Data Privacy Guidance

DISCLAIMER: The following text is an English language interpretation of the German language ‘Datenschutzhinweis’ and is intended as a purely informational resource. The German-language document has primacy in all cases and is the legally binding version.

The responsible entity within the remit of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

SaleSphere GmbH
Wahlerstrasse 2
40472 Düsseldorf
Germany

Represented by:
Cedric Balzar, Managing Director

Your rights as a data subject

You can exercise the following rights at any time using the contact details of our data protection officer:

  • Information about your data stored by us and their processing (Art. 15 GDPR),
  • Correction of incorrect personal data (Art. 16 GDPR),
  • Deletion of your data stored by us (Art. 17 GDPR),
  • Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
  • Objection to the processing of your data by us (Art. 21 GDPR) and
  • Data portability, provided you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR).

If you have previously consented to use of your data you may revoke this consent at any time.

You can contact a supervisory authority with a complaint at any time, e.g. to the responsible supervisory authority of the federal state of your place of residence or to the authority responsible for us as the responsible body.

A list of the supervisory authorities (for the non-public area) can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Collection of general information when you visit our website

Type and purpose of processing:

When you access our website, i.e. if you do not register or otherwise submit information, information of a general nature is automatically recorded. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and the like.

In particular, they are processed for the following purposes:

  • Ensuring a problem-free connection to the website
  • Ensuring smooth use of our website
  • Evaluation of system security and stability or other administrative use cases.

We do not use your data to draw conclusions about you personally. We may however statistically evaluate such data in order to optimize our website and the technology behind it.

Legal basis:

Processing takes place in accordance with Art. 6 Para. 1 lit.  GDPR based on our legitimate interest in improving the stability and functionality of our website.

Receiver:

The recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Storage period:

The data will be deleted as soon as it is no longer required for the purpose of the survey. For the data used to provide the website, this is generally the case when the respective session has ended.

Provision required:

The provision of the aforementioned personal data is not required by law or contract. Without the IP address, however, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or restricted. For this reason a contradiction is excluded.

Cookies

Type and purpose of processing:

Like many other websites, we also use so-called “cookies”. Cookies are small text files that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website.

This gives us certain data such as IP address, browser used and operating system.

Cookies cannot be used to start programs or transfer viruses to a computer. Based on the information contained in cookies, we can make navigation easier for you and enable our website to be displayed correctly.

In no case will the data collected by us be passed on to third parties or be linked with personal-identifying data without your prior consent.

You can also view our website without cookies. In general, you can deactivate the use of cookies at any time via the settings of your browser. Please use the help functions of your internet browser to find out how you can change these settings. Please note that functions of our website may not work if you have deactivated the use of cookies.

Storage duration and cookies used:

If you allow us to use cookies through your browser settings or consent, the following cookies can be used on our website:

  • Occasional: PopUps (30 days)
  • Google Tag Manager (30 days)
  • Google Remarketing (30 days)
  • Facebook Pixel (30 days)
  • LinkedIn Insight Day (30 days)

The extent to which these cookies may concern personal data is described in the following sections.

You can delete individual cookies or the entire set of cookies via your browser settings. You will also receive information and instructions on how to delete these cookies or how to block their storage in advance. Depending on the provider of your browser, you will find the necessary information under the following links:

 

Registration on our website

Type and purpose of processing:

When registering for the use of our personalized services, some personal data is collected, such as name, address, contact and communication data (e.g. telephone number and e-mail address). If you are registered with us, you can access content and services that we only offer to registered users. Registered users also have the option of changing or deleting the data provided during registration at any time. Of course, we will also provide you with information about the personal data we have stored about you at any time.

Legal basis:

The processing of the data entered during registration is based on the consent of the user (Art. 6 Para. 1 lit. a GDPR).

If the registration serves to fulfill a contract to which the data subject is a party or to carry out pre-contractual measures, the additional legal basis for processing the data is Art. 6 Para. b GDPR.

Receiver:

The recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Storage period:

In this context, data is only processed as long as the relevant consent is available. They will then be deleted, provided that there are no statutory retention requirements. To contact us in this context, please use the contact details given at the end of this data protection notice.

Provision required or required:

The provision of your personal data is voluntary, based solely on your consent. Without the provision of your personal data, we cannot grant you access to our offered content and services.

Newsletter

Type and purpose of processing:

Your data will only be used to send you the newsletter you have subscribed to by email. Your name is given in order to be able to address you personally in the newsletter and, if necessary, to identify you, if you want to exercise your rights as a data subject.

To receive the newsletter, it is sufficient to provide your e-mail address. When you register to receive our newsletter, the data you provide will only be used for this purpose. Subscribers can also be informed by e-mail about circumstances that are relevant for the service or registration (e.g. changes to the newsletter offer or technical circumstances).

We need a valid email address for effective registration. In order to check that the registration is actually made by the owner of an e-mail address, we use the “double opt-in” procedure. For this purpose, we log the order for the newsletter, the dispatch of a confirmation email and the receipt of the response requested. Further data is not collected. The data will only be used to send the newsletter and will not be passed on to third parties.

Legal basis:

On the basis of your expressly given consent (Art. 6 Para. 1 lit. a GDPR), we will regularly send you our newsletter or comparable information by e-mail to your specified e-mail address.

You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. There is a corresponding link in every newsletter. You can also unsubscribe directly on this website at any time or inform us of your revocation using the contact option given at the end of this data protection notice.

Receiver:

The recipients of the data may be contract processors.

Storage period:

In this context, the data will only be processed as long as the relevant consent is available. Then they will be deleted.

Provision required or required:

The provision of your personal data is voluntary, based solely on your consent. Unfortunately, we cannot send you our newsletter without your consent.

Contact form

We use Zoho Webforms module of the Zoho CRM service on this website. Provider is Zoho Corporation GmbH., Estancia IT Park, Plot No. 140 151, GST Road, Vallancherry Village, Chengalpattu Taluk, Kanchipuram District 603 202, India (hereinafter “Zoho CRM”).

Type and purpose of processing:

Data submitted through the webforms is transferred directly to Zoho CRM and stored there. Zoho CRM helps us manage contact data of our customers and prospects and organise our sales and communication processes. For more information on terms of use and data protection, see Zoho’ privacy policy https://www.zoho.com/privacy.html and https://www.zoho.com/gdpr.html.

The data you enter will be stored for the purpose of individual communication with you. To do this, you must provide a valid email address and your name. This is used to assign the request and then answer it. The specification of further data is optional.

Legal basis:

The data entered in the contact form is processed on the basis of a legitimate interest (Art. 6 Para. 1 lit. f GDPR).

By providing the contact form, we would like to make it easy for you to contact us. The information you provide will be stored for the purpose of processing the request and for possible follow-up questions.

If you contact us to inquire about an offer, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 Para. 1 lit.b GDPR).

Receiver:

The recipients of the data may be contract processors.

Storage period:

Data will be deleted no later than 6 months after processing the request.

If there is a contractual relationship, we are subject to the statutory retention periods according to HGB and delete your data after these periods have expired.
Provision required or required:

The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, your e-mail address and the reason for the request.

Use of Google Analytics

Type and purpose of processing:

This website uses Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA (hereinafter: “Google”). Google Analytics uses so-called “cookies”, ie text files that are stored on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymization on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

The purposes of data processing are to evaluate the use of the website and to compile reports on activities on the website. Based on the use of the website and the Internet, further related services are then to be provided.

Legal basis:

The data is processed on the basis of the user’s consent (Art. 6 Para. 1 lit. a GDPR).

Receiver:

The recipient of the data is Google as the processor. For this purpose, we have concluded the corresponding order processing contract with Google.

Storage period:

The data is deleted as soon as it is no longer required for our recording purposes.

Third country transfer:

Google processes your data in the USA and has committed itself to complying with the standard contractual clauses.

Provision required or required:

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this can lead to functional restrictions on the website.

Revocation of consent:

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: Browser add-on to deactivate Google Analytics .

In addition or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our website by clicking this link. An opt-out cookie will be installed on your device. This will prevent future collection by Google Analytics for this website and for this browser as long as the cookie remains installed in your browser.

Profiling:

With the help of the tracking tool Google Analytics, the behavior of the website visitors can be evaluated and the interests analyzed. To do this, we create a pseudonymous user profile.

Use of script libraries (Google Web Fonts)

Type and purpose of processing:

In order to present our content correctly and graphically appealing across browsers, we use “Google Web Fonts” from Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; hereinafter “Google”) to display fonts.

The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy/

Legal basis:

The legal basis for the integration of Google web fonts and the associated data transfer to Google is your consent (Art. 6 Para. 1 lit. a GDPR).

Receiver:

Calling up script libraries or font libraries automatically triggers a connection to the library operator. It is theoretically possible but currently unclear whether, and for what purposes, the operator may collect Google data in this case.

Storage period:

We do not collect any personal data through the integration of Google web fonts.

You can find more information about Google Web Fonts at https://developers.google.com/fonts/faq and in Google’s data protection declaration: https://www.google.com/policies/privacy/ .
Third country transfer:

Google processes your data in the USA and has committed itself to complying with the standard contractual clauses.

Provision required or required:

The provision of personal data is not required by law or contract. However, the correct representation of the content using standard fonts may not be possible.

Revocation of consent:

The JavaScript programming language is regularly used to display the content. You can therefore object to the data processing by deactivating the execution of JavaScript in your browser or by installing a JavaScript blocker. Please note that this can lead to functional restrictions on the website.

Embedded YouTube Videos

Type and purpose of processing:

We embed YouTube videos on some of our websites. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter “YouTube”). When you visit a page with the YouTube plug-in, a connection to YouTube servers is established. This tells YouTube which pages you are visiting. If you are logged into your YouTube account, YouTube can assign your surfing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand.

If a YouTube video is started, the provider uses cookies that collect information about user behavior.

Further information on the purpose and scope of the data collection and its processing by YouTube can be found in the provider’s data protection declaration, where you will also find further information on your rights in this regard and setting options to protect your privacy ( https://policies.google.com/privacy ) .

Legal basis:

The legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Art. 6 Para. 1 lit. a GDPR).

Receiver:

Calling up YouTube automatically triggers a connection to Google.

Storage period and revocation of consent:

If you have deactivated the storage of cookies for the Google ad program, you will not have to expect such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you have to block the storage of cookies in your browser.

Further information on data protection at “YouTube” can be found in the provider’s data protection declaration at: https://www.google.de/intl/de/policies/privacy/

Third country transfer:

Google processes your data in the USA and has committed itself to complying with the standard contractual clauses.

Provision required or required:

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this can lead to functional restrictions on the website.

Social Media plugins

Type and purpose of processing:

We offer you the option of using so-called “social media buttons” on our website. To protect your data, we rely on the “Shariff” solution during implementation. As a result, these buttons are only integrated into the website as a graphic that contains a link to the corresponding website of the button provider. By clicking on the graphic you will be forwarded to the services of the respective provider. Only then will your data be sent to the respective provider. Unless you click on the graphic, there will be no exchange between you and the providers of the social media buttons. Information about the collection and use of your data in social networks can be found in the respective terms of use of the respective provider. You can find more information about the Shariff solution here: http://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html

We have integrated the social media buttons of the following companies on our website:

  • Twitter, https://twitter.com
  • LinkedIn, https://www.linkedin.com
  • Xing, https://login.xing.com
  • Facebook: https://www.facebook.com/
  • YouTube: https: // www .youtube.com / channel / UCVfIXqiTLwf3ucK1y4GUN8w

Google AdWords

Type and purpose of processing:

Our website uses Google conversion tracking. The operating company for the services of Google AdWords is Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. If you reached our website via an advertisement placed by Google, Google Adwords will set a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad placed by Google.

If the user visits certain pages on our website and the cookie has not yet expired, we and Google can see that the user clicked on the ad and was redirected to this page. Every Google AdWords customer receives a different cookie. Cookies cannot therefore be tracked via the websites of AdWords customers. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified.

Legal basis:

The legal basis for the integration of Google AdWords and the associated data transfer to Google is your consent (Art. 6 Para. 1 lit. a GDPR).

Receiver:

Every time you visit our website, personal data, including your IP address, is transferred to Google in the USA. These personal data are stored by Google. Google may pass this personal data collected through the technical process on to third parties.

Our company does not contain any information from Google that could be used to identify the data subject.

Storage period:

These cookies lose their validity after 30 days and are not used for personal identification.

Third country transfer:

Google processes your data in the USA and has committed itself to complying with the standard contractual clauses.

Revocation of consent:

If you do not want to participate in the tracking, you can refuse the setting of a cookie required for this – for example via a browser setting that generally deactivates the automatic setting of cookies or set your browser so that cookies from the domain “googleleadservices.com” are blocked.

Please note that you must not delete the opt-out cookies as long as you do not want measurement data to be recorded. If you have deleted all of your cookies in your browser, you must set the respective opt-out cookie again.

Provision required or required:

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this can lead to functional restrictions on the website.

Use of Google Re-marketing

Type and purpose of processing:

This website uses the re-marketing function of Google Inc. The operating company of the Google Re-marketing services is Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereinafter “Google”).

The function is used to present website visitors within the Google advertising network with interest-based advertisements. A so-called “cookie” is stored in the browser of the website visitor, which makes it possible to recognize the visitor when he visits websites that belong to the Google advertising network. On these pages, the visitor can be presented with advertisements that relate to content that the visitor has previously accessed on websites that use Google’s re-marketing function.

Legal basis:

The legal basis for the integration of Google Re-marketing and the associated data transfer to Google is your consent (Art. 6 Para. 1 lit. a GDPR).

Receiver:

Every time you visit our website, personal data, including your IP address, is transferred to Google in the USA. These personal data are stored by Google. Google may pass this personal data collected through the technical process on to third parties.

Our company does not contain any information from Google that could be used to identify the data subject.

Revocation of consent:

According to its own information, Google does not collect any personal data during this process. If you still do not want Google’s remarketing function, you can always deactivate it by making the appropriate settings at https://support.google.com/adwordspolicy/answer/143465 . Alternatively, you can deactivate the use of cookies for interest-based advertising via the advertising network initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp .

Provision requirement:The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this can lead to functional restrictions on the website.

Use of LinkedIn Insight Tag and LinkedIn Re-marketing

Type and purpose of processing:

The LinkedIn Insight Tag enables the collection of data on visits to this website, including the URL, referrer URL, IP address, device and browser properties (user agent) and time stamp. The IP addresses are shortened or (if they are used to reach members across devices ) hashed. The direct IDs of the members are removed within seven days in order to pseudonymize the data. This remaining pseudonymized data will then be deleted within 180 days.

LinkedIn does not share any personal data with the owner of the website (mVISE AG), but only provides reports (in which you are not identified) about the website target group and ad performance.

Legal basis:The legal basis for the integration of LinkedIn remarketing and the associated data transfer to LinkedIn is your consent (Art. 6 Para. 1 lit. a GDPR).

Revocation of consent:

Members of LinkedIn can their personal data for the use in advertising in their account settings control : https://www.linkedin.com/psettings/advertising/actions-that-showed-interest

Provision requirement:

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this can lead to functional restrictions on the website.

Use of Facebook Pixel and Facebook Re-marketing

Type and purpose of processing:

Our website uses the visitor action pixel from Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) to measure conversion.

In this way, the behavior of the page visitors can be tracked after they have been redirected to the provider’s website by clicking on a Facebook ad. This allows the effectiveness of Facebook advertisements to be evaluated for statistical and market research purposes and future advertising measures to be optimized.

The data collected are anonymous for us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with the Facebook data usage guidelines. This enables Facebook to place advertisements on Facebook pages as well as outside of Facebook. As the website operator, we cannot influence this use of the data.

Legal basis:

The legal basis for the integration of Facebook Pixel and the associated data transfer to Facebook is your consent (Art. 6 Para. 1 lit. a GDPR).

Revocation of consent:

You can find further information on protecting your privacy in Facebook’s data protection information: https://www.facebook.com/about/privacy/ .

You can also deactivate the remarketing function “Custom Audiences” in the advertising settings area at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen . To do this, you must be logged in to Facebook.

If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/ .

Provision required or required:

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this can lead to functional restrictions on the website.

SSL encryption

In order to protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) over HTTPS.

Used contract processors

The following organizations, companies or persons have been commissioned by the operator of this website to process data:

KAMP Netzwerkdienste GmbH
Vestische Strasse 89-91
46117 Oberhausen

Google Analytics
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4

Cookiebot
Cybot A / S
Havnegade 39,
1058 Copenhagen

TYPEFORM SL
C / Bac de Roda, 163 (Local), 08018 – Barcelona

LinkedIn
LinkedIn Ireland Unlimited Company
Wilton Place,
Dublin 2, Ireland

Facebook
Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2

Change of our data protection regulations

We reserve the right to adapt this data protection information so that it always complies with current legal requirements or to implement changes to our services in the data protection information, e.g. when introducing new services. The new data protection information will then apply to your next visit.

Questions to the data protection officer

If you have any questions about data protection, please send us an email or contact the person responsible for data protection in our organization directly:

datenschutz@salesphere.com

The data protection declaration was created with the help of activeMind AG, the experts for external data protection officers (Version # 2019-04-10).  

Hosted in Germany

SaleSphere is hosted exclusively in German data centers. In this context, we guarantee our customers one hundred percent conformity with the EU GDPR.