Privacy policy

Information on data processing for this website in accordance with Art. 13 EU General Data Protection Regulation (GDPR) when collecting personal data from the data subject.

Privacy policy (Version: DSGVO 2.1 from June 2026)

Vincotech GmbH is responsible for this website and, as a provider of a teleservice, must inform you at the beginning of your visit about the nature, extent and purposes of the collection and use of personal data in a precise, transparent, comprehensible and easily accessible form in clear and simple language. This content must be available to you at all times.

We attach great importance to the security of your data and compliance with data protection regulations. The processing of personal data is subject to the provisions of the currently applicable European and national laws.

With the following data protection information, we would like to show you how we handle your personal data and how you can contact us.

3. Controller & contact details

Vincotech GmbH
Biberger Str. 93
82008 Unterhaching / Germany
Commercial register no.: HRB 175280
Managing director: Eckart Seitter
Phone: +49 89 8780 67 - 0
E-mail: info@vincotech.de

2. Our data protection officer

If you have any questions about data protection or other data protection concerns, please contact our data protection officer Daniel Feuerbach at privacy@vincotech.com.

3. Scope & definitions

For better comprehensibility, we refrain from differentiating between the genders. In the interest of equal treatment, the corresponding terms apply to all genders. The meaning of the terms used, such as "personal data" or "processing", can be found in Article 4 of the GDPR.

Personal data processed within the framework of this website include the following

• Inventory data (e.g. name and addresses of customers),

• Usage data (e.g. pages visited on our website) and

• Content data (e.g. entries in online forms).

We guarantee that we will only process your data in connection with the processing of your inquiries and for internal purposes as well as in order to provide the services requested by you or to make content available.

4. Legal bases for processing

We process your personal data only in compliance with the relevant data protection regulations. Legal bases are:

• Fulfillment of contractual services: Art. 6 para. 1 lit. b) GDPR

• Fulfillment of legal obligations: Art. 6 para. 1 lit. c) GDPR

• Consent: Art. 6 para. 1 lit. a) and Art. 7 GDPR

• Protection of legitimate interests: Art. 6 para. 1 lit. f) GDPR

5. Data transmission to third parties

Your data will only be passed on to third parties within the framework of legal requirements. We only pass on your data if this is necessary, for example, for contractual purposes or on the basis of legitimate interests in the economic and effective operation of our business.

Where we use subcontractors to provide our services, we take appropriate legal precautions and corresponding technical and organizational measures to ensure the protection of personal data in accordance with the relevant legal requirements.

6. International data transfers (third countries)

Third countries are countries in which the GDPR is not directly applicable law. This basically includes all countries outside the EU or the European Economic Area.

There is a data transfer to a third country or an international organization.

Note on data processing in the USA by Google: If you click on "Allow all cookies " under "Cookie settings", your data will also be transmitted to the USA by these providers. According to the current legal situation, the USA is considered a country with an insufficient level of data protection. There is a risk that your data will be processed by US authorities, for control and monitoring purposes. Currently, there is no legal recourse against this practice. If you do not wish to do so, we recommend that you do not use these provided services.

7. Storage periods

We adhere to the principles of data economy and data avoidance. This means that we store your data only as long as necessary to fulfill the aforementioned purposes or as specified by the various storage periods provided by law. If the respective purpose ceases to apply or after expiry of the corresponding periods, your data will be routinely blocked or deleted in accordance with the statutory provisions.

For this purpose, we have drawn up an internal company concept to ensure this procedure.

8. Your rights

a) Right to information
You have the right to obtain information about your stored data free of charge. Upon request, we will inform you in writing which of your personal data we have stored. This also includes the origin and recipients of your data as well as the purpose of the data processing.

b) Right to rectification
You have the right to have your data stored by us corrected if it is incorrect. In doing so, you can request a restriction of processing, e.g. if you dispute the accuracy of your personal data.

c) Right to block
Furthermore, you can have your data blocked. To ensure that a blocking of your data can be taken into account at any time, this data must be kept in a blocking file for control purposes.

d) Right to deletion
You can request the deletion of your personal data, unless there is a legal obligation to retain it. If such an obligation exists, we will block your data upon request. If the relevant legal requirements exist, we will also delete your personal data without your request.

e) Right to data portability
You have the right to request that we provide the personal data you have provided to us in a format that allows it to be transferred to another entity.

f) Right of complaint to a supervisory authority
You have the possibility to contact one of the data protection supervisory authorities with a complaint.

The data protection authority responsible for us:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
(Bavarian State Office for Data Protection Supervision)
Promenade 27, 91522 Ansbach, Germany
Phone: +49 981 53-1300
Fax: +49 981 53-981300

You can open the complaint form via the following link: https://www.lda.bayern.de/de/beschwerde.html
Note: A complaint is also possible to any data protection supervisory authority within the EU.

g) Right of objection
You have the possibility at any time, for reasons arising from your particular situation, to object to the processing of your data pursuant to Art. 6 para. 1 lit. e) and f); this also applies to profiling based on these provisions.

Vincotech GmbH shall then no longer process your personal data, unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the assertion, exercise or defense of legal claims.

If personal data are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is associated with such direct marketing. In the event of such an objection, we will no longer process your personal data for the purposes of direct advertising. For this purpose, it is sufficient to send us an appropriate e-mail.

h) Right of withdrawal
You have the option at any time to revoke your consent to the processing of your data with effect for the future without giving reasons. You will not suffer any disadvantages as a result of the revocation. For this purpose, it is sufficient to send us a corresponding e-mail.

However, such revocation shall not affect the lawfulness of the processing carried out on the legal basis of Art. 6 para. 1 a) GDPR until the time of revocation.

To exercise your data protection rights, send us an e-mail to the following address: info@vincotech.de.

9. Data security

We take contractual, technical and organizational security measures in accordance with the state of the art to ensure compliance with data protection laws and thus to protect the processed data against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons.

The security measures include in particular the encrypted transmission of data between your browser and our server. For this purpose, a 256-bit SSL (AES 256) encryption technology is used.

In doing so, your personal data will be protected within the scope of the following points (excerpt):

a) Maintaining the confidentiality of your personal data
To maintain the confidentiality of your data stored with us, we have taken various measures to control access, entry and access control.

b) Maintaining the integrity of your personal data
To maintain the integrity of your data stored with us, we have taken various measures to control disclosure and input.

c) Maintaining the availability of your personal data
To maintain the availability of your data stored with us, we have taken various measures for order and availability control.

The security measures in place are continuously improved in line with technological developments. Despite these precautions, due to the insecure nature of the Internet, we cannot guarantee the security of your data transmission to our website. Due to this, any data transmission by you is at your own risk.

10. Protection of minors

Personal information may only be provided to us by persons who have not yet reached the age of 16 with the express consent of their legal guardians. This data will be processed in accordance with this data protection notice.

1. Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and version

• Operating system used

• Referrer URL

• Host name of the accessing computer

• Time of the server request

• IP address

This data is not merged with other data sources and the collection of this data is mandatory for visiting these websites. The basis for the data processing is, according to Art. 6 para. 1 lit. f) GDPR, our legitimate interest in the traceability of technical malfunctions of the web server or during visits to our websites and our legitimate interest in offering our customers and interested parties an up-to-date and informative internet presence of our company.

2. Contact form

If you contact us via the website, you agree to electronic communication. Personal data is processed when you contact us electronically. The information you provide will be stored in our CRM system for the purpose of processing your inquiry and for possible follow-up questions based on our legitimate interests in an efficient and fast processing of inquiries and assigned there to the correct contact person for answering (Art. 6 para. 1 lit. f) GDPR). If your contact is directed towards the fulfillment of our services and implementation of contractual measures, Art. 6 para. 1 lit. b) GDPR is the legal basis. If we obtain your prior consent, this is the sole legal basis pursuant to Art. 6 para. 1 lit. a) GDPR.

In the event that you wish to contact us by e-mail, we would like to point out that e-mails can be read or changed unauthorized and unnoticed during transmission. Furthermore, we would like to draw your attention to the fact that we use software to filter unwanted e-mails (spam filter). The spam filter can reject e-mails if they have been falsely identified as spam by certain characteristics.

Please note that the voluntary provision of your personal data is necessary to answer your enquiry. If you do not wish to provide us with any personal data in the context of an enquiry, we will not be able to process your enquiry adequately or only to a limited extent. When using our contact form, you are required to provide your surname, email address, company and country. It is not possible to send an enquiry using our contact form without providing this information.

No automated decision-making takes place when you use our contact form.

3. Applications / recruitment

You are welcome to submit your application by e-mail. However, we would like to point out that confidentiality cannot be fully guaranteed when communicating by e-mail, even if we have implemented or maintain appropriate technical measures, such as encryption of the transport route in accordance with the state of the art. Alternatively, you can also send us your application by post to the contact details given in the job advertisements.

When you apply, we collect and store the data you send us by e-mail. We process your data exclusively for the purpose of processing your application. A forwarding does not take place.

The legal basis for the processing is Art. 6 para. 1 lit. b) GDPR, § 26 BDSG. If we are unable to offer you a position, we will store your data for a maximum of 6 months after the end of the application process.

Please note that the collection of personal data as part of the application process is necessary for the eventual conclusion of a contract between you and us.

The provision of personal data as part of the application process is voluntary. However, if you do not wish to provide us with personal data, the consequence would be that we would not be able to consider you in the application process or would not be able to consider you properly and it would subsequently not be possible to conclude a contract with you.

No automated decisions are made during the application process.

4. CRM system

We manage our customers and prospects in our CRM system, which we also use to plan our marketing campaigns and assign them to our customer and prospect categories according to need. We have concluded a commissioning agreement with our CRM provider in accordance with Art. 28 GDPR and, in order to standardize the level of data protection, also the EU standard contractual clauses.

The legal basis for the use of the CRM system is our legitimate interest in an up-to-date and needs-based customer and prospect management as well as our legitimate interest in an up-to-date and central, needs-based campaign planning for legitimate advertising measures, Art. 6 para. 1 lit. f) GDPR. Insofar as we request your consent in this regard pursuant to Art. 6 para. 1 lit. a) GDPR, this is the exclusive legal basis for the processing in our CRM system.

In order for us to identify you as our customer or prospective customer – and to provide you with the desired services – it is necessary for us to manage the data you have voluntarily provided in our CRM.

If you do not wish to provide us with any personal data, we will not be able to identify you as a customer or prospective customer and therefore will not be able to offer you the desired services.

If you are or wish to become one of our customers, the provision of personal data is a prerequisite for the conclusion of a corresponding contract with us. Nevertheless, the provision of your personal data to us is on a voluntary basis.

Automated decision-making does not take place in the management of customers and prospects in our CRM.

5. Registrations

With each registration, we collect and store the data you enter in the input mask (e.g. name, first name, e-mail address, your request). A transfer to third parties does not take place.

By sending the registration form, you give your consent pursuant to Art. 6 para. 1 lit. a) GDPR to the data processing described in more detail below for each registration option.

If the purpose of your registration is to take pre-contractual measures, Art. 6 para. 1 lit. b) GDPR is an additional legal basis.

If you have registered with one or more of the options listed below and then log in to the respective login options, we record the successful login in our system and can thus see whether and how many users are currently online in the respective tools. This data (user, time stamp) of the users is collected by us in order to provide you with the desired website or content.

We store this data at least for the duration of your registration and will be happy to delete it at your request. Please note that after deletion of this data you will no longer have access to the content for which you have registered.

Your data provided during registration will also be processed by us for marketing purposes, unless otherwise specified for the respective registration option below. The legal basis for this is your prior voluntarily given consent pursuant to Art. 6 para. 1 lit. a) GDPR. The data you provide in this respect will be recorded by us in our CRM system described in more detail above so that we can send you information about our products and services based on your interests as part of the promotional information campaigns that we run on an irregular basis.

You can revoke your consent at any time with effect for the future, just send an e-mail to info@vincotech.com.

Please note that the services listed below cannot be provided without you voluntarily providing personal data.

The following further data processing is carried out by us depending on which tool you have registered for:

a) Registration VINcoSIM
If you have registered with us in order to use the web-based simulation environment VINcoSIM free of charge, you voluntarily provide us with your personal data in return for free access to VINcoSIM. By completing the registration required for this purpose, you agree that we collect and evaluate usage statistics of your VINcoSIM sessions (e.g. which user simulated which product and when). If you do not wish to do so, you will not be able to use the simulation environment offered free of charge. You can revoke your consent given to us at any time with effect for the future. To do so, simply send an e-mail to info@vincotech.com. Please note that as a result you will no longer be able to use VINcoSIM without re-registering in the future.

b) Register to receive whitepapers
If you register to download one of our whitepapers, you voluntarily provide us with your personal data in exchange for access to this content. By completing the registration, you consent to receiving promotional emails about our services and products. Access to the whitepaper is conditional upon this consent, as the whitepaper is exclusively offered within the scope of our marketing program. You may revoke your consent at any time with effect for the future by sending an email to info@vincotech.com, though this will result in the loss of access to future whitepaper downloads without re-registration.

c) Registration for our newsletter
You can sign up for various newsletters on different topics on our website. Once you have signed up, you will receive regular information about our offers and services. Only your email address is required for registration. Further information is voluntary and is used solely for personal communication.

The newsletter is sent on the basis of your consent in accordance with Art. 6 para. 1 lit. a) GDPR using the double opt-in procedure: After registering, you will receive a confirmation email in which you confirm that you wish to subscribe to the newsletter by clicking on a link. Only then will your registration become effective. We store your IP address and the date and time of registration in order to be able to trace any possible misuse of your data.

You can revoke your consent at any time, e.g., via the unsubscribe link in each newsletter or by sending an email to info@vincotech.com. After unsubscribing, your email address will be deleted from the distribution list or added to a block list to ensure that your revocation is permanently taken into account.

Newsletter distribution via Inxmail and newsletter tracking:

We use the services of Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg, Germany, to send our newsletters. Inxmail processes your data exclusively on our behalf on the basis of a contract for order processing in accordance with Art. 28 GDPR.

Our newsletters contain tracking pixels and personalized links that we use to measure whether an email has been opened and which links have been clicked on. This information is assigned to your user profile in order to improve our content and send you information that is relevant to you. Based on these evaluations, we can automatically determine which topics might be of interest to you in the future. This data is not passed on to third parties.

Processing is based on your consent in accordance with Art. 6 para. 1 lit. a) GDPR and § 25 para. 1 TDDDG. The data is stored until you have completely deleted your newsletter subscription.

Our newsletters can only be sent with this tracking function. If you do not want tracking, you will unfortunately not be able to subscribe to the newsletter.

You can view Inxmail's privacy policy here: www.inxmail.de/datenschutz.

1. Consent Management - Usercentrics

To obtain, manage and document your consent to the use of cookies and other tracking technologies on our website, we use the Consent Management Platform (CMP) provided by Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany ("Usercentrics").

When you visit our website, the Usercentrics CMP is loaded in order to obtain your consent preferences prior to the setting of any non-essential cookies or the activation of any tracking technologies. For this purpose, Usercentrics processes the following data:

Your consent preferences (which services you have accepted or rejected)

• Date and time of your consent

• Browser and device information

• Your anonymised IP address

• A unique user ID to recognise returning users and document their consent status

This data is processed exclusively for the purpose of documenting and managing your consent in compliance with Art. 7 para. 1 GDPR and § 25 TDDDG, and to enable us to demonstrate, at any time, that valid consent was obtained. The legal basis for this processing is our legal obligation pursuant to Art. 6 para. 1 lit. c) GDPR in conjunction with Art. 7 para. 1 GDPR.

Usercentrics processes the data exclusively on our behalf on the basis of a data processing agreement concluded in accordance with Art. 28 GDPR. Data is processed on servers within the European Union.

You can view and change your consent preferences at any time by clicking on "Cookie settings" on our website. You can also revoke a previously given consent with effect for the future at any time via the same link.

For further information on data processing by Usercentrics, please refer to Usercentrics' privacy policy at: https://usercentrics.com/privacy-policy/

2. Chatbot "VINce" - mercury.ai

This website uses the AI-supported chatbot "Vince", a service provided by Mercury.ai GmbH, Alfred-Bozi-Str. 18, 33602 Bielefeld, Germany ("mercury.ai"). The chatbot assists visitors with product inquiries, support questions, and general information about Vincotech and its products based on the content available on our website.

How the chatbot works

Vince operates as a hybrid model: certain responses are pre-defined (e.g. the algorithmic assignment of product groups and related documents), while communication with the user is at least partially supported by artificial intelligence, in particular with regard to wording and the formulation of responses. The chatbot also uses a website crawler to retrieve and process information published on www.vincotech.com.

Data processed

When you use the chatbot, the following personal data may be processed depending on how you interact with it:

• Your chat inputs (e.g. product questions, support requests, questions about job vacancies or company contacts)

• If you choose to contact us via the chatbot's integrated contact form: your name, first name and contact details (e-mail address)

Chat histories are stored for a maximum of 18 months and evaluated in anonymised form for the purpose of improving the chatbot service. Chat histories are not transferred directly to our CRM system. However, if you submit a contact request via the chatbot's integrated web form, the data you provide will be forwarded to the responsible Vincotech employee and may subsequently be recorded in our CRM system in accordance with the provisions set out in the CRM section of this privacy policy.

Legal basis

The use of the chatbot is based on your consent pursuant to Art. 6 para. 1 lit. a) GDPR, which is obtained at the start of the chat session and, where applicable, again prior to the submission of personal data via the integrated contact form. You can revoke your consent at any time with effect for the future via "Cookie settings" on our website. Any data already transmitted cannot be retroactively deleted solely on this basis; please contact us at info@vincotech.com to request deletion.

Cookies and similar technologies

In connection with the use of the chatbot, cookies and similar technologies may be stored on your device. The use of such technologies is based on your consent pursuant to Art. 6 para. 1 lit. a) GDPR and § 25 para. 1 TDDDG. Details on the cookies used, including their storage duration and purpose, can be found in our Cookie Declaration, accessible at any time via "Cookie settings". You can revoke your consent at any time with effect for the future via "Cookie settings" on our website.

Data transfer and processors

mercury.ai processes data exclusively on our behalf on the basis of a data processing agreement concluded in accordance with Art. 28 GDPR. Data is processed on servers within the European Union (AWS infrastructure). No transfer of data to third countries takes place. The chatbot "Vince" is available across all pages of our website at www.vincotech.com.

3. Algolia (search function)

We use the Algolia search service on this website. The provider is Algolia SAS, 55 Rue d'Amsterdam, 75008 Paris, France. When you use the search function, your IP address is transmitted to Algolia’s servers as part of the API call. Algolia masks the last octet of the IPv4 address internally before it is stored in logs.

The legal basis for this processing is our legitimate interest in providing a functional and user-friendly product search in accordance with Art. 6 para 1 lit. f) GDPR.

Algolia primarily processes the data on servers within the EU (France, Netherlands, Germany). Log data may also be processed outside the EU in individual cases. In this case, standard contractual clauses pursuant to Art. 46 GDPR in conjunction with the European Commission’s Implementing Decision of June 4, 2021 (2021/914) have been agreed upon with Algolia.

The collected data will be deleted no later than 90 days. A data processing agreement in accordance with Art. 28 GDPR has been concluded with Algolia SAS. Further information on data protection at Algolia can be found at: https://www.algolia.com/policies/privacy.

4. Cookies

Cookies are small text files that are stored locally in the cache of your Internet browser. The cookies allow, for example, the recognition of the Internet browser. The files are used to help the browser navigate through the website and to make full use of all functions.

A detailed list of all cookies used can be found in our Cookie Declaration, accessible at any time via the fingerprint button in the lower-left corner of the screen.

The following cookies are used by us:

a) Essential cookies
To ensure the operation of the website and the smooth provision of services, this website stores technically necessary cookies in your browser. These cookies are essential for visiting the website and can only be deleted temporarily.

b) Statistical cookies
It is important for us to know what happens on its website and with its services and how these services are used. For this purpose, we collect statistical data, including personal data during the use of the website.

c) Marketing cookies
To enable the display of content that is relevant to the user and to enable us to find out which parts of the website are used and how they are used, we collect and analyze data. This data is only collected with the express consent of the user and anonymized for analysis.

A detailed list of all cookies used (including name, provider, purpose and storage duration) can be found in our Cookie Declaration, accessible at any time via the fingerprint button in the lower-left corner of the screen.

5. Google Marketing Platform

This website uses the online marketing tool Google Marketing Platform of the operator Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("GMP").

GMP uses cookies to serve ads that are relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads more than once. Via a cookie ID, Google records which ads are displayed in which browser and can thus prevent them from being displayed more than once.

The processing is based on your voluntarily given consent pursuant to Art. 6 para. 1 lit. a) GDPR.

In addition, GMP can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a GMP ad and later, using the same browser, calls up the advertiser's website and makes a purchase via this website.

According to Google, GMP cookies do not contain any personal information. Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our knowledge as follows:

Through the integration of GMP, Google receives the information that you have called up the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider may obtain and store your IP address.

In the context of the use of Google Marketing Platform, personal data may also be transmitted to the servers of Google LLC. in the USA. For this reason, we also obtain your consent for the forwarding of your data to the USA by means of our consent banner in accordance with Art. 49 para. 1 lit. a) GDPR.

If you wish to object to participation in this tracking procedure, you can deactivate cookies for conversion tracking by setting your browser to block cookies from the domain www.googleadservices.com, (see www.google.de/settings/ads), whereby this setting is deleted when you deactivate your cookies. Alternatively, you can obtain information about setting cookies from the Digital Advertising Alliance at the Internet address www.aboutads.info and make your desired settings. Finally, you can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. In the case of non-acceptance of cookies, the functionality may be of our website may be restricted.

Please visit the following web address for more information about GMP by Google's privacy policy: https://www.google.de/policies/privacy/.

You can revoke your voluntarily given consent at any time with effect for the future. To exercise your revocation, please change your settings under "Cookie settings".

In the event of a cookie being revoked, the functionality of our website may be restricted.

We do not use cookies to make automated decisions.

6. Google Tag Manager

The Google Tag Manager (GTM), provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland, is a tool for websites to reload and manage additional tools, but analysis, tracking or similar are not performed by this tool. GTM may also transfer your IP address to Google in the USA. For this reason, we would like to point out that we have set GTM so that IP addresses are only recorded anonymously.

We use GTM due to our overriding legitimate interest (Art. 6 para. 1 lit. f) GDPR) in a timely, uncomplicated management and integration of our Google tools. In the event that we have previously requested your voluntarily consent for the above-mentioned processing and you have given it to us, this is the exclusive legal basis for this processing (Art. 6 para. 1 lit. a) GDPR, § 25 para. 1. TDDDG). You can revoke your consent given to us at any time with effect for the future. The easiest way to revoke your consent is via our Consent Manager or by clicking here . In the event of revoking your given consent, the functionality of our website may be restricted.

7. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies and similar tracking technologies to collect and analyse information about how visitors use our website. This includes data such as pages visited, time spent on the website, the website from which you arrived, and your approximate location based on your IP address. This information is used to compile reports and to help us improve our website.

Your IP address is anonymised before transmission to Google's servers (IP anonymisation / "anonymizeIP"), meaning that your full IP address is not stored. In the context of the use of Google Analytics, personal data may also be transmitted to the servers of Google LLC in the USA. Data transfer to the USA is based on the EU-U.S. Data Privacy Framework and in addition on the standard contractual clauses of the EU Commission.

The use of Google Analytics is based on your consent pursuant to Art. 6 para. 1 lit. a) GDPR and § 25 para. 1 TDDDG. If you have given your consent, you can revoke it at any time with effect for the future via "Cookie settings" on our website, with the effect that the functionality of our website may be restricted.

We have concluded a data processing agreement with Google in accordance with Art. 28 GDPR. Google will process the data on our behalf exclusively for the purposes described above and is contractually obligated to ensure an adequate level of data protection.

You can also prevent the collection and processing of your data by Google Analytics by downloading and installing the browser plug-in available at the following link:

https://tools.google.com/dlpage/gaoptout.

For more information on data processing by Google Analytics, please refer to Google's privacy policy at:

https://policies.google.com/privacy.

For more information, see:

https://policies.google.com/privacy/frameworks
https://privacy.google.com/businesses/controllerterms/mccs/
https://www.dataprivacyframework.gov/list

8. Google Analytics

To enable us to display interest-based advertisements on third-party websites related to terms used in Google searches, we use the "Google Ads" service, whose provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google plays out these advertisements for us and uses the user data available at Google for this purpose, such as interests, location data, search terms used, etc. We ourselves have the option of evaluating and analyzing the advertisements that are played, for example, by showing us which search terms led visitors to our website, the success of the advertisements, etc.

The use of this service is based on your consent according to Art. 6 para. 1 lit. a) GDPR and § 25 para. 1 TDDDG. If you have given your consent, you can revoke it at any time with effect for in the "Cookie settings" with the effect that the functionality of our website may be restricted.

Data transfer to the USA is based on the EU-U.S. Data Privacy Framework and in addition it is based on the standard contractual clauses of the EU Commission.

For more information, see:

https://policies.google.com/privacy/frameworks https://privacy.google.com/businesses/controllerterms/mccs/ https://www.dataprivacyframework.gov/list

9. Google Ads Remarketing

This function, which is also offered by Google (see above), enables us to assign people who interact with our websites to specific target groups and thus to play out interest-based advertising by Google. The advertising target groups created in this way can also be linked with the Google functions across devices, which enables customized, cross-device and interest-based playout of advertising measures on other end devices used by you.

If you have a Google account, you have the option of receiving personalized advertising measures at https://www.google.com/settings/ads/onweb/ to object.

If personalised advertising is not activated, you cannot block advertising directly on Google websites such as YouTube and on websites of Google partners. For further information please see under myadcenter.google.com/personalizationoff

We use this service based on your consent in accordance with Art. 6 para. 1 lit. a) GDPR and § 25 para. 1 TDDDG. If you have given your consent, you can revoke it at any time with effect for in the "Cookie settings" with the effect that the functionality of our website may be restricted.

In addition to this data protection notice, you can also obtain information on data protection from Google at: https://policies.google.com/technologies/ads?hl=de.

10. YouTube

We use the YouTube implementation function to display and play videos of the provider "YouTube", which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Insofar as legally required, we have obtained your consent pursuant to Art. 6 para. 1 lit. a) GDPR for the processing of your data as described below.

Data is transferred to a third country (in this case, the USA) or an international organization if you have given us your consent in accordance with Art. 49 para. 1 a) GDPR. According to the current legal situation, the USA is considered a country with an insufficient level of data protection. There is a risk that your data will be processed by US authorities, for con trol and for monitoring purposes. There are currently no legal remedies against this practice.

You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the "Cookie Consent Tool" provided on the website, which can be accessed via "Cookie settings".

Please note that revoking a once given consent may result in the effect that the functionality of our website may be restricted.

According to information from "YouTube", these cookies are used, among other things, to collect video statistics, improve the user experience and prevent abusive behavior. If you are logged in to Google, your data is directly assigned to your account when you click on a video. If you do not want the assignment with your profile at YouTube, you must log out before activating the button.

Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. Independently of a playback of the embedded videos, a connection to the Google network is established each time this website is called up, which may trigger further data processing operations without our influence. Further information on data protection at "YouTube" can be found in the provider's privacy policy at: https://www.google.de/intl/de/policies/privacy

1. Links to our social media profiles

We are also active in social media and have publicly accessible profiles there so that we can present ourselves comprehensively online - and interact with the users of these social media in a timely manner.

The social media providers generally analyze the user behavior of your users and visitors to the public profiles comprehensively, insofar as functions provided by these providers are used, web pages are visited or interaction is made with advertisements displayed by - or in - the social media. If you belong to a social network and are logged in there and at the same time visit profiles of our facilities in the same network, this visit can be directly assigned by the social media provider to your user account there and can be linked to further information available there or so-called user profiles can be created by the respective providers, e.g. in order to play out (further) interest-based advertising.

Please note that we can only trace the processing of personal data in the social networks to a limited extent and not in full, and that the providers may carry out further processing operations for their own purposes. We ask you to refer to the data protection notices of the respective providers for details.

We use our social media presences for the purpose of providing a comprehensive and up-to-date presence on the Internet and for interacting with visitors/users there in a timely manner based on our legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR.

Please note that the further analysis of your user behavior and your personal data carried out by the respective providers may be processed by the providers on other legal bases, e.g. this may also be a consent given by you to the respective provider.

We cannot fully influence the data processing operations of these providers. Our options are largely determined by the corporate policy of the respective provider or the options for exerting influence provided by them.

Personal data collected by us in social media will be deleted from our systems as soon as the purpose for storing it no longer applies, you request us to delete it, or you revoke your previously granted consent to store it. If the providers themselves store personal data for their own purposes, we point out that we have no influence on the storage period in this respect. For further information, please refer to the privacy policy of the respective provider mentioned below:

We have a social media profile with the following providers:

• X: X Internet Unlimited Company, Attn: Data Protection Officer, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 IRELAND, Privacy Notice: x.com/de/privacy

• LinkedIn: LinkedIn Ireland Unlimited Company, Attn: Legal Dept. (Privacy Policy and User Agreement), Wilton Plaza, Wilton Place, Dublin 2, Ireland, Privacy Notices: https://de.linkedin.com/legal/privacy-policy

• YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Privacy Notice: www.youtube.com/intl/ALL_de/howyoutubeworks/user-settings/privacy/

• Xing: New Work SE, Am Strandkai 1, 20457 Hamburg, Germany, Privacy Policy: privacy.xing.com/de/datenschutzerklaerung

• Weibo: https://weibo.com/signup/v5/privacy#content

• Baidu: Sharon Ng No. 10, Shangdi 10th Street, PRC-Haidian District, Beijing 100085; Privacy Notice: ir.baidu.com/baidu-statement-privacy-protection/

• WeChat: Tencent International Service Europe B.V. , Buitenveldertselaan 1-5, 1082 VA, Amsterdam, Netherlands , Privacy notices: www.wechat.com/de/privacy_policy.html

For the assertion of data subject rights, see also above under "What rights do you have?", we recommend that you contact the above-mentioned providers directly, as we ourselves can only provide information about the personal data processed by us, for example, and further and comprehensive data processing takes place on the part of the above-mentioned providers, which is beyond our exact knowledge.

Change to our privacy policy: We reserve the right to adapt our data protection information at short notice so that it always complies with the current legal requirements or in order to implement changes to our services. This may, for example, concern the introduction of new services. The new data protection information will then apply to your next visit.