DATA PROTECTION

Name and address of the person responsible

The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

BUSINESS UNICORNS GmbH

Bahnhofsallee 87//46342 Velen//Germany

tel.: 02863 754247-0

email: info@business-unicorns.de

Site: www.business-unicorns.de

Name and address of the data protection officer

The data protection officer of the person responsible is:

DETIS-EDV GmbH

Timo Gätzschmann

Lofkampweg 61a//46514 Schermbeck//Germany

tel.: 02853 604 150

email: info@detis-edv.de

Site: www.detis-edv.de

Definition

Our company's privacy policy is based on the terms used by the European legislator when adopting the General Data Protection Regulation (GDPR). Our privacy policy should be easy to read and understand both for the public and for our customers and business partners. To ensure this, we would like to explain the terms used in advance.

In this privacy statement, we use the following terms, among others:

personal data

Personal data is any information relating to an identified or identifiable natural person (hereinafter “data subject”). An identifiable natural person is one who can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more particular characteristics that are an expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.


person concerned

Data subject is any identified or identifiable natural person whose personal data is processed by the controller.

workmanship

Processing is any process carried out with or without the aid of automated processes or any such series of processes in connection with personal data, such as collecting, organizing, storing, adapting or modifying, reading, querying, using, disclosing through transmission, dissemination or any other form of provision, reconciliation or linking, restriction, deletion or destruction.


Restriction of processing

Restriction of processing is the marking of stored personal data with the aim of restricting their future processing.

profiling

Profiling is any type of automated processing of personal data that consists of using this personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to the work performance, economic situation, health, personal preferences, interests, reliability, behavior, whereabouts or changes of location of that natural person.


pseudonymization

Pseudonymization is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that this additional information is stored separately and is subject to technical and organizational measures which ensure that the personal data is not assigned to an identified or identifiable natural person.


Responsible person or person responsible for processing

The person responsible or responsible for processing is the natural or legal person, authority, agency or other body which, alone or together with others, decides on the purposes and means of processing personal data. Where the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or the specific criteria for its nomination may be provided for by Union law or the law of the Member States.


Contract processor

Contract processor is a natural or legal person, authority, agency or other body that processes personal data on behalf of the person responsible.


transceivers

The recipient is a natural or legal person, authority, institution or other body to which personal data is disclosed, regardless of whether it is a third party or not. However, public authorities that may receive personal data as part of a specific investigation mandate under Union or Member State law are not considered recipients.


third

A third party is a natural or legal person, authority, agency or body other than the data subject, the controller, the processor and the persons who, under the direct responsibility of the controller or processor, are authorized to process personal data.


consent

Consent is any expression of will given voluntarily by the data subject in an informed and unequivocal manner in the form of a statement or other unequivocal affirmative action by which the data subject indicates that he or she agrees to the processing of personal data concerning him or her.

General information about data processing

  1. Scope of processing of personal data

    As a matter of principle, we only collect and use personal data from our users to the extent necessary to provide a functional website and our content and services. The collection and use of personal data from our users is regularly carried out only with the user's consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of data is permitted by law.
  2. Legal basis for processing personal data

    Insofar as we obtain consent from the data subject for processing personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis. When processing personal data that is necessary to fulfill a contract to which the data subject is a party, Article 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

    Insofar as processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis. If processing is necessary to protect a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the first-mentioned interest, Article 6 para. 1 lit. f GDPR serves as the legal basis for processing.
  3. Data deletion and storage period

    The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this has been provided for by European or national legislators in EU regulations, laws or other regulations to which the person responsible is subject. The data will also be blocked or deleted when a storage period prescribed by the above standards expires, unless there is a need to continue storing the data for the conclusion or performance of a contract.

hosting

Webflow

We host our website with Webflow. The provider is Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (hereinafter Webflow). When you visit our website, Webflow collects various log files, including your IP addresses.

Webflow is a tool for building and hosting websites. Webflow stores cookies or other recognition technologies that are necessary to display the page, to provide certain website functions and to ensure security (necessary cookies). For details, see Webflow's privacy policy: https://webflow.com/legal/eu-privacy-policy.

Webflow is used on the basis of Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in presenting our website as reliably as possible. If a corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be withdrawn at any time. Data transmission to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://webflow.com/legal/eu-privacy-policy.

Order processing

We have concluded an order processing contract (AVV) with the above-mentioned provider. This is a contract required by data protection law, which ensures that it only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

Rights of the person concerned

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the person responsible:

Right to information

You can request confirmation from the person responsible as to whether personal data concerning you is being processed by us.

If there is such processing, you can request the following information from the person responsible:

(1) the purposes for which the personal data are processed; (2) the categories of personal data that are processed; (3) the recipients or categories of recipients to whom the personal data concerning you have been or are still being disclosed; (4) the planned period of storage of the personal data concerning you or, if specific information is not possible, criteria for determining the storage period; (5) the existence of a right to report Correction or deletion of you relevant personal data, a right to restrict processing by the controller, or a right to object to this processing; (6) the existence of a right of appeal to a supervisory authority; (7) all available information about the origin of the data if the personal data is not collected from the data subject; (8) the existence of automated decision-making, including profiling, in accordance with Article 22 (1) and (4) GDPR and — at least in these cases — meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

You have the right to request information as to whether the personal data concerning you is being transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate guarantees in accordance with Article 46 GDPR in connection with the transfer.

Right to rectification

You have the right to correct and/or complete the data controller if the processed personal data concerning you is incorrect or incomplete. The person responsible must make the correction immediately.

Right to restrict processing

You can request that the processing of personal data concerning you be restricted under the following conditions:

(1) if you dispute the accuracy of the personal data concerning you for a period of time that enables the person responsible to verify the accuracy of the personal data; (2) the processing is unlawful and you refuse to delete the personal data and instead request the restriction of the use of the personal data; (3) the controller no longer needs the personal data for the purposes of processing, but you do so to assert, exercise or defend legal claims or (4) if you have filed an objection to processing in accordance with Article 21 (1) GDPR and it is not yet clear whether the legitimate reasons of the person responsible outweigh your reasons.

If the processing of personal data concerning you has been restricted, this data — apart from storage — may only be processed with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State.

If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the person responsible before the restriction is lifted.

Right to delete

a) Obligation to delete

You can request that the person responsible delete the personal data concerning you immediately, and the person responsible is obliged to delete this data immediately if one of the following reasons applies:

(1) The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed. (2) You withdraw your consent on which the processing was based in accordance with Article 6 (1) (a) or Article 9 (2) (a) GDPR, and there is no other legal basis for processing. (3) You object to processing in accordance with Article 21 (1) GDPR and There are no overriding legitimate reasons for processing, or you object in accordance with Article 21 (2) GDPR object to processing. (4) The personal data concerning you has been processed unlawfully. (5) The deletion of personal data concerning you is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the person responsible is subject. (6) The personal data concerning you was collected in relation to information society services offered in accordance with Article 8 (1) GDPR.

b) Information to third parties

If the person responsible has made the personal data concerning you public and is obliged to delete it in accordance with Article 17 (1) GDPR, he shall take appropriate measures, including technical measures, taking into account the available technology and implementation costs, to inform data controllers who process the personal data that you, as a data subject, have deleted all links to this personal data or copies or replications of this personal data from them have requested personal data.

c) Exemptions

The right to deletion does not exist insofar as processing is necessary

(1) to exercise the right to freedom of expression and information; (2) to fulfill a legal obligation which requires processing under Union or Member State law to which the person responsible is subject, or to perform a task which is in the public interest or in the exercise of official authority vested in the controller; (3) for reasons of public interest in the area of public health in accordance with Article 9 (2) lit. h and i and Art. 9 para. 3 GDPR; (4) for in public Archiving purposes of interest, scientific or historical research purposes or for statistical purposes in accordance with Article 89 (1) GDPR, insofar as the right referred to in section a) is likely to make impossible or seriously impair the achievement of the objectives of this processing, or (5) to assert, exercise or defend legal claims.

Right to be informed

If you have asserted the right to correct, delete or restrict processing against the person responsible, the controller is obliged to notify all recipients to whom the personal data concerning you has been disclosed of this correction or deletion of the data or restriction of processing, unless this proves impossible or involves disproportionate effort.

You have the right vis-à-vis the person responsible to be informed about these recipients.

Right to data portability

You have the right to receive the personal data concerning you, which you have provided to the person responsible, in a structured, commonly used and machine-readable format. You also have the right to transfer this data to another person responsible without hindrance from the person responsible to whom the personal data was provided, provided that

(1) processing is based on consent in accordance with Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR or on a contract in accordance with Article 6 (1) (b) GDPR and (2) processing is carried out using automated procedures.

In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one person responsible to another person responsible, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected as a result.

The right to data portability does not apply to processing of personal data that is necessary for the performance of a task that is in the public interest or in the exercise of official authority that has been transferred to the person responsible.

Right to object

For reasons arising from your particular situation, you have the right to object at any time to the processing of personal data concerning you, which is carried out on the basis of Article 6 (1) (e) or (f) GDPR; this also applies to profiling based on these provisions.

The controller will no longer process your personal data unless he can prove compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is associated with such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

Notwithstanding Directive 2002/58/EC, you have the option to exercise your right of objection in connection with the use of information society services by means of automated procedures using technical specifications.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your data protection consent at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the withdrawal.

Automated decision on a case-by-case basis, including profiling

You have the right not to be subject to a decision based exclusively on automated processing — including profiling — which has legal effect on you or significantly affects you in a similar way. This does not apply if the decision

(1) is necessary for the conclusion or performance of a contract between you and the person responsible, (2) is permitted by Union or Member State legislation to which the controller is subject and this legislation contains appropriate measures to protect your rights and freedoms and your legitimate interests, or (3) takes place with your express consent.

However, these decisions must not be based on special categories of personal data under Article 9 (1) GDPR, unless Article 9 (2) lit. a or g GDPR applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.

With regard to the cases referred to in (1) and (3), the controller shall take appropriate measures to protect the rights and freedoms and your legitimate interests, including at least the right to obtain the action of a person from the controller, to express his own position and to challenge the decision.

Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you believe that the processing of personal data concerning you is contrary to the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.

Provision of the website and creation of log files

Description and scope of data processing

Each time you visit our website, our system automatically collects data and information from the computer system of the calling computer.
The following data is collected here:

Information about the browser type and version used.

  1. The user's operating system
  2. The user's Internet service provider
  3. The user's IP address
  4. date and time of access
  5. Websites from which the user's system accesses our website
  6. Websites that are accessed by the user's system via our website

The log files contain IP addresses or other data that make it possible to assign them to a user. This could be the case, for example, if the link to the website from which the user accesses the website, or the link to the website to which the user switches, contains personal data.

The data is also stored in our system's log files. This data is not stored together with other personal data of the user.

Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f DSGVO.

Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. To do this, the user's IP address must be stored for the duration of the session.

They are stored in log files to ensure the functionality of the website. We also use the data to optimize the website and ensure the security of our information technology systems. There is no evaluation of the data for marketing purposes in this context.

These purposes also include our legitimate interest in data processing in accordance with Article 6 (1) (f) GDPR.

Storage period

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. If the data is collected to provide the website, this is the case when the respective session has ended.

If the data is stored in log files, this is the case after one day. Further storage is possible. In this case, the IP addresses of the users are deleted or distorted so that it is no longer possible to assign the calling client.

Objection and removal option

The collection of data to provide the website and the storage of data in log files is absolutely necessary for the operation of the website. There is therefore no option for the user to object.

Using cookies

Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user calls up a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again.

We also use cookies on our website, which make it possible to analyze the surfing behavior of users.

The following data can be transmitted in this way:

  1. Search terms entered
  2. Frequency of page views
  3. Use of website features
  4. The type of visitors
  5. The origin of traffic
  6. The behavior of users on the website

User data collected in this way is pseudonymized through technical measures. It is therefore no longer possible to assign the data to the calling user. The data is not stored together with other personal user data.

When visiting our website, users are informed by an information banner about the use of cookies for analysis purposes and referred to this privacy policy. In this context, there is also an indication of how to prevent the storage of cookies in the browser settings.

Legal basis for data processing

The legal basis for processing personal data using technically necessary cookies is Art. 6 para. 1 lit. f DSGVO.

The legal basis for processing personal data using cookies for analysis purposes is Art. 6 para. 1 lit. a GDPR, if the user has given his consent to this effect.

Purpose of data processing

Analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is being used and can thus constantly optimize our offering.

These purposes also include our legitimate interest in processing personal data in accordance with Article 6 (1) (f) GDPR.

Duration of storage, objection and removal options

Cookies are stored on the user's computer and transmitted from it to our site. As a user, you therefore also have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

Typeform

General description


On our website, the user has the option to contact us or to
to apply to us. Contact is easy via a service that
us from Typeform S.L., Carrer Bac de Roda, 163, 08018 Barcelona to
is provided.


Description and scope of data processing


The following data is provided by the user as part of the application process
recorded and transmitted to Typeform:


1. First name and last name
2. Type of job
3. Query previous experiences in various categories
4. Survey of professional experience
5. Survey of language skills
6. Other comment
7. Salary expectations (optional)
8. Request the contact path (simple selection)
a. Telephone number
b. Email address
c. LinkedIn account
d. Telephone number (using WhatsApp)
9. Answer to the question: How did you hear about us?


As part of the simple contact form, the following data is provided by
Users recorded and transmitted to Typeform:


1. First name and last name
2. Categorization of the request
3. Company name
4. Position in the company
5. Email address
6. Inquiry about the type of contact
a. Get in touch with me
i. Telephone number
ii. Email address
iii. LinkedIn account
iv. Telephone number (using WhatsApp)
b. Direct appointment request via Calendly


Legal basis for data processing


The legal basis for processing personal data under
Use of Typeform is consent in accordance with Art. 6 para. 1 lit. a GDPR.


Purpose of processing


The purpose of processing is simple contact or application
with Business-Unicorns GmbH

Storage period


The data is deleted as soon as it is necessary to achieve the purpose of
surveys are no longer required. Which through news in addition
Personal data collected will also be collected after the
Deleted for the purpose of collecting them.


Application data will be submitted after a period of 6 months at the latest
deleted.


Objection and removal option


If the user contacts us via messenger, he can
Object to the storage of his personal data at any time. In a
In this case, the conversation cannot be continued. The revocation can
by sending an email to datenschutz@business-unicorns.de.


More information about the right of withdrawal and how
Typeform data processed can be found here:


https://help.typeform.com/hc/en-us/articles/360029581691-What-happens-to-my-data
https://admin.typeform.com/to/dwk6gt

Calendly

You can make appointments with us on our website. We use the “Calendly” tool to book appointments. The provider is Calendly LLC, 271 17th St NW, 10th Floor, Atlanta, Georgia30363, USA (hereinafter “Calendly”).

To book an appointment, enter the requested data and the desired date in the 8/12 mask provided for this purpose. The data entered is used for planning, carrying out and, if necessary, following up on the appointment. The appointment data is stored for us on Calendly's servers, whose privacy policy can be viewed here: https://calendly.com/de/pages/privacy.

The data you have entered will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies. Mandatory legal provisions — in particular retention periods — remain unaffected.

The legal basis for data processing is Article 6 (1) (f) GDPR. The website operator has a legitimate interest in making appointments with interested parties and customers as uncomplicated as possible. If a corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be withdrawn at any time.

Data transmission to the USA is based on the standard contractual clauses of the EU Commission.
Details can be found here: https://calendly.com/pages/dpa.

Order processing

We have concluded an order processing contract (AVV) with the above-mentioned provider. This is a contract required by data protection law, which ensures that it only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

Weglot

We use the Weglot translation service for our website. The service provider is the French company Weglot SAS, 7 cité Paradis 75010 Paris, France.

You can find out more about the data that is processed by using Weglot in the privacy policy at https://weglot.com/privacy.


Google Analytics

Our website uses features of the web analysis service Google Analytics. The provider of the web analysis service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses “cookies.” These are small text files that your web browser stores on your device and enable an analysis of website usage. Information generated by cookies about your use of our website is transmitted to a Google server and stored there. The server location is usually the USA. Google Analytics cookies are set on the basis of Art. 6 para. 1 lit. f DSGVO. As the operator of this website, we have a legitimate interest in analyzing user behavior in order to optimize our website and, if applicable, advertising.

IP anonymization

We use Google Analytics in conjunction with the IP anonymization function. It ensures that Google abbreviates your IP address within member states of the European Union or in other states party to the Agreement on the European Economic Area before transmission to the USA. There may be exceptional cases in which Google transmits the full IP address to a server in the USA and abbreviates it there. On our behalf, Google will use this information to evaluate your use of the website, to create reports on website activity and to provide us with other services related to website activity and Internet usage. There is no merging of the IP address transmitted by Google Analytics with other data from Google.

Browser plugin

You can prevent cookies from being set by your web browser. However, this could restrict some functions of our website. You can also prevent Google from collecting data relating to your use of the website, including your IP address and subsequent processing. This is possible by downloading and installing the browser plug-in available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de

Objection to data collection

You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie is set to prevent your data from being collected when you visit our website in the future: Deactivate Google Analytics

Details on how Google Analytics handles user data can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de

Order processing

In order to fully comply with legal data protection requirements, we have concluded an order processing contract with Google.

Demographics in Google Analytics: Our website uses the “demographic characteristics” feature of Google Analytics. It can be used to create reports that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and from visitor data from third parties. It is not possible to assign the data to a specific person. You can turn off this feature at any time. This is possible via the ad settings in your Google account or by generally prohibiting Google Analytics from collecting your data, as explained in the “Objection to data collection” section.

Hotjar

This website uses Hotjar. The provider is Hotjar Ltd., Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta, Europe (website: https://www.hotjar.com).

Hotjar is a tool for analyzing your user behavior on our website. With Hotjar, we can record your mouse and scroll movements and clicks, among other things. Hotjar can also determine how long you stayed with the mouse pointer on a specific location. Hotjar uses this information to create so-called heat maps, which can be used to determine which areas of the website are preferred by website visitors. We can also determine how long you stayed on a page and when you left it. We can also determine at which point you canceled your entries in a contact form (so-called conversion funnels).

Hotjar can also be used to obtain direct feedback from website visitors. This function is used to improve the website operator's web offerings.

Hotjar uses cookies. Cookies are small text files that are stored on your computer and saved by your browser. They serve to make our offering more user-friendly, effective and secure. In particular, these cookies can be used to determine whether our website was visited with a specific device or whether the Hotjar functions have been deactivated for the browser in question. Hotjar cookies remain on your device until you delete them.

You can set your browser so that you are informed when cookies are set and only allow cookies in individual cases, exclude the acceptance of cookies for specific cases or in general, and activate the automatic deletion of cookies when you close the browser. If cookies are deactivated, the functionality of this website may be limited.

The use of Hotjar and the storage of Hotjar cookies is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

Disable Hotjar

If you would like to deactivate data collection by Hotjar, click on the following link and follow the instructions there: https://www.hotjar.com/opt-out

Please note that Hotjar must be deactivated separately for each browser or device. For more information about Hotjar and the data collected, please see Hotjar's privacy policy at the following link: https://www.hotjar.com/privacy

Order processing

We have concluded an order processing contract with Hotjar to implement strict European data protection regulations.

Information about using our offer on Facebook

General description

On our Facebook page, the user has the opportunity to get in touch with us. Contact is made via the so-called Facebook Messenger. The Facebook Messenger is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Communication via the provided messenger takes place on Facebook's servers. What and to what extent Facebook may access your personal data depends on the user's personal privacy settings. Further information can be found under the following link:

https://www.facebook.com/policy.php/?ref=cr

In addition to information on how to handle user data, the user can carry out a privacy check. An explanation can be found at the following link:

https://www.facebook.com/help/443357099140264?helpref=about_content

Further data protection settings can be found under this link:

https://www.facebook.com/settings?tab=privacy

In addition to the option of a contact, it is also possible to comment on, write an article or write a review. These posts or reviews are usually visible to every visitor to our Facebook page.

Description and scope of data processing

Information on the scope of data processing by Facebook can be found at the following link:

https://www.facebook.com/policy.php/?ref=cr

For our part, we only process the data provided to us by the user; this includes at least the user name. Should further personal data be sent to us in the form of a message, we will also process this. Processing is carried out exclusively via Facebook. Should the user ask us in the contact message to contact him via other channels, this will only be done upon request by the user. It will not be passed on to third parties.

Legal basis for data processing

The legal basis for processing personal data using a Facebook page is legitimate interest in accordance with Article 6 (1) (f) GDPR.

Purpose of processing

The purpose of processing is to communicate with and provide information to users of the Facebook page. The user has the option to comment on contributions made by us and thus ask questions. The messenger's contact function also allows the user to ask us specific questions that are not visible to every visitor to the Facebook page. The purpose of processing is therefore interaction with the user. Our legitimate interest lies in responding to comments and inquiries.

Storage period

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. The additional personal data collected through messages will also be deleted after the purpose for which they were collected has been achieved.

Objection and removal option

If users contact us via messenger, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. The revocation can be made by sending an email to datenschutz@business-unicorns.de or via Facebook Messenger. The user can delete comments, posts or ratings himself at any time using a function implemented by Facebook. Information on objection and removal options regarding Facebook can be found in Facebook's privacy policy and additionally at the following link:

https://www.facebook.com/help/contact/367438723733209

Audio and video conferences

data processing

Among other things, we use online conference tools to communicate with our customers. The tools we use in detail are listed below. When you communicate with us via video or audio conference via the Internet, your personal data is collected and processed by us and the provider of the respective conference tool.

The conference tools collect all data that you provide/use to use the tools (email address and/or your telephone number). The conference tools also process the duration of the conference, start and end (time) of participation in the conference, number of participants and other “context information” related to the communication process (metadata).

In addition, the provider of the tool processes all technical data required to process online communication. This includes in particular IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or loudspeaker, and the type of connection.

If content is exchanged, uploaded or made available in any other way within the tool, it is also stored on the servers of the tool providers. Such content includes, in particular, cloud recordings, chat/instant messages, voicemails uploaded photos and videos, files, whiteboards, and other information shared while using the service.

Please note that we do not have full influence on the data processing processes of the tools used. Our options are largely based on the corporate policy of the respective provider. For further information on data processing by the conference tools, please refer to the privacy statements of the tools used in each case, which we have listed below this text.

Purpose and legal basis

The conference tools are used to communicate with prospective or existing contract partners or to offer certain services to our customers (Art. 6 para. 1 lit. BDSGVO). Furthermore, the use of the tools serves to generally simplify and speed up communication with us or our company (legitimate interest within the meaning of Art. 6 para. 1 lit. fGDPR). If consent has been requested, the relevant tools are used on the basis of this consent; consent can be withdrawn at any time with effect for the future.

Storage period

The data collected directly by us via the video and conference tools is deleted from our systems as soon as you request us to delete it, revoke your consent to store it, or the purpose for data storage ceases to apply. Saved cookies remain on your device until you delete them. Mandatory legal storage periods remain unaffected.

We have no influence on the storage period of your data, which is stored by the operators of the conference tools for their own purposes. For details, please contact both operators of the conference tools directly.

Conference tools used

We use the following conference tools:

Google Meet

We use Google Meet. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details on data processing can be found in Google's privacy policy: https://policies.google.com/privacy?hl=de.

Order processing

We have concluded an order processing contract (AVV) with the above-mentioned provider. This is a contract required by data protection law, which ensures that it only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

newsletters

Active Campaign

You can subscribe to a newsletter on our website. When you register for the newsletter, the data from the input mask, such as your name and email address, is sent to us. In addition, the IP address of the calling computer and the date and time of registration when logging in and out, tracking pixel data and HTTP data are collected. We will not share your data with third parties and will only use it to send you the newsletter.

If you purchase products or services on our website and provide your e-mail address, this can then be used by us to send you a newsletter. In such a case, the newsletter will only send direct advertising for our own similar goods or services.

The legal basis for processing your personal data in the context of sending our newsletters is consent given in accordance with Article 6 (1) (a) GDPR; consent can be withdrawn at any time. A revocation does not affect the lawfulness of the data processing carried out up to that point.

To send the newsletter, we use the provider Active Campaign, Inc., address: 1 N Dearborn, 5th Floor Chicago, Illinois 60602 from the USA (as part of our legitimate interest in the technically flawless processing of our customer information and analysis in accordance with Art. 6 para. 1 lit. f GDPR). This exports your data to the USA.

In addition, in our newsletter, we will explicitly ask you to give your consent to the sending of data to Active Campaign and to the USA. By clicking on the link, you declare this consent, which you can withdraw at any time. For how Active Campaign handles your data, we refer to Active Campaign's privacy policy. Active Campaign will only use your data to send the newsletter and evaluate this mailing on our behalf. Furthermore, Active Campaign will only use your data to improve its own service. However, Active Campaign will not use the data to write to you itself or pass on your data to third parties.

In the case of sale of goods and services, the legal basis for sending the newsletter is Section 7 (3) UWG.

The data of our subscribers is processed for the following purposes:

- delivery of the newsletter,
- information about your browser, location and IP address,
- providing the form for subscribing and unsubscribing from our newsletter on the website,
- “double opt-in” procedure to confirm the subscription,
- Storage and processing for evidentiary purposes for any assertion, exercise or defense of legal claims
- Analysis of the usage behavior of newsletter subscribers in our newsletter and creation of user profiles using pseudonyms for the purpose of personalizing the newsletter.

We store the personal data that you need to send the newsletter until you withdraw your consent to receive the newsletter. The subscription to the newsletter can be cancelled by the affected user at any time. For this purpose, there is a corresponding unsubscribe link in every newsletter. This also makes it possible to withdraw consent to the storage of personal data collected during the registration process. You can also object to further receipt by sending an e-mail to the website operator.

Order processing

We have concluded an order processing contract (AVV) with the above-mentioned provider. This is a contract required by data protection law, which ensures that it only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.