

We have no influence on what data an activated plugin collects and how it is used by YouTube . Currently, it must be assumed that a direct connection to the services of YouTube is established and that at least the IP address and device-related information is collected and used. There is also the possibility that YouTube tries to save cookies on the computer used.

b. Legal basis of the processing

The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in the functionality of our website.

c. Data categories

Please refer to the privacy policy of YouTube to find out which specific data is collected and how it is used:

YouTube: https://policies.google.com/privacy

d.   Receiver

• Employees of the IT and marketing/sales department of the own company
• Google

e. Storage periods

The data collected directly by us via the social media plugins will be deleted from our systems as soon as the purpose for storing it no longer applies, you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies. Stored cookies remain on your terminal device until you delete them. Mandatory legal provisions – esp. retention periods – remain unaffected.

We have no influence on the storage period of your data, which is stored by YouTube for its own purposes. For details, please check directly with YouTube (e.g., in their privacy policy, see above).

f . Legal / contractual requirement

The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you access to our offered content and services.

g. Third country transfer

Google processes your data in the USA, among other places.

h. Revocation of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You may notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.

i. Automated decision making and profiling

As a responsible company, we do not use automatic decision-making or profiling for this data processing.

12. conducting webinars (using GoToMeeting).

a. Nature and purpose of the processing

For the execution of webinars e.pilot GmbH uses the software GoToMeeting of the provider LogMeIn Ireland Limited. Within the scope of registration, personal data is collected/stored on the infrastructure of LogMeIn (LogMeIn Ireland Limited, The Reflector, 10 Hanover Quay Dublin 2, D02R573).

e.pilot GmbH will only use the data for purposes other than the aforementioned contract fulfillment purpose or transfer the data to other third parties if this is legally permissible or the user has expressly consented to it.

b. Legal basis of the processing

The processing of data by the company LogMeIn (as processor) is based on Article 28 of the General Data Protection Regulation. The legal basis for the data processing is Art. 6 para. 1 lit. f Basic Data Protection Regulation.

c. Data categories

• in particular name, first name, company, data entered by the interested party/customer and the e-mail address.

d.  Receiver

• Employees of the marketing/sales department
• LogMeIn

e.  Storage periods

The deletion of the data takes place in accordance with the legal retention periods.

f. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

g. Third country transfer

The data is processed to the extent permitted by law in Germany, the European Union and the USA. A so-called “Data Processing Addendum” (order processing agreement) was concluded with LogMeIn, which contains an additional standard contractual clause. The conclusion of the “Data Processing Addendum”, together with the standard contractual clause, ensures an appropriate level of protection for data processing in the USA. This obliges LogMeIn (as processor) to protect the data of our customers and not to pass it on to third parties. More info about the company’s privacy policy: https://www.logmeininc.com/de/gdpr/gdpr-compliance

h. Revocation of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You can notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.

i. Automated decision making and profiling

As a responsible company, we do not use automatic decision-making or profiling for this data processing.

13. use of Google Maps

a. Nature and purpose of the processing

On this website we use the offer of Google Maps. Google Maps is operated by Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. This allows us to show you interactive maps directly in the website and enables you to use the map function comfortably. You can find more information about data processing by Google in the Google privacy policy. There you can also change your personal privacy settings in the Privacy Center. By visiting the website, Google receives information that you have accessed the corresponding subpage of our website. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data is directly assigned to your account. If you do not want the assignment in your profile at Google, you must log out of Google before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the provision of tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.

b. Legal basis of the processing

The legal basis for the integration of Google Maps and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a DSGVO).

c. Data categories

Please refer to Google’s privacy policy to find out what specific data is collected and how it is used: policies.google.com/privacy

d. Receiver

• Recipients of the data are internal employees of the IT and marketing/sales department
• Google as processor

e. Storage periods

Data will only be processed in this context as long as the corresponding consent has been obtained. Afterwards, they will be deleted, provided that there are no legal storage obligations to the contrary. To contact us in this regard, please use the contact information provided at the beginning of this privacy policy.

f. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

g. Third country transfer

Google processes your data in the USA, among other places.

h. Revocation of consent

If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. In this case, however, you will not be able to use our website or only to a limited extent. You can revoke your consent to the storage of your personal data at any time with effect for the future. You may notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.

i. Automated decision making and profiling

As a responsible company, we do not use automatic decision-making or profiling for this data processing.

14. use of Google Analytics

a. Nature and purpose of the processing

This website uses Google Analytics, a web analytics service provided by Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymization on these websites, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google. The purposes of data processing are to evaluate the use of the website and to compile reports about activities on the website. Based on the use of the website and the Internet, other related services shall then be provided.

b. Legal basis of the processing

The processing of the entered data is based on the consent of the user (Art. 6 para. 1 lit. a DSGVO).

c. Data categories

IP address (shortened/anonymized)

d.  Receiver

• Internal employees of the IT and marketing/sales departments
• Google

e.  Storage periods

Data will only be processed in this context as long as the corresponding consent has been obtained. Afterwards, they will be deleted, provided that there are no legal storage obligations to the contrary. To contact us in this regard, please use the contact information provided at the beginning of this privacy policy.

f. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

g. Third country transfer

Google processes your data in the USA, among other places. A “Data Processing Addendum” (order processing agreement) has been concluded with Google. This obligates Google to protect the data of our customers and not to pass it on to third parties: https://www.google.com/analytics/terms/dpa/dataprocessingamendment_20160909.html

h. Revocation of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You may notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: “Browser Add On to disable Google Analytics”- :http://tools.google.com/dlpage/gaoptout?hl=de

i. Automated decision making and profiling

With the help of the Google Analytics tracking tool, it is possible to evaluate the behavior of visitors to the website and analyze their interests. For this purpose, we create a pseudonymous user profile.

14.1 Associated services and services

In parallel with the use of Google Analytics, our website uses the service Leadfeeder, which is operated by Liidio Oy / Leadfeeder, Mikonkatu 17 C, 00100 Helsinki, Finland. Leadfeeder accesses the list of website visitors’ IP addresses provided by Google Analytics in the analysis and links the list of IP addresses with information about the companies that can be found on the Internet under these IP addresses. Due to the shortening of the IP addresses of the website visitors, which is already carried out when using Google Analytics, a direct personal reference is not established. A reference to a person may be presumed when reviewing the linked company information.

A “Data Processing Addendum” (order processing agreement) has been concluded with Leadfeeder. This obligates Leadfeeder to protect the data of our customers and not to pass it on to third parties.

For more information about Leadfeeder and the data it collects, please see: www.leadfeeder.com/privacy/,information-about-leadfeeder-and-compliance-with-the-Privacy-Privacy-Regulation: help.leadfeeder.com/faqs-and-troubleshooting/is-leadfeeder-ready-for-gdpr

15. use of Google Tag Manager

a. Nature and purpose of the processing

Using Google Tag Manager: Google Tag Manager is a solution that allows marketers to manage website tags through one interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect any personal data. The tool takes care of triggering other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager: http://www.google.de/tagmanager/use-policy.html.

b. Legal basis of the processing

The processing of the entered data is based on the consent of the user (Art. 6 para. 1 lit. a DSGVO).

c. Data categories

Please refer to Google’s privacy policy to find out what specific data is collected and how it is used: Google policies.google.com/privacy

d. Receiver

• Internal employees of the IT and marketing/sales departments
• Google as processor. For this purpose, we have concluded the corresponding order processing agreement with Google.

e. Storage periods

Data will only be processed in this context as long as the corresponding consent has been obtained. Afterwards, they will be deleted, provided that there are no legal storage obligations to the contrary. To contact us in this regard, please use the contact information provided at the beginning of this privacy policy.

f. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

g. Third country transfer

Google processes your data in the USA, among other places. A “Data Processing Addendum” (order processing agreement) has been concluded with Google. This obligates Google to protect the data of our customers and not to pass it on to third parties: https://www.google.com/analytics/terms/dpa/dataprocessingamendment_20160909.html

h. Revocation of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You may notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

i. Profiling

With the help of the tool Google Tag Manager it is possible to evaluate the behavior of visitors to the website and analyze their interests.

16. use of Google Ads

a. Nature and purpose of the processing

Our website uses Google conversion tracking. The operator of the Google Ads services is Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. If you have reached our website via an ad placed by Google, Google Ads will set a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad placed by Google. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can thus not be tracked through the website of Ads clients. The information collected using the conversion cookie is used to generate conversion statistics for Ads customers who have opted in to conversion tracking. Clients learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. Whenever you visit our website, personal data, including your IP address, is transferred to Google in the USA. This personal data is stored by Google. Google may share this personal data collected through the technical process with third parties.

Our company does not contain any information from Google by means of which the data subject could be identified.

b. Legal basis of the processing

We process users’ personal data only in compliance with the relevant data protection provisions. This means that the user’s data is only processed with legal permission. The legal basis for the integration of Google Ads and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a DSGVO).

c. Data categories

IP address

d.  Receiver

•  Internal employees of the IT and marketing/sales departments
• Google as processor.

e. Storage periods

Data will only be processed in this context as long as the corresponding consent has been obtained. Afterwards, they will be deleted, provided that there are no legal storage obligations to the contrary. These cookies lose their validity after 30 days and are not used for personal identification.

f. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

g. Third country transfer

Google processes your data in the USA, among other places.

h. Revocation of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future.  You can notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice. If you do not wish to participate in the tracking, you can refuse the setting of a cookie required for this – for example, by means of a browser setting that generally deactivates the automatic setting of cookies or by setting your browser in such a way that cookies from the domain “googleleadservices.com” are blocked.

Please note that you must not delete the opt-out cookies as long as you do not want any measurement data to be recorded. If you have deleted all your cookies in the browser, you must set the respective opt-out cookie again.

i. Automated decision making and profiling

As a responsible company, we do not use automatic decision-making or profiling when using Google Ads.

17. facebook pixel

a. Nature and purpose of the processing

Within our website, the so-called “Facebook pixel” of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are a resident of the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”), is used.

With the help of the Facebook pixel, it is possible for Facebook, on the one hand, to determine you as a visitor to our online offer as a target group for the display of advertisements (so-called “Facebook ads”). Accordingly, we use the Facebook pixel to display Facebook ads placed by us only to Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called “Custom Audiences”). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interest of the users and do not have a harassing effect. With the help of the Facebook pixel, we can further track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called “conversion”). Further information on data protection at Facebook can be found at https://www.facebook.com/policy.php.

b. Legal basis of the processing

We process users’ personal data only in compliance with the relevant data protection provisions. This means that user data is only processed with legal permission. The legal basis for the integration of Facebook Pixel and the associated data transfer to Facebook is your consent (Art. 6 para. 1 lit. a DSGVO).

c. Data categories

• IP address

d.  Receiver

•  Internal employees of the IT and marketing/sales departments
• Facebook as a processor.

e. Storage periods

Data will only be processed in this context as long as the corresponding consent has been obtained. Afterwards, they will be deleted, provided that there are no legal storage obligations to the contrary.

f. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

g. Third country transfer

Facebook processes your data in the USA, among other places.

h. Revocation of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future.  You can notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice. If you do not wish to participate in the tracking, you can refuse the setting of a cookie required for this – for example, via browser settings that generally deactivate the automatic setting of cookies and in our cookie settings.

Please go to https://www.facebook.com/ads/preferences/ if you wish to withdraw your consent to Conversion Pixel.

Please note that you must not delete the opt-out cookies as long as you do not want any measurement data to be recorded. If you have deleted all your cookies in the browser, you must set the respective opt-out cookie again.

i. Automated decision making and profiling

As a responsible company, we do not use automatic decision-making or profiling when using Facebook Pixel.

18. use of cookies

a. Nature and purpose of the processing

Like many other websites, we also use so-called “cookies”.

Cookies are simple files that store information about our website and your usage. These small files are optionally created by your browser automatically through the use of our website and stored locally on your respective end device. This does not mean that we have thereby gained direct knowledge of your identity. The use of cookies serves to make the use of our offer more pleasant for you.

Therefore, we basically distinguish between technically necessary and not necessary cookies:

Technically necessary cookies (“first party cookies”) are required for the operation of a website and are indispensable for navigating on it and using its functions. These cookies are not permanently stored on your computer or device and are deleted when you close the browser. These are so-called session cookies).

The following technically necessary cookies are used by us:

Cookiename: Borlabs cookie

Provider of the cookie: Owner of this website

Type and purpose of the cookie: stores the settings of the visitors selected in the cookie box of Borlabs cookie

Storage period: 1 year

Non-essentialcookies , on the other hand, are mostly Functional cookies, performance cookies and marketing & third party cookies, , which allow, for example, to track the use of the website. record and count the number of visitors and traffic sources, thus measuring and improving the performance of the website. They are also used to find out if certain pages are experiencing problems or errors, which pages are the most popular, and how visitors navigate the site.

• Functional cookies
  Functional cookies are used to store information that has been entered, such as the user name or the language selection, and thus to offer the website visitor improved and personalized functions based on this information.

• Performance cookies
  Performance cookies are used to track visits and individual activities on websites. They are used to statistically record and evaluate the use of websites.

• Marketing & Third Party Cookies
  Marketing & Third Party Cookies originate, among others, from external advertising companies and are used to collect information about the websites visited by the user, e.g. to create targeted advertisements for the user.

The following non-essential cookies are used by us:

Marketing

Google Tag Manager
Cookie name: _ga,_gat,_gid

Cookie provider: Google LLC

Type and purpose of cookie: cookie from Google to control advanced script and event handling.

Storage period: 2 years

Google Analytics

Cookie name: _ga,_gat,_gid

Cookie provider: Google LLC

Type and purpose of the cookie: Cookie from Google for website analytics. Generates statistical data about how the visitor uses the website.

Storage period: 2 years

External media

Facebook

Cookie name: Facebook

Cookie provider: Facebook

Type and purpose of the cookie: Used to unlock Facebook content.

Host(s): .facebook.com

Facebook Pixel

Cookie name:_fbp,act,c_user,datr,fr,m_pixel_ration,pl,presence,sb,spin,wd,xs

Cookie provider: Facebook Ireland Limited

Type and purpose of cookie: Cookie from Facebook used for website analytics, ad targeting and ad measurement.

Storage duration: session / 1 year

Google Maps

Cookie name: NID

Provider of the cookie: Google

Type and purpose of the cookie: Used to unlock Google Maps content.

Storage period: 6 months

Instagram

Cookie name:  pigeon_state

Cookie provider: Facebook

Type and purpose of the cookie: Used to unlock Instagram content.

Storage duration: session

OpenStreetMap

Cookie name: _osm_location, _osm_session, _osm_totp_token, _osm_welcome, _pk_id., _pk_ref., _pk_ses., qos_token

Cookie provider: OpenStreetMap Foundation

Cookie type and purpose: Used to unlock OpenStreetMap content.

Storage period: 1-10 years

Twitter

Cookie name: __widgetsettings, local_storage_support_test

Cookie provider: Twitter

Type and purpose of the cookie: Used to unlock Twitter content.

Storage duration: Unlimited

Vimeo

Cookie name: vuid

Cookie provider: Vimeo

Type and purpose of the cookie: Used to unlock Vimeo content.

Storage period: 2 years

YouTube

Cookie name: NID

Cookie provider: YouTube

Type and purpose of the cookie: Used to unlock YouTube content.

Storage period: 6 months

b. Legal basis of the processing

The use of technically necessary cookies (“first party cookies”) is possible without the consent of the website visitor and is subject to a legitimate interest in the economic operation and optimization of our website and services) within the meaning of Art. 6 para. 1 p. 1 lit. f GDPR.

The use of unnecessary cookies, such as functional cookies, performance cookies and marketing & third party cookies is subject to the consent of the website visitor pursuant to Art. 6 para. 1 p. 1 lit. a GDPR.

c. Data categories

• IP address
• Browser used
• Operating system used
• Internet connection
• Session ID of the cookie

d.  Receiver

• Internal employees of the IT and marketing/sales departments
• Cookie provider

e.  Storage periods

The user can set his web browser in such a way that the storage of cookies on his end device is generally prevented or he is asked each time whether he agrees to the setting of cookies. Once cookies have been set, the user can delete them at any time. How the whole thing works is described in the help function of the respective web browser.

A general deactivation of cookies may lead to functional restrictions of this website.

f. Legal / contractual requirement

The provision of your personal data in cookies is voluntary in the case of cookies that are not necessary, solely on the basis of your consent (so-called opt-in cookies). You can also prevent the use of preset, technically necessary cookies (so-called opt-out cookies) via your browser settings. However, without the consent, the service and functionality of our website is not guaranteed. In addition, individual services may be unavailable or limited.

g. Third country transfer

The providers of the cookies process your data in the USA, among other places.

h. Revocation of consent

You can revoke the consent of all cookies at any time with effect for the future in your browser settings.

i. Automated decision making and profiling

As a responsible company, we do not use automatic decision-making or profiling when collecting cookies.

19. use hotjar

a. Nature and purpose of the processing

We use Hotjar to better understand the needs of our users and to optimize the offer on this website. Using Hotjar’s technology, we get a better understanding of our users’ experiences (e.g. how much time users spend on which pages, which links they click on, what they like and don’t like, etc.) and this helps us tailor our offering to our users’ feedback. Hotjar works with cookies and other technologies to collect information about the behavior of our users and about their terminal devices (in particular, IP address of the device (collected and stored only in anonymous form), screen size, device type (unique device identifiers), information about the browser used, location (country only), language preferred to view our website). Hotjar stores this information in a pseudonymized user profile. The information is not used by Hotjar or us to identify individual users or merged with other data about individual users. For more information, please see Hotjar’s Privacy Policy(https://www.hotjar.com/legal/policies/privacy).

b. Legal basis of the processing

The processing of the entered data is based on the consent of the user (Art. 6 para. 1 lit. a DSGVO).

c. Data categories

• Pseudonymized user profile

d. Receiver

• Internal employees of the IT and marketing/sales departments
• Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe

e.  Storage periods

Data will only be processed in this context as long as the corresponding consent has been obtained. Afterwards, they will be deleted, provided that there are no legal storage obligations to the contrary. To contact us in this regard, please use the contact information provided at the beginning of this privacy policy.

f. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

g. Third country transfer

The processing does not take place outside the European Union (EU) or the European Economic Area (EEA), as Hotjar Ltd’s registered office is located in Malta.

h. Revocation of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You may notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.
You can object to Hotjar storing a user profile and information about your visit to our website, as well as to Hotjar setting tracking cookies on other websites, by clicking this opt-out link(https://www.hotjar.com/legal/compliance/opt-out).

i. Automated decision making and profiling

The tracking tool hotjar can be used to evaluate the behavior of visitors to the website and analyze their interests. For this purpose, we create a pseudonymous user profile.

20. applicant

a. Nature and purpose of the processing

We process applicant data only for the purpose of and within the scope of the application process in accordance with legal requirements. Applicant data is processed in order to fulfill our (pre)contractual obligations in the context of the application process, insofar as data processing becomes necessary for us, e.g. in the context of legal proceedings.
The application process requires applicants to provide us with applicant information. The necessary applicant data are marked, if we offer an online form, otherwise result from the job descriptions and basically include the personal information, postal and contact addresses and the documents belonging to the application, such as cover letter, resume and the certificates. In addition, applicants may voluntarily provide us with additional information. By submitting the application to us, applicants consent to the processing of their data for the purposes of the application process in accordance with the nature and scope set out in this privacy policy. If provided, applicants may submit their applications to us using an online form on our website. The data is transmitted to us encrypted according to the state of the art. Furthermore, applicants can send us their applications via e-mail. Please note, however, that e-mails are generally not encrypted and applicants must ensure that they are encrypted themselves. Therefore, we cannot take any responsibility for the transmission path of the application between the sender and the reception on our server and therefore rather recommend to use an online form or postal delivery. The data provided by applicants, may be further processed by us for the purposes of the employment relationship in the event of a successful application.

b. Legal basis of the processing

The processing of data necessary for the conclusion of the contract is based on Art. 6 para. 1 lit. b DSGVO. The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in personnel development of our company.

c. Data categories

Master data (such as first name, last name, name supplements such as academic degrees/titles, nationality and personnel number), contact data (such as private address, (mobile) telephone number, e-mail address) as well as the data of the entire application process (cover letter, certificates, questionnaires, interviews as well as any performance evaluations, qualifications and previous activities).

Insofar as special categories of personal data within the meaning of Art. 9 para. 1 DSGVO are communicated, their processing is additionally carried out in accordance with Art. 9 para. 2 lit. b DSGVO (e.g. health data, such as severely disabled status or ethnic origin).

d. Receiver

• Recipients of the data are internal employees of the personnel department, personnel managers of the respective departments
• the processor Recruitee B.V.  to operate an online form and provide the applicant management software.

e. Storage periods

The deletion takes place, subject to a justified revocation of the applicants, after the expiration of a period of six months after a rejection, so that we can answer any follow-up questions about the application and satisfy our obligations to provide evidence under the Equal Treatment Act. Invoices for any reimbursement of travel expenses are archived in accordance with tax law requirements.

f. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. Without the provision of your personal data, we cannot grant you access to our offered content and services.

g. Third country transfer

Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

h. Revocation of consent

If the application for a job offer is not successful, the applicants’ data will be deleted after six months. Applicants’ data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time. You can revoke your consent to the storage of your personal data at any time with effect for the future. You may notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.

i. Automated decision making and profiling

As a responsible company, we do not use automatic decision-making or profiling for this data processing.

20.1 Services and service providers used (applicants)

Recruitee: Applicant Management Software

Address: Recruitee B.V., Keizersgracht 313, 1016EE, Amsterdam, The Netherlands

Website: https://recruitee.com/

Privacy policy: https://recruitee.com/de/privacy

A “Data Processing Addendum” (order processing agreement) with Recruitee was concluded . This obliges Recruitee to protect the data of the applicants and not to pass it on to third parties. You can find more information on data protection at the company at: https://recruitee.com/de/security-gdpr

21. data subject rights

If personal data is processed by you as a user, you are considered a data subject in accordance with the GDPR. Data subjects are entitled to the following rights vis-à-vis the person responsible:

• Right of access (Art. 15 DSGVO)
• Right to rectification or erasure of personal data (Art. 16, 17 DSGVO)
• Right to restriction of processing (Art. 18 DSGVO)
• Right to communication in connection with the rectification or erasure of your personal data or the restriction of processing (Art. 19 DSGVO)
• Right to data portability (Art. 20 DSGVO)
• Right of objection (Art. 21 DSGVO)
• Right to revoke consent given. The legality of the data processing carried out until the revocation remains unaffected due to the consent valid to date. (Art. 7 para. 3 DSGVO)
• Right to complain to the supervisory authority (Art. 77 GDPR)

22. our right to amend the directive

Since changes in the law or changes in our internal company processes may make it necessary to adapt this data protection declaration, we ask you to read through this data protection declaration regularly. The privacy policy can be viewed at any time at https://epilot.cloud/en/privacy-policy/ .  We therefore reserve the right to change these guidelines at any time in compliance with data protection law.

General terms and conditions

General terms and conditions

Information requirements acc. Art 13,14 GDPR

Information requirements for applicants

Information requirements for customers

Data protection information for suppliers

Information requirements for the use of the epilot Cloud

Information sheet: Video surveillance at the epilot GmbH headquarters