Skip to content
Instellix
English Deutsch

Privacy Policy

The following Privacy Policy applies to the use of our online offering at www.instellix.com (hereinafter the “Website”).

We attach great importance to data protection. Your personal data is collected and processed in accordance with applicable data protection legislation, in particular the General Data Protection Regulation (GDPR).

1. Controller

The controller responsible for the collection, processing and use of your personal data within the meaning of Article 4(7) GDPR is:

Nitrobox GmbH

Hohe Bleichen 28

20354 Hamburg, Germany

Tel.: +49 40 605 906 300

Email: info@instellix.com

If you wish to object to our collection, processing or use of your data under this Privacy Policy, either in full or in relation to individual processing activities, you may address your objection to the controller.

You may save and print this Privacy Policy at any time.

2. General purposes of processing

We use personal data to operate the Website, respond to your business-related enquiries and optimise our offering.

3. What data we use and why

3.1 Hosting

The hosting services we use provide the following: infrastructure and platform services, computing capacity, storage and database services, security services and technical maintenance for operating the Website.

For these purposes, we and/or our hosting provider process customer, prospect and Website visitor master data, contact data, content data, contractual data, usage data, and metadata and communications data on the basis of our legitimate interests in providing the Website efficiently and securely, pursuant to Article 6(1)(f) GDPR in conjunction with Article 28 GDPR.

3.2 Access data

We collect information about you when you use this Website. We automatically collect information about your usage behaviour and interactions with us, and record data concerning your computer or mobile device. We collect, store and use data relating to each access to the Website (server log files). Access data includes:

- Name and URL of the file accessed

- Date and time of access

- Volume of data transferred

- Notification of successful access (HTTP response code)

- Browser type and version

- Operating system

- Referrer URL (the page visited previously)

- Websites accessed by the user's system through our Website

- User's internet service provider

- IP address and requesting provider

We use these log data without linking them to you personally or creating other profiles, for statistical analysis, operating, securing and optimising our Website, anonymously measuring visitor numbers (traffic) and the extent and nature of use of our Website and services, and for billing purposes to measure the number of clicks received from cooperation partners. This information enables us to provide personalised and location-based content, analyse traffic, identify and resolve errors, and improve our services.

This also constitutes our legitimate interest under Article 6(1)(f) GDPR.

We reserve the right to review log data retrospectively where specific indications give rise to a reasonable suspicion of unlawful use. We also retain IP addresses where we have a specific suspicion of a criminal offence connected with use of our Website.

3.3 Cookies

We use session cookies to optimise our Website. A session cookie is a small text file sent by the relevant servers when you visit a website and temporarily stored on your hard drive. The file contains a session ID that allows different requests from your browser to be associated with the same session. This enables your computer to be recognised when you return to our Website. These cookies are deleted when you close your browser. They are used, for example, to prevent the cookie banner from being displayed again.

We also use a limited number of persistent cookies (small text files stored on your device), which remain on your device and enable us to recognise your browser on subsequent visits. These cookies are stored on your hard drive and are automatically deleted after a specified period. Their lifespan ranges from one month to ten years. This allows us to make our offering more user-friendly, effective and secure and, for example, display information tailored to your interests.

Our legitimate interest in using cookies pursuant to Article 6(1)(f) GDPR is to make our Website more user-friendly, effective and secure.

Cookies may store the following data and information:

- Login information

- Language settings

- Search terms entered

- Information on the number of visits to our Website and the use of individual Website functions.

When a cookie is activated, an identification number is assigned to it, and your personal data is not associated with that identification number. Your name, IP address or similar data that could identify you are not stored in the cookie. We receive only pseudonymised information through cookie technology.

You can configure your browser to notify you before cookies are set and decide individually whether to accept cookies in specific cases or in general, or to prevent cookies entirely. This may limit the functionality of the Website.

3.4 Cookie banner

The cookie banner we use to inform you about the use of cookies also stores a cookie. This only records whether the cookie banner has already been displayed to you. It does not contain personal data.

3.5 Data used to fulfil our contractual obligations

We process personal data needed to fulfil our contractual obligations, such as names, addresses, email addresses, products ordered, and billing and payment data. Collection of these data is necessary to enter into a contract.

The data are deleted after the expiry of warranty periods and statutory retention periods. Data linked to a user account (see below) are in any case retained for as long as that account is maintained.

The legal basis for this processing is Article 6(1)(b) GDPR, as the data are needed to fulfil our contractual obligations towards you.

3.6 Newsletter

To subscribe to our newsletter, you must provide the data requested during registration. Registration is logged. After registering, you will receive a message at the email address provided asking you to confirm your subscription (“double opt-in”). This is necessary to prevent third parties from subscribing using your email address. Subscription is voluntary and is not a prerequisite for using our other offerings. We cannot send you the newsletter without your email address and confirmation.

You may withdraw your consent to receive the newsletter and unsubscribe at any time.

We retain registration data for as long as needed to send the newsletter. We retain the registration record and delivery address for as long as there is an interest in demonstrating that consent was originally given, generally for the limitation periods applicable to civil claims, i.e. a maximum of three years.

The legal basis for sending the newsletter is your consent under Article 6(1)(a) GDPR in conjunction with Article 7 GDPR and Section 7(2)(3) of the German Act Against Unfair Competition (UWG). The legal basis for recording registration is our legitimate interest in demonstrating that newsletters were sent with your consent.

You may cancel your subscription at any time without incurring costs other than transmission costs at the basic rates. A notification in text form to the contact details in Section 1 (e.g. email, fax or letter) is sufficient. Each newsletter also contains an unsubscribe link.

3.7 Contacting us

When you contact us (e.g. by contact form or email), we process the information you provide to handle your enquiry and any follow-up questions.

Where processing is necessary to take pre-contractual steps at your request or, if you are already a customer, to perform a contract, the legal basis is Article 6(1)(b) GDPR.

We process further personal data only if you have consented (Article 6(1)(a) GDPR) or we have a legitimate interest in doing so (Article 6(1)(f) GDPR). A legitimate interest exists, for example, in replying to your email.

You may withdraw consent at any time with effect for the future.

4. Social media

This Website contains links to our social media profiles. The privacy and liability provisions of the respective providers apply to these profiles, which you can access as described below.

4.1 LinkedIn

Provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

Website: linkedin.com

Privacy: https://www.linkedin.com/legal/privacy-policy

5. Information about service providers used

To operate this Website, we integrate external services to make it more user-friendly, effective and secure. This constitutes our legitimate interest under Article 6(1)(f) GDPR.

We expressly point out that some service providers we use are based in countries considered unsafe or transfer data to such countries (e.g. the USA). According to the European Court of Justice, these countries do not provide an adequate level of protection. Transfers to these countries take place only after consent has been given.

5.1 Consent management

5.1.1 Consent management with Usercentrics

We use the Usercentrics Consent Management Platform on our Website, provided by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany. Usercentrics enables us to obtain, store, manage and demonstrate your consent to the use of cookies and external services. In particular, your consent decision, the date and time of that decision, a pseudonymous identifier, device and browser information, and your IP address may be processed. Storage of or access to information on your device, insofar as technically necessary to manage your consent, is based on Section 25(2)(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG). Further processing is carried out to fulfil our legal obligations to demonstrate consent, pursuant to Article 6(1)(c) GDPR. You can change or withdraw your selection at any time via our Website's privacy settings. Further information: https://usercentrics.com/de/datenschutzerklaerung/ .

5.2 Hosting and deployment

5.2.1 Hosting and deployment with Vercel

We use Vercel, a service provided by Vercel Inc., USA, to host, provide and deploy our Website. Each time you access our Website, Vercel processes technically necessary connection and log data. These may include your IP address, date and time of access, content requested, referrer URL, browser and device information, operating system, HTTP status codes, and diagnostic and security data. Processing is carried out to provide the Website securely, reliably and efficiently, defend against attacks and analyse technical errors. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is in providing a secure, high-performance online offering. Vercel processes data on our behalf under a data processing agreement pursuant to Article 28 GDPR. Vercel may use subprocessors and data centres in various countries. According to Vercel, transfers to the USA are based on the EU-US Data Privacy Framework and, where necessary, Standard Contractual Clauses. Further information: https://vercel.com/legal/privacy-notice and https://vercel.com/legal/dpa .

5.2.2 Vercel Edge Network / Vercel CDN

We use the Vercel Edge Network, or Vercel Content Delivery Network (CDN), to deliver our Website and static content quickly, securely and worldwide. A CDN distributes content through geographically dispersed servers so that it can be delivered as close as possible to visitors' locations. In particular, IP addresses, access times, requested files, browser and device information, and technical security and log data are processed. Processing is based on Article 6(1)(f) GDPR. Our legitimate interest is in fast loading times, high availability and protecting our Website against attacks. Data may be processed through international network nodes. The provisions on processing on our behalf and international data transfers described under “Hosting with Vercel” apply.

5.2.3 Content management with Storyblok

We use Storyblok, a headless content management system provided by Storyblok GmbH, Peter-Behrens-Platz 2, 4020 Linz, Austria, to manage and provide Website content. Editorial content such as text, images and other Website components is managed in Storyblok. Where a direct connection to Storyblok is established when the Website is accessed, your IP address, date and time of access, requested content, and browser and device information may be processed. Processing is based on Article 6(1)(f) GDPR. Our legitimate interest is in managing Website content efficiently and delivering it reliably. Storyblok processes data on our behalf under an agreement pursuant to Article 28 GDPR. Storyblok may also use subprocessors outside the European Economic Area; according to the provider, appropriate safeguards are used, in particular the EU-US Data Privacy Framework or Standard Contractual Clauses. Further information: https://www.storyblok.com/legal/privacy-policy and https://www.storyblok.com/legal/dpa .

5.3 Tools

5.3.1 Google Tag Manager

We use Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage Website tags and external services technically and to trigger them according to your consent decision. Tag Manager itself does not create usage profiles; however, when the service is accessed, your IP address and browser and device information may be transmitted to Google. We load Google Tag Manager only after you have given consent. The legal bases are Article 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw consent at any time via the privacy settings, with effect for the future. Services activated through Tag Manager are described separately in this Privacy Policy. Google may also process data in the USA. Google is certified under the EU-US Data Privacy Framework; Standard Contractual Clauses may be used additionally. Further information: https://policies.google.com/privacy?hl=de .

5.3.2 Google Maps

We use Google Maps, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to display our location and make it easier for you to find us.

Google Maps is loaded only after you have given consent. In particular, your IP address, browser and device information, and interactions with the map may be transmitted to Google. If you are signed in to your Google account, Google may associate this information with your account.

The legal bases are Article 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time through our Website's privacy settings, with effect for the future.

Processing in the USA is possible. Information about the legal bases for international transfers can be found in Google's information on data transfers . Further information is available in Google's Privacy Policy .

5.3.3 YouTube

We embed videos from YouTube, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Videos are loaded only after you have given consent. In particular, your IP address, browser and device information, the page accessed, and your interactions with the video may be transmitted to Google. If you are signed in to your Google or YouTube account, Google may associate this information with your account.

The legal bases are Article 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time through our Website's privacy settings, with effect for the future.

Processing in the USA is possible. Information about the legal bases for international transfers can be found in Google's information on data transfers . Further information is available in Google's Privacy Policy .

5.3.4 Google reCAPTCHA

We use Google reCAPTCHA, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This service protects our forms against automated and abusive submissions. To do so, reCAPTCHA analyses whether an entry is made by a human or an automated program. In particular, IP addresses, browser and device information, referrer URLs, visit duration, and interactions such as mouse movements and keystrokes may be processed and transmitted to Google.

The service is used exclusively with your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. reCAPTCHA is loaded only after you have given consent. You may withdraw consent at any time through our Website's privacy settings, with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. Without consent, protected forms may not be available. Alternatively, you can contact us using the contact details in this Privacy Policy.

Processing in the USA may take place. According to Google, Google LLC is certified under the EU-US Data Privacy Framework. Where a transfer is covered by this framework, it takes place on the basis of the corresponding adequacy decision under Article 45 GDPR. Where necessary, Google uses Standard Contractual Clauses. Further information can be found in Google's information on data transfers .

The retention period for data processed by Google depends on the relevant processing purposes and Google's applicable retention rules. Further information is available in Google's Privacy Policy .

5.4 Advertising

5.4.1 LinkedIn Insight Tag

We use the LinkedIn Insight Tag provided by LinkedIn Corporation, Sunnyvale, California, USA. This service is used to measure conversions, produce audience analyses and retarget Website visitors on LinkedIn. In particular, IP addresses, online identifiers, pages viewed, referrer URLs, timestamps, and browser and device information may be processed. LinkedIn may associate this information with a LinkedIn account.

The service is used exclusively with your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. The Insight Tag is activated only after you have given consent. You may withdraw consent at any time through our Website's privacy settings, with effect for the future.

Processing in the USA may take place. Information about the transfer safeguards used, particularly Standard Contractual Clauses, can be found in LinkedIn's Data Processing Terms . Further information about processing by LinkedIn is available in LinkedIn's Privacy Policy .

5.5 Newsletter

5.5.1 HubSpot

We have integrated HubSpot Forms into our Website. HubSpot Forms is a service provided by HubSpot, Inc. and offers marketing automation software for marketing services and products, including SEO and content creation, lead management, email marketing and web analytics.

HubSpot Forms is used for newsletter registration.

To subscribe to the newsletter, you must provide the data requested during registration. Registration is logged. After registering, you will receive a message at the email address provided asking you to confirm your subscription (“double opt-in”). This is necessary to prevent third parties from subscribing using your email address.

In this case, your data are disclosed to the operator of HubSpot Forms, HubSpot, Inc., Cambridge, Massachusetts, USA.

We process your data using HubSpot Forms to send newsletters pursuant to Article 6(1)(a) GDPR. You may withdraw consent at any time by contacting us or using the unsubscribe link included in every newsletter.

The specific retention period for the data processed is not within our control but is determined by HubSpot, Inc. Further information is available in the HubSpot Forms Privacy Policy: https://legal.hubspot.com/privacy-policy .

5.6 CRM

5.6.1 HubSpot CRM

We use HubSpot CRM, a customer relationship management system provided by HubSpot Ireland Limited, One Dockland Central, Guild Street, Dublin 1, Ireland. This service is used to manage contacts and customer relationships and to handle enquiries and sales processes. In particular, we process names, business contact details, company and job-function information, communications content, and details of enquiries and appointments.

Processing is carried out to take pre-contractual steps and perform contracts pursuant to Article 6(1)(b) GDPR. Where this legal basis does not apply, processing is based on our legitimate interest in structured contact management and efficient communication pursuant to Article 6(1)(f) GDPR. We use your data for advertising only where consent or another legal permission exists.

HubSpot processes data on our behalf under a data processing agreement pursuant to Article 28 GDPR. Processing in the USA may take place. According to HubSpot, appropriate transfer mechanisms are used for international data transfers, particularly the EU-US Data Privacy Framework and Standard Contractual Clauses. Further information on data transfers and the safeguards used is available in HubSpot's Data Processing Agreement, particularly Sections 6 and 8.5 .

We retain your data only for as long as necessary to handle your enquiry, maintain the business relationship, or comply with statutory documentation and retention obligations. Further information about data processing is available in HubSpot's Privacy Policy .

6. Tracking

6.1 Google Analytics

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This service is used to analyse Website usage and improve our online offering. Cookies and similar technologies are used to process, in particular, page views, interactions, online identifiers, browser and device information, and approximate location data.

IP addresses are used, among other things, to derive approximate location information. According to Google, individual IP addresses of users in the EU are not logged or stored. Further information on IP processing .

The service is used exclusively with your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time through our Website's privacy settings, with effect for the future.

Google processes analytics data on our behalf. Processing in the USA may take place. According to Google, Google LLC is certified under the EU-US Data Privacy Framework; Standard Contractual Clauses are used where necessary. Further information on IP processing .

The retention of user- and event-related data depends on the retention period configured in our Google Analytics account. Information about cookie retention periods is available in the privacy settings. Further information: Google's Privacy Policy .

6.2 Google Ads conversion tracking

We use Google Ads conversion tracking, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This service measures the effectiveness of our advertisements. It enables us to determine whether users take certain actions on our Website after interacting with a Google advertisement, such as submitting an enquiry.

Cookies and similar technologies are used for this purpose. In particular, IP addresses, cookie and online identifiers, information about advertising interactions, pages viewed, actions taken, and browser and device information may be processed and transmitted to Google. We receive statistical analyses of the effectiveness of our advertising activities. Further information on conversion tracking .

The service is used exclusively with your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. Conversion tracking is activated only after you have given consent. You may withdraw your consent at any time through our Website's privacy settings, with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Processing in the USA may take place. According to Google, Google LLC is certified under the EU-US Data Privacy Framework. Where a transfer is covered by this framework, it takes place on the basis of the corresponding adequacy decision under Article 45 GDPR. Where necessary, Google uses Standard Contractual Clauses. Further information is available in Google's information on data transfers .

6.2.1 HubSpot Website Tracking and Analytics

We use HubSpot's tracking code to record Website activities, evaluate the use of our online offering, and optimise marketing and sales activities. The provider for customers in the European Economic Area is HubSpot Ireland Limited, One Dockland Central, Guild Street, Dublin 1, Ireland. In particular, IP addresses, online identifiers, pages visited, the time and duration of visits, referrer URLs, interactions, browser and device information, and, where applicable, links to an existing known contact may be processed. HubSpot uses cookies and similar technologies for this purpose. The service is used exclusively with your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time through the privacy settings. HubSpot processes some data as our processor; according to the provider, certain data collected by the HubSpot tracking code, particularly IP addresses and online identifiers, may also be processed by HubSpot for its own purposes. Processing in the USA may take place. HubSpot uses appropriate transfer mechanisms, including the EU-US Data Privacy Framework and Standard Contractual Clauses. Further information: https://legal.hubspot.com/de/privacy-policy and https://legal.hubspot.com/dpa .

6.2.2 HubSpot Forms

We use HubSpot Forms, provided by HubSpot Ireland Limited, One Dockland Central, Guild Street, Dublin 1, Ireland, for contact forms, demo requests and other Website forms. When you submit a form, we process the information you enter, in particular your name, business contact details, company, job function and message content. Required fields are indicated in each form. We use the data to handle your enquiry, arrange appointments and communicate further with you. Where your enquiry relates to entering into or performing a contract, processing is based on Article 6(1)(b) GDPR. Otherwise, it is based on our legitimate interest in handling your enquiry pursuant to Article 6(1)(f) GDPR. Where the form or technologies used within it access your device or process data for analytics or marketing purposes before submission, this occurs only with your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. HubSpot processes form data on our behalf. Processing in the USA may take place; HubSpot uses appropriate transfer mechanisms. Further information: https://legal.hubspot.com/de/privacy-policy .

7. Retention periods

Unless specifically stated otherwise, we retain personal data only for as long as necessary to fulfil the purposes for which they are processed.

In certain cases, legislation requires personal data to be retained, for example under tax or commercial law. In such cases, we retain the data solely for these statutory purposes, do not otherwise process them, and delete them once the statutory retention period has expired.

8. Your rights as a data subject

Under applicable law, you have various rights in relation to your personal data. If you wish to exercise these rights, please send your request by email or post to the address in Section 1, clearly identifying yourself.

Your rights are outlined below.

8.1 Right to confirmation and access

You have the right to clear information about the processing of your personal data.

In detail:

You have the right at any time to obtain confirmation from us as to whether personal data concerning you are being processed. If so, you have the right to receive information about the personal data stored about you, free of charge, together with a copy of those data. You also have the right to the following information:

  1. The purposes of processing;

  2. The categories of personal data concerned;

  3. The recipients or categories of recipients to whom personal data have been or will be disclosed, in particular recipients in third countries or international organisations;

  4. Where possible, the envisaged period for which personal data will be stored or, if that is not possible, the criteria used to determine that period;

  5. The existence of the right to request rectification or erasure of personal data, restriction of processing by the controller, or to object to such processing;

  6. The right to lodge a complaint with a supervisory authority;

  7. Where the personal data were not collected from you, any available information about their source;

  8. The existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved and the significance and envisaged consequences of such processing for you.

Where personal data are transferred to a third country or an international organisation, you have the right to be informed of the appropriate safeguards under Article 46 GDPR relating to the transfer.

8.2 Right to rectification

You have the right to have inaccurate personal data concerning you corrected and, where applicable, completed.

In detail:

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of processing, you also have the right to have incomplete personal data completed, including by means of a supplementary statement.

8.3 Right to erasure (“right to be forgotten”)

In a number of circumstances, we are obliged to delete personal data concerning you.

In detail:

Under Article 17(1) GDPR, you have the right to obtain from us the erasure of personal data concerning you without undue delay, and we are obliged to erase such data without undue delay where one of the following grounds applies:

  1. The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.

  2. You withdraw the consent on which processing is based under Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, and there is no other legal basis for processing.

  3. You object to processing under Article 21(1) GDPR and there are no overriding legitimate grounds for processing, or you object under Article 21(2) GDPR.

  4. The personal data have been unlawfully processed.

  5. The personal data must be erased to comply with a legal obligation under EU law or the law of a Member State to which the controller is subject.

  6. The personal data were collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

Where we have made personal data public and are obliged to erase them under Article 17(1) GDPR, we will take reasonable steps, taking account of available technology and implementation costs, including technical measures, to inform controllers processing those data that you have requested the erasure of any links to, or copies or replications of, those personal data.

8.4 Right to restriction of processing

In a number of circumstances, you are entitled to request that we restrict the processing of your personal data.

In detail:

You have the right to obtain restriction of processing where one of the following applies:

  1. You contest the accuracy of the personal data, for a period enabling us to verify their accuracy;

  2. The processing is unlawful and you oppose erasure of the personal data and request restriction of their use instead;

  3. We no longer need the personal data for processing purposes, but you require them for the establishment, exercise or defence of legal claims; or

  4. You have objected to processing under Article 21(1) GDPR, pending verification of whether our legitimate grounds override yours.

8.5 Right to data portability

You have the right to receive personal data concerning you in a machine-readable format, to transmit them, or to have us transmit them.

In detail:

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and to transmit those data to another controller without hindrance from us, where:

  1. Processing is based on consent under Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, or on a contract under Article 6(1)(b) GDPR; and

  2. Processing is carried out by automated means.

When exercising your right to data portability under paragraph 1, you have the right to have the personal data transmitted directly from one controller to another, where technically feasible.

8.6 Right to object

You have the right to object to otherwise lawful processing of your personal data on grounds relating to your particular situation, unless our interests in processing override yours.

In detail:

You have the right to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you based on Article 6(1)(e) or (f) GDPR, including profiling based on those provisions. We will no longer process the personal data unless we demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or processing is necessary for the establishment, exercise or defence of legal claims.

Where we process personal data for direct marketing, you have the right to object at any time to processing of personal data concerning you for such marketing, including profiling to the extent related to direct marketing.

You have the right to object, on grounds relating to your particular situation, to processing of personal data concerning you for scientific or historical research purposes or statistical purposes under Article 89(1) GDPR, unless processing is necessary for the performance of a task carried out for reasons of public interest.

8.7 Automated individual decision-making, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

No automated decision-making takes place on the basis of the personal data collected.

8.8 Right to withdraw consent under data protection law

You have the right to withdraw your consent to the processing of personal data at any time.

8.9 Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you believe that the processing of personal data concerning you is unlawful.

9. Data security

We make every effort to ensure the security of your data within the limits of applicable data protection law and available technical means.

Your personal data are transmitted in encrypted form. This applies to all forms we offer. We use SSL (Secure Socket Layer) encryption, but point out that data transmission over the internet (e.g. email communication) may have security vulnerabilities. Complete protection against access by third parties is not possible.

To protect your data, we maintain technical and organisational security measures pursuant to Article 32 GDPR and regularly adapt them to the state of the art.

We also cannot guarantee that our offering will be available at particular times; disruptions, interruptions or outages cannot be ruled out. The servers we use are regularly and carefully backed up.

10. Disclosure of data to third parties; no transfers outside the EU

As a rule, we use your personal data only within our company.

Where we engage third parties to fulfil contracts (e.g. logistics service providers), they receive personal data only to the extent necessary to provide the relevant service.

Where we outsource parts of data processing (“processing on behalf of the controller”), we contractually require processors to use personal data only in accordance with applicable data protection legislation and to protect data subjects' rights.

No transfers of data to entities or persons outside the EU take place or are planned other than in the cases described in Sections 5 and 6 of this Privacy Policy.

11. Data Protection Officer

If you have any questions or concerns about data protection, please contact our Data Protection Officer:

Iqanta GmbH

Sven Weschler

kontakt@iqanta.com

12. Changes to this Privacy Policy

If new services or providers are used to operate this Website, we reserve the right to amend this Privacy Policy to reflect legal requirements. The amended Privacy Policy will apply when you next visit the Website.