mandatory information

Responsible person and data protection officer

See paragraph 1 of the privacy policy ↗

Your rights
See section 3 of the privacy policy ↗

Revocation of consent
You may revoke your consent to the processing of your data at any time. Such revocation affects the permissibility of the processing of your personal data after you have notified us of your revocation. You can notify us of your revocation using the contact details provided above.

Objection to the processing of your data
You have the right to object to the processing of your personal data at any time, provided that we base the processing on a balancing of interests or that the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and cease or adjust the processing, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims. You also have the right to object to the processing of your personal data for direct marketing purposes at any time. If you object to the processing of your personal data for direct marketing purposes, we will no longer process your personal data for these purposes. You can inform us of your objection using the contact details provided above.

Purposes of processing personal data
(1) We process your personal data primarily for the purpose of establishing, executing, or terminating a contractual relationship with you, and in particular for the following purposes:

  • Recording and managing your data and correspondence with you,
  • Identification and management of all income and expenses,
  • Provision, maintenance, and servicing of IT systems,
  • Checking incoming invoices,
  • Providing remote support and web conferencing,
  • Office and general business organization.

The legal basis for processing is Article 6(1)(b) of the GDPR and, where applicable, Recital 48 of the GDPR.

(2) Furthermore, your personal data will be processed in accordance with Art. 6 (1) lit. f GDPR and, where applicable, Recital 48 GDPR to safeguard our legitimate interests in ensuring IT security, customer acquisition insofar as you have made your data public, improving the exchange of information with you through the use of collaboration tools, responding to your general inquiries, and organizing our business processes.

(3) In addition, your personal data is processed in order to fulfill our legal obligations, in particular those arising from commercial and tax law, as well as our obligation to ensure IT security. The legal basis for this is Art. 6 (1) (c) GDPR.

(4) If we based the processing of your personal data on Art. 6 para. 1 lit. a GDPR, the legal basis is your consent, in particular for conducting web conferences or remote support with image transmission.

Recipients
Recipients of personal data may include:

  • Affiliated group companies of CENIT AG
  • Tax advisor and auditor
  • public authorities such as the tax office
  • IT and software service provider
  • Travel service providers (booking portals, car rentals, hotels, etc.)
  • Financial service providers (such as PayPal, Sofortüberweisung from Sofort GmbH, etc.)
  • advertising agencies
  • printing companies
  • Newsletter distribution service provider
  • law firms
  • credit reporting agencies
  • Waste disposal service providers (e.g., document destruction; data carrier disposal)
  • cleaning company

Transfer to third countries

(1) Insofar as we use software products from HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA ("HubSpot") for lead generation, initial contact with potential customers, data management in our CRM system, and contract initiation, your personal data may be transferred to HubSpot servers in the USA.

HubSpot relies on thehttps://legal.hubspot.com/de/dpa. 

(2) Insofar as we use the collaboration tool Trello from Atlassian, Inc., 1098 Harrison Street, San Francisco, California 94103 ("Trello") to collaborate with you, in particular for task management, your personal data may be transferred to Trello servers in the USA. Trello relies on thehttps://www.atlassian.com/legal/privacy-policy#how-we-transfer-information-we-collect-internationally. 

(3) Insofar as we use the collaboration tool Slack from Slack Technologies, Inc., 500 Howard Street, San Francisco, California 94105 ("Slack") to collaborate with you, in particular for task management, your personal data may be transferred to Slack servers in the USA. Slack relies on thehttps://slack.com/intl/de-de/trust/privacy/privacy-policy#international. 

(4) Insofar as we use software products from Microsoft Corporation, One Microsoft Way, Redmond, Washington 98052 ("Microsoft"), such as Exchange, SharePoint, or One Drive, to collaborate with you, your personal data may be transferred to Microsoft servers in the United States. Microsoft relies on thehttps://docs.microsoft.com/de-de/compliance/regulatory/offering-EU-Model-Clauses. 

Duration of storage
We store personal data depending on the respective purpose of processing. This data is deleted or destroyed at the latest after the expiry of the statutory retention periods; personal data is anonymized as soon as possible. If you have given your consent to the processing of your personal data, we will process your data until you revoke your consent.

Obligation to provide data
The provision of personal data is neither legally nor contractually required, but may be necessary for the conclusion of a contract. There is no obligation to provide data. However, failure to provide data may result in a contract not being able to be executed.