We are very pleased about your interest in our website - and thus in our company. The protection of your private rights and freedoms is very important to us; we only use your data for the purposes intended. Since it is important to us that you are aware at all times of the extent to which we collect, use and, if necessary, transfer your data to third parties, we will provide you with the following comprehensive information on the processing of your personal data collected by us or stored by us.
Visiting our website is generally possible without providing (personal) data; if there are exceptions to this for selected services, we will explain these in the following chapters. When processing personal data, we strictly adhere to the requirements of the EU General Data Protection Regulation (GDPR) and any other data protection regulations.
meetergo GmbH
Dominik Rapacki, Richard Gödel
Hauptstr. 44
40789 Monheim am Rhein
Germany
Phone: 0221 16 12 239
E-mail: privacy@meetergo.com
Website: https://meetergo.com
Dominik Rapacki
Phone: 0221 16 12 239
Data protection team for general data protection inquiries:
Team e-mail: privacy@meetergo.com
Website: https://meetergo.com
To ensure that we always have up-to-date data protection information in connection with the services of our website, we use the CLOUD DSE service of Cortina Consult GmbH, Hafenweg 24 in 48155 Münster. In this process, the contents of our privacy policy are hosted on the servers at Cortina Consult and managed centrally. Necessary changes are implemented promptly by Cortina Consult and immediately displayed via direct integration on our website.
The EU General Data Protection Regulation (GDPR) provides for extensive rights for data subjects in Chapter III, which we explain to you accordingly below with regard to the processing of your personal data:
This requirement concerns in particular information on the following details of data processing:
We will correct any erroneous data immediately, provided that you inform us of the circumstance accordingly.
Provided that the processing is no longer necessary and one of the following conditions is met:
Provided that one of the following conditions is met:
If it is technically possible and does not affect the rights and freedoms of other persons, we will - at your request - transfer your data to another recipient (responsible party).
If we collect or have collected and process personal data from you (on the basis of Art. 6 (1) e or f or Art. 9 (2) a GDPR), you have the right to object to the data processing (including profiling) at any time (with effect for the future). In exceptional cases, the objection may be ineffective, e.g. if we can demonstrate compelling interests worthy of protection for the processing that outweigh your interests or processing serves the assertion, exercise or defense of legal claims. If we process your personal data for the purpose of direct marketing, you have the right to object to such processing at any time. This also applies to profiling, insofar as it is related to such direct advertising. You also have the right to object to processing of your data concerning you which is carried out by us for scientific or historical research purposes or for statistical purposes pursuant to Article 89 (1) GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.
If we collect or have collected and process personal data from you, you have the right not to be subject to any decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you. Exceptions to this requirement apply if the decision is necessary for the conclusion or performance of a contract between you and us or you have expressly consented to the processing. In any case, we will take reasonable steps to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain the intervention of a person on our part, to express our own point of view and to contest the decision.
You have the right to revoke consent to the processing of personal data at any time.
The following information applies to the data processing on our website in general. If there are exceptions or additions to this information, these are described in detail in the relevant sections.
We secure our website and other systems through technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons. In addition, we have implemented SSL encryption (SHA256) on our website to protect your data. However, despite regular checks, complete protection against all dangers is not possible.
We process personal data in accordance with the requirements of the GDPR, depending on the type and purpose of the processing as follows:
| Permitted use | Specification of the GDPR |
| Informed consent | Art. 6 para. 1 a |
| Performance of a contract | Art. 6 para. 1 b |
| Implementation of pre-contractual measures | Art. 6 para. 1 b |
| Fulfillment of legal obligations | Art. 6 para. 1 c |
| Protection of vital interests | Art. 6 para. 1 d |
| Safeguarding our legitimate interest | Art. 6 para. 1 f |
Our legitimate interest, as defined in Article 6 (1) f GDPR, is based on the performance of our business activities in order to maintain our ability to operate and secure the employment of our employees.
After the purpose of storage has ceased, the retention periods are generally at least six or ten years. As a rule, data is deleted immediately in accordance with our deletion concept, provided that this does not conflict with any retention obligation, necessity for contract fulfillment or a legitimate interest.
We store your personal data only for the period required to fulfill the specified purpose. After the purpose no longer applies and after expiration of any existing retention periods, your data will be deleted immediately. If deletion is not possible, the data will be blocked instead.
As soon as you visit our website, our web server collects some general data and technical information - as shown in the table below:
Data collected | Purpose of the survey |
|---|---|
| browser types and versions used | correct display of the page content |
| Operating system used, visitor origin (referrer, e.g. Google), subpages clicked on | Optimization of our website content as well as our advertising |
| Date and time of access to the website as well as IP address and internet service provider of the visitor | Ensuring the permanent functionality of our IT systems (for the operation of the website) and prevention of misuse |
Other data and information for security in the event of attacks | Providing relevant information to law enforcement agencies in the event of a cyberattack |
Under certain circumstances (e.g. due to legal or contractual regulations), an obligation arises for you to provide us with your personal data. Examples of such processing as follows:
Nature or purpose of the processing | Need |
|---|---|
| Conclusion of a sales contract (e.g. your address) | Fulfillment of the contractual obligation (e.g. delivery of the goods to your address) |
| In the employee context (e.g. transmission of data to the tax office) | Compliance with legal requirements (e.g. tax regulations) |
If applicable, in deviation from or in addition to the above-mentioned general information, you will find details of the individual data processing on our website below.
We use cookies on this website; these are small text files that are stored on your computer via your internet browser (e.g. Google Chrome, Safari, Firefox, Edge). These cookies are used for various purposes: Many cookies are technically necessary to provide you with certain website functions (e.g. shopping cart functions, saving your login information), other cookies are used for the security of your data or the website and some cookies can be used to analyze your user behavior. The latter cookies may contain a so-called cookie ID - a unique identifier consisting of a character string that enables websites and servers to be assigned to the storing browser.
Cookies that are necessary to carry out the transmission of a message via a public telecommunications network and cookies that are absolutely necessary to provide you with an expressly requested function are referred to as "technically necessary cookies" and may be set without your explicit consent (Section 25 (2) TDDDG). All other cookies are subject to consent (Section 25 (1) TDDDG); where applicable, this is regulated by our consent management platform.
We use cookies in part only for the duration of your visit to the website, in part for a predefined period and in part permanently. You can delete all these cookies manually or automatically at any time via your web browser.
It is possible to use our website (although possibly not to its full extent) without cookies. Most browsers are set to accept cookies automatically. However, you can deactivate the storage of cookies or set your browser so that it notifies you as soon as cookies are sent.
| Purpose of the processing of general data |
| ||||
| Legal basis (according to Art. 6 / 9 DSGVO) | |||||
| Recipient (if applicable) | none | ||||
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | A data transfer to a third country does not take place and is not planned. | ||||
| If known: Duration of data storage | See General deadlines for data deletion | ||||
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | There is no obligation. | ||||
| Consequences of non-compliance (in case of failure to provide the required data) | Without the data provided, the data processing described cannot be carried out. | ||||
| If applicable, existence of an automated decision-making process | In this context, we do not use automatic decision-making. | ||||
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually originates from the data subject, but may also originate from third parties. | ||||
| Change of purpose, if applicable | none |
| Purpose of processing | Applicant data is collected, processed and used for the purpose of selecting potential employees. |
| Legal basis (according to Art. 6 / 9 GDPR) | |
| Recipient (if applicable) | The data will not be passed on to third parties and/or to a third country. |
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | Forwarding does not take place and is not planned. |
| If known: Duration of data storage | The personal data of applicants whom we do not hire will be stored for the period required for possible legal claims (e.g. under the General Equal Treatment Act (AGG)) (maximum 6 months) and then immediately destroyed or deleted. |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | For a smooth application process, it is necessary that you provide us with the requested information truthfully. |
| Consequences of non-compliance (in case of failure to provide the required data) | Failure to do so (i.e. failure to provide the required data) may mean that an employment contract cannot be concluded with you. |
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | As a rule, the data originates from the data subject themselves; however, it may also originate from third parties. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | Master data, contact data, application data |
| Change of purpose if necessary | If we take you on as an employee after the application process has been completed, the purpose for processing the relevant data will change: in this case, the data will be used in future to implement and maintain the employment relationship. |
| Purpose of processing | Processing and, if necessary, answering the request of the form sender |
| Legal basis (according to Art. 6 / 9 GDPR) | |
| Recipient (if applicable) | The data will not be passed on to third parties and/or to a third country. |
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | Data transfer to a third country does not take place and is not planned. |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | There is no obligation. |
| Consequences of non-compliance (in case of failure to provide the required data) | none |
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data originates from the person concerned. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | Data and categories requested in the respective form. |
| Change of purpose if necessary | none |
| Purpose of the processing of general data |
| ||||||||
| Legal basis | Fulfillment of a contract (Art. 6 para. 1 lit. b GDPR) | ||||||||
| Recipient (if applicable) | Parcel service provider, logistics service provider, payment service provider | ||||||||
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | A data transfer to a third country does not take place and is not planned. | ||||||||
| If known: Duration of data storage | See General deadlines for data deletion | ||||||||
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | The data (in the mandatory fields) must be provided as part of the underlying contract. | ||||||||
| Consequences of non-compliance (in case of failure to provide the required data) | The creation of a customer account is not possible in this case. | ||||||||
| If applicable, existence of an automated decision-making process | In this context, we do not use automatic decision-making. | ||||||||
| If applicable, origin of the data (if not collected directly from the data subject) | The data comes from the data subject himself. | ||||||||
| Where applicable, categories of personal data (if not collected directly from the data subject). | The data comes from the data subject himself. | ||||||||
| Change of purpose if necessary | none |
| Purpose of processing | Provision of information in the form of electronic circulars |
| Legal basis | Consent (Art. 6 para. 1 lit. a GDPR) |
| Recipient (if applicable) | none |
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | A data transfer to a third country does not take place and is not planned. |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | There is no obligation to provide personal data. Newsletters are sent exclusively after registration via a double opt-in procedure (voluntarily given and revocable informed consent pursuant to Article 6 (1) a DSGVO) or after a purchase contract has been successfully concluded and the e-mail address has been collected in this process (pursuant to Section 7 (3) UWG). |
| Consequences of non-compliance (in case of failure to provide the required data) | Non-compliance (i.e. not providing the required data) would result in the newsletter not being delivered to you. |
| If applicable, existence of an automated decision-making process | In this context, we do not use automatic decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data comes from the data subject himself. |
| Change of purpose, if applicable | none |
| Purpose of processing |
| ||||
| Legal basis (according to Art. 6 / 9 GDPR) | |||||
| Recipient (if applicable) | none | ||||
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | A data transfer to a third country does not take place and is not planned. | ||||
| If known: Duration of data storage | See General deadlines for data deletion | ||||
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | Without the data, the user account cannot be created. | ||||
| Consequences of non-compliance (in case of failure to provide the required data) | Without the data, the user account cannot be created. | ||||
| If applicable, existence of an automated decision-making process | In this context, we do not use automatic decision-making. | ||||
| If applicable, origin of the data (if not collected directly from the data subject) | The data comes from the data subject himself. | ||||
| Change of purpose if necessary | none |
| Purpose of processing | Cloud Computing |
| Legal basis (according to Art. 6 / 9 GDPR) | |
| Recipient (if applicable) | Amazon Web Services EMEA SARL 38 Avenue John F. Kennedy, L-1855, Luxembourg. We have concluded a data processing agreement with the recipient so that the personal data of our website visitors will only be processed in accordance with our instructions. |
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | If applicable, transfer, storage and processing of personal data in the USA. The data transfer is based on the standard contractual clauses of the EU Commission. Amazon.com, Inc. is certified according to the EU-US Data Privacy Framework (DPF). |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | no |
| Consequences of non-compliance (in case of failure to provide the required data) | no |
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually comes from the data subject, but can also come from third parties. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | Applications accessed, authentication and security information, browser plugins, browser type, browser version, click path, content interaction information, cookie ID, cookie information, device information, device type, download errors, content downloaded from AWS, duration and number of concurrent streams and downloads, email address, full URL clickstream to, through and from the AWS website (including date and time), geographic location, interactions or communications with AWS, internet service provider, IP address, mouse movements, type of network connection, usage data, time zone |
| Change of purpose if necessary | no |
| Purpose of processing | Deliver content |
| Legal basis (according to Art. 6 / 9 GDPR) | |
| Recipient (if applicable) | Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourghttps://aws.amazon.com/privacy/ |
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | United States of America |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | no |
| Consequences of non-compliance (in case of failure to provide the required data) | no |
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually comes from the data subject, but can also come from third parties. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | User agent data, usage data, device operating system, device information, IP address, browser information |
| Change of purpose if necessary | no |
| Purpose of processing | This service is designed to prevent spam and bots on the website. Improve the service and comply with legal obligations |
| Legal basis (according to Art. 6 / 9 GDPR) | |
| Recipient (if applicable) | Friendly Captcha GmbH, Am Anger 3-5, 82237 Woerthsee, Germanyhttps://friendlycaptcha.com/de/privacy/ |
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | Data transfer to a third country does not take place and is not planned. |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | Due to the need to protect against bots |
| Consequences of non-compliance (in case of failure to provide the required data) | no |
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually comes from the data subject, but can also come from third parties. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | Anonymized IP address, referrer URL, URL user agent, timestamp |
| Change of purpose if necessary | no |
| Data protection officer of the service | privacy@friendlycaptcha.com |
| Privacy policy of the provider | https://friendlycaptcha.com/legal/privacy-end-users/ |
| Purpose of processing | Creation of usage profiles to optimize the cost-benefit factor on the website |
| Legal basis | Consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG) |
| Recipient (if applicable) | Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Irlandhttps://policies.google.com/technologies/cookies?hl=en |
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | United States of America |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | no |
| Consequences of non-compliance (in case of failure to provide the required data) | no |
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | As a rule, the data comes from the person concerned. |
| If applicable, categories of pb data (if not collected directly from the data subject) | which pages and functions are accessed or clicked during the website visit (click behavior), IP address assigned by the Internet service provider (ISP) in anonymized form, previously visited website (referrer), subpages visited, time spent on the website, frequency of visits, date, access location, time of visit, user agent |
| Change of purpose if necessary | no |
| Opt-Out | Installation of the browser plug-in: https://tools.google.com/dlpage/gaoptout, see also under Cookies |
| Data protection officer of the provider | https://support.google.com/policies/contact/general_privacy_form |
| Privacy policy of the provider | https://business.safety.google/privacy/ |
| Purpose of processing | Simplified management of analysis tools through central control and management of the collected analysis mechanisms |
| Legal basis | Consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG) |
| Recipient (if applicable) | Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Irland |
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | If applicable, transfer, storage and processing of personal data in the USA. The data transfer is based on the standard contractual clauses of the EU Commission. Google LLC is certified according to the EU-US Data Privacy Framework (DPF). |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | no |
| Consequences of non-compliance (in case of failure to provide the required data) | no |
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | As a rule, the data comes from the person concerned. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | which pages and functions are accessed or clicked during the website visit (click behavior), IP address assigned by the Internet service provider (ISP) in anonymized form, previously visited website (referrer), subpages visited, time spent on the website, frequency of visits, date, access location, time of visit |
| Opt-Out | no |
| Data protection officer of the provider | https://support.google.com/policies/contact/general_privacy_form |
| Privacy policy of the provider | https://business.safety.google/privacy/ |
| Purpose of processing | Functionality, optimization, customer support, analytics |
| Legal basis (according to Art. 6 / 9 GDPR) | |
| Recipient (if applicable) | Prospect One sp. z o.o., Królewska 65A/1, 30-081 Krakow, Poland |
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | Data transfer to a third country does not take place and is not planned. |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | no |
| Consequences of non-compliance (in case of failure to provide the required data) | no |
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually comes from the data subject, but can also come from third parties. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | Usage data, IP address, browser type, browser version, pages visited, date and time of visit, number of hours spent on a page, own device identifier, diagnostic data |
| Change of purpose if necessary | no |
| Purpose of processing | pay |
| Legal basis (according to Art. 6 / 9 GDPR) | |
| Recipient (if applicable) | Stripe, Inc. 3180 18th Street, San Francisco, CA 94110, United States of Americahttps://stripe.com/de/privacy |
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | United States of America, Stripe, Inc. The data transfer is based on the EU-US Data Privacy Framework, with which Stripe, Inc. is certified. |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | Without the data, the product order or payment cannot be processed. |
| Consequences of non-compliance (in case of failure to provide the required data) | Without the data, the product order or payment cannot be processed. |
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually comes from the data subject, but can also come from third parties. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | Purchase date, payment information, purchase activity, payment card information |
| Change of purpose if necessary | no |
| Purpose of processing | Viewing and sharing videos |
| Legal basis (according to Art. 6 / 9 GDPR) | |
| Recipient (if applicable) | Alphabet Inc., Google LLC, Google Ireland LimitedGoogle Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland https://business.safety.google/privacy/?hl=de |
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | United States of America |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | no |
| Consequences of non-compliance (in case of failure to provide the required data) | no |
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually comes from the data subject, but can also come from third parties. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | Device informationIP addressReferrer URLVideos viewed |
| Change of purpose if necessary | no |
| Purpose of the processing of general data |
| ||||
| Legal basis (according to Art. 6 / 9 GDPR) | |||||
| Recipient (if applicable) | none | ||||
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | Data transfer to a third country does not take place and is not planned. | ||||
| If known: Duration of data storage | 90 days | ||||
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | none | ||||
| Consequences of non-compliance (in case of failure to provide the required data) | none | ||||
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. | ||||
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually originates from the data subject, but may also come from third parties. | ||||
| Change of purpose if necessary | none |
| Purpose of processing | Uniform representation of fonts |
| Legal basis | Consent (Art. 6 para. 1 lit. a GDPR) |
| Recipient (if applicable) | Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Irland |
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | United States of America |
| If known: Duration of data storage | Unknown time period See general deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | no |
| Consequences of non-compliance (in case of failure to provide the required data) | no |
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually comes from the data subject, but can also come from third parties. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | IP address, access time, access date |
| Change of purpose if necessary | no |
| Opt-Out | Using a browser that does not support Google Fonts |
| Privacy info of the addin | https://business.safety.google/privacy/ |
| Purpose of the processing of general data |
| ||||
| Legal basis (according to Art. 6 / 9 GDPR) | |||||
| Recipient (if applicable) | none | ||||
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | Data transfer to a third country does not take place and is not planned. | ||||
| If known: Duration of data storage | 90 days | ||||
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | none | ||||
| Consequences of non-compliance (in case of failure to provide the required data) | none | ||||
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. | ||||
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually originates from the data subject, but may also come from third parties. | ||||
| Change of purpose if necessary | none |
| Purpose of the processing of general data |
| ||||
| Purpose of the processing of special categories of personal data |
| ||||
| Legal basis (according to Art. 6 / 9 GDPR) | |||||
| Recipient (if applicable) | Webflow, Inc, 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA | ||||
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://webflow.com/legal/eu-privacy-policy. | ||||
| If known: Duration of data storage | See General deadlines for data deletion | ||||
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract prescribed by data protection law, which ensures that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR. | ||||
| Consequences of non-compliance (in case of failure to provide the required data) | none | ||||
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. | ||||
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually originates from the data subject, but may also originate from third parties. | ||||
| Change of purpose if necessary | none |
| Legal basis (according to Art. 6 / 9 GDPR) | |
| Recipient (if applicable) | Digital Data Solutions BV, Plantage Middenlaan 42a, 1018 DH, Amsterdam, The Netherlands. Website: https://cookiefirst.com referred to as CookieFirst. |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | none |
| Consequences of non-compliance (in case of failure to provide the required data) | none |
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually originates from the data subject, but may also come from third parties. |
| Purpose of the processing of general data |
| ||||
| Legal basis (according to Art. 6 / 9 GDPR) | |||||
| Recipient (if applicable) | Inc, 2261 Market Street #4008, San Francisco, CA 94114, USA | ||||
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | PostHog transfers and stores the data exclusively on servers in the EU, but is a US company. We have concluded an order processing contract with PostHog, which contains the standard contractual clauses approved by the EU Commission and provided with the additions required for Switzerland in accordance with Art. 16 para. 2 lit. c GDPR, which provide adequate guarantees in accordance with Article 46 (1) GDPR (see Section 3 i) and Art. 16 para. 2 lit. d GDPR). | ||||
| If known: Duration of data storage | See General deadlines for data deletion | ||||
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | none | ||||
| Consequences of non-compliance (in case of failure to provide the required data) | none | ||||
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually originates from the data subject, but may also come from third parties. | ||||
| Change of purpose if necessary | none |