The following privacy policy explains what information we collect during your visit to our website and what we use the data for.

Responsible  entity within the meaning of data protection law:

ONOMOTION GmbH
Bouchéstr. 12
Halle 20
12435 Berlin

Contact details of the data protection officer:

Our data protection officer is Bitkom Servicegesellschaft mbH, Albrechtstraße 10, 10117 Berlin, Germany. Contact inquiries can be made via e-mail to datenschutz@bitkom-consult.de.

Definitions

Our privacy policy should be simple and understandable for everyone. In this privacy policy, the official terms of the General Data Protection Regulation (GDPR) are generally used. The official definitions can be found in Art. 4 DSGVO.

This privacy policy describes what data we collect about you and how this data may be stored and processed.

Usage data / Server log data

When you visit our website, our web server stores standardised information about your terminal device and the browser used in a log file. We process this data in order to be able to analyse errors on our server and attempts at misuse. In detail, this data record consists of:

– the name of the website accessed

– the date and time of the request,

– the amount of data transferred,

– the message about the successful retrieval,

– the IP address of the requesting computer,

– the specific address of the page you called up from us,

– if applicable, the page from which you reached us,

– the transmitted identifier of the browser.

We cannot identify you from this data; the log data is only evaluated anonymously. Log data is regularly deleted in a timely manner, but at the latest after 90 days. The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f) DSGVO.

 

SSL or TLS encryption

For security reasons and to protect the transmission of personal data and other confidential content (e.g. enquiries to the person responsible), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the string “https://” and the lock symbol in your browser line.

Contact form and contact by e-mail

If you send us enquiries via the contact form or e-mail, your details from the enquiry form or your e-mail, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up enquiries. An e-mail address is required to contact you, as well as your name and telephone number. Details such as company and address are voluntary. We will not pass on this data without your consent. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 Para. 1 lit. f DSGVO and, if applicable, Art. 6 Para. 1 lit. b DSGVO if your request is aimed at concluding a contract. Your data will be deleted after your request has been processed, provided that there are no legal obligations to retain data. You can object to the processing of your personal data at any time in the case of Art. 6 para. 1 lit. f DSGVO

Newsletter

If you would like to receive the newsletter offered on the website with regular information about our offers and products, we require your e-mail address as mandatory information. Additional data is provided in order to be able to address you personally in the newsletter and/or to identify you if you wish to exercise your rights as a data subject.

We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you our newsletter by e-mail if you have expressly confirmed that you consent to the sending of newsletters. In the first step, you will receive an e-mail with a link that you can use to confirm that you, as the owner of the corresponding e-mail address, wish to receive future newsletters. With the confirmation, you give us your consent in accordance with Art. 6 Para. 1 lit. a DSGVO that we may use your personal data for the purpose of the desired newsletter dispatch.

When you register for the newsletter, we store, in addition to the e-mail address required for sending, the IP address via which you registered for the newsletter as well as the date and time of registration and confirmation, in order to be able to trace possible misuse at a later date. You can unsubscribe from the newsletter at any time via the link included in each newsletter or by sending an email to the responsible person named above. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to the continued use of the collected data or the continued processing is otherwise legally permitted.

This website uses the provider Mailchimp, The Rocket Science Group LLC d/b/a Mailchimp, 675 Ponce de Leon Ave NE, Suite 5000 Atlanta, GA 30308 USA to send newsletters.

Your personal data is stored on the server there. Mailchimp uses this information to send and evaluate the newsletter on our behalf.

When transmitting or transferring data, we invoke compliance with standard contractual clauses in accordance with Art 46 DSGVO.

Further information can be found in the privacy policy of Mailchimp: https://mailchimp.com/legal/privacy/

Cookies

So-called “cookies” are used on our site. Cookies are small text files used by websites. These simplify and accelerate the control of your visit to our website or are necessary to enable you to use our website. If you do not want our website to use cookies on your computer, you can deactivate cookies in your browser settings or adjust the settings so that you are informed when cookies are used on a website.

Depending on where a cookie comes from, a distinction can be made between so-called first-party cookies and third-party cookies:

First-party cookies

Cookies that are generated and stored locally by the website operator, as the controller, or by a processor commissioned by the operator.  Only the operator has access to these cookies.

Third-party cookies

Cookies that are generated, set and accessed by third-party providers who are not acting as processors on behalf of the operator of the website.
Depending on the validity period, a distinction can also be made between so-called transient and persistent cookies:

Transient cookies

Cookies that are automatically deleted when you close the browser. These include, in particular, session cookies.

Persistent cookies

Cookies that remain stored on your terminal device for a specified period of time after you close your browser.

Depending on their nature and purpose, the user’s consent may be required for the use of certain cookies. In this respect, cookies can be differentiated according to whether the user’s consent is obligatory for their use:

Cookies that do not require consent

Cookies that are absolutely necessary in order for the website operator, which has been expressly requested by the subscriber or user, to be able to provide this service (“cookies that are absolutely necessary”)

Cookies requiring consent

Cookies that are used for all purposes other than those mentioned above.

Technically necessary cookies

The cookies we use are what are known as “technically necessary cookies”. Technically necessary cookies help to make a website usable by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies. These cookies are set automatically when you access our website or a particular function, unless you have prevented cookies from being set through settings in your browser.

Our cookies are only needed for the duration of your current service call or session and are deleted again or lose their validity as soon as you leave our website or your current session expires (so-called “session cookies”).

Analysis tools

We use tracking technology on our website to measure and evaluate our website and optimize our content. To protect our users and partners, we can also detect and prevent fraud and security risks.

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior patterns of website visitors. To thatend, the website operator receives a variety of user data, such as pages accessed, time spent on the page, theutilized operating system and the user’s origin. Google may consolidate these data in a profile that is allocated to the respective user or the user’s device.

Google Analytics uses technologies that make the recognition of the user for the purpose of analyzing the user behavior patterns (e.g. cookies or device fingerprinting). The website use information recorded by Google is, as a rule transferred to a Google server in the United States, where it is stored.

This analysis tool is used on the basis of Art. 6 Sect. 1 lit. f GDPR. The operator of this website has a legitimate interest in the analysis of user patterns to optimize both, the services offered online and the operator’s advertising activities. If a corresponding agreement has been requested (e.g. an agreement to thestorage of cookies), the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the agreement can be revoked at any time.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European

Commission. Details can be found here:

https://privacy.google.com/businesses/controllerterms/mccs/.

IP anonymization

On this website, we have activated the IP anonymization function. As a result, your IP address will be

abbreviated by Google within the member states of the European Union or in other states that have ratified the Convention on the European Economic Area prior to its transmission to the United States. The full IP address will be transmitted to one of Google’s servers in the United States and abbreviated there only inexceptional cases. On behalf of the operator of this website, Google shall use this information to analyze your use of this website to generate reports on website activities and to render other services to the operator of this website that are related to the use of the website and the Internet. The IP address transmitted in conjunction with Google Analytics from your browser shall not be merged with other data in Google’s possession.

Browser plug-in

You can prevent the recording and processing of your data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at: https://support.google.com/analytics/answer/6004245?hl=en.

Storage duration

Data stored by Google at user and event level that is linked to cookies, user identifiers (e.g. user ID) or advertising IDs (e.g. double click cookies, Android advertising ID) is anonymised or deleted after 14 months. Details can be found under the following link: https://support.google.com/analytics/answer/7667196?hl=de

Google AJAX Search API

We use Ajax on these pages. Google AJAX Search API is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This tool is used to optimise loading speeds. For this purpose, program libraries are called up from Google servers and Google’s CDN (content delivery network) is used. If you have previously used jQuery on another page from the Google CDN, your browser will fall back on the cached copy. If this is not the case, it will require a download, which will transfer data from your browser to Google Inc. (“Google”). Your data will be transferred to the USA. You can find out more in the provider’s data protection information: https://policies.google.com/privacy?hl=de&gl=de.

The legal basis for this processing is the legitimate interest in offering you the possibility to search the contents of our site in the event of a possibly large number of contributions or referral cases. We do not know what data Google links to the data received and for what purposes Google uses this data. Google LLC is based in the USA.

The processing is based on EU standard contractual clauses. This provides Google with a guarantee of compliance with European data protection law. To prevent the execution of Java Script code from Google altogether, you can install a Java Script blocker (e.g. www.noscript.net).

Google Web Fonts

To ensure that fonts used on this website are uniform, this website uses so-called Web Fonts provided by Google. When you access a page on our website, your browser will load the required web fonts into yourbbrowser cache to correctly display text and fonts.

To do this, the browser you use will have to establish a connection with Google’s servers. As a result, Google will learn that your IP address was used to access this website. The use of Google Web Fonts is based on Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in a uniform presentation of the font on the operator’s website. If a respective declaration of consent has been obtained (e.g. consent to the archiving of cookies), the data will be processed exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR. Any such consent may be revoked at any time.

If your browser should not support Web Fonts, a standard font installed on your computer will be used.

For more information on Google Web Fonts, please follow this link:
https://developers.google.com/fonts/faq and consult Google’s Data Privacy Declaration under: https://policies.google.com/privacy?hl=en.

Google Tag Manager

We use the “Google Tag Manager” on our website, a service provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4. Ireland.

The Google Tag Manager is a solution with which companies can manage website tags via an interface. The Google Tag Manager is therefore a cookie-free domain that does not collect any personal data. The Google Tag Manager merely ensures that other tags are triggered, which in turn may collect data. However, the Google Tag Manager does not access this data.

If a deactivation has been made at domain or cookie level, it remains in place for all tracking tags, insofar as these are implemented with the Google Tag Manager. The legal basis results from Art. 6 para. 1 lit.f DSGVO.

Further information on the Google Tag Manager and Google’s data protection can be found on Google’s website: https://www.google.com/intl/de/tagmanager/use-policy.html

https://policies.google.com/privacy

Google Maps

This site uses the map service Google Maps. The provider is Google Ireland Limited (“Google”), Gordon

House, Barrow Street, Dublin 4, Ireland. To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission. Google Maps is used in the interest of an appealing presentation of our online offers and to make it easy to find the places we indicate on the website. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f DSGVO. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time. Data transfer to the USA is based on the standard contractual clauses of the EU Commission.

Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

More information on the handling of user data can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of reCAPTCHA is to determine whether data entered on this website (e.g. information entered into a contact form) is being provided by a human user or by an automated program. To determine this, reCAPTCHA analyzes the behavior of the website visitors based on a variety of parameters. This analysis is triggered automatically as soon as the website visitor enters the site. For this analysis, reCAPTCHA evaluates a variety of data (e.g. IP address, time the website visitor spent on the site or cursor movements initiated by the user). The data tracked during such analyses are forwarded to Google.

reCAPTCHA analyses run entirely in the background. Website visitors are not alerted that an analysis is underway.

Data are stored and analyzed on the basis of Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in the protection of the operator’s websites against abusive automated spying and against SPAM. If a respective declaration of consent has been obtained, the data will be processed exclusively on the basis of Art. 6 Sect. 1 lit. a DGDPR. Any such consent may be revoked at any time.

For more information about Google reCAPTCHA please refer to the Google Data Privacy Declaration and

Terms Of Use under the following links:
https://policies.google.com/privacy?hl=en and https://policies.google.com/terms?hl=en.

Social media

We maintain online presences within social networks in order to communicate with the users active there and to offer information about us there. When you visit our site, however, no direct connection is established between your browser and the servers of the respective social networks.

However, if you click on the “share button” (plug-in) of the respective network, you will be redirected to your user account in a separate browser window – provided you are logged in to your user account. This establishes a direct connection between your browser and the server of the respective network via the plug-in. The network thereby receives the information that you have visited our website with your IP address.

We would like to point out that we have no knowledge of the content of the transmitted (personal) data or its use by the respective networks. For a detailed description of the respective forms of processing and the options for objection, please refer to the data protection declarations and information provided by the operators of the respective networks.

The transmission of data takes place regardless of whether you actually have an account with the provider or are logged in there. If you are logged in to the provider, your data is directly assigned to your account. If applicable, the providers also use cookies on your computer to track you.

As far as we are aware, the provider stores this data in usage profiles, which it uses for the purposes of advertising, market research and/or designing its website in line with requirements. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. To exercise this right of objection, please contact the respective provider.

The purpose and scope of the data collection and the further processing and use of the data by the respective social network, as well as your rights in this regard and setting options for protecting your privacy, can be found in the respective information provided by the providers.

LinkedIn

Our website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. For more information, please see LinkedIn’s privacy policy at: https://www.linkedin.com/legal/privacy-policy.

 Instagram

Our website uses functions of the Instagram network. The provider is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. For more information on data protection, please see the Instagram privacy policy https://help.instagram.com/519522125107875.

LinkedIn Insight Tag

The LinkedIn Insight Tag is used to create usage analyses regarding our website and to optimise our digital offer. The Insight Tag functions are used to track conversions, retargeting and information about website visitors.

LinkedIn does not share any personal data with us but only provides reports (in which you are not identified) on website audience and ad performance. The legal basis results from our legitimate interest according to Art. 6 para.1 lit. f DSGVO.

LinkedIn itself collects your URL, referrer URL, IP address, device and browser properties as well as timestamps for service provision. The IP addresses are shortened or hashed. The direct identifiers are removed within seven days to pseudonymise the data. This remaining data is then deleted within 180 days.

You can find more information about LinkedIn’s data protection at: https://www.linkedin.com/legal/privacy-policy

Facebook Plug-In

We operate a so-called fan page on Facebook to provide information about our company. Interested parties can contact us via the fan page. This is an offer from Facebook Ireland Ltd (“Facebook”), 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

We have agreed to Facebook’s terms and conditions for commercial use. When you visit our fan page on Facebook, Facebook sets our fan page cookie on your end device and collects so-called “insights data” about the use of our fan page:

Information about your visit to our Facebook Fanpage (your IP address, last visited website, file name, URL).

Information about your Facebook interactions regarding our content (“likes”)

If applicable, your comments will be saved, including a time stamp.

These cookies from Facebook each have a unique cookie ID. On the basis of the data processing carried out by Facebook, it is possible to receive statistical data from Facebook in accordance with our joint responsibility pursuant to Art. 26 DS-GVO. These cookies from Facebook each have a unique cookie ID. On the basis of the data processing carried out by Facebook, we receive anonymised statistical data of the Fanpage visitors from Facebook in accordance with our joint responsibility pursuant to Art. 26 DSGVO. It is not possible for us to identify you personally using the Insights function and the statistics it provides at any time during your visit to our fan page.

The legal basis for the collection and processing of your personal data by Facebook for the aforementioned statistical purposes is Art. 6 para. 1 sentence 1 lit. f) DS-GVO.

Only Facebook knows when and in what form it corrects, stores or deletes your personal data. We have no influence on this.  Since Facebook, as the provider of the Fanpage and the Facebook Insights tool, carries out the surveys and evaluations of personal data required for our statistics. The information generated by the cookies about the use of the online offer by the users is usually transferred to a server in the USA and stored there. The processing takes place on the basis of EU standard contractual clauses. This provides Facebook with a guarantee of compliance with European data protection law.

Information on how to contact Facebook, on the setting options for advertisements as well as the data usage guidelines are available at the following link: http://de-de.facebook.com/about/privacy

Further information on our joint responsibility with Facebook can be found at: https://www.facebook.com/legal/terms/page_controller_addendumaten, Facebook also has the possibility to establish a personal reference on the basis of this data.

YouTube with expanded data protection integration

Our website embeds videos of the website YouTube. The website operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in the expanded data protection mode. According to YouTube, this mode ensures that YouTube does not store any information about visitors to this website before they watch the video. Nevertheless, this does not necessarily mean that the sharing of data with YouTube partners can be ruled out as a result of the expanded data protection mode. For instance, regardless of whether you are watching a video, YouTube will always establish a connection with the Google DoubleClick network.

As soon as you start to play a YouTube video on this website, a connection to YouTube’s servers will be established. As a result, the YouTube server will be notified, which of our pages you have visited. If you are logged into your YouTube account while you visit our site, you enable YouTube to directly allocate your browsing patterns to your personal profile. You have the option to prevent this by logging out of your YouTube account.

Furthermore, after you have started to play a video, YouTube will be able to place various cookies on your device or comparable technologies for recognition (e.g. device fingerprinting). In this way YouTube will be able to obtain information about this website’s visitors. Among other things, this information will be used to generate video statistics with the aim of improving the user friendliness of the site and to prevent attempts to commit fraud.

Under certain circumstances, additional data processing transactions may be triggered after you have started to play a YouTube video, which are beyond our control. The use of YouTube is based on our interest in presenting our online content in an appealing manner.

Pursuant to Art. 6 Sect. 1 lit. f GDPR, this is a legitimate interest. If a corresponding agreement has been requested, the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the agreement can be revoked at any time.

For more information on how YouTube handles user data, please consult the YouTube Data Privacy Policy under: https://policies.google.com/privacy?hl=en.

Vimeo

This website uses plug-ins from the video portal Vimeo. The provider is Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA.

When you visit one of our pages equipped with a Vimeo plug-in, a connection to the Vimeo servers is established. In the process, the Vimeo server is informed which of our pages you have visited. In addition, Vimeo obtains your IP address. This also applies if you are not logged in to Vimeo or do not have an account with Vimeo. The information collected by Vimeo is transmitted to the Vimeo server in the USA.

If you are logged into your Vimeo account, you enable Vimeo to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your Vimeo account.

The use of Vimeo is in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f DS-GVO. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DS-GVO; the consent can be revoked at any time.

Further information on the handling of user data can be found in Vimeo’s privacy policy at: https://vimeo.com/privacy.

Webinars

On our website there is the possibility to participate in webinars. When registering for a webinar, the data from the input mask, such as name, company name and e-mail address, are transmitted to us. In addition, the date and time of registration will be collected.

Within the scope of the registration process, your consent is obtained in accordance with Art. 6 Para. 1 lit. a DSGVO for the processing of the registration data. This is because statistical data is collected and transmitted to us during and after the webinar. This includes data such as participation status and duration, questions asked/answered and interest in the webinar.

jQuery

jQuery is a clearly structured JavaScript library which, among other things, simplifies the traversal of HTML documents and offers further advantages for the implementation of our website. The legal basis for the use results from Art. 6 para. 1 lit. f DSGVO and is based on our legitimate interest.

jQuery is provided by the OpenJSFoundation. Accordingly, the privacy policy of the third-party provider applies:

You can find more information on data protection at: https://privacy-policy.openjsf.org

Transfers to third countries

If we process data in a third country (i.e. outside the European Union (EU), the European Economic Area (EEA) or the Swiss Confederation) or do so in the context of using third-party services or disclosing, or transferring data to other persons or companies, this will only be done if it is done to fulfill our (pre)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests. Subject to express consent or contractually required transfer, we only process or have the data processed in third countries with a recognized level of data protection or on the basis of special guarantees, such as contractual obligation through so-called standard protection clauses of the EU Commission, the existence of certifications or binding internal data protection regulations (Art. 44 to 49 DSGVO, information page of the EU Commission).

Your rights

You have the following data subject rights under the principles of the GDPR.

The right to request information about your personal data processed by us in accordance with Article 15 of the GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal and the origin of your data.

The right to request the correction of inaccurate or incomplete personal data stored by us without delay in accordance with Art. 16 DSGVO.

The right to request the erasure of your personal data stored by us in accordance with Article 17 of the GDPR, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims.

The right to request the restriction of the processing of your personal data in accordance with Art. 18 DSGVO, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Art. 21 DSGVO.

You also have the right to be informed in accordance with Article 19 of the GDPR if you have asserted the right to rectification, erasure or restriction of processing against the controller. The controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.

Right to data portability pursuant to Art. 20 DSGVO: You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller, insofar as this is technically feasible.

In addition, you have a right of complaint and can exercise this with a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of the federal state where our registered office is located or, if applicable, that of your usual place of residence or workplace.

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219
10969 Berlin

E-Mail: mailbox@datenschutz-berlin.de

 

Final provisions

ONOMOTION GmbH reserves the right to amend this data protection declaration at any time in order to ensure that it always complies with current legal requirements or in order to implement changes to the services in the data protection declaration, e.g. when new services are introduced or changes are made to the website. The new data protection declaration will then apply when you call up this website again.

 

Status of this data protection declaration: March 2021