Privacy Policy

General

As the operator of this website and as a company, we come into contact with your personal data. This refers to all data that says something about you and by which you can be identified. In this privacy policy, we would like to explain in what manner, for what purpose, and on what legal basis we process your data.

The party responsible for data processing on this website and in our company is:

PROGRESSIVE digital - Kock, Rietz GbR
Hospeltstr. 65 - 67
50825 Cologne
Germany

Phone: 0221 168 738 77
E-Mail: info@progressivedigital.de

General Information

SSL and TLS Encryption

Whenever you enter data on websites, place online orders, or send emails via the internet, you must always expect that unauthorized third parties may access your data. Complete protection against such access is not possible. However, we do everything in our power to protect your data as well as possible and to close security gaps to the extent feasible.

An important protective mechanism is the SSL/TLS encryption of our website, which ensures that data you transmit to us cannot be read by third parties. You can recognize the encryption by the padlock icon before the entered internet address in your browser and by the fact that our internet address begins with https:// rather than http://.

How long do we store your data?

In some places in this privacy policy, we inform you about how long we or the companies that process your data on our behalf store your data. Where no such information is provided, we store your data until the purpose of data processing no longer applies, you object to the data processing, or you withdraw your consent to data processing.

In the event of an objection or withdrawal, we may continue to process your data if at least one of the following conditions applies:

We have compelling legitimate grounds for continuing the data processing that override your interests, rights, and freedoms (only in the case of objection to data processing; if the objection is directed at direct marketing, we cannot put forward any legitimate grounds).
The data processing is necessary for the establishment, exercise, or defense of legal claims (does not apply if your objection is directed at direct marketing).
We are legally obligated to retain your data.

In such cases, we will delete your data as soon as the condition(s) no longer apply.

Data Transfer to the USA

We also use tools on our website from companies that transfer your data to the USA and store and potentially further process it there. The European Commission has adopted an adequacy decision for the EU-US data privacy framework. This establishes that the USA ensures an adequate level of protection for personal data from the EU transferred to US companies. This decision is based on new safeguards and measures introduced by the USA to meet data protection requirements. The adequacy decision includes, among other things, restrictions and safeguards regarding access by US intelligence services to data. Binding guarantees have been introduced to limit US intelligence service access to what is necessary and proportionate for national security purposes. Enhanced oversight of US intelligence service activities has also been established to ensure that restrictions on surveillance activities are observed. An independent redress mechanism has furthermore been set up to handle and resolve complaints from European citizens regarding access to their data. The EU-US data privacy framework thus enables European companies to transfer data to certified US companies without needing to introduce additional data protection safeguards. A list of all certified companies can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search

A change to the European Commission's decision cannot be excluded.

Your Rights

Right to Object to Data Processing

IF YOU READ IN THIS PRIVACY POLICY THAT WE HAVE LEGITIMATE INTERESTS FOR PROCESSING YOUR DATA AND THEREFORE BASE THIS ON ART. 6(1)(1)(F) GDPR, YOU HAVE THE RIGHT UNDER ART. 21 GDPR TO OBJECT TO THIS. THIS ALSO APPLIES TO PROFILING CARRIED OUT ON THE BASIS OF THE AFOREMENTIONED PROVISION. A PREREQUISITE IS THAT YOU PROVIDE REASONS FOR THE OBJECTION ARISING FROM YOUR PARTICULAR SITUATION. A REASON IS NOT REQUIRED IF THE OBJECTION IS DIRECTED AT THE USE OF YOUR DATA FOR DIRECT MARKETING.

THE CONSEQUENCE OF THE OBJECTION IS THAT WE MAY NO LONGER PROCESS YOUR DATA. THIS DOES NOT APPLY ONLY IF ONE OF THE FOLLOWING CONDITIONS EXISTS:

WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS.
THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

THE EXCEPTIONS DO NOT APPLY IF YOUR OBJECTION IS DIRECTED AT DIRECT MARKETING OR AT PROFILING CONNECTED WITH IT.

Further Rights

Withdrawal of Your Consent to Data Processing

Many data processing operations are carried out on the basis of your consent. You grant this, for example, by checking a corresponding box in online forms before submitting the form, or by allowing certain cookies when you visit our website. You may withdraw your consent at any time without giving reasons (Art. 7(3) GDPR). From the time of withdrawal, we may no longer process your data. The only exception: we are legally obligated to retain the data for a certain period. Such retention periods exist in particular in tax and commercial law.

Right to Lodge a Complaint with the Competent Supervisory Authority

If you believe that we have violated the General Data Protection Regulation (GDPR), you have the right under Art. 77 GDPR to lodge a complaint with a supervisory authority. You may contact a supervisory authority in the member state of your place of residence, your place of work, or the place of the alleged infringement. The right to lodge a complaint exists in addition to administrative or judicial remedies.

Right to Data Portability

Data that we process automatically on the basis of your consent or in fulfillment of a contract must be handed over to you or a third party in a commonly used, machine-readable format upon request. We can only transfer the data directly to another controller to the extent that this is technically feasible.

Right to Access, Erasure, and Rectification of Data

You have the right under Art. 15 GDPR to obtain free information about which personal data we have stored about you, where the data originates from, to whom we transmit the data, and for what purpose it is stored. Should the data be incorrect, you have the right to rectification (Art. 16 GDPR); under the conditions of Art. 17 GDPR, you may request that we erase the data.

Right to Restriction of Processing

In certain situations, you may request under Art. 18 GDPR that we restrict the processing of your data. The data may then – aside from storage – only be processed as follows:

with your consent
for the establishment, exercise, or defense of legal claims
for the protection of the rights of another natural or legal person
for reasons of important public interest of the European Union or a member state

The right to restriction of processing exists in the following situations:

You have contested the accuracy of your personal data stored with us and we need time to verify this. The right exists for the duration of the verification.
The processing of your personal data is or was unlawful. The right exists as an alternative to erasure of the data.
We no longer need your personal data, but you need it for the establishment, defense, or exercise of legal claims. The right exists as an alternative to erasure of the data.
You have lodged an objection pursuant to Art. 21(1) GDPR and your and our interests must now be weighed against each other. The right exists as long as the outcome of the weighing has not yet been determined.

Hosting and Content Delivery Networks (CDN)

External Hosting

Our website is hosted on a server of the following internet service provider (hoster):

dogado GmbH

Antonio-Segni-Straße 11

44263 Dortmund

Has a data processing agreement been concluded with the hoster or are standard contractual clauses (SCC) used?

Yes

How do we process your data?

The hoster stores all data of our website. This also includes all personal data that is automatically collected or entered by you. This may include in particular: your IP address, pages accessed, names, contact details and inquiries, as well as meta and communication data. In processing data, our hoster follows our instructions and always processes data only to the extent necessary to fulfill its service obligations to us.

On what legal basis do we process your data?

Since we use our website to address potential customers and maintain contact with existing customers, the data processing by our hoster serves the initiation and fulfillment of contracts and is therefore based on Art. 6(1)(b) GDPR. In addition, it is our legitimate interest as a company to provide a professional internet presence that meets the necessary requirements for security, speed, and efficiency. To this extent, we also process your data on the basis of Art. 6(1)(f) GDPR.

Data Collection on This Website

Use of Cookies

Our website places cookies on your device. These are small text files used for various purposes. Some cookies are technically necessary for the website to function at all (necessary cookies). Others are required to perform certain actions or functions on the site (functional cookies). For example, without cookies it would not be possible to use the features of a shopping cart in an online store. Other cookies serve to analyze user behavior or optimize advertising measures. When we use third-party services on our website, for example to process payment transactions, these companies may also place cookies on your device when you visit the website (so-called third-party cookies).

How do we process your data?

Session cookies are stored on your device only for the duration of a session. As soon as you close your browser, they disappear automatically. Permanent cookies, on the other hand, remain on your device unless you delete them yourself. This can, for example, result in your user behavior being analyzed on an ongoing basis. You can influence how your browser handles cookies through its settings:

Do you want to be notified when cookies are set?
Do you want to exclude cookies generally or in specific cases?
Do you want cookies to be automatically deleted when you close your browser?

If you disable or disallow cookies, the functionality of the website may be limited.

If we use cookies from other companies or for analysis purposes, we will inform you of this within this privacy policy. We will also request your consent in this regard when you visit our website.

On what legal basis do we process your data?

We have a legitimate interest in ensuring that our online offerings can be used by visitors without technical issues and that all desired functions are available to them. The storage of necessary and functional cookies on your device therefore takes place on the basis of Art. 6(1)(f) GDPR. All other cookies are used on the basis of Art. 6(1)(a) GDPR, provided you have given us the corresponding consent. This can be withdrawn at any time with effect for the future. If you have consented to the placement of necessary and functional cookies when consent was requested, the storage of these cookies also takes place exclusively on the basis of your consent.

Server Log Files

Server log files record all requests and accesses to our website and capture error messages. They also include personal data, in particular your IP address. However, this is anonymized by the provider after a short time, so that we cannot assign the data to your person. The data is transmitted automatically by your browser to our provider.

How do we process your data?

Our provider stores the server log files in order to be able to track activity on our website and identify errors. The files contain the following data:

Browser type and version
Operating system used
Referrer URL
Hostname of the accessing computer
Time of the server request
IP address (anonymized if applicable)

We do not combine this data with other data, but use it solely for statistical evaluation and to improve our website.

On what legal basis do we process your data?

We have a legitimate interest in ensuring that our website runs without errors. It is also our legitimate interest to obtain an anonymized overview of visits to our website. The data processing is therefore lawful pursuant to Art. 6(1)(f) GDPR.

Contact Form

You can send us a message via the contact form on this website.

How do we process your data?

We store your message and the information provided in the form in order to process your inquiry, including any follow-up questions. This also applies to the contact details provided. Without your consent, we do not pass the data on to other persons.

How long do we store your data?

We delete your data as soon as one of the following occurs:

Your inquiry has been fully processed.
You request us to delete the data.
You withdraw your consent to storage.

This does not apply if we are legally obligated to retain the data.

On what legal basis do we process your data?

If your inquiry is related to our contractual relationship or serves the implementation of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. In all other cases, it is our legitimate interest to process inquiries addressed to us effectively. The legal basis for data processing is therefore Art. 6(1)(f) GDPR. If you have consented to the storage of your data, Art. 6(1)(a) GDPR is the legal basis. In this case, you may withdraw your consent at any time with effect for the future.

Attributing enquiries to campaigns

When you send an enquiry via the contact form or the project enquiry form, we also store the address through which you entered our website: the entry page and, if contained in the address, campaign parameters (utm_source, utm_medium, utm_campaign, utm_content, utm_term) and ad click IDs (gclid, gbraid, wbraid, msclkid, oppref). We use this to attribute enquiries to our advertising. The legal basis for storing this information with your enquiry is our legitimate interest in this attribution (Art. 6(1)(f) GDPR).

So that this information is kept when you visit further pages before your enquiry, we place it in your browser’s session storage (sessionStorage). We only do this if you have consented to “Google Tag Manager” or “OpenAI Ads (ChatGPT Ads)” in the cookie banner (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). The session storage is cleared when you close the browser window; if you withdraw both consents, we remove the information immediately. Without consent we only use the parameters of the address you are currently visiting.

Inquiries by E-Mail, Phone, or Fax

You can send us a message by e-mail or fax, or call us.

How do we process your data?

We store your message as well as the contact details you have provided or the phone number transmitted, in order to process your inquiry, including any follow-up questions. Without your consent, we do not pass the data on to other persons.

How long do we store your data?

We delete your data as soon as one of the following occurs:

Your inquiry has been fully processed.
You request us to delete the data.
You withdraw your consent to storage.

This does not apply if we are legally obligated to retain the data.

On what legal basis do we process your data?

TinyCal

What is TinyCal?

Menu bar calendar

Who processes your data?

Plum Amazing, LLC, 74-5285 Ka'eka St, Kailua-Kona, HI 96740, USA

Where can you find further information about data protection at TinyCal?

https://plumamazing.com/de/legal/

On what basis do we transfer your data to the USA?

TinyCal adheres to the standard contractual clauses of the European Commission (cf. https://plumamazing.com/de/legal/)

How do we process your data?

We use the TinyCal service on our website. TinyCal enables easy access to and display of Google or Apple calendars directly via the menu bar. Events, reminders, and other options can be added. TinyCal collects personal data in the process.

How long do we store your data?

We delete your data as soon as one of the following occurs:

· The purpose of data processing no longer applies.

· You request us to delete the data.

· You withdraw your consent to storage.

This does not apply if we are legally obligated to retain the data.

On what legal basis do we process your data?

We have a legitimate interest in scheduling appointments with customers and other interested parties as easily as possible. The data processing therefore takes place on the basis of Art. 6(1)(f) GDPR. If you have consented to the storage of your data, Art. 6(1)(a) GDPR is exclusively the legal basis. In this case, you may withdraw your consent at any time with effect for the future.

Analytics Tools and Advertising

We use the following tools to analyze the behavior of our website visitors and to show you advertising.

Google Tag Manager

What is Google Tag Manager?

Tag management system for integrating tracking codes and conversion pixels from Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Where can you find further information about data protection at Google Tag Manager?

https://policies.google.com/privacy

On what basis do we transfer your data to the USA?

On the basis of the European Commission's adequacy decision and the corresponding certification of the company.

How do we process your data?

We use Google Tag Manager to integrate and manage measurement codes. This one consent also loads the Google Ads conversion measurement (conversion ID AW-710200717) and Google Analytics 4; the cookie banner does not list these two services separately so far. The tag manager itself does not create user profiles and does not analyse your behaviour, but it does capture your IP address and transmits it to Google servers in the USA. None of these services is loaded without your consent.

On what legal basis do we process your data?

Storing information in your browser and accessing it is based solely on your consent under Section 25 (1) TDDDG, the further processing of your data on your consent under Article 6 (1) (a) GDPR. Without your consent to the "Google Tag Manager" service in the cookie banner, Google Tag Manager is not loaded and nothing is measured. You can withdraw your consent at any time with effect for the future: open "Cookie settings" in the footer of this website and deselect the service.

Google Analytics

What is Google Analytics?

Tool for analyzing user behavior from Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Has a data processing agreement been concluded with Google Analytics?

Yes

Where can you find further information about data protection at Google Analytics?

https://support.google.com/analytics/answer/6004245?hl=de

On what basis do we transfer your data to the USA?

On the basis of the European Commission's adequacy decision and the corresponding certification of the company.

How can you prevent data collection?

Among other ways, with a browser plugin: https://tools.google.com/dlpage/gaoptout?hl=de

How do we process your data?

We are always interested in optimizing our web offering for visitors to our website and placing advertising optimally. Google Analytics, a tool that analyzes user behavior and thus provides us with the necessary data basis for adjustments, helps us with this. Through the tool, we receive information about the origin of our visitors, their page views, the time they spend on pages, and the operating system they use.

Standard Processing

To capture the data, Google Analytics uses cookies, device fingerprinting, or other technologies for recognizing users. The data is transmitted to Google servers in the USA and compiled using the also-captured IP address into a profile that can be assigned to you or your device.

You can prevent Google from processing your data by installing a browser plugin provided by Google itself: https://tools.google.com/dlpage/gaoptout?hl=de

What happens to your IP address?

Google Analytics 4 processes your IP address to determine the approximate location of the access and, according to Google, does not store it permanently. The "IP anonymization" setting known from earlier versions of Google Analytics no longer exists; the data is also processed in the USA.

Demographic Characteristics

We use the "demographic characteristics" function of Google Analytics in order to display suitable advertisements to visitors of our website within the Google advertising network. This allows reports to be created that contain statements about age, gender, and interests of our website visitors. This data comes from interest-based advertising by Google and from visitor data from third-party providers.

You can deactivate this function in your Google account settings.

How long do we store your data?

Data stored at the user and event level linked to cookies, user identifiers (e.g. user IDs), or advertising IDs is deleted by Google after 14 months, according to its own statements.

On what legal basis do we process your data?

Storing information in your browser and accessing it is based solely on your consent under Section 25 (1) TDDDG, the further processing of your data on your consent under Article 6 (1) (a) GDPR. Without your consent to the "Google Tag Manager" service in the cookie banner, Google Analytics is not loaded and nothing is measured. You can withdraw your consent at any time with effect for the future: open "Cookie settings" in the footer of this website and deselect the service.

Google Ads

What is Google Ads?

Online advertising program from Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Has a data processing agreement been concluded with Google Ads?

Yes

Where can you find further information about data protection at Google Ads?

https://policies.google.com/privacy?hl=de&gl=de

On what basis do we transfer your data to the USA?

On the basis of the European Commission's adequacy decision and the corresponding certification of the company.

How do we process your data?

We use Google Ads. Google's advertising program enables us to display advertisements in the Google search engine or on third-party websites when visitors to our website enter certain search terms on Google (keyword targeting). Furthermore, we can use the user data available at Google (e.g. location data and interests) to place targeted advertisements (audience targeting). We evaluate the collected data quantitatively by, for example, analyzing which search terms led to our advertisements being displayed and how many advertisements resulted in corresponding clicks.

On what legal basis do we process your data?

As website operators, we have a legitimate interest in placing and evaluating advertisements. The data processing is therefore lawful pursuant to Art. 6(1)(f) GDPR. In the event that you have, for example, consented to the storage of cookies or otherwise consented to data processing by Google, Art. 6(1)(a) GDPR is exclusively the legal basis. You may withdraw the consent at any time with effect for the future.

Google Analytics Remarketing

What is Google Analytics Remarketing?

Tool for personalized advertising from Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Has a data processing agreement been concluded with Google Analytics Remarketing?

Yes

Where can you find further information about data protection at Google Analytics Remarketing?

https://www.google.de/intl/de/policies/privacy/ and https://policies.google.com/technologies/ads

On what basis do we transfer your data to the USA?

On the basis of the European Commission's adequacy decision and the corresponding certification of the company.

How can you prevent data processing?

By objecting to personalized advertising in your Google account or on this page: https://www.google.com/settings/ads/onweb/

How do we process your data?

We are always interested in placing our advertising optimally. The remarketing function of Google Analytics helps us with this.

Standard Processing

Remarketing means that we analyze your behavior on our website in order to assign you to a specific advertising target group and subsequently display appropriate advertising messages to you when you visit other websites. In addition, we link advertising target groups with cross-device functions of Google. This enables us to display interest-based, personalized advertising messages that have been tailored to you based on your usage and browsing behavior on one device (e.g. your mobile phone) also on another device (e.g. a tablet or PC).

Customer Matching

When forming advertising target groups, we also use the customer matching function. In doing so, we transfer certain customer data (e.g. e-mail addresses) from our customer lists to Google. If the customers in question are Google users and are logged into their Google account, they will subsequently be shown appropriate advertising messages within the Google network (e.g. on YouTube, Gmail, or in the search engine).

Objecting to Personalized Advertising

You can adjust your advertising settings in your Google account. To do so, click on the following link and log in: https://adssettings.google.com/authenticated. Outside of your Google account, you can object to personalized advertising at the following link: https://www.google.com/settings/ads/onweb/

On what legal basis do we process your data?

Storing information in your browser and accessing it is based solely on your consent under Section 25 (1) TDDDG, the further processing of your data on your consent under Article 6 (1) (a) GDPR. Without your consent to the "Google Tag Manager" service in the cookie banner, Google Analytics is not loaded and nothing is measured. You can withdraw your consent at any time with effect for the future: open "Cookie settings" in the footer of this website and deselect the service.

Google Conversion Tracking

What is Google Conversion Tracking?

Tool for analyzing user behavior from Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Has a data processing agreement been concluded with Google Conversion Tracking?

Yes

Where can you find further information about data protection at Google Conversion Tracking?

https://www.google.de/intl/de/policies/privacy/

On what basis do we transfer your data to the USA?

On the basis of the European Commission's adequacy decision and the corresponding certification of the company.

How do we process your data?

We are always interested in optimizing our web offering for users and placing advertising optimally. For this purpose, we also use Google's conversion tracking. With its help, we can record whether and how often visitors to our website have clicked on certain buttons and which products were viewed and purchased particularly frequently (conversion statistics). In the course of data collection and storage, we do not receive any information that allows us to personally identify individual visitors. Google itself uses cookies or comparable recognition technologies for identification purposes.

On what legal basis do we process your data?

Storing information in your browser and accessing it is based solely on your consent under Section 25 (1) TDDDG, the further processing of your data on your consent under Article 6 (1) (a) GDPR. Without your consent to the "Google Tag Manager" service in the cookie banner, the conversion measurement is not loaded and nothing is measured. You can withdraw your consent at any time with effect for the future: open "Cookie settings" in the footer of this website and deselect the service.

OpenAI Ads Measurement Pixel (ChatGPT Ads)

What is the OpenAI Ads Measurement Pixel?

A measurement tool by OpenAI. We use it to find out whether a visit that started with a click on one of our ads in ChatGPT leads to a project enquiry on our website (conversion measurement).

Who receives your data?

We are responsible for embedding the pixel on this website (see the details at the beginning of this privacy policy). The data is received by OpenAI Ireland Ltd., 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland.

OpenAI uses the data to match ad clicks and enquiries and to provide us with reports. Under the contract terms, OpenAI also uses the data for its own purposes: for the development, provision and improvement of its own products and services.

Has a data processing agreement been concluded with OpenAI?

No. OpenAI does not process the data on our behalf but also for its own purposes. In its terms for advertising tools (Ad Tools Data Processing Addendum), OpenAI classifies itself and us as independent controllers. We are responsible for embedding the pixel on our website and for the resulting collection and transmission of your data to OpenAI; under the case law of the Court of Justice of the European Union, this may constitute joint controllership with OpenAI. OpenAI alone is responsible for any further processing at OpenAI.

You can exercise your rights against us and against OpenAI. You can also contact us; we will then name the responsible contact at OpenAI.

Where can you find further information about data protection at OpenAI?

https://openai.com/policies/eu-privacy-policy/
https://openai.com/policies/ad-tools-dpa/

Is your data transferred to countries outside the EU?

The data is sent to OpenAI Ireland Ltd. in the European Economic Area. OpenAI may transfer personal data to affiliates or service providers in the USA or other third countries. Such transfers are covered by the European Commission's Standard Contractual Clauses in their version of 4 June 2021, module one (controller to controller), which OpenAI has agreed in its "Ad Tools Data Processing Addendum". OpenAI cannot rely on an adequacy decision: it is not certified under the EU-US Data Privacy Framework.

How do we process your data?

The pixel is only active if you have consented to the service "OpenAI Ads (ChatGPT Ads)" (category Marketing) in the cookie banner. We load it via Google Tag Manager. It therefore only runs if you have also consented to the service "Google Tag Manager" (category Performance/Statistics). In that case Google also receives your IP address (see section "Google Tag Manager").

The pixel script is loaded from bzrcdn.openai.com. The pixel reports every page view and the submission of a project enquiry (event "lead_created") to bzr.openai.com. The following is transmitted:

the address of the page visited and of the previously visited page, each without appended parameters,
the time and an identifier of the event,
the ad click identifier and the browser reference from the cookies listed below,
for technical reasons, your IP address and information about your browser.

Where your browser allows it, it also sends cookies that OpenAI itself has set for the domain openai.com, for example if you use OpenAI services.

The pixel stores the following in your browser:

__oppref (cookie, 30 days): the ad click identifier (URL parameter "oppref").
__obref (cookie, 365 days): a randomly generated browser reference that allows your browser to be recognised on later visits.
__oaiq_consent (cookie, 30 days): your consent state for the pixel.
Entries in your browser's local storage and session storage containing your consent state.
__oaiq_domain_probe: a test cookie that is set briefly while loading and deleted immediately.

What happens to the details you enter in our form?

The pixel automatically detects contact details shown on the page or entered by you, for example your name, email address or phone number in our enquiry form. OpenAI calls this "automatic advanced matching". The pixel reads these details while you are filling in the form. They are transmitted to OpenAI together with a measurement event; on this website, when you submit a project enquiry.

The pixel normalises name, email address and phone number in your browser and converts them into a string of characters (SHA-256 hash). It sends only this hash to OpenAI. This is not anonymisation. The hash is pseudonymised but still personal data: OpenAI can compare it with its own data, for example the email address of a ChatGPT account, and thereby tell whether your enquiry followed an ad click. Country, city, region and postal code, if present, would be normalised but transmitted unhashed. Our enquiry form does not currently ask for such details.

According to our review of the pixel code (as of September 2026), the pixel only evaluates fields that it identifies by their label as name, email address, phone number or address details. It does not transmit the text of your message. OpenAI may change the script; we review it regularly.

We cannot currently switch this feature off. It is only active while your consent is in place.

What data do we receive from OpenAI?

We do not store any data ourselves via the pixel. In our advertising account at OpenAI we see aggregated reports, for example the number of enquiries after an ad click. To check the setup, OpenAI also shows us individual events for a short time, for example event type, time and page address, without plain-text contact details.

How long is your data stored?

The cookies in your browser are stored for no longer than stated above, unless you delete them earlier or withdraw your consent. OpenAI determines how long it stores the transmitted data. Details can be found in OpenAI's privacy policy.

How can you prevent data processing?

Do not consent to the service in the cookie banner. Consent is voluntary. You can use our website and the enquiry form without restriction without it.

You can withdraw your consent at any time via the cookie settings in the footer of every page. The pixel will then no longer be loaded. The cookies __oppref and __obref are deleted; the cookie __oaiq_consent and local storage keep a record that you have withdrawn consent. You can delete these entries in your browser at any time. Withdrawal does not affect the lawfulness of processing carried out before it. You can ask OpenAI to delete data it has already received; you can also contact us about this.

On what legal basis do we process your data?

Storing and accessing information in your browser is based on your consent pursuant to Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG); the further processing of your data is based on your consent pursuant to Art. 6(1)(a) GDPR. Storing your withdrawal in __oaiq_consent is based on Section 25(2) No. 2 TDDDG. You can withdraw your consent at any time with effect for the future (Art. 7(3) GDPR).

Google Ads Remarketing

What is Google Ads Remarketing?

Online advertising program from Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Has a data processing agreement been concluded with Google Ads Remarketing?

Yes

Where can you find further information about data protection at Google Ads Remarketing?

https://policies.google.com/privacy?hl=de&gl=de

On what basis do we transfer your data to the USA?

On the basis of the European Commission's adequacy decision and the corresponding certification of the company.

How do we process your data?

We use Google Ads Remarketing. Remarketing is a function of online marketing in which advertising is delivered to users who have already interacted with a website or online store. Google Remarketing uses data from the Google advertising platform and Google Ads tracking to target advertising campaigns at users who have already shown interest in a particular product or service.

You can adjust your advertising settings in your Google account. To do so, click on the following link and log in: https://www.google.com/settings/ads/onweb/

On what legal basis do we process your data?

Storing information in your browser and accessing it is based solely on your consent under Section 25 (1) TDDDG, the further processing of your data on your consent under Article 6 (1) (a) GDPR. Without your consent to the "Google Tag Manager" service in the cookie banner, the Google Ads tag is not loaded and nothing is measured. You can withdraw your consent at any time with effect for the future: open "Cookie settings" in the footer of this website and deselect the service.

Microsoft Clarity

Why do we use Microsoft Clarity?

We want to understand how this website is used: which areas are viewed, where visitors stop and where controls do not work. We use these findings to improve the content, structure and technology of our pages.

Who receives your data?

Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland.

Has a data processing agreement been concluded with Microsoft?

No. Under the current Microsoft Clarity terms, Microsoft and we are each independent controllers; Clarity is not operated on our behalf. We are responsible for embedding the service on this website and for the resulting collection and transmission of your data, Microsoft for any further processing. You can address your rights to us; we will then name the responsible contact at Microsoft.

Which data is processed?

Only if you have given your consent, the Clarity script is loaded from www.clarity.ms. It then processes the pages you open and the referring address, date and time, mouse, typing and scrolling movements as well as clicks, information about your device (browser, operating system, screen and window size, approximate location based on the IP address) and your IP address. From these events Clarity creates session recordings and aggregated analyses such as click and scroll distributions.

What is excluded from the recording?

Entries in form fields and drop-down menus are masked by Clarity in every setting and are not transmitted. In addition we have selected the "Strict" masking mode, marked every form of this website as masked and excluded the confirmation pages of our enquiry forms from the recording.

Which cookies does Clarity set?

After your consent the cookies _clck (recognises your browser on later visits, lifetime 12 months) and _clsk (groups the page views of one session, lifetime 1 day). Without your consent Clarity sets no cookies.

Is your data transferred outside the EU?

Yes. The data is also processed in the USA. Microsoft Ireland Operations Limited bases the transfer to Microsoft Corporation in the USA on the EU Standard Contractual Clauses; Microsoft Corporation is additionally certified under the EU-US Data Privacy Framework (status currently "Active - Re-certification under Review"). Clarity is not one of the services covered by Microsoft's "EU Data Boundary", so the data is not kept within the EU. Despite these safeguards, access by US authorities to your data cannot be ruled out entirely.

How long is the data stored?

Microsoft deletes session recordings 30 days after the recording; aggregated analyses such as heatmaps, recordings marked as favourites and a random sample of recordings remain available for up to 9 months.

On what legal basis do we process your data?

How do you withdraw your consent?

At any time with effect for the future: open "Cookie settings" in the footer of this website and deselect the "Microsoft Clarity" service. We pass the withdrawal on to Microsoft immediately, the cookies _clck and _clsk are deleted and the recording ends. The lawfulness of the processing carried out until the withdrawal is not affected. Further information: Microsoft privacy statement.

Microsoft Advertising (conversion measurement)

With your consent we use the conversion tracking "Universal Event Tracking" (UET) of Microsoft Advertising. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland.

If you reach our website via an ad in Microsoft search (e.g. Bing), Microsoft stores cookies (_uetsid, lifetime 1 day; _uetvid and MUID, lifetime up to 13 months). This lets us and Microsoft recognise that an enquiry was sent after an ad click. In particular, the page visited, the referring page, the click identifier (msclkid), the triggered event as well as your IP address and browser information are processed. We only receive aggregated reports; we cannot identify individual persons.

The legal basis is your consent (Article 6 (1) (a) GDPR, Section 25 (1) TDDDG). The tag is only loaded if you allow "Microsoft Advertising" and also "Google Tag Manager" in the cookie banner. You can withdraw your consent at any time with effect for the future via "Cookie settings" in the footer of this website.

Microsoft may also transfer data to the USA. Microsoft Corporation is certified under the EU-US Data Privacy Framework. Further information: Microsoft privacy statement.

Mailchimp

What is Mailchimp?

Service for sending newsletters and analyzing recipient behavior

Who processes your data?

Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA

Has a data processing agreement been concluded with Mailchimp?

Yes

Where can you find further information about data protection at Mailchimp?

https://mailchimp.com/legal/privacy and https://mailchimp.com/de/gdpr/

On what basis do we transfer your data to the USA?

Mailchimp has so-called standard contractual clauses that permit data transfer to the USA.

How do we process your data?

We use Mailchimp to send our newsletter. The service manages the data of our newsletter subscribers for us, sends our newsletter, and analyzes our newsletter campaigns.

If you would like to receive our newsletter, we require your e-mail address. We will also use a confirmation e-mail (double opt-in procedure) to verify that you are actually the owner of this e-mail address. We do not collect any other data, or only on a voluntary basis. We use your data exclusively for sending the newsletter.

When we send a newsletter via Mailchimp and you open it, a file contained in the newsletter automatically connects to Mailchimp's servers. This tells the service that the newsletter was opened and registers all clicks on the links it contains. In addition, Mailchimp captures technical information such as the time of retrieval, the IP address, browser type, and operating system.

You can unsubscribe from the newsletter at any time.

How long do we store your data?

After you unsubscribe, the data will be deleted from the newsletter distribution list. Under certain circumstances, we may simultaneously add your e-mail address to a blacklist.

On what legal basis do we process your data?

By entering your details in the subscriber list, you consent to data processing by Mailchimp. This therefore takes place lawfully on the basis of Art. 6(1)(a) GDPR. You may withdraw the consent by unsubscribing from the newsletter or by sending us an informal notification.

Plugins and Tools

YouTube (with Enhanced Data Protection)

What is YouTube?

Video platform

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Where can you find further information about data protection at YouTube?

https://www.youtube.com/intl/ALL_de/howyoutubeworks/our-commitments/protecting-user-data/

How do we process your data?

On our website, you can watch YouTube videos. Since we use YouTube in enhanced data protection mode, this only happens when you start a video.

Google's servers are informed which of our pages were visited from your device.
Google receives information about visitors to our website via cookies, device fingerprinting, or similar recognition technologies.
Processing of your data may also occur beyond this.

Even if you do not start a YouTube video on our website, Google establishes a connection to its DoubleClick network and possibly also to other partners.

On what legal basis do we process your data?

By integrating YouTube videos, we aim to make our website and our services and offerings more appealing. This is our legitimate interest as a company and is therefore lawful pursuant to Art. 6(1)(f) GDPR.

If you have consented to data processing, we process your data exclusively on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time.

Google Fonts (Local Hosting)

We use fonts provided by the US company Google on our website. We have installed the fonts locally, so that no connection to Google's servers takes place when you visit our website.

Further information about Google Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=de.

Adobe Fonts

What are Adobe Fonts?

Service that provides access to a font library for use on this website

Who processes your data?

Adobe Systems Inc., 345 Park Avenue, San Jose, CA 95110-2704, USA

Where can you find further information about data protection at Adobe?

https://www.adobe.com/de/privacy/policy.html

https://www.adobe.com/de/privacy/policies/adobe-fonts.html

On what basis do we transfer your data to the USA?

On the basis of the European Commission's adequacy decision and the corresponding certification of the company.

How do we process your data?

We use fonts on our website that Adobe Systems Inc. makes available for websites. The fonts are stored on Adobe's servers in the USA and are loaded directly from there by your browser when you visit our website. This tells Adobe that our website was accessed via your IP address.

On what legal basis do we process your data?

Adobe's fonts ensure a consistent typeface on our websites. As a company, we have a legitimate interest in this. The data processing is therefore lawful pursuant to Art. 6(1)(f) GDPR.

If you have consented to data processing, we process your data exclusively on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time.

Font Awesome (Local Hosting)

We use icons from the Font Awesome icon library on our website. The library is offered by Fonticons Inc. We have installed the icons locally, so that no connection to the company's servers takes place when you visit our website.

Further information about Font Awesome can be found at https://fontawesome.com/ and specifically in the privacy policy: https://fontawesome.com/privacy.

Google Maps

What is Google Maps?

Map service from Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Where can you find further information about data protection at Google?

https://policies.google.com/privacy?hl=de

On what basis do we transfer your data to the USA?

On the basis of the European Commission's adequacy decision and the corresponding certification of the company.

How do we process your data?

We use Google Maps on our website. In order for you to be able to use all the functions of the map service, Google stores your IP address on one of its servers in the USA.

On what legal basis do we process your data?

Google Maps ensures that the locations specified on our website are easier for visitors to find. As a company, we have a legitimate interest in this. The data processing is therefore lawful pursuant to Art. 6(1)(f) GDPR.

If you have consented to data processing, we process your data exclusively on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time.

Google reCAPTCHA

What is Google reCAPTCHA?

Test tool for distinguishing humans from computers from Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Where can you find further information about data protection at Google?

https://policies.google.com/privacy?hl=de

On what basis do we transfer your data to the USA?

On the basis of the European Commission's adequacy decision and the corresponding certification of the company.

How do we process your data?

We use Google reCAPTCHA to verify whether data entered into forms on our website originates from a human or a computer. Various data is captured, such as the IP address, the time spent on our website, and mouse movements made. The data is forwarded to Google.

On what legal basis do we process your data?

As a company, we have a legitimate interest in protecting our web offerings from spam and abusive exploitation. The data processing is therefore lawful pursuant to Art. 6(1)(f) GDPR.

If you have consented to data processing, we process your data exclusively on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time.

Google Drive

What is Google Drive?

Cloud storage

Who processes your data?

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Has a data processing agreement been concluded with Google Drive?

Yes

Where can you find further information about data protection at Google Drive?

https://policies.google.com/privacy

On what basis do we transfer your data to the USA?

On the basis of the European Commission's adequacy decision and the corresponding certification of the company.

How do we process your data?

On our website, you can upload files. For this purpose, we use the Google Drive cloud storage. The files are stored on the servers of the US company Google.

On what legal basis do we process your data?

We have a legitimate interest in offering a reliable upload area on our website. The processing of your data therefore takes place on the basis of Art. 6(1)(f) GDPR. If you have consented to data processing, we process your data exclusively on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

Audio and Video Conferences

As a company, we are in contact with many people: customers, business partners, service providers, etc. In addition to other means of communication, we also use so-called online conference tools for this exchange.

How do we process your data?

Online conference tools capture and store various personal data to enable participation in an online conference and its smooth execution.

Registration data: Your e-mail address and/or telephone number and, if applicable, further data.
Conference data: Start, end, and duration of your participation in the conference.
Technical data: IP address, MAC address, device ID, device type, operating system and version.
Communication content: Cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards.

How long do we store your data?

As your communication partner, we delete your data on our systems as soon as the purpose of data processing no longer applies, you request us to delete it, or you withdraw your consent to storage.

On what legal basis do we process your data?

If we are already contractually connected or you wish to enter into a contract with us, we use conference tools to fulfill the contract or to inform you about our services or products. The data processing in this respect takes place on the basis of Art. 6(1)(b) GDPR.

Microsoft Teams

What is Microsoft Teams?

Communications platform for team collaboration

Who processes your data?

Microsoft Corp., One Microsoft Way, Redmond, WA 98052-6399, USA

Where can you find further information about data protection at Microsoft Teams?

https://privacy.microsoft.com/de-de/privacystatement

On what basis do we transfer your data to the USA?

On the basis of the European Commission's adequacy decision and the corresponding certification of the company.

Own Services / Miscellaneous

Handling of Applicant Data

If you would like to work for us, we are happy to receive your application. All personal data transmitted will be treated with strict confidentiality.

How do we process your data?

All data we collect in the course of the application process will be stored and used to the extent necessary to make a decision about the establishment of an employment relationship.

In the case of a successful application, we store the data necessary for carrying out the employment relationship in our data processing systems.

How long do we store your data?

If we are unable to make you a job offer, you decline a job offer, or you withdraw your application, we reserve the right to retain your documents and other application data for up to 6 months after the conclusion of the application process.

On what legal basis do we process your data?

We process your applicant data on the basis of § 26 BDSG-new (initiation of an employment relationship) and Art. 6(1)(b) GDPR (general initiation of a contract).

Further Services and Data Processing

AI Chatbot "ProDigi"

Description and functionality: On our website, we offer you the opportunity to use our AI-powered chatbot "ProDigi". This assistant helps you find information about our services more quickly and guides you through our offering. Technically, the chatbot is based on a connection to artificial intelligence (API from OpenAI) and a so-called RAG system (Retrieval Augmented Generation).

Voluntary nature and consent: The chatbot and associated scripts are not loaded by default. Activation only takes place when you have agreed to the "Functional / Marketing Cookies" category in the cookie banner. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.

Data processing and transfer (OpenAI): When you use the chatbot, your inputs (chat messages), technical ancillary data, and the generated responses are processed. To generate the responses, your inputs are transmitted to OpenAI Ireland Ltd. Your inputs are not used to train OpenAI's AI models.

Storage: Chat histories are stored for a maximum of 30 days and then automatically deleted.

Withdrawal: You may withdraw your consent at any time by changing the cookie settings on our website.

Data Processing on Social Media

What is social media?

By social media, we mean the social networks on which we have created publicly accessible profiles.

Who processes your data?

The respective operating companies of the social networks.

How is your data processed?

Operators of social networks are generally able to collect and evaluate extensive data about the behavior of visitors and users of the network.

On what legal basis is your data processed?

Our profiles on social networks are intended to ensure the broadest possible presence of our company on the internet. As a company, we have a legitimate interest in this. The data processing is therefore lawful pursuant to Art. 6(1)(f) GDPR.

Which social media do we use?

Facebook

What is Facebook?
A social network

Who processes your data?
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland

Is your data transferred to third countries?
Yes, to the USA and also to other third countries

Where can you find further information about data protection at Facebook?
https://www.facebook.com/about/privacy/

Where can you, as a Facebook user, adjust your advertising settings?
https://www.facebook.com/settings?tab=ads

Twitter

What is Twitter?
A social network in the form of a micro-blogging platform

Who processes your data?
Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA

Is your data transferred to third countries?
Yes, to the USA

Where can you find further information about data protection at Twitter?
https://twitter.com/de/privacy

Where can you, as a Twitter user, adjust your advertising settings?
https://twitter.com/personalization

Instagram

What is Instagram?
A social network specializing in photos and videos

Who processes your data?
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland

Is your data transferred to third countries?
Yes

Where can you find further information about data protection at Instagram?
https://help.instagram.com/519522125107875/

Where can you, as a user, adjust your privacy settings?
https://www.instagram.com/accounts/privacy_and_security/

What is LinkedIn?

A social network for professional contacts

Who processes your data?

LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

Is your data transferred to third countries?

Yes

Where can you find further information about data protection at LinkedIn?

https://de.linkedin.com/legal/privacy-policy

Where can you, as a user, adjust your privacy settings?

https://www.linkedin.com/psettings/

Xing

What is Xing?

A social network for professional contacts

Who processes your data?

New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany

Is your data transferred to third countries?

Yes, to fulfill the contract with Xing, if you have given your consent, or if appropriate safeguards pursuant to Art. 46 EU GDPR are in place.

Where can you find further information about data protection at Xing?

https://privacy.xing.com/de/datenschutzerklaerung/druckversion

Where can you, as a user, adjust your privacy settings?

https://www.xing.com/settings/privacy

YouTube

What is YouTube?
A social network in the form of an online video portal

Who processes your data?
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Is your data transferred to third countries?
Yes

Where can you find further information about data protection at YouTube?
https://policies.google.com/privacy?hl=de

Where can you, as a user, adjust your privacy settings?
https://policies.google.com/privacy?hl=de#infochoices