PRIVACY POLICY
CONTENTS
The following provides information on the processing of your personal data in connection with the use of our online services.
(1) Data Protection at a Glance
1.1 General Information
The following information provides a brief overview of what happens with your personal data when you visit this website. Personal data refers to all data that can be used to identify you personally. For detailed information on data protection, please refer to our Privacy Policy listed below this text.
1.2 Data Collection on this Website
1.2.1 Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the section 'Information on the Responsible Party' within this Privacy Policy.
1.2.2 How do we collect your data?
Firstly, your data is collected when you provide it to us. This may include, for example, data you enter into a contact form.
Other data is collected automatically or with your consent by our IT systems when you visit the website. These are primarily technical data (e.g., internet browser, operating system, or time of page view). This data is collected automatically as soon as you enter this website.
1.2.3 What do we use your data for?
Some of the data is collected to ensure the flawless provision of the website. Other data may be used to analyze your user behavior.
1.2.4 What rights do you have regarding your data?
You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. You also have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
You can contact us at any time with regard to this and other questions on the subject of data protection.
1.3 Analysis tools and tools from third-party providers
When you visit this website, your surfing behavior may be statistically evaluated. This is mainly done with so-called analysis programs.
You can find detailed information on these analysis programs in the following data protection declaration.
(2) Hosting
2.1 Hetzner
The provider is Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen (hereinafter referred to as Hetzner).
For details, please refer to Hetzner's privacy policy: https://www.hetzner.com/de/legal/privacy-policy/.
The use of Hetzner is based on Art. 6 (1) (f) GDPR. We have a legitimate interest in ensuring that our website is as reliable as possible. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's terminal device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.
2.2 Order processing
We have concluded an order processing agreement (AVV) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that the personal data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.
(3) General Information and Mandatory Disclosures
3.1 Data protection
We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
When you use this website, various personal data are collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
We would like to point out that data transmission over the Internet (e.g. when communicating by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.
3.2 Information on the controller
The controller responsible for data processing on this website is:
ISR Information Products AG
Hintern Brüdern 23
38100 Braunschweig
Phone: +49 (0) 531 1208-0
Email: info@isr.de
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).
3.3 Storage period
Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for processing the data no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the deletion will take place after these reasons no longer apply.
3.4 General information on the legal basis for data processing on this website
If you have consented to data processing, we process your personal data on the basis of Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, insofar as special categories of data are processed in accordance with Art. 9 para. 1 GDPR. In the event of express consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49 para. 1 lit. a GDPR. If you have consented to the storage of cookies or access to information in your end device (e.g. via device fingerprinting), the data processing is also carried out on the basis of Section 25 (1) TDDDG. Consent can be revoked at any time. If your data is required to fulfill the contract or to carry out pre-contractual measures, we process your data on the basis of Art. 6 para. 1 lit. b GDPR. Furthermore, we process your data if this is necessary to fulfill a legal obligation on the basis of Art. 6 para. 1 lit. c GDPR. Data processing may also be carried out on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. Information on the relevant legal bases in each individual case is provided in the following paragraphs of this privacy policy.
3.5 Data Protection Officer
We have appointed a data protection officer:
ISR Information Products AG
– Data Protection Coordinator –
Hintern Brüdern 23
38100 Braunschweig
Phone: +49 (0) 531 1208-0
Email: datenschutz@isr.de
3.6 Note on data transfer to third countries that are not secure under data protection law and transfer to US companies that are not DPF-certified
Among other things, we use tools from companies based in third countries that are not secure under data protection law and US tools whose providers are not certified under the EU-US Data Privacy Framework (DPF). If these tools are active, your personal data may be transferred to these countries and processed there. We would like to point out that no level of data protection comparable to that in the EU can be guaranteed in third countries that are unsafe under data protection law.
We would like to point out that the USA, as a safe third country, generally has a level of data protection comparable to that in the EU. Data transfer to the USA is therefore permitted if the recipient is certified under the "EU-US Data Privacy Framework" (DPF) or has suitable additional guarantees. Information on transfers to third countries, including data recipients, can be found in this privacy policy.
3.7 Recipients of personal data
As part of our business activities, we work together with various external bodies. In some cases, it is also necessary to transfer personal data to these external bodies. We only pass on personal data to external bodies if this is necessary in the context of fulfilling a contract, if we are legally obliged to do so (e.g. passing on data to tax authorities), if we have a legitimate interest in passing on data in accordance with Art. 6 para. 1 lit. f GDPR or if another legal basis permits the passing on of data. When using processors, we only pass on our customers' personal data on the basis of a valid contract for order processing. In the case of joint processing, a joint processing agreement is concluded.
3.8 Withdrawal of your consent to data processing
Many data processing operations are only possible with your express consent. You can withdraw your consent at any time. The legality of the data processing carried out up to the revocation remains unaffected by the revocation.
3.9 Right to object to the collection of data in special cases and to direct marketing (Art. 21 GDPR)
IF DATA PROCESSING IS BASED ON ART. 6 ABS. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 PARA. 1 GDPR).
YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING,
YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS ASSOCIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21 PARA. 2 GDPR).
3.10 Right to lodge a complaint with the competent supervisory authority
In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.
3.11 Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.
3.12 Information, correction and deletion
You have the right to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, if applicable, a right to correction or deletion of this data at any time within the framework of the applicable legal provisions. You can contact us at any time with regard to this and other questions on the subject of personal data.
3.13 Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. To do so, you can contact us at any time. The right to restriction of processing exists in the following cases:
- If you dispute the accuracy of your personal data stored by us, we generally need time to check this. You have the right to request the restriction of the processing of your personal data for the duration of the review.
- If the processing of your personal data was/is carried out unlawfully, you can request the restriction of data processing instead of erasure.
- If we no longer need your personal data, but you need it for the exercise, defense or assertion of legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
If you have lodged an objection pursuant to Art. 21 (1) GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, this data - apart from its storage - may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.
3.14 SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from
"http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
3.15 Objection to advertising emails
We hereby object to the use of contact data published as part of our duty to provide a legal notice for the purpose of sending unsolicited advertising and information material. The operators of the website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.
(4) Data Collection on this Website
4.1 Cookies
Our websites utilize so-called "cookies." Cookies are small data packets that do not cause any harm to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted after the end of your visit. Persistent cookies remain stored on your device until you delete them yourself or until an automatic deletion occurs through your web browser.
Cookies can originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of specific services from third-party companies within websites (e.g., cookies for processing payment services).
Cookies serve various functions. Numerous cookies are technically necessary, as certain website functionalities would not work without them (e.g., the shopping cart function or the display of videos). Other cookies may be used for evaluating user behavior or for advertising purposes.
Cookies that are essential for carrying out electronic communication processes, for providing certain functions you desire (e.g., for the shopping cart function), or for optimizing the website (e.g., cookies for measuring web audience) (necessary cookies) are stored based on Art. 6 Para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically flawless and optimized provision of its services. If consent for the storage of cookies and comparable recognition technologies has been requested, processing occurs exclusively on the basis of this consent (Art. 6 Para. 1 lit. a GDPR and Section 25 Para. 1 TDDDG); consent can be revoked at any time.
You can configure your browser to be informed about the setting of cookies, to allow cookies only in individual cases, to exclude the acceptance of cookies for specific cases or generally, and to activate the automatic deletion of cookies when closing the browser. Deactivating cookies may limit the functionality of this website.
4.2 Consent with Usercentrics
This website utilizes Usercentrics' consent technology to obtain your consent for storing certain cookies on your device or for employing specific technologies, and to document this in compliance with data protection regulations. The provider of this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, Website:
https://usercentrics.com/de/ (hereinafter "Usercentrics").
When you access our website, the following personal data is transmitted to Usercentrics:
• Your consent(s) or the revocation of your consent(s)
• Your IP address
• Information about your browser
• Information about your device
• Time of your visit to the website
• Geolocation
Furthermore, Usercentrics stores a cookie in your browser to associate the granted consents or their revocation with you. The data collected in this manner is stored until you request its deletion, delete the Usercentrics cookie yourself, or the purpose for data storage ceases to exist. Mandatory statutory retention periods remain unaffected.
Usercentrics is employed to obtain the legally required consents for the use of specific technologies. The legal basis for this is Art. 6 Para. 1 lit. c GDPR.
4.2.1 Data Processing Agreement
We have concluded a Data Processing Agreement (DPA) for the use of the aforementioned service. This is a contract mandated by data protection law, which ensures that personal data of our website visitors is processed only according to our instructions and in compliance with the GDPR.
4.3 Server Log Files
The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:
• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address
This data is not merged with other data sources.
The collection of this data is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically flawless presentation and optimization of its website – for this purpose, server log files must be recorded.
4.4 Contact Form
If you send us inquiries via the contact form, your details from the inquiry form, including the contact information you provided there, will be stored by us for the purpose of processing the inquiry and for any follow-up questions. We will not share this data without your consent.
The processing of this data is based on Art. 6 Para. 1 lit. b GDPR, provided that your inquiry is related to the fulfillment of a contract or is necessary for carrying out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Art. 6 Para. 1 lit. f GDPR) or on your consent (Art. 6 Para. 1 lit. a GDPR) if this was requested; consent can be revoked at any time.
The data you enter in the contact form will remain with us until you request its deletion, revoke your consent for storage, or the purpose for data storage ceases to exist (e.g., after your inquiry has been fully processed). Mandatory legal provisions – particularly retention periods – remain unaffected.
4.5 Inquiry via Email, Telephone, or Fax
If you contact us via email, telephone, or fax, your inquiry, including all resulting personal data (name, request), will be stored and processed by us for the purpose of handling your concern. We will not share this data without your consent.
The processing of this data is based on Art. 6 Para. 1 lit. b GDPR, provided that your inquiry is related to the fulfillment of a contract or is necessary for carrying out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Art. 6 Para. 1 lit. f GDPR) or on your consent (Art. 6 Para. 1 lit. a GDPR) if this was requested; consent can be revoked at any time.
The data you send to us via contact inquiries will remain with us until you request its deletion, revoke your consent for storage, or the purpose for data storage ceases to exist (e.g., after your concern has been fully processed). Mandatory legal provisions – particularly statutory retention periods – remain unaffected.
4.6 Hubspot CRM
We utilize Hubspot CRM on this website. The provider is Hubspot Inc., 25 Street, Cambridge, MA 02141 USA (hereinafter "Hubspot CRM").
Hubspot CRM enables us, among other things, to manage existing and potential customers as well as customer contacts. With the help of Hubspot CRM, we are able to capture, sort, and analyze customer interactions via email, social media, or telephone across various channels. The personal data collected in this manner can be evaluated and used for communication with potential customers or for marketing measures (e.g., newsletter mailings). Furthermore, Hubspot CRM allows us to record and analyze the user behavior of our contacts on our website.
The use of Hubspot CRM is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in highly efficient customer management and customer communication. If corresponding consent has been requested, processing occurs exclusively on the basis of Art. 6 Para. 1 lit. a GDPR and Section 25 Para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.
For details, please refer to Hubspot's privacy policy: https://legal.hubspot.com/de/privacy-policy.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:
https://www.hubspot.de/data-privacy/privacy-shield .
4.6.1 Data Processing Agreement
We have concluded a Data Processing Agreement (DPA) for the use of the aforementioned service. This is a contract mandated by data protection law, which ensures that personal data of our website visitors is processed only according to our instructions and in compliance with the GDPR.
(5) Analysis tools and advertising
5.1 Google Tag Manager
We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tool that helps us integrate tracking or statistics tools and other technologies into our website. Google Tag Manager itself does not create user profiles, store cookies, or perform independent analyses. It is used solely for the administration and playback of the tools integrated via it. However, Google Tag Manager records your IP address, which may also be transferred to Google's parent company in the United States.
The use of Google Tag Manager is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in the quick and uncomplicated integration and administration of various tools on its website. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's terminal device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the US that aims to ensure compliance with European data protection standards when processing data in the US. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
5.2 Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior of website visitors. The website operator receives various usage data, such as page views, length of stay, operating systems used, and the origin of the user. This data is summarized in a user ID and assigned to the respective end device of the website visitor.
Furthermore, we can use Google Analytics to record your mouse and scroll movements and clicks, among other things. Google Analytics also uses various modeling approaches to supplement the collected data sets and uses machine learning technologies in data analysis.
Google Analytics uses technologies that enable user recognition for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there.
The use of this service is based on your consent in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. Consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the US that is intended to ensure compliance with European data protection standards when processing data in the US. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
5.2.1 IP anonymization
Google Analytics IP anonymization is activated. This means that your IP address will be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
5.2.2 Browser plugin
You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
For more information on how Google Analytics handles user data, please refer to Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.
5.2.3 Google Signals
We use Google Signals. When you visit our website, Google Analytics collects your location, search history, YouTube history, and demographic data (visitor data), among other things. This data can be used for personalized advertising with the help of Google Signals. If you have a Google account, Google Signal links the visitor data to your Google account and uses it for personalized advertising messages. The data is also used to create anonymous statistics on the user behavior of our users.
5.2.4 Order processing
We have concluded an order processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
5.3 Google Ads
We use Google Ads. Google Ads is an online advertising program from Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads enables us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms in Google (keyword targeting). Furthermore, targeted advertisements can be displayed based on user data available to Google (e.g., location data and interests) (target group targeting). As website operators, we can evaluate this data quantitatively, for example by analyzing which search terms led to the display of our advertisements and how many advertisements led to corresponding clicks.
The use of this service is based on your consent in accordance with Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG. Consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:
https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the US that aims to ensure compliance with European data protection standards when processing data in the US. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
(6) Plugins and tools
6.1 YouTube with enhanced data protection
This website embeds videos from the YouTube website. The website is operated by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
When you visit one of these websites where YouTube is integrated, a connection to YouTube's servers is established. In doing so, the YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account.
We use YouTube in extended data protection mode. According to YouTube, videos played in extended data protection mode are not used to personalize browsing on YouTube. Advertisements displayed in extended data protection mode are also not personalized. In extended data protection mode, no cookies are set. Instead, however, so-called Local Storage elements are stored in the user's browser, which, similar to cookies, contain personal data and can be used for recognition. Details on the extended data protection mode can be found here: https://support.google.com/youtube/answer/171780 .
Potentially, further data processing operations may be triggered after activating a YouTube video, over which we have no control.
The use of YouTube is in the interest of presenting our online offerings attractively. This constitutes a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR. If corresponding consent has been requested, processing occurs exclusively on the basis of Art. 6 Para. 1 lit. a GDPR and Section 25 Para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.
Further information on data protection at YouTube can be found in their privacy policy at: https://policies.google.com/privacy?hl=de .
The company holds a certification under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA, intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF commits to adhering to these data protection standards. Further information can be obtained from the provider via the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
6.2 Google reCAPTCHA
We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
reCAPTCHA is intended to verify whether data input on this website (e.g., in a contact form) is performed by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g., IP address, duration of the website visitor's stay on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
reCAPTCHA analyses can run entirely in the background. Website visitors are then not informed that an analysis is taking place.
The storage and analysis of data are based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated espionage and SPAM. If corresponding consent has been requested, processing occurs exclusively on the basis of Art. 6 Para. 1 lit. a GDPR and Section 25 Para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.
Further information on Google reCAPTCHA can be found in Google's privacy policy and Google's terms of service at the following links:
https://policies.google.com/privacy?hl=de
and https://policies.google.com/terms?hl=de.
The company holds a certification under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA, intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF commits to adhering to these data protection standards.
Further information can be obtained from the provider via the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
6.3 Wordfence
We have integrated Wordfence into this website. The provider is Defiant Inc., Defiant, Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA (hereinafter "Wordfence").
Wordfence serves to protect our website from unwanted access or malicious cyber attacks. For this purpose, our website establishes a permanent connection to the Wordfence servers so that Wordfence can compare its databases with the accesses made on our website and block them if necessary.
The use of Wordfence is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its website as effectively as possible against cyber attacks. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's terminal device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.wordfence.com/help/general-data-protection-regulation/.
6.3.1 Order processing
We have concluded an order processing agreement (AVV) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that the personal data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.
6.4 Weglot
This website uses the Weglot translation service (Weglot SAS, 138 rue Pierre Joigneaux, 92270 Bois-Colombes, France) to provide content in different languages.
Weglot automatically detects the user's preferred language and displays the corresponding language version of the website.
When you visit our website, the following personal data is transmitted to Weglot:
- IP address of the calling device
- URL accessed
- Browser and device settings
- preferred language
- Date and time of access
Processing is carried out in order to technically provide the multilingual display of the website and to improve user-friendliness.
6.4.1 Legal basis
The use of Weglot is based on Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the appealing, international provision of our online offerings. If consent is obtained via our consent management tool (e.g., Usercentrics), processing is carried out on the basis of Art. 6 (1) lit. a GDPR in conjunction with § 25 (1) TDDDG. Consent can be revoked at any time.
6.4.2 Data processing and order processing:
Weglot processes the data on servers within the European Union.
We have concluded a contract with Weglot for order processing (Art. 28 GDPR), which ensures that personal data is only processed in accordance with our instructions and in compliance with data protection regulations.
6.4.3 Further information
Weglot privacy policy: https://weglot.com/privacy/
(7) Audio and video conferences
7.1 Data processing
We use online conference tools, among other things, to communicate with our customers. The specific tools we use are listed below. If you communicate with us via video or audio conference over the Internet, your personal data will be collected and processed by us and the provider of the respective conference tool.
The conference tools collect all data that you provide/use for the tools (email address and/or your phone number). Furthermore, the conference tools process the duration of the conference, the start and end (time) of participation in the conference, the number of participants, and other "context information" related to the communication process (metadata).
Additionally, the tool provider processes all technical data required for handling online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speaker, and the type of connection.
If content is exchanged, uploaded, or otherwise provided within the tool, it will also be stored on the servers of the tool providers. Such content includes, in particular, cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards, and other information shared during the use of the service.
Please note that we do not have full control over the data processing operations of the tools used. Our capabilities are largely determined by the corporate policy of the respective provider. Further information on data processing by the conference tools can be found in the privacy policies of the respective tools, which we have listed below this text.
7.2 Purpose and legal basis
The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6 (1) (b) GDPR). Furthermore, the use of the tools serves to generally simplify and accelerate communication with us or our company (legitimate interest within the meaning of Art. 6 (1) (f) GDPR). If consent has been requested, the use of the relevant tools is based on this consent; consent can be revoked at any time with effect for the future.
7.3 Storage period
The data collected directly by us via the video and conference tools will be deleted from our systems as soon as you request us to do so, revoke your consent to storage, or the purpose for data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory legal retention periods remain unaffected.
We have no influence on the storage period of your data stored by the operators of the conference tools for their own purposes. For details, please contact the operators of the conference tools directly.
(8) Conference tool used
We use the following conference tools:
8.1 Zoom
We use Zoom. This service is provided by Zoom Communications Inc., San Jose, 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA. For details on data processing, please refer to Zoom's privacy policy: https://explore.zoom.us/de/privacy/.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://explore.zoom.us/de/privacy/.
8.1.1 Order processing
We have concluded an order processing agreement (AVV) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that the personal data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.
8.2 Microsoft Teams
We use Microsoft Teams. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. For details on data processing, please refer to the Microsoft Teams privacy policy: https://privacy.microsoft.com/de-de/privacystatement.
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the US that is intended to ensure compliance with European data protection standards when processing data in the US. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this is available from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000KzNaAAK&status=Active
8.2.1 Order processing
We have concluded an order processing agreement (AVV) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that the personal data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.
(9) Own services
9.1 Handling of applicant data
We offer you the opportunity to apply to us (e.g., via email, postal mail, or an online application form). Below, we inform you about the scope, purpose, and use of your personal data collected during the application process. We assure you that the collection, processing, and use of your data comply with applicable data protection law and all other legal provisions, and that your data will be treated with strict confidentiality.
9.2 Application portal (online application form)
Our online application portal is technically provided by our service provider
d.vinci HR-Systems GmbH
Nagelsweg 37-39
20097 Hamburg (hereinafter: d.vinci)
operated. d.vinci solely provides software and computing resources and otherwise has no influence on the application process. This constitutes processor activities in accordance with Art. 28 GDPR.
Our career pages are operated using widgets provided by d.vinci or a portal directly created via d.vinci. These establish a direct technical connection to d.vinci as soon as you access these pages. This results in an automatic data transmission via your internet browser for technical operational and maintenance purposes. The following data is stored by d.vinci:
- Date and time of access
- Browser type and version
- Operating system used
- URL of the previously visited website
- Volume of data transmitted
- IP address of the access
This data is stored by d.vinci exclusively for technical reasons and is never attributed to a specific individual. The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. f GDPR.
d.vinci HR-Systems GmbH is contractually obliged to ensure the protection of your personal data through technical and organizational measures. Accordingly, your data is stored in a secure operating environment that is not publicly accessible. During transmission, your data is encrypted using Transport Layer Security (TLS). This implies that communication between your computer and the data servers utilized employs a recognized encryption method.
9.2.1 Scope and purpose of data collection
When you submit an application to us, we process your associated personal data (e.g., contact and communication data, application documents, notes from job interviews, etc.) to the extent necessary for deciding on the establishment of an employment relationship. The legal basis for this processing is § 26 BDSG under German law (initiation of an employment relationship), Art. 6 para. 1 lit. b GDPR (general contract initiation), and – if you have provided consent – Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time. Within our company, your personal data will be disclosed exclusively to individuals involved in processing your application.
If your application is successful, the data you submitted will be stored in our data processing systems for the purpose of establishing the employment relationship, based on § 26 BDSG and Art. 6 para. 1 lit. b GDPR.
9.2.2 Data retention period
Should we be unable to offer you a position, or if you decline a job offer or withdraw your application, we reserve the right to retain the data you submitted for up to 6 months from the conclusion of the application process (rejection or withdrawal of the application), based on our legitimate interests (Art. 6 para. 1 lit. f GDPR).
Subsequently, the data will be deleted, and any physical application documents will be destroyed. This retention primarily serves evidentiary purposes in the event of a legal dispute. If it becomes apparent that the data will be required beyond the 6-month period (e.g., due to an impending or pending legal dispute), deletion will only take place once the purpose for extended retention no longer exists.
Furthermore, data may be retained for a longer period if you have provided corresponding consent (Art. 6 para. 1 lit. a GDPR) or if statutory retention obligations preclude deletion.
9.2.3 Inclusion in the applicant pool
Should we not extend a job offer, there may be an option to include you in our applicant pool. If accepted, all documents and information from your application will be transferred to the applicant pool to facilitate contact regarding suitable vacancies.
Inclusion in the applicant pool is solely based on your explicit consent (Art. 6 para. 1 lit. a GDPR). Providing consent is voluntary and bears no relation to the ongoing application process. The data subject may revoke their consent at any time. In such an event, the data from the applicant pool will be irrevocably deleted, provided no statutory retention grounds exist.
The data from the applicant pool will be irrevocably deleted no later than two years after consent is granted.
9.2.4 Jobspreader Analytics
Jobspreader Analytics enables us to analyze our job advertisements, including the application form, and optimize them concerning their distribution, content, and the online application process. Jobspreader Analytics is a software designed for conducting straightforward usage analyses precisely tailored to our Jobspreader job campaigns.
Jobspreader Analytics records the number of users (not: which specific users) who have accessed our career website from a job advertisement distributed via Jobspreader. Furthermore, it tracks how many of these users (not: which specific users) have initiated an application process on the career page and how many (not: which specific users) have completed this process, meaning they have submitted an application.
This information allows us to discern how job campaigns disseminated via Jobspreader, with their content, influence potential applicants within their respective environments, and to what extent the career page and/or mobile career application motivates applicants acquired through Jobspreader to commence the application process on the site. Furthermore, we can identify the bounce rate within the application process on the site or application. All these insights derived from Jobspreader Analytics contribute to quantitatively and qualitatively evaluating and, if necessary, optimizing the Jobspreader campaign concerning its environments, content, and processes.
Within the scope of Jobspreader Analytics, four cookies are set, which process the following information:
Js_clid – This cookie sets a randomly assigned Jobspreader click ID. This ID enables the recognition that a user – not: which specific user – has accessed the career page via an advertisement placed through Jobspreader. Specifically, the Jobspreader click ID, the corresponding job URL (from the job advertisement), and the current timestamp (to ensure uniqueness) are recorded. This cookie is stored for 30 days and subsequently deleted.
js_startqueue – This cookie is utilized to track a user's click – not: which specific user – on the "start application" button. It processes the Jobspreader click ID, the current job URL, and the current timestamp (to ensure uniqueness). The cookie is subsequently deleted.
js_endqueue - This cookie is used to track the click of a user - not which one - in terms of the end of the application process ("End Application"). The jobspreader click ID, the current job URL and the current timestamp (to ensure uniqueness) are processed here. The cookie is then deleted.
js_end - This cookie is used to end this analysis after the end of the application process recognized with the js_endqueue cookie. Before this, the click ID, the current job URL and the current timestamp (to ensure uniqueness) are processed again and the information that the application and this analysis have been completed is noted. All cookies are then deleted.
In addition, we note how often the page on which Jobspreader Analytics is installed is accessed (we can recognize this by whether and therefore how often the Jobspreader Analytics script is loaded) and how often a cookie is loaded. This allows us to recognize the percentage of cases in which cookies are blocked per se by ad or script blockers.
In addition, the user's IP address is processed for a short time, as this is technically necessary. However, the IP address is then immediately deleted and not processed any further.
a. No processing of personal data within the meaning of the GDPR
No personal data is processed with Jobspreader Analytics.
Although the IP address is mentioned as an example of personal data in Recital 30 GDPR, this does not mean that it always qualifies as personal data within the meaning of Art. 4 No. 1.
According to the legal definition in Art. 4 No. 1 GDPR, data is personal if it contains information relating to an identified or identifiable person. In order to answer this question, the knowledge that the controller must have in order to be able to assign information to a natural person must be taken into account.
In principle, IP addresses can be traced and can therefore be personal data. In the 2016 Breyer ruling, the ECJ ruled that (dynamic) IP addresses are only personal data if the website operator has means at its disposal that can reasonably be used to identify a person by means of their IP address. Legally enforceable means could also be considered for such identification by the website operator.
We do not have such means. As a result, no personal data in the form of the IP address is processed in these specific cases
b. Processing of information pursuant to Section 25 (2) No. 2 TDDDG
Cookies that "store information" that is "strictly necessary" may be stored without the user's consent.
Simple cookies that assign a non-personally identifiable session ID in order to carry out a simple digital usage analysis can be considered necessary within the meaning of Section 25 (2) No. 2 TDDDG.
Such simple digital usage analyses give us, as the company using them, an overview of the flow of visitors to our own pages and applications. In the present case, this makes it possible to see which job advertisements attract interest in which environments, which job advertisements actually trigger applications and to what extent, and whether the application form guides users through the process well or whether there are aborts due to technical or ergonomic difficulties.
In this respect, the use of simple cookies for simple usage analyses as in the present case is necessary within the meaning of Section 25 (2) No. 2 TDDDG.
(10) Existing customer marketing
10.1 Advertising by email to existing customers
If we have received your email address in connection with the sale of a product or service and you have not objected to this, we will process your email address for the purpose of email marketing for our own similar products or services and, if necessary, other personal data in order to address you personally. The legal basis for the processing is Art. 6 (1) lit. f GDPR. Our legitimate interest in this is direct marketing.
We use external services for email marketing. Further information on the services used, the scope of data processing and the technologies and procedures used when using the respective services, as well as whether profiling takes place when using the respective services and, if applicable, information on the logic involved and the scope and intended effects of such processing for you can be found in the further information on the services we use at the end of this passage and under the links provided there.
You have the right to object to the processing of your personal data for the purpose of email marketing at any time without incurring any costs other than the transmission costs according to the basic rates. We will then no longer process your personal data for the purpose of email marketing. To object to the processing of your personal data for the purpose of email marketing, you can use the link provided for this purpose in the emails or contact us using the contact details provided above.
If you have objected to the processing of your personal data for the purpose of email marketing, we reserve the right to process your personal data in a so-called blacklist/blocklist in order to ensure that no further email marketing is carried out in connection with this personal data in the future. The legal basis for processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the avoidance of unwanted email marketing.
We process your personal data in the context of tracking or performance measurement in order to measure the reach of our email marketing, to design it in line with your needs and interests and thus to optimize our email marketing. This may also involve profiling (for the purposes of advertising, personalized information, etc.). Profiling can also take place across services and devices. If we have asked for your consent and you have given it, the legal basis for the processing is Art. 6 para. 1 lit. a GDPR. If we have not asked for your consent, the legal basis for the processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the optimization of our email marketing. A separate withdrawal of your consent or objection in relation to tracking or performance measurement is unfortunately not possible. You must use the above options to withdraw your consent or object to the processing of your personal data for the purpose of email marketing as a whole.
10.2 Newsletter
If we have asked for your consent and you have given it, we will process your email address for the purpose of email marketing and, if necessary, other personal data in order to address you personally. The legal basis for the processing is Art. 6 (1) (a) GDPR. The content of the email marketing is described in detail when your consent is obtained. In addition, the email marketing contains information about us, our goods, and our services.
We use the so-called double opt-in procedure to prevent possible misuse of your personal data. For this purpose, after collecting your e-mail address, we will send you an e-mail to the e-mail address you have provided, in which we ask you to confirm that you actually wish to receive e-mail marketing. The legal basis for the processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the legally compliant implementation of email marketing.
We log the time at which you give your consent and the time of your confirmation as well as your IP address and the content of your declaration of consent in order to be able to prove that your consent has been obtained in accordance with the law. The legal basis for the processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the legally compliant implementation of email marketing.
We use external services for email marketing. Further information on the services used, the scope of data processing and the technologies and procedures used when using the respective services, as well as whether profiling takes place when using the respective services and, if applicable, information on the logic involved and the scope and intended effects of such processing for you can be found in the further information on the services we use at the end of this passage and under the links provided there.
You can withdraw your consent at any time. The withdrawal of your consent does not affect the lawfulness of processing based on consent before its withdrawal. To withdraw your consent, you can use the link provided for this purpose in the emails or contact us using the contact details given above.
If you have withdrawn your consent, we reserve the right to process your personal data in a so-called blacklist/blocklist in order to ensure that no further email marketing is carried out in connection with this personal data in the future. The legal basis for processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the avoidance of unwanted email marketing.
We process your personal data in the context of tracking or performance measurement in order to measure the reach of our email marketing, to design it in line with your needs and interests and thus to optimize our email marketing. This may also involve profiling (for the purposes of advertising, personalized information, etc.). Profiling can also take place across services and devices. If we have asked for your consent and you have given it, the legal basis for the processing is Art. 6 para. 1 lit. a GDPR. If we have not asked for your consent, the legal basis for the processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the optimization of our email marketing. A separate withdrawal of your consent or objection in relation to tracking or performance measurement is unfortunately not possible. You must use the above options to withdraw your consent or object to the processing of your personal data for the purpose of email marketing as a whole.
10.3 HubSpot
We use HubSpot for email advertising to existing customers and newsletters.
Provider: HubSpot, Inc., United States of America.
Website: https://www.hubspot.de/
Further information & data protection: https://legal.hubspot.com/de/legal-stuff and https://legal.hubspot.com/de/privacy-policy
Guarantee: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses from us.
10.4 Advertising by mail to existing customers
If we have received your personal data in connection with the sale of a product or service and you have not objected to this, we will process your personal data for the purpose of marketing by mail. The legal basis for processing is Art. 6 (1) lit. f GDPR. Our legitimate interest in this is direct marketing.
We use external services (printers, lettershops, etc.) for marketing by post.
You have the right to object at any time to the processing of your personal data for the purpose of marketing by post. We will then no longer process your personal data for the purpose of marketing by post. To object to the processing of your personal data for the purpose of marketing by post, you can contact us using the contact details provided above.
If you have objected to the processing of your personal data for postal marketing purposes, we reserve the right to process your personal data in a so-called blacklist to ensure that no further postal marketing related to this personal data occurs in the future. The legal basis for this processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in preventing unsolicited postal marketing.
(11) External social media presence/services
We maintain social media presences on external services to communicate with users and thus optimize our online offerings and marketing.
This privacy policy also applies to the following social media presences:
• https://www.xing.com/companies/isrinformationproductsag
• https://de.linkedin.com/company/isr-information-products-ag
• https://www.facebook.com/ISRInformationProductsAG/
• https://www.instagram.com/isr_information_products_ag/
• https://www.youtube.com/channel/UCHaMgTkdW2ndMLP2kfO5JVA
• https://www.kununu.com/de/isr-information-products
• https://www.get-in-it.de/unternehmen/isr-information-products-ag
If we have requested and obtained your consent, the legal basis for processing is Art. 6 para. 1 lit. a GDPR. If we have not requested your consent, the legal basis for processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest in this context is the optimization of our online offerings and marketing.
Profiling (for advertising, personalized information, etc.) may also occur during the use of external services. Profiling can also take place across services and devices. Further information on the services used, the scope of data processing, the technologies and procedures employed, whether profiling occurs with the respective services, and, if applicable, information about the logic involved, as well as the significance and intended effects of such processing for you, can be found in the additional information about the services we use at the end of this passage and via the links provided there.
11.1 Facebook
Provider: Facebook Ireland Limited, Ireland. Facebook Ireland Limited is a subsidiary of Facebook Inc., United States of America.
Website: https://www.facebook.com
The provider and we are jointly responsible. We have concluded a corresponding agreement with the provider. You can request a copy of the agreement from us.
Further information & data protection: https://developers.facebook.com/docs/plugins/, https://www.facebook.com/legal/terms/information_about_page_insights_data, https://de-de.facebook.com/privacy/explanation, https://de-de.facebook.com/policies/cookies/, https://www.facebook.com/help/566994660333381?ref=dp, and https://de-de.facebook.com/help/568137493302217
Guarantee: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses from us.
11.2 Instagram
Provider: Facebook Ireland Limited, Ireland. Facebook Ireland Limited is a subsidiary of Facebook Inc., United States of America.
Website: https://www.instagram.com
Further information & data protection: https://help.instagram.com/581066165581870 and https://help.instagram.com/519522125107875
Guarantee: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses from us.
11.3 LinkedIn
Provider: If you are located in the EU, the European Economic Area (EEA), or Switzerland, this service is provided by LinkedIn Ireland Unlimited Company, Ireland. If you are located outside the EU, the European Economic Area (EEA), or Switzerland, this service is provided by LinkedIn Corporation, United States of America.
Website: https://www.linkedin.com
Further information & data protection: https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy and https://www.linkedin.com/legal/cookie-policy?trk=homepage-basic_footer-cookie-policy
Guarantee: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses from us.
11.4 get in IT
Provider: get in GmbH, Germany.
Website: https://www.get-in-it.de/
Further information & data protection: https://www.get-in-it.de/nutzungsbedingungen and https://www.get-in-it.de/datenschutz
11.5 Xing & Kununu
Provider: New Work SE, Germany.
Website: https://www.xing.de
Further information & data protection: https://privacy.xing.com/de and https://privacy.xing.com/de/datenschutzerklaerung
Website: https://www.kununu.com
Further information & data protection: https://www.kununu.com/de/info/agb and https://privacy.xing.com/de/datenschutzerklaerung
11.6 YouTube
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://www.youtube.de
Further information & data protection: https://policies.google.com/?hl=de
The transfer of personal data to Google services in third countries is subject to the various EU standard contractual clauses, depending on the respective Google service.
Further information on this and Google's responsibility can be found at the following link: https://business.safety.google/gdpr/. You can view a copy of the EU standard contractual clauses there.
(12) Duty to provide information pursuant to Articles 13 and 14 of the GDPR
The following privacy notices pertain to the processing of your personal data for registration and participation in our events and webinars.
Further information can be found here: https://isr.de/informationspflicht-gemaess-art-13-14-dsgvo/