Pricvacy Policy

In the course of using this website, personal data (hereinafter “personal data” or “data”) is processed by us as the controller responsible for the processing and is stored for as long as is necessary to fulfil the specified purposes and any statutory obligations. Below we inform you which data this concerns, how it is processed and what rights you have in this regard.
Personal data is, pursuant to Art. 4 No. 1 of the General Data Protection Regulation (GDPR), any information relating to an identified or identifiable natural person (hereinafter “data subject” or “user”).

1. Name and contact details of the controller

This privacy notice applies to the processing of data on the website [www.claneo.com](https://www.claneo.com) by the controller:
Claneo GmbH
Revaler Straße 30
10245 Berlin
(hereinafter “Claneo”)
E-mail: info@claneo.de
+49 30 767 319 000

Claneo’s external Data Protection Officer can be reached at the address above, for the attention of the Data Protection Officer, or at the following address:
Rent Your Admin GmbH
Nordendstrasse 61a
13156 Berlin
Marco Fischer
marco.fischer@rentyouradmin.de

You may contact our Data Protection Officer directly at any time with questions relating to data protection law or your rights as a data subject.

2. Processing of personal data and purposes of processing

a) Web hosting

To provide this website, we use the web hosting service of GoDaddy.com LLC, 14455 N. Hayden Rd., Ste. 226, Scottsdale, AZ 85260 (hereinafter: GoDaddy.com).
Operating a website requires engaging a web hosting service. We use GoDaddy.com pursuant to Art. 6(1)(1)(f) GDPR on the basis of our legitimate economic interest in maintaining our offering on this website. In connection with hosting, GoDaddy.com processes personal data on our behalf that arises from use of the website.
We have entered into a data processing agreement with GoDaddy.com. Under this agreement, the service provider assures that it processes the data in accordance with the GDPR and safeguards the rights of the data subject.
We have also entered into the data processing agreement with GoDaddy.com including the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) to ensure a level of protection comparable to that within the EU.

b) When visiting the website

You can access the website [www.claneo.com](https://www.claneo.com) without having to disclose your identity. The browser used on your device automatically sends information to our website’s server (e.g. date and time of access, name and URL of the file retrieved, browser type and version, the website from which access was made (referrer URL), HTTP status code, device, operating system, resolution and preferred language).
This also includes the IP address of your requesting device. This is temporarily stored in a so-called log file and automatically deleted after one month.
The IP address is processed for technical and administrative purposes relating to establishing and maintaining the connection, in order to ensure the security and functionality of our website and, if necessary, to be able to pursue any unlawful attacks on it.
The legal basis for processing the IP address is Art. 6(1)(1)(f) GDPR. Our legitimate interest follows from the security interest mentioned and the need to provide our website reliably and without disruption.
We cannot draw any direct conclusions about your identity from processing the IP address in the log file.
In addition, we use cookies and analytics services when you visit our website. You can find more detailed information on this under sections 4 and 5 of this Privacy Policy.

c) When registering for our newsletter

Provided you have given your express consent pursuant to Art. 6(1)(1)(a) GDPR, we use your e-mail address to regularly send you our newsletter. Providing an e-mail address is sufficient to receive the newsletter. Providing your first and last name is also required so that we can address you personally in the newsletter.
You can unsubscribe at any time by clicking the “Unsubscribe” link at the end of the newsletter. Alternatively, you can send your unsubscribe request by e-mail to communications@claneo.com at any time.
We send our newsletter through the provider Mailchimp, operated by The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (hereinafter: MailChimp). The e-mail addresses of our newsletter recipients are stored on MailChimp’s servers in the USA on our behalf.
MailChimp uses this information to send and evaluate the newsletter on our behalf. We have entered into a data processing agreement with MailChimp for this purpose. Under this agreement, MailChimp assures that it processes the data in accordance with the GDPR and safeguards the rights of the data subject.
MailChimp assures that personal data is comprehensively protected against unauthorized access. MailChimp itself does not use the data of our newsletter recipients to contact them directly, nor does it pass the data on to third parties. We have also entered into the data processing agreement with Mailchimp including the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) to ensure a level of protection comparable to that within the EU.

d) When using the contact form

We offer you the option of submitting general inquiries to us via the contact form provided online. Here we collect the following mandatory information:

• Last name, first name
• E-mail address,
• Website, and
• Your personal message.

We need your first and last name to know who the inquiry is from. We need your e-mail address to be able to respond to your inquiry. Providing your website is voluntary. Providing your website helps us to correctly categorize your inquiry.
This data processing takes place in connection with responding to the contact inquiry on the basis of our legitimate interest in responding to inquiries pursuant to Art. 6(1)(1)(f) GDPR. If your inquiry is aimed at entering into a contract with us, Art. 6(1)(1)(b) GDPR is the legal basis for the data processing.
The personal data collected by us for the use of the contact form will be deleted once your inquiry has been conclusively answered, provided that no statutory retention obligations preclude deletion.

e) Job applications

Current job vacancies are advertised on our website (under the “Career” tab). Unsolicited applications are also possible. If you apply to us, your applicant data will be processed exclusively for the purpose of carrying out the application process. The legal basis is Section 26(1)(1) of the German Federal Data Protection Act (BDSG).
As part of an application, we generally process the following information about you:

• First and last name,
• E-mail address, address and telephone number,
• Other personal data contained in your cover letter and CV (qualifications, date of birth, etc.).

Photos, information on marital status, religious affiliation and trade union membership, and other special categories of personal data – with the exception of a possible severe disability, if you wish to disclose this of your own free will – are expressly not required for your application.
For the application process, we use the services of Personio GmbH, Rundfunkplatz 4, 80335 Munich (hereinafter “Personio”). We have entered into a data processing agreement with Personio. Under this agreement, the service provider assures that it processes the data in accordance with the GDPR and safeguards the rights of the data subject.
We store your data until the respective application process has been completed. Data you have submitted is generally deleted six months after your application has been rejected. This allows us, among other things, to meet our burden of proof under the German General Equal Treatment Act. This does not apply if you have expressly consented to longer storage pursuant to Art. 6(1)(1)(a) GDPR.
For detailed information on data processing, please refer to the specific privacy notices relating to the application process, which we will provide to you in the course of the process.

3. Disclosure of data

a) Disclosure of personal data to third parties

We only disclose your personal data to third parties if:

• you have given your express consent to this pursuant to Art. 6(1)(1)(a) GDPR;
• this is legally permissible and required pursuant to Art. 6(1)(1)(b) GDPR for the performance of contractual relationships with you,
• there is a statutory obligation for disclosure pursuant to Art. 6(1)(1)(c) GDPR, or
• this is legally permissible and required pursuant to Art. 6(1)(1)(f) GDPR to safeguard our legitimate interests or those of third parties.

The data disclosed may only be used by the third party for the stated purposes. Personal data is also disclosed in connection with the use of processors.

b) Transfer of personal data to third countries

Personal data is only transferred to a third country or an international organization if we inform you accordingly and the requirements of Articles 44 et seq. GDPR are met.
A third country is a state outside the European Economic Area (EEA) in which the GDPR does not directly apply. A third country is considered unsafe if the EU Commission has not issued an adequacy decision for that country pursuant to Art. 45(1) GDPR confirming that the country offers an adequate level of protection for personal data.
The USA is a so-called unsafe third country. This means that the USA does not offer a level of data protection comparable to that in the EU. The following risks exist when transferring personal data to the USA: there is a risk that US authorities may gain access to the personal data on the basis of the surveillance programs PRISM and UPSTREAM, which are based on Section 702 of the FISA (Foreign Intelligence Surveillance Act), as well as on the basis of Executive Order 12333 or Presidential Policy Directive 28. EU citizens have no effective legal remedies against such access, either in the USA or in the EU.
In this privacy notice, we inform you when and how we transfer personal data to the USA or other unsafe third countries. We only transfer your personal data if

• the recipient provides sufficient guarantees under Art. 46 GDPR for the protection of personal data,
• you have, after we have informed you of the risks, expressly consented to the transfer pursuant to Art. 49(1)(a) GDPR,
• the transfer is necessary for the performance of contractual obligations between you and us,
• or another exception under Art. 49 GDPR applies.

Guarantees under Art. 46 GDPR may take the form of so-called Standard Contractual Clauses. Under these Standard Contractual Clauses, the recipient assures that it will adequately protect the data and thereby ensure a level of protection comparable to that under the GDPR.

4. Cookies and comparable technologies

We use so-called cookies and similar functions on our website to provide our website on a technical level and to statistically record and evaluate the use of our website for optimization purposes (see section 5). We base the processing of your data through the cookies used for the aforementioned technically necessary purposes on Section 25(2) No. 2 of the German Telecommunications-Digital-Services-Data-Protection Act (TDDDG).
In addition, we use cookies and process the data through the cookies used only on the basis of your consent pursuant to Section 25(1) TDDDG and Art. 6(1)(1)(a) GDPR. You can withdraw your consent at any time with effect for the future, or adjust your settings, via our consent management tool.

a) Cookies

Cookies are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not cause any damage to your device and do not contain viruses, Trojans or other malware. Information is stored in the cookie that arises in connection with the specific device used. However, this does not mean that we thereby gain direct knowledge of your identity.
The use of cookies serves, on the one hand, to make the use of our website more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted when you leave our site. On the other hand, to optimize user-friendliness, we use temporary cookies that are stored on your device for a specific, defined period. If you visit our site again to use our services, it is automatically recognized that you have already been to our site and which entries and settings you have made, so that you do not have to enter them again. We also use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offering for you (see section 5). These cookies enable us to automatically recognize, on a repeat visit to our site, that you have already been to our site. These cookies are automatically deleted after a defined period. Cookies are also used to provide our website on a technical level.
Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer, or so that a notice always appears before a new cookie is created. However, completely disabling cookies may mean that you are unable to use all of the functions of our website.

b) Pixels

As part of our online offering, we use pixel tags (also known as counting pixels, tracking pixels or beacon trackers). Pixels are small graphics embedded in the HTML code of our pages. The pixel tag itself does not store or alter any information on your device, so pixels likewise do not cause any damage to your device and do not contain viruses, Trojans or other malware.
The pixels send your IP address, the referrer URL of the website visited, the time at which the pixel was viewed, the browser used, as well as previously set cookie information, to a web server. This allows us to carry out reach measurements and other statistical analyses, which serve to optimize our platform and our offering.

c) Consent management with Cookiebot

To manage consents for the use of cookies and similar technologies, we use the consent management service “Cookiebot” provided by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter “Usercentrics”) on our website. This enables us to obtain and manage website users’ consent to data processing. The processing is necessary to fulfil a legal obligation (Art. 7(1) GDPR) to which we are subject (Art. 6(1)(1)(c) GDPR).
For this purpose, the following data is processed using cookies:

• Your IP address (the last three digits are set to “0”)
• Date and time of consent
• Browser information
• URL from which consent was submitted
• An anonymous, random and encrypted key
• Your consent status as proof of consent

The key and the consent status are stored in the browser for 12 months by means of the “CookieConsent” cookie. This ensures that your cookie preference is retained for subsequent page requests. The key can be used to prove and trace your consent.
If you activate the “bulk consent” service feature, which enables consent for several websites through a single end-user consent, the service additionally stores a separate, random, unique ID together with your consent. If all of the following criteria are met, this key is stored in encrypted form in the third-party cookie “CookieConsentBulkTicket” in your browser: you activate the bulk consent feature in the service configuration, you allow third-party cookies via your browser settings, you have disabled “Do Not Track” via your browser settings, and you accept all or at least certain types of cookies when giving consent.
The functionality of the website cannot be guaranteed without this processing.
Usercentrics is the recipient of your personal data and acts as a processor on our behalf. We have entered into a data processing agreement with Usercentrics, under which Usercentrics assures that it processes the data in accordance with the GDPR and safeguards the rights of the data subject.
Processing takes place within the European Union.
Further information on options to object and request deletion vis-à-vis Usercentrics can be found at: [www.cookiebot.com/en/privacy-policy](https://www.cookiebot.com/en/privacy-policy/)
Your personal data is continuously deleted after 12 months, or immediately upon termination of the agreement between us and Usercentrics.
Please also refer to our general remarks on the deletion and deactivation of cookies above.

5. Web analytics

The tracking and targeting measures listed below and used by us are carried out on the basis of Art. 6(1)(1)(a) GDPR.
With the tracking measures used, we aim to ensure a needs-based design and continuous optimization of our website. We also use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimizing our offering for you.
Through the targeting measures used, we aim to ensure that you are only shown advertising on your devices that is aligned with your actual or presumed interests.
The respective data processing purposes and data categories can be found in the corresponding tracking and targeting tools.

a) Google Analytics

We use Google Analytics on our website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”). In this context, pseudonymous usage profiles are created and cookies are used. Google Analytics is used on the basis of your consent pursuant to Art. 6(1)(1)(a) GDPR. You can withdraw your consent at any time via the consent management tool.
Google processes the information on our behalf to evaluate use of the website, to compile reports on website activity, and to provide us with further services related to website use and internet use for the purposes of market research and needs-based design of these websites.
We have entered into a data processing agreement with Google for the use of Google Analytics. Under this agreement, Google assures that it processes the data in accordance with the GDPR and safeguards the rights of the data subject.
We only use Google Analytics with IP anonymization activated. This means that users’ IP addresses are shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. The IP address is not combined with other data from Google.
We do not use the Universal Analytics with User ID feature offered by Google.
Where applicable, the data collected may be transferred to third parties if this is legally required or insofar as third parties process the data on our behalf.
User data collected via cookies is automatically deleted after 14 months.
The information generated by the cookies set by Google Analytics about your use of our website (e.g. IP address of the accessing computer, time of access, referrer URL, and information on the browser and operating system used) is also transferred to and processed on Google’s servers in the USA. The data transferred is merely pseudonymous; it is not possible to draw any conclusions about your name. For data transfers from Google to processors or group companies in the USA or other unsafe third countries, Google relies on Standard Contractual Clauses approved by the EU Commission as a guarantee to ensure a level of data protection comparable to that in the EU.
You can prevent the installation of cookies by configuring your browser software accordingly. Please note, however, that in this case you may not be able to use all functions of this website to their full extent.
You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address), as well as the processing of this data by Google, by downloading and installing a browser add-on.
As an alternative to the browser add-on, particularly for browsers on mobile devices, you can also prevent collection by Google Analytics by adjusting your cookie settings via our consent management tool and deactivating the relevant category. You can find the “Cookie Settings” link in the footer of our website; through it, you can withdraw or adjust your previously given consent at any time with effect for the future.
An opt-out cookie may be set, which prevents future collection of your data when you visit this website. The opt-out cookie only applies in this browser and only for our website, and is stored on your device. If you delete the cookies in this browser, you will need to set the opt-out cookie again.
Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics Help. Information on Google’s use of data can be found in its Privacy Policy.

b) Google Ads

We use Google Ads on our website, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”).
This service enables us to design, statistically record, optimize and deliver advertising content according to need. The technologies used by Google Ads enable us to target you with advertising tailored to your individual interests. For example, it is recorded which of our content you have shown interest in. Based on this information, we can also show you offers on third-party sites that are specifically tailored to your interests.
Google Ads is used on the basis of your consent pursuant to Art. 6(1)(1)(a) GDPR, which you may withdraw at any time with effect for the future.
We have entered into a data processing agreement with Google for the use of Google Ads. Under this agreement, Google assures that it processes the data in accordance with the GDPR and safeguards the rights of the data subject. The information generated by the cookie about your use of this website is transferred to and stored on a Google server in the USA.
The data transferred is merely pseudonymous; it is not possible to draw any conclusions about your name. For data transfers from Google to processors or group companies in the USA or other unsafe third countries, Google relies on Standard Contractual Clauses approved by the EU Commission as a guarantee to ensure a level of data protection comparable to that in the EU.
If you do not wish to participate in the tracking process, you can also decline the setting of the cookie required for this – for example, via a browser setting that generally disables the automatic setting of cookies.
You can also prevent data processing for the purpose of displaying interest-based advertising via Google’s Ads Settings Manager.
Google’s Privacy Policy can be found here.

c) Leadinfo

We use the lead generation service provided by Leadinfo B.V., Rotterdam, Netherlands. This service identifies visits by companies to our website based on IP addresses and shows us publicly available information about them, such as company names or addresses. In addition, Leadinfo sets two first-party cookies to evaluate user behavior on our website and processes domains from form entries (e.g. “leadinfo.com”) to correlate IP addresses with companies and improve its services. Further information can be found at [www.leadinfo.com](https://www.leadinfo.com). You can opt out on this page: [www.leadinfo.com/en/opt-out](https://www.leadinfo.com/en/opt-out). In the event of an opt-out, your data will no longer be collected by Leadinfo.

d) LinkedIn Ads

We use LinkedIn Ads on our website, a service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter “LinkedIn”).
This service enables us to target our advertising content to specific audiences and to measure its effectiveness. The technologies used by LinkedIn Ads enable us to show you advertising on LinkedIn and on other partner sites that is tailored to your interests. In doing so, LinkedIn records, for example, which content you have viewed on our website in order to show you relevant advertisements based on that.
LinkedIn Ads is used on the basis of your consent pursuant to Art. 6(1)(1)(a) GDPR, which is revocable at any time.
We have entered into a data processing agreement with LinkedIn, which ensures that LinkedIn processes your data in accordance with the GDPR and protects your rights as a data subject. LinkedIn may also transfer data to servers in the USA or other third countries. For these data transfers, LinkedIn relies on Standard Contractual Clauses approved by the EU Commission, which ensure a level of data protection comparable to that in the EU.
The data transferred is pseudonymized so that it is not possible to draw conclusions about your identity.
If you wish to disable data collection and processing by LinkedIn Ads, you can do so in your LinkedIn account settings, or prevent the setting of cookies via your browser settings. Further information can be found in LinkedIn’s Privacy Policy.

e) Meta Ads

We use Meta Ads on our website, a service provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter “Meta”).
Meta Ads enables us to design our advertising campaigns in a targeted manner, analyze their reach, and display personalized advertising on Facebook, Instagram and other partner sites. In doing so, data may be collected on how you interact with our website, which pages you have visited, and which content has interested you. Meta uses this information to show you advertisements based on your interests.
Meta Ads is used on the basis of your consent pursuant to Art. 6(1)(1)(a) GDPR, which is revocable at any time.
We have entered into a data processing agreement with Meta to ensure that Meta processes your personal data in accordance with applicable data protection laws. Meta may transfer data to servers in the USA or other third countries. In doing so, Meta relies on Standard Contractual Clauses approved by the EU Commission to ensure an adequate level of data protection.
The data transferred is pseudonymized, so it does not allow any direct conclusions to be drawn about you.
If you do not want Meta to process your data for personalized advertising, you can disable this in Meta’s Ad Settings or prevent the setting of cookies in your browser. Further information can be found in Meta’s Data Policy.

6. Maps

We use the service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”), on our website to display an interactive map.
We use Google Maps on the basis of your consent, which is revocable at any time, Art. 6(1)(1)(a) GDPR.
If you click on a map from Google Maps on our website, information about your use of this website and your IP address is also transmitted to a Google server in the USA. This occurs regardless of whether Google provides a user account through which you are logged in, or whether no user account exists. If you are logged in to Google, your data is assigned directly to your account. Your data is deleted as soon as it is no longer required for the purpose of processing.
We are joint controllers with Google for the use of Google Maps (Art. 26 GDPR) and have entered into an agreement on joint controllership with Google.
Further information on data protection in connection with Google Maps can be found in Google’s Privacy Policy.
Google also transfers the information to Google servers in the USA. The data transferred is merely pseudonymous; it is not possible to draw any conclusions about your name. For data transfers from Google to processors or group companies in the USA or other unsafe third countries, Google relies on Standard Contractual Clauses approved by the EU Commission.
We also use content on this website to embed maps from the OpenStreetMap Foundation, 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom (hereinafter “OpenStreetMap”). OpenStreetMap collects freely usable geodata and maintains it in a database for free use.
To embed and display the map material, the browser used establishes a connection to other servers. As a result, information about your use of this website and personal data (in particular your IP address) is processed. The legal basis for the processing is your consent pursuant to Art. 6(1)(1)(a) GDPR, which is revocable at any time with effect for the future.
Google Maps is implemented as a framework for OpenStreetMap, so you can only use the external map services on our website jointly and cannot select or deselect them individually.
For the transfer of personal data to the United Kingdom, we rely on the EU Commission’s adequacy decision pursuant to Art. 45(1) GDPR. Further information on data protection in connection with OpenStreetMap can be found here: https://wiki.osmfoundation.org/wiki/Privacy_Policy.

7. YouTube videos

We use components (videos) from YouTube, a company of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”), on our website. The legal basis for the data processing is your consent pursuant to Art. 6(1)(1)(a) GDPR.
If you have given your consent, a connection to YouTube’s servers is established when you access a page of this website that has an embedded YouTube video, and the content is displayed on the website by being communicated to your browser.
In doing so, we use the “extended data protection mode” option provided by YouTube.
According to YouTube, in “extended data protection mode” your data – in particular which of our websites you have visited, as well as device-specific information including your IP address – is only transmitted to a YouTube server in the USA if you watch the video. If you are simultaneously logged in to YouTube, this information is assigned to your YouTube membership account. You can prevent this by logging out of your membership account before visiting our website.
Google also transfers the data to Google servers in the USA. The data transferred is merely pseudonymous; it is not possible to draw any conclusions about your name. For data transfers from Google to processors or group companies in the USA or other unsafe third countries, Google relies on Standard Contractual Clauses approved by the EU Commission as a guarantee to ensure a level of data protection comparable to that in the EU.
Further information on data protection in connection with YouTube can be found in Google’s privacy policy.

Use of Facebook services

8. Social media profiles

We maintain profiles and social media pages (hereinafter “profiles” or “pages”) on the networks of Facebook, Instagram, YouTube, Twitter, LinkedIn and XING. As operators of these pages, we are joint controllers together with the respective network operators

• Facebook: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter “Facebook”),
• Instagram: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter “Instagram”),
• YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “YouTube”),
• Twitter: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (hereinafter “Twitter”),
• LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter “LinkedIn”),
• XING: New Work SE, Am Strandkai 1, 20457 Hamburg, Germany (hereinafter “XING”),

within the meaning of Art. 4 No. 7 of the General Data Protection Regulation (GDPR).
As joint controllers of these pages, we have entered into agreements with the network operators that govern, among other things, the terms of use of pages and similar presences. The following agreements apply respectively:

• Facebook: Facebook’s Terms of Service, the other terms and policies listed at the end thereof, as well as the agreement on joint controllership.
• Instagram: Instagram’s Terms of Use and, since Instagram is a Facebook offering, also the Facebook policies and agreements described above.
• YouTube: Google’s Privacy Policy and Terms of Service.
• Twitter: Twitter’s Terms of Service and the policies referenced therein.
• LinkedIn: LinkedIn’s Data Processing Agreement,
• XING: XING’s Data Processing Agreement.

When you visit our pages, personal data of page visitors is processed by the controllers as follows.

a) Use of insights, analytics and cookies

In connection with operating our profiles, we use the analytics functions provided there to obtain statistical analyses of the users of our profiles.
For this purpose, cookies and similar technologies such as pixels are used by the network operators when our pages are visited, and a unique user code is created in each case. This user code can be linked to the data of users who are registered with the network operators.
The information stored in connection with the user code is processed by the network operators, in particular when the user visits these services. Other parties, such as partners or even third parties, may also use cookies within these services in order to provide services to the companies advertising on the platforms.

• Facebook: In connection with operating our Facebook page, we use Facebook’s Page Insights function to obtain statistical analyses of the users of our Facebook page. Facebook provides information on Page Insights and Facebook pages in its privacy notices as well as here. Further information on Facebook’s use of cookies (including in connection with the use of Instagram) can also be found in its Cookie Policy.
• Instagram: In connection with operating our Instagram profile, we use the Instagram Insights function to obtain statistical analyses of the users of our posts. Information on Instagram Insights can be found in Instagram’s privacy notices and here.
• YouTube: In connection with operating our YouTube profile, we use YouTube’s analytics functions. Using this analytics function, we can analyze and statistically evaluate usage. More information can be found in Google’s privacy notices.
• Twitter: In connection with operating our Twitter account, we use Twitter’s analytics options to statistically evaluate our channel and the reactions to our posts. More information can be found in Twitter’s privacy notices.
• LinkedIn: In connection with operating our LinkedIn profile, we use LinkedIn Page Analytics. This gives us information about how our content is used. Further information on data protection on the LinkedIn platform can be found in LinkedIn’s Privacy Policy.
• XING: In connection with operating our XING profile, we use XING Analytics Insights. This gives us information about how our content is used. Further information on data protection on the XING platform can be found in XING’s Privacy Policy.

b) Purposes of processing

The processing of this information is intended, on the one hand, to enable the network operators to improve their system of advertising, which they distribute through their networks. On the other hand, it is intended to enable us, as the operator of the profiles and pages, to obtain statistics generated from visits to our profiles and pages. This serves to steer the marketing of our business. For example, it enables us to gain insight into trends among the visitors who appreciate our profiles and pages or use their applications, so that we can provide them with more relevant content and develop features that may be of greater interest to them.
To help us better understand how we can further our business objectives through our profiles and pages, demographic and geographic analyses are also created based on the information collected and made available to us. We can use this information, for example, to place targeted interest-based advertisements. However, we do not gain any direct knowledge of the visitor’s identity in the process. If visitors use social media services on multiple devices, collection and analysis may also occur across devices and, where applicable, across platforms, if these are registered visitors who are each logged in to their own profile.
The visitor statistics generated are provided to us exclusively in anonymized form, and we do not have access to the underlying data.
We also use our profiles and pages to communicate with our customers, prospective customers and users, and to inform them about our range of services. In this context, we may receive further information, e.g. through user comments, private messages, or because you follow us or share our content. This processing takes place exclusively for the purpose of communicating and interacting with you.

c) Legal basis

We operate our profiles and pages in order to present ourselves to the users of these platforms and other interested parties and to communicate with them. The processing of users’ personal data is based on our legitimate interests in an optimized presentation of our company and products (Art. 6(1)(1)(f) GDPR).

d) Disclosure of data

With Facebook, Instagram, YouTube, Twitter and LinkedIn, there is a possibility that some of the information collected is also processed outside the European Union, in the USA.
The USA is a so-called unsafe third country. A third country is considered unsafe if the EU Commission has not issued an adequacy decision for that country pursuant to Art. 45(1) GDPR confirming that the country offers an adequate level of protection for personal data.
With the CJEU ruling of 16 July 2020 (C-311/18), the (partial) adequacy decision for the USA, the so-called Privacy Shield, was declared invalid. The USA does not offer a level of data protection comparable to that in the EU. The following risks exist when transferring personal data to the USA: there is a risk that US authorities may gain access to the personal data on the basis of the surveillance programs PRISM and UPSTREAM, which are based on Section 702 of the FISA (Foreign Intelligence Surveillance Act), as well as on the basis of Executive Order 12333 or Presidential Policy Directive 28. EU citizens have no effective legal remedies against such access, either in the USA or in the EU.

• Facebook and Instagram: Facebook Ireland Ltd. transfers data on the basis of Standard Contractual Clauses approved by the European Commission to Meta Platforms Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. We have no influence over this processing. We ourselves do not disclose any personal data that we receive via our Facebook page.
• YouTube: YouTube transfers data on the basis of Standard Contractual Clauses approved by the European Commission to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We have no influence over this processing. We ourselves do not disclose any personal data that we receive via our YouTube channel.
• Twitter: Twitter transfers data on the basis of Standard Contractual Clauses approved by the European Commission to Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. We have no influence over this processing. We ourselves do not disclose any personal data that we receive via our Twitter presence.
• LinkedIn: LinkedIn transfers data on the basis of Standard Contractual Clauses approved by the European Commission to LinkedIn Corporation, 1000 W Maude Ave, Sunnyvale, CA, USA. We have no influence over this processing. We ourselves do not disclose any personal data that we receive via our LinkedIn profile.

e) Nature of joint controllership / exercising data subject rights

Under the agreement we have with Facebook and Instagram for our Facebook and Instagram presences, the operators acknowledge joint data protection responsibility with regard to so-called Insights data and assume material data protection obligations to inform data subjects, ensure data security, and report data protection breaches. The agreement with Facebook also specifies that Facebook is the primary point of contact for the exercise of data subject rights (Art. 15–22 GDPR). This is because, as the provider of the social network, only Facebook has direct access to the necessary information and can take any necessary measures and provide information directly. Should our support nevertheless be required, we can be contacted at any time.
The agreement we have entered into with Google regarding our YouTube channel likewise provides that you can exercise your data subject rights against both us and Google.
The agreement we have entered into with LinkedIn specifies that LinkedIn will inform us as soon as a data subject exercises their data subject rights (Art. 15–22 GDPR). LinkedIn will provide support in responding to requests for information. You can exercise your data subject rights against both us and LinkedIn.

f) Right to object

You have, in particular, the following options to object:

• Facebook and Instagram: Users of Facebook and Instagram can, under their advertising preference settings, influence the extent to which their user behavior is recorded when visiting our Facebook page or Instagram profile. Further options to object are available through Facebook’s settings or the objection form provided by Facebook. Settings for Instagram can also be made via this form.
• YouTube: You can object to processing by YouTube via the settings in your Google account. More information on how to make adjustments to your privacy settings can be found here.
• Twitter: You can partially object to processing by Twitter via the settings in your Twitter account. More information can be found here.
• LinkedIn: You can object to processing by LinkedIn here. Further settings can be made via the objection form.
• XING: Information on the right to object with XING can be found here.