Privacy Policy

The use of our website is usually possible without disclosing personal data, if not otherwise described below.

In connection with your access and on the basis of Art. 6 (1) sentence 1 f) of the EU General Data Protection Regulation (GDPR), data is temporarily stored on our server in order to enable use of the website and for purposes of data security during access that may allow identification (in particular, the IP address, date and time of the request, contents of the request (concrete pages), access status/http status, any data quantity transmitted, website from which the request came, browser/language and version of the browser software, operating system and name of the file requested). There will be no evaluation of the data – with the exception of such for statistical purposes in an anonymous form and the processing described under 2.

Insofar as our site collects other personal data (in particular name, address and/or email addresses), this is done on a voluntary basis and within the scope of appropriate consent as per Art. 6 (1) sentence 1 a) GDPR.
Thus, the following data will be requested in order to make contact with us, in particular to ask us to send newsletters, investor relations information and (current) financial reports: type of request, company, title, first name and surname, address, house number, post/zip code, town/city, state, country, telephone and email.
By completing the request form, you give your consent to the specified processing of your personal data. You can withdraw this consent in writing (to SLM Solutions Group AG, Estlandring 4, 23560 Lübeck) or by email (PHILIPP.HEROLD@HUB24.DE) to us at any time with effect in the future. You will find further information further below in the text.
Contact form for applicants: see https://hr.slm-solutions.com/privacy.html

There will be no further use of personal data or any forwarding to third parties with the exception of the use by Google Analytics described below without your explicit consent.

Google Analytics

This website uses Google Analytics, a web analysis service from Google Inc. (“Google”). This use is carried out on the basis of Art. 6 (1) sentence 1 f) GDPR. Google Analytics uses so-called “cookies”, text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually sent to a Google server in the USA and stored there. This relates in particular to information about the browser type/version, operating system used, referrer URL (the site previously visited), host name of the accessing computer (IP address) and time of the server request. We have activated IP anonymisation on this website, so your IP address will be shortened in advance by Google within member states of the European Union or in other signatory states to the European Economic Area. The full IP address will only be transmitted to a Google server in the USA and shortened there in exceptions. Google will use this information on behalf of the user of this website to evaluate your use of the website, compile reports about website activities and to provide further services associated with website use and internet use to the website provider. The IP address transmitted within the scope of Google Analytics from your browser will not be brought together with other data by Google.

You can prevent the storage of cookies by setting your browser software accordingly; however, we must point out that in this case you may not be able to use all the functions of this website in full. Furthermore, you can prevent the recording of the data generated by the cookie relating to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available on the following link: http://tools.google.com/dlpage/gaoptout?hl=de

We use Google Analytics including the functions from Universal Analytics. Universal Analytics allows us to analyse the activities on our site across devices (e.g. during accesses using a laptop and later via a tablet). This is made possible through the pseudonymous allocation of a user-ID to a user. Such an allocation may occur if you register for a customer account or login to your customer account. However, no personal data is forwarded to Google. Even if in Universal Analytics additional functions are added to Google Analytics, this does not mean that this is associated with a restriction of data protection measures, such as IP masking or the browser add-on.

You will find further information about data protection with Google Analytics in the Google Analytics help (https://support.google.com/analytics/answer/6004245?hl=de).

Presence on Social Media Platforms

We maintain so-called fan pages or accounts or channels on the networks mentioned below in order to also provide you with information and offers within social networks and to offer you further ways to contact us and find out about our offers. In the following, we inform you about which data we or the respective social network process from you in connection with the call and use of our fan pages/accounts.

Data that we process from you: If you wish to contact us via Messenger or via Direct Message via the respective social network, we generally process your user name via which you contact us and, if applicable, store further data provided by you insofar as this is necessary to process/respond to your request.
The legal basis is Art. 6 para. 1 sentence 1 f) GDPR (processing is necessary to protect the legitimate interests of the controller).
(Static) usage data we receive from the social networks: We receive automatically provided statistics regarding our accounts via Insights functionalities. The statistics include, among other things, the total number of page views, likes, information on page activities and post interactions, reach, video views, and information on the proportion of men/women among our fans/followers.
The statistics only contain aggregated data that cannot be related to individual persons. You are not identifiable to us through this.
What data the social networks process from you: In order to view the content of our fan pages or accounts, you do not have to be a member of the respective social network and, to this extent, no user account is required for the respective social network.
Please note, however, that when you call up the respective social network, the social networks also collect and store data from website visitors without a user account (e.g. technical data in order to be able to display the website to you) and use cookies and similar technologies, over which we have no control. For details, please refer to the privacy policy of the respective social network (see the corresponding links above).
Insofar as you wish to interact with the content on our fan pages/accounts, e.g. comment on, share or like our postings/contributions and/or contact us via messenger functions, prior registration with the respective social network and the provision of personal data is required.
We have no influence on the data processing by the social networks within the scope of their use by you. To our knowledge, your data is stored and processed in particular in connection with the provision of the services of the respective social network, as well as for the analysis of user behavior (using cookies, pixels/web beacons and similar technologies), on the basis of which advertising based on your interests is played both within and outside the respective social network. It cannot be ruled out that your data will be stored by the social networks outside the EU/EEA and passed on to third parties.
Information on, among other things, the exact scope and purposes of the processing of your personal data, the storage period/deletion as well as guidelines on the use of cookies and similar technologies in the context of registration and use of the social networks can be found in the privacy policy/cookie policy of the social networks. There you will also find information about your rights and objection options.
Facebook page: When you visit our Facebook page, Facebook collects, among other things, your IP address and other information that is present on your PC in the form of cookies. This information is used to provide us, as operators of the Facebook pages, with statistical information about the use of the Facebook page. Facebook provides more detailed information on this under the following link: https://de-de.facebook.com/help/pages/insights.

It is not possible for us to draw conclusions about individual users by means of the statistical information transmitted. We only use this information to respond to the interests of our users and to continuously improve our online presence and ensure its quality.
We collect your data via our fan page only to realize a possible provision for communication and interaction with us. This collection usually includes your name, message content, comment content, and the profile information you provide “publicly”.

The processing of your personal data for our above-mentioned purposes is based on our legitimate business and communicative interest in offering an information and communication channel pursuant to Art. 6 (1) f) GDPR. Should you as a user have given your consent to the data processing to the respective provider of the social network, the legal basis of the processing extends to Art. 6 para. 1 a), Art. 7 GDPR.

Due to the fact that the actual data processing is carried out by the provider of the social network, our access to your data is limited. Only the provider of the social network is authorized to fully access your data. Due to this, only the provider can directly take and implement appropriate measures to fulfill your user rights (information request, deletion request, objection, etc.). The assertion of corresponding rights is therefore most effective directly against the respective provider.

We are jointly responsible with Facebook for the personal content of the fan page. Data subject rights can be asserted with Facebook Ireland as well as with us.

The primary responsibility for the processing of Insights data lies with Facebook in accordance with the GDPR and Facebook fulfills all obligations under the GDPR with regard to the processing of Insights data, Facebook Ireland provides the essence of the Page Insights supplement to the data subjects.

We do not make any decisions regarding the processing of Insights data and all other information resulting from Art. 13 GDPR, including legal basis, identity of the controller and storage period of cookies on user terminals.

Further information can be found directly at Facebook (Supplemental Agreement with Facebook): https://www.facebook.com/legal/terms/page_controller_addendum.
LinkedIn page: LinkedIn is a social network of LinkedIn Inc. based in Sunnyvale, California, USA, which enables the creation of private and professional profiles. Users can maintain their existing contacts and make new ones. Businesses can create profiles where photos and other company information are uploaded. Other LinkedIn users have access to this information and can write their own articles and share this content with others.

The focus is on professional exchanges on specialized topics with people who share the same professional interests. In addition, LinkedIn is often used by businesses and other organizations to hire employees and present themselves as an interesting employer. For more information about LinkedIn, please visit: https://about.linkedin.com/

For more information about LinkedIn privacy, please visit: https://www.linkedin.com/legal/privacy-policy
We do not collect or process any personal data via our LinkedIn company page.
Xing page: XING is a social network of XING SE based in Hamburg, Germany, which allows the creation of private and professional profiles. Users can maintain their existing contacts and make new ones. Companies can create profiles on which photos and other company information are uploaded. Other XING users have access to this information and can write their own articles and share this content with others.

The focus is on professional exchange on specialist topics with people who have the same professional interests. In addition, XING is frequently used by companies and other organizations to recruit employees and present themselves as an interesting employer.

Further information on XING can be found at: https://www.new-work.se/en/
For more information on data protection at XING, please visit: https://privacy.xing.com/en.
We do not collect or process any personal data via our XING company page.

Hubspot

Type and scope of processing

Hubspot API: We use HubSpot API from HubSpot, Inc., Cambridge, Massachusetts, US, to access additional services and data from HubSpot, Inc. In doing so, a transfer of your IP address to HubSpot, Inc. takes place. Please note that there is a separate section in this Privacy Policy for each additional service we use from HubSpot, Inc.
Hubspot Analytics: We use HubSpot Analytics by HubSpot, Inc, Cambridge, Massachusetts, US, as an analysis service for the statistical evaluation of our online offering. This includes, for example, the number of times our online offering is called up, subpages visited and the length of time visitors stay.
Hubspot CDN: We use HubSpot CDN to properly deliver the content of our website. HubSpot CDN is a service of HubSpot, Inc. which acts as a content delivery network (CDN) on our website to ensure the functionality of other services of HubSpot, Inc. For said services, you will find a separate section in this Privacy Policy. This section is only about the use of the CDN.
A CDN helps to provide content of our online offer, in particular files such as graphics or scripts, more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to servers of HubSpot, Inc., Cambridge, Massachusetts, US, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed solely for the above purposes and to maintain the security and functionality of HubSpot CDN.
Hubspot Cookie Banner: We have integrated HubSpot Cookie Banner on our website. HubSpot Cookie Banner is a consent solution provided by HubSpot, Inc, Cambridge, Massachusetts, US, to obtain and document consent to store cookies. HubSpot Cookie Banner uses cookies or other web technologies to recognize users and store the consent given or revoked.
Hubspot Forms: We have integrated HubSpot Forms on our website. HubSpot Forms is a service of HubSpot, Inc. and provides marketing automation software for marketing services and products, including SEO and content creation, lead management, email marketing and web analytics.
HubSpot Forms is used to store data entered in forms, e.g. when contacting us via contact form. The specified data can be stored in our customer relationship management system (CRM system).
In this case, your data is passed on to the operator of HubSpot Forms, HubSpot, Inc, Cambridge, Massachusetts, US.
Hubspot Pixel: We use HubSpot Pixel from HubSpot, Inc., Cambridge, Massachusetts, US, to create so-called Custom Audiences, i.e. to segment visitor groups of our online offer, to determine conversion rates and to subsequently optimize them. This happens in particular when you interact with advertisements that we have placed with HubSpot, Inc.

Purpose and legal basis

The use of HubSpot API and CDN is based on our legitimate interests, i.e. interest in optimizing our online offer according to Art. 6 para. 1 lit. f. GDPR.
The Hubspot Cookie Banner service is used on the basis of obtaining the legally required consent to use cookies pursuant to Art. 6 para. 1 lit. c. GDPR.
We process your data with the help of HubSpot Forms for the purpose of processing the contact request and its settlement pursuant to Art. 6 para. 1 lit. b. GDPR.
The use of HubSpot Forms and the integrated services is subject to our legitimate interest pursuant to Art. 6 para. 1 lit. f. GDPR, the optimization of our marketing measures and the improvement of our service quality on the website.
We process your data with the help of HubSpot Analytics and Pixel for the purpose of optimizing our website and for marketing purposes based on your consent pursuant to Art. 6 (1) lit. a. GDPR.

Storage period

The concrete storage period of the processed data cannot be influenced by us, but is determined by HubSpot, Inc. Further information can be found in the privacy policy for HubSpot API, Analytics, CDN, Cookie Banner, Forms and Pixel: https://legal.hubspot.com/privacy-policy.

Your rights as a data subject in accordance with Art. 4(1) GDPR

As a data subject in accordance with the GDPR (Art. 4 (1) GDPR) you have numerous rights towards us, which we would like to inform you of below:

Right to information: You have the right to receive information about whether we process data about you. In addition, you can have a copy of this data provided by us.
Right to correction: You have the right that we correct disclosures about you that do not relate to you or do not relate to you anymore without delay. In addition, you can demand your incomplete personal data is completed. If this is legally stipulated, we will also inform third parties about this, if we have transferred your data to them.
Right to erasure: You have the right to demand the erasure of your data without delay, if one of the following reasons applies:
- Your data is no longer necessary for the purposes for which it was collected or was processed in another manner, or the purpose has been accomplished;
- You withdraw your consent and we do not have any other legal basis for processing;
- You object to processing and there are no overriding justified reasons for the processing;
- You object to processing,
- Your personal data was illegally processed;
- It is necessary to erase the personal data to meet a legal obligation in accordance with Union law or the law of the member states which we are subject to.

Please note that your right to erasure can be restricted by legal provisions. This includes in particular the restrictions detailed in Art. 17 GDPR and section 35 German Data Protection Act (Bundesdatenschutzgesetz) (in the version applicable from 25 May 2018).

Right to restriction of processing (blocking): You have the right to demand the restriction of processing of your data without delay, if one of the following conditions is met:
- You dispute the accuracy of your personal data and do so for a period that enables us to check the accuracy of the personal data;
- The processing is illegal, you reject the erasure of the personal data and demand instead the restriction of use of your personal data.
- We no longer require the personal data for the purposes of processing but you require it to assert, exercise or defend legal claims.
- You have objected to processing as long as it has not been identified whether our justified reasons outweigh your interests.

If you have brought about a restriction of processing according to the preceding itemisation, we will inform you before the restriction is lifted.

Right to objection: If we process your data due to our justified interests, third-party justified interests or in the public interest, you have the right to object to the processing of your data. Please also note the information provided at the end of this information about your right to objection.
Withdrawing consent: You can withdraw any consent you have given us at any time with effect in the future. This withdrawal can be made in the form of an informal notification to the contact addresses detailed above. This also applies to any consent you gave us before the GDPR came into effect (i.e. before 25 May 2018). If you withdraw your consent, the legality of the data processing carried out until that point will not be affected.
Right to data portability: You have the right to receive personal data that affects you and that you have provided to us in a structured, common and machine-readable format and to transmit this data to others. You can take the details and restrictions from Art. 20 GDPR. Exercising this right does not affect your right to erasure.
Right to complain to the supervisory authorities: If you think our processing of your data has breached applicable data protection law, you have the right to complain to the competent supervisory authorities, i.e. in particular the independent State Centre for Data Protection Schleswig-Holstein (Kiel) or the relevant member state where you are resident, have your workplace or the location of the alleged breach of data protection.

Information about your right to objection as per Art. 21 GDPR

1. YOUR RIGHT TO OBJECTION IN AN INDIVIDUAL CASE

You have the right, for reasons arising from your particular situation, to object to the processing of your data at any time, if we base this processing on that it is either:

required to carry out a task in the public interest (Article 6 (1) e GDPR) or it is
required to protect our justified interests or those of a third party, without outweighing your fundamental rights and fundamental freedoms (Article 6 (1) f GDPR)

This also applies to profiling in accordance with Article 4 (4) GDPR.

If you object, we will no longer process your personal data, except in two cases:

we can prove mandatory reasons requiring protection for the processing that outweigh your rights and freedoms or
the processing serves to assert, exercise or defend legal claims.

2. YOUR RIGHT TO OBJECTION AGAINST PROCESSING YOUR DATA FOR OUR DIRECT ADVERTISING

If we process your personal data for direct advertising (e.g. as part of our newsletter), you have the right to object to the processing of your data for the purpose of such advertising at any time. This also applies to profiling, if this is connected with such direct advertising.

If you object to the processing of your data for the purposes of direct advertising, we will no longer use your personal data for this.

You will also find details about your rights in Articles 15 to 21 of the GDPR and in sections 32 to 37 BDSG (in the version applicable from 25 May 2018).

To assert your rights, please contact (including informally) our external Data Protection Officer, Mr Philipp Herold, Mein Datenschutzbeauftragter.de Rudolf-Diesel-Straße 10 23617 Stockelsdorf or contact us via E-Mail: philipp.herold@hub24.de

YOUR QUESTIONS ABOUT DATA PROTECTION

If you have any questions about this Privacy Policy, please contact our external Data Protection Officer –

Mr Philipp Herold,
Mein Datenschutzbeauftragter.de
Rudolf-Diesel-Straße 10
23617 Stockelsdorf

or contact us via E-Mail: philipp.herold@hub24.de.