Privacy policy
Responsible party pursuant to data protection laws, in particular the EU General Data Protection Regulation (GDPR), is
Beissbarth GmbH
Hanauer Str. 101
80993 Munich
Germany
E-Mail: sales@beissbarth.com
Phone: +49-89-14901-0
Your rights as the data subject
You can exercise the following rights at any time using the contact details of our data protection officer:
- Information on your data stored by us and the processing thereof (Art. 15 GDPR),
- Rectification of inaccurate personal data (Art. 16 GDPR),
- Deletion of your data stored by us (Art. 17 GDPR),
- Restriction of the data processing, provided that we may not delete your data due to legal obligations (Art. 18 GDPR),
- Objection to the processing of your data with us (Art. 21 GDPR) and
- Data portability, provide that you have consented to the data processing or have entered into a contract with us (Art. 20 GDPR).
If you have given us consent, you may withdraw it at any time, which will remain in effect in the future.
You can contact a supervisory authority with a complaint at any time, e.g. the supervisory authority of the state of your residence or the authority that oversees us as the responsible party.
You’ll find a list of supervisory authorities (for the non-public area) with their respective addresses at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Information on your right to object according to Art. 21 GDPR
Case-specific right to object
You have the right at any time, for reasons that arise from your particular situation, to object to the processing of personal data pertaining to you, which occurs pursuant to 6(1)(f) GDPR (data processing on the basis of a balance of interests); this also applies to profiling based on this provision in accordance with Art. 4(4) GDPR.
If you file an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or if the processing is for the purpose of enforcing, carrying out or defending legal claims.
Collecting general information during a visit to our website
Type and purpose of the processing
When you access our website – i.e. if you do not register or submit information – information of a general nature will be collected automatically. This information (server log files) contains the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and the like. It is processed in particular for the following purposes:
- Ensuring an unproblematic website connection
- Ensuring seamless use of our website
- Analysis of system security and stability as well as
- For additional administrative purposes.
We will not use your data to draw conclusions about your person. This type of information will be statistically analysed by us if necessary to optimise our website and its underlying technology.
Legal basis
The processing occurs according to Art. 6 Para. 1 (f) GDPR, based on our legitimate interest in improving the stability and functionality of our website.
Recipients
Recipients of the data may be technical service providers, who work on the operation and maintenance of our website as the processor.
Retention period
The data will be deleted as soon as they are no longer required for the reason they were collected. This is generally the case, after the respective session has ended, for data that are used to make the website available.
Mandatory or required provision
The provision of the aforementioned personal data is neither legally nor contractually mandatory. Without the IP address however, the service and functionality of our website are not guaranteed. Furthermore, individual services can be unavailable or limited. For this reason, an objection is excluded.
Contact form (training reservation)
Type and purpose of the processing
The data you enter are used for individual communication with you. A valid e-mail address and your name are required for this communication, which serves to organize your inquiry and the respective subsequent reply. Providing additional information is optional.
Legal basis
The processing of the data entered in the contact form occurs on the basis of a legitimate interest (Art. 6 Para. 1 (f) GDPR). By providing the contact form, our aim is to facilitate an uncomplicated means for you to contact us. The information you enter will be used to process the inquiry and saved for possible follow-up questions. If you contact us to request an offer, the processing of the information provided in the contact form will occur in order to implement pre-contractual measures (Art. 6 Para. 1 (b) GDPR).
Recipients
Recipients of the data may be processors.
Retention period
The data will be deleted no later than 6 months after processing the inquiry. Provided that we enter into a contract together, we will use the statutory retention periods in the German Commercial Code (Handelsgesetzbuch) and delete your data according to the respective stipulated deadlines.
Mandatory or required provision
The provision of your personal data is voluntary. However, we can only process your inquiry if you provide us with your name, e-mail address and the reason for your inquiry.
Contact form (mail request)
Type and purpose of the processing
The data you enter are used for individual communication with you. A valid e-mail address and your name are required for this communication, which serves to organize your inquiry and the respective subsequent reply. Providing additional information is optional.
Legal basis
The processing of the data entered in the contact form occurs on the basis of a legitimate interest (Art. 6 Para. 1 (f) GDPR). By providing the contact form, our aim is to facilitate an uncomplicated means for you to contact us. The information you enter will be used to process the inquiry and saved for possible follow-up questions. If you contact us to request an offer, the processing of the information provided in the contact form will occur in order to implement pre-contractual measures (Art. 6 Para. 1 (b) GDPR).
Recipients
Recipients of the data may be processors.
Retention period
The data will be deleted no later than 6 months after processing the inquiry. Provided that we enter into a contract together, we will use the statutory retention periods in the German Commercial Code (Handelsgesetzbuch) and delete your data according to the respective stipulated deadlines.
Mandatory or required provision
The provision of your personal data is voluntary. However, we can only process your inquiry if you provide us with your name, e-mail address and the reason for your inquiry.
Contact form (webinar request)
Type and purpose of the processing
The data you enter are used for individual communication with you. A valid e-mail address and your name are required for this communication, which serves to organize your inquiry and the respective subsequent reply. Providing additional information is optional.
Legal basis
The processing of the data entered in the contact form occurs on the basis of a legitimate interest (Art. 6 Para. 1 (f) GDPR). By providing the contact form, our aim is to facilitate an uncomplicated means for you to contact us. The information you enter will be used to process the inquiry and saved for possible follow-up questions. If you contact us to request an offer, the processing of the information provided in the contact form will occur in order to implement pre-contractual measures (Art. 6 Para. 1 (b) GDPR).
Recipients
Recipients of the data may be processors.
Retention period
The data will be deleted no later than 6 months after processing the inquiry. Provided that we enter into a contract together, we will use the statutory retention periods in the German Commercial Code (Handelsgesetzbuch) and delete your data according to the respective stipulated deadlines.
Mandatory or required provision
The provision of your personal data is voluntary. However, we can only process your inquiry if you provide us with your name, e-mail address and the reason for your inquiry.
Cookies
Type and purpose of the processing
Like many other websites, we use so-called ‘cookies’. Cookies are small text files that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. With cookies, we receive certain information such as IP address, type of browser and operating system used. Cookies cannot be used to start programs or to transmit viruses to a computer. Based on the information contained in cookies, we can facilitate your navigation of our site and properly display our webpages for you.
The data collected by us will not be shared with third parties under any circumstances nor will a link to personal data be created without your consent. Of course, you can view our website without cookies. Internet browser are regularly configured to accept cookies. In general, you can disable the use of cookies via your browser settings at any time. Please use your Internet browser’s help function to learn how to change these settings, and keep in mind that individual features of our website may not work if you have disabled the use of cookies.
Retention period and cookies used
Insofar as these cookies can affect personal data, we inform you about this in the following sections.
In your browser settings, you can delete individual cookies or the entire set of cookies. You will also find information and instructions on how to delete these cookies or prevent them from being saved in advance. The following links provide the information you’ll need for the respective browser providers:
- Mozilla Firefox: https://support.mozilla.org/en-US/kb/delete-cookies-remove-info-websites-stored
- Internet Explorer: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies
- Google Chrome: https://support.google.com/accounts/answer/61416?hl=en
- Opera: https://www.opera.com/o/ie-simple
- Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=en_US
Use of a consent tool
Type and purpose of the processing
We store a necessary cookie in the cache of the user in order to save the user’s consent. This serves the sole purpose of saving the user’s settings. We can call up the settings again when the user repeatedly visits our website.
Legal basis
The data is processed on the basis of our legitimate interest in documenting the user’s confirmation (Art. 6 (1) lit. f) GDPR.
Recipient
We engage technical service providers for hosting and web support services.
Retention period
The approval and rejection of the use of cookies is stored in the cookie named ‘cookieconsent_status’ in the browser for a period of one year. The query appears again once this period has expired.
Mandatory or required provision
You provide your personal data on a voluntary basis.
Objection to processing:
You can block cookies from being stored by adjusting your browser settings accordingly. However, you may not be able to use all of the functions of this website if you do so. If you want to store new settings when you visit our website, you have to delete the cookies stored in your browser cache. When you visit our website again, you can then select different settings (see reference above regarding the respective browser settings).
Newsletter delivery and evaluation
Purpose and legal basis
1. Newsletter delivery
If you sign up for our newsletter, you will regularly receive information on current, relevant offerings as well as training programs and events. For this purpose, we require your email address and your first and last names and salutation so we can address you personally.
Once you confirm your registration, you will receive a confirmation email requiring you to confirm the accuracy of the information you have provided (so-called double opt-in). This is to make sure you have not provided an incorrect email address and actually wish to receive newsletters to the address specified in the future.
In order to provide a regular newsletter, we require your prior consent. By submitting your registration, you agree to the processing of your data for the purposes specified.
The legal basis for data processing is your consent as per art. 6 sec. 1 (a) of the GDPR.
2. Evaluation
As far as you have given us consent to that effect separately, we will also evaluate your usage of the newsletter and will be able, from that time forward, to detect your visits to Beissbarth GmbH’s web presence. For this purpose, the emails sent to you contain single-pixel image files or so-called web beacons, also known as tracking pixels. Such image files are miniature graphics integrated into the mail designed to inform us, based on technical information (e.g. on your browser, system, IP address, the time the email or link was called up, provided by web beacons), at what time you opened our email and which hyperlinks contained in it you have clicked. This allows us to draw conclusions about your interests and the success of our newsletter campaigns. With the insights we have gained from this process, we will create a user profile to custom-tailor the newsletter to your personal interests.
By disabling the display of images in your email program, you can prevent this evaluation from taking place at any time. However, our newsletter will not be displayed in its entirety, which means that you might not be able to use all of its functionality.
The legal basis for the use of these evaluation methods is your consent as per art. 6 sec. 1 (a) of the GDPR as well.
3. Marketing automation and profile creation (Pardot)
Pardot is a system for marketing automation connected to our Salesforce CRM system and used by us to implement various aspects of our online marketing efforts. It allows us to tie our costumer database into automated newsletter delivery. We use this for the following purposes:
- To measure the success of marketing campaigns
- To add certain standard entries to the datasets of our existing customers only information about the email address, first and last names, company and company address will be tied in. This also allows for conclusions to be drawn in the CRM about whether existing customers have signed up for a newsletter and what geographical area they are associated with.
- To conduct email / newsletter campaigns
- To direct our customers’ attention to training programs and events offered in their vicinity
The legal basis for using Salesforce Pardot is our legitimate interest in accordance with art. 6 sec. 1 (f) of the GDPR. Our use is for commercial interests such as sales promotion and product marketing and for maintaining customer relations.
Data recipient
For newsletter delivery, we use the services of Salesforce Pardot, a service of SFDC Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Salesforce”), an affiliate of Salesforce.com, Inc., Salesforce Tower, 415 Mission Street, 3rd floor, San Francisco, California, 94105, USA. Salesforce Pardot receives your personal information in the context of the services ordered by us and as ordered by us in terms of the order’s purpose and subject.
You can obtain more information on Salesforce’s use of information and data protection in the context of Pardot from the following hyperlinks: www.salesforce.com/company/privacy/
Intentional data transmission to a third country
As the use of Salesforce Pardot entails the transmission of personal information to the US, Salesforce has obtained EU-US Privacy Shield certification, https://www.privacyshield.gov/participant?id=a2zt0000000KzLyAAK. This certification confirms an appropriate level of data protection in accordance with the EU Commission’s implementation decision.
Storage period, withdrawal and objection
We will store your personal information until we cease newsletter delivery or you withdraw your consent. You can declare your withdrawal of consent to Beissbarth GmbH by clicking the hyperlink provided in each edition of the newsletter, by email to datenschutz@beissbarth.com or by using the contact information provided. After receiving your withdrawal, we will cease delivery immediately with effect for the future. Also, you can use the same contact addresses to object to the linking of datasets between Pardot newsletter automation and the customer database. In this case, the standard entries enriched with the relevant data will be deleted.
Mandatory or necessary provision
Your personal information is solely provided on a voluntary basis and solely on the basis of your consent. Without your consent, we cannot provide our newsletter service.
Registration on our website
Type and purpose of the processing
With the registration to use our personalised services, some personal data such as name, address, contact and communication information (e.g. phone number and e-mail address) are collected. If you are registered with us, you can access content and services that we only offer to registered users. Registered users also have the ability to change or delete the data entered during registration at any time. At any time, we will also provide you with information on the personal data about you that we have saved.
Legal basis
The data entered during registration are processed on the basis of the user’s consent (Art. 6 Para. 1 (a) GDPR).
If the registration fulfils the obligations of a contract, whose contractual party is the data subject, or serves to implement pre-contractual measures, the additional legal basis for the data processing is Art. 6 Para. 1 (b) GDPR.
Recipients
Recipients of the data may be technical service providers, who work on the operation and maintenance of our website as the processor.
Retention period
Data are only processed in this context provided that the corresponding consent has been given. The data will be deleted thereafter, provided that no statutory retention obligations prohibit the deletion. To contact us in this regard, please use the contact information provided at the end of this privacy policy.
Mandatory or required provision
The provision of your personal data is voluntary, based solely on your consent. Without the provision of your personal data, we cannot give you access to our content and services.
Using Matomo
Type and purpose of the processing
This website uses Matomo (formerly Piwik), an open-source software for the statistical evaluation of visitors. The provider of the Matomo software is InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand.
Matomo uses so-called ‘cookies’, which are text files that are stored on your computer and allow an analysis of your use of the website. The information generated by the cookie about your use of the website is stored on a server in Germany.
The IP address is anonymised immediately after the processing and before it is saved. You have the option to prevent the installation of cookies by changing the settings of your browser software. Please note that with the corresponding setting, not all functions of this website may be available. You can decide whether a unique web analytics cookie may be stored in your browser in order to allow the operator of the website to collect and analyse various statistical data. You’ll find additional information on the privacy settings of the Matomo software at the following link: https://matomo.org/docs/privacy/.
Legal basis
The collected data is processed on the basis of your consent (Art. 6 (1) lit. a) GDPR) to the statistical analysis of the reach of our website. The data is used for drawing conclusions on the users’ surfing behavior and to continuously improve our website.
If you permit the Matomos option in the consent tool, the following cookies are stored in your cache.
- _pk_id (expiry: after 13 months) is used to identify users (session)
- _pk_ses (expiry: after 30 minutes) is used for temporarily recording the data of the current visit (persistent)
Recipients
We engage technical service providers for hosting and web support services. The data is not transferred during communications with third-party servers as we use the local Matomos version.
Retention period
The deletion of the data occurs as soon as they are no longer necessary for our recording-keeping purposes.
In our case, this deletion occurs after the following period: 36 month
Mandatory or required provision
The provision of your personal data is voluntary, based solely on your consent.
Revocation of consent
You can prevent the storage of cookies by a corresponding setting in your browser software; however, please note that in this case you may not be able to use all the functions of this website in their entirety.
Profiling
With the assistance of the tacking tool Matomo, the browsing behaviour of the website visitors can be evaluated and their respective interests can be analysed. For this analysis, we create a pseudonymous user profile.
Using script libraries (MyFonts)
Type and purpose of the processing
On this website we use MyFonts Counter, a web analysis service of MyFonts Inc. 500 Unicorn Park Drive, Woburn, MA 01801, USA. Based on the license terms, page view tracking is performed by counting the number of visits to the website for statistical purposes and sending it to MyFonts. MyFonts only collects anonymous data. The data may be passed on by activating JavaScript code in your browser. To prevent the execution of JavaScript code from MyFonts as a whole, you can install a JavaScript blocker (e.g. www.noscript.net). For more information about MyFonts Counter, please see the MyFonts privacy policy at http://www.myfonts.com/info/terms-and-conditions/#Privacy
During its use, no cookies are stored on the user’s device.
Legal basis
The legal basis for the integration of Myfonts and related data transfer to Myfonts is our legitimate interest in the collection of page hits (Art. 6 (1) lit. GDPR).
Recipients
The use of script libraries or font libraries automatically triggers a connection to the operator of the library. It is theoretically possible – but currently also unclear whether and to what end – that the operator, in this case Myfont, will collect data.
Retention period
We do not have any influence over the storage period of the data transferred to the third party.
Third country transfers
Myfont processes data in the United States of America.
Mandatory or required provision
The provision of your personal data is neither legally nor contractually required. However, the correct presentation of standard-fonts content is not possible without this provision.
Revocation of consent
The programming language JavaScript is regularly used to display content. Thus, you can opt out of the data processing by disabling JavaScript execution in your browser or by installing a JavaScript blocker. Please note that this may result in functional limitations on the website.
Objection to the data processing
The programming language, JavaScript is routinely used to link the contents. You can therefore object to the processing of the data by deactivating the execution of JavaScript in your browser or by installing a JavaScript blocker. Please note that this may result in restrictions to certain functions on our website.
Embedded YouTube videos
Type and purpose of the processing
We embed YouTube videos on several of our websites. The operator of the respective plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter ‘YouTube’). YouTube, LLC is a subsidiary of Google LLC, 1600 Amphitheater Pkwy, Mountain View, CA 94043, USA (hereinafter ‘Google’). When you visit a page with the YouTube plug-in, a connection to YouTube’s servers will be created, which tells YouTube which pages you visit. When you are logged into your YouTube account, YouTube can associate your browsing behaviour with you personally. You can prevent this by logging out of your YouTube account beforehand.
We have integrated YouTube in expanded data privacy mode for the protection of the users. This means that no cookies are stored on the user’s devices whilst watching a video. You can recognise this in your browser settings by the “youtube-nocookie” display.
You will find additional information on the purpose and scope of the data collection and its processing by YouTube in the provider’s privacy policy, as well as additional information on your rights and setting options for protecting your privacy (https://policies.google.com/privacy). Google processes your data in the United States of America and is subject to the EU-U.S. Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.
Legal basis
The legal basis for the integration of YouTube and related data transfer is our legitimate interest for presenting our company to third parties (Art. 6 (1) lit. f GDPR).
Recipients
Visiting YouTube automatically triggers a connection to Google.
Retention period and revocation of consent
Everyone who has disabled the storage of cookies for the Google ad programme will not have to expect any cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you would like to prevent this, you must block the storage of cookies in the browser.
You’ll find additional information on data protection at ‘YouTube’ in the provider’s privacy policy at: https://policies.google.com/privacy.
Third country transfers
Google processes your data in the United States of America and is subject to the EU-U.S. Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.
Mandatory or required provision
The provision of your personal data is voluntary. If you prevent access, this can lead to functional limitations on the website.
SSL encryption
To protect the security of your data during transmission, we use state-of-the-art encryption methods (such as SSL) via HTTPS.
Appointed processors
The following organisations, companies or people were commissioned with data processing by the operator of this website:
- hosting provider
- technical support
- web developer
Revision of our privacy policy
We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. Your next visit will be subject to the new privacy policy.
Questions for the data protection officer
If you have any questions pertaining to data protection, please send us an e-mail or contact the person responsible for data protection in our organization:
c/o activeMind AG Management- und Technologieberatung
Potsdamer Str. 3
80802 München
datenschutz@beissbarth.com
The privacy policy was created via the activeMind AG privacy policy generator (Version: #2018-09-24).