Mandatory information
Person responsible and data protection officer
Your Rights
see paragraph 3 of the privacy policy↗
Withdrawal of consent
You can revoke the consent you have given for the processing of your data at any time. Such a revocation affects the permissibility of processing your personal data after you have expressed it to us. You can declare the revocation to us using the contact details provided above.
Objection to the processing of your data
You have the right to object to the processing of your personal data at any time, insofar as we base the processing on a balance of interests or the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us. When exercising such an objection, we will ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the merits of the case and discontinue or adapt the processing, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. You also have the right to object at any time to the processing of your personal data for direct marketing purposes. If you object to the processing of your personal data for direct marketing purposes, we will no longer process your personal data for these purposes. You can inform us about your objection using the contact details provided above.
Purpose of the processing of personal data
We process your personal data primarily for the purpose of establishing, implementing or terminating a contractual relationship with you and, in particular, to
- Recording and managing your data and correspondence with you,
- Determination and administration of all income and expenses,
- Provision, maintenance and care of IT systems,
- checking incoming invoices,
- conducting remote support and web conferencing,
- office and general company organization.
The legal basis for the processing is Art. 6 (1) lit. b DS-GVO.
Furthermore, the processing of your personal data is carried out in accordance with Art. 6 (1) lit.f DS-GVO to protect our legitimate interests in ensuring IT security, customer acquisition insofar as you have made your data public, improving the exchange of information with you through your use of collaboration tools, answering your general inquiries and organizing our business processes.
In addition, the processing of your personal data is carried out to fulfill our legal obligations, in particular those arising from commercial and tax law, as well as our obligation to ensure IT security.The legal basis is Art. 6 (1) lit. c DS-GVO.
(4) If we rely on Art. 6 (1) lit. a DS-GVO for the processing of your personal data, the legal basis is your consent, in particular for the implementation of web conferences or remote support with image transmission.
recipients
Recipients of personal data may be:
- tax consultants and auditors
- public authorities such as the tax office
- IT and software service providers
- Travel service providers (booking portals, car rental, hotels, etc.)
- Financial service providers (such as PayPal, Sofortüberweisung of Sofort GmbH, etc.)
- Advertising agencies
- Printers
- Newsletter distribution service providers
- Law firms
- Credit agencies
- Waste disposal service providers (e.g. document destruction; data media disposal)
- Cleaning companies
Transfer to third countries
(1) Insofar as we use software products of HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA (“HubSpot”) for lead generation, initial contact with potential customers, data management in our CRM system and contract initiation, your personal data may be transferred to servers of HubSpot in the U.S.A..
HubSpot relies on the standard contractual clauses (https://legal.hubspot.com/dpa) for this purpose.
(2) Insofar as we use the collaboration tool Trello of Atlassian, Inc., 1098 Harrison Street, San Francisco, California 94103 (“Trello”) to work with you, in particular for task management, your personal data may be transferred to servers of Trello in the U.S.A.. Trello relies on the standard contractual clauses (https://www.atlassian.com/legal/privacy-policy#how-we-transfer-information-we-collect-internationally) for this purpose.
(3) Insofar as we use the collaboration tool Slack of Slack Technologies, Inc., 500 Howard Street, San Francisco, California 94105 (“Slack”) to collaborate with you, in particular for task management, your personal data may be transferred to servers of Slack in the U.S.A.. Slack relies on the standard contractual clauses (https://slack.com/trust/privacy/privacy-policy) for this purpose.
(4) To the extent that we use software products from Microsoft Corporation, One Microsoft Way, Redmond, Washington 98052 (“Microsoft”), such as Exchange, Sharepoint or One Drive, to work with you, your personal data may be transferred to Microsoft servers in the United States. Microsoft relies on the Standard Contractual Clauses (https://docs.microsoft.com/en-us/compliance/regulatory/offering-EU-Model-Clauses) to do so.
Storage duration
We store personal data depending on the respective purpose of the processing. At the latest after expiry of statutory retention periods, these are deleted or destroyed; if already possible beforehand, personal data are anonymized. If you have given your consent to the processing of your personal data, we will process your data until you revoke your consent.
Obligation to provide
The provision of personal data is neither legally nor contractually required, but may be necessary for the conclusion of a contract. There is no obligation to provide it. However, failure to provide it may result in a contract not being able to be performed.