1.Data controller and content of this privacy statement
We, FOUND Global AG, a company incorporated in Switzerland, under license number CHE-221.192.515, with registered office and principal place of business at Stettbachstrasse 10, 8702 Zollikon, are the operator of the websites www.getfound.io and www.getfound.io/company. We are responsible for the collection, processing and use of your personal data and the compatibility of the data processing with applicable data protection laws. Furthermore, other companies are responsible under data protection law (or jointly responsible with us) for individual data processing operations listed below, and in these cases, you should also take note of the information provided by these other companies, which is also applicable.
Please take note of the information below to know what personal data we collect from you and for what purposes we use it. In data protection matters, we are guided primarily by the legal requirements of Swiss data protection law, in particular the Federal Act on Data Protection (FADP).
The following information may be amended from time to time. We therefore recommend that you consult this privacy statement regularly.
2. Contact person for data protection
If you have any questions about data protection or wish to exercise your rights, please contact our data protection contact by sending an email to the following address: firstname.lastname@example.org
3. Scope and purpose of the collection, processing, and use of personal data
3.1 Applying to the FOUND talent community
When you get in contact with us and are interested in being part of the FOUND talent community, the first step is the onboarding. On the onboarding phasis we collect the below mentioned personal data from you. In a first step, we assess based on the personal data collected in the onboarding process whether your profile might fit the needs of the FOUND talent community.
When you get in contact with us using the WhatsApp Bot or via our website, we will collect personal data from you. The WhatsApp Bot enables us to communicate with you in an automated way and to collect the information we need for the application process. We work with the following software applications in order to be able to provide you our WhatsApp Bot service:
In connection with the WhatsApp Bot, we work with the software application WhatsApp of the company Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. We use WhatsApp to communicate with you and process the following personal data: phone number, job position, first and last name, email-address, URL to LinkedIn profile. We will only collect and process the personal data from you that is necessary for the application process. You can find more information about the data processing in connection with WhatsApp here.
In connection with the WhatsApp Bot, we work with the software application ManyChat of the company ManyChat Inc., 535 Mission St, San Francisco, CA 94105, USA. We use ManyChat to automate our conversation on WhatsApp with you. When the ManyChat widget is called, a connection to ManyChat's servers is established, with your IP address transmitted to ManyChat's server. When you chat with us, we collect and process the following personal data: phone number, job position, first and last name, email-address, URL to LinkedIn profile. You can find more information about the data processing in connection with ManyChat here.
In connection with the WhatsApp Bot, we work with the software application Make of the company Celonis Inc.: One World Trade Center, 87th Floor, New York, NY, 10007, USA. We use Make to transfer the information you provided while using the WhatsApp Bot to the software application Slack processing the following personal data: phone number, job position, first and last name, email-address, URL to LinkedIn profile. You can find more information about the data processing in connection with Make here.
In connection with the WhatsApp Bot, we work with the software application Slack of the company Slack Technologies Limited Salesforce Tower, 60 R801, North Dock, Dublin, Ireland. We use Slack for internal organizational communication and process the following personal data: the phone number, job position, first and last name, email-address, URL to LinkedIn profile. You can find more information about the data processing in connection with Slack here.
The data collected during this onboarding is centrally stored (section 3.8).
3.2 Data processing while making an appointment for a video interview
After the application to the FOUND talent community (section 3.1), we will approach you for scheduling a video call. We use the WhatsApp Bot / Manychat for this communication (section 3.1).
For scheduling a video call, the WhatsApp message will contain a link to the software application Calendly. Calendly is operated by the company Calendly LLC, 271 17th St NW, Ste 1000, Atlanta, Georgia, 30363, USA. For the purpose of scheduling the video call, you have to submit the following personal data: your name, email, calendar availability and further appointment information. We and Calendly will only process the personal data from you that is necessary to make an appointment for a video call. You can find more information about the data processing in connection with Calendly here.
3.3 Data processing during an interview by video call
After the video call has been scheduled as set out in section 3.2 above, we will conduct the video call with you.
We work with a software application called ZOOM of the company Zoom Video Communications Inc, 55 Almaden Blvd 6th Floor, San Jose, USA. You can find more information about the data processing in connection with ZOOM here.
We will collect personal data that you provide to us during the video call. During the video call, we may ask you to provide us additional information and we will record the video call provided you give your consent. Furthermore, we collect basic meeting data and personal data: e.g., name/profile name, profile picture, time of participation, duration and subject of the meeting etc.
We will only process the personal data from you that is necessary to assess whether you fit the needs of the employers.
The data collected during the video call is centrally stored (section 3.8). Existing data is updated, if necessary.
3.4. Assessment, vetting, and matching with potential employers
As a next step in the application process to be part of the FOUND talent community, we will organize an assessment with a third party.
We use for that purpose a neuroscience based assessment software tool called Equalture from the company Equalture, Mauritsweg 35, 3012 JT Rotterdam, Netherlands. You can find more information about the data processing in connection with Equalture here.
Please note that Equalture will not receive any personal data relating to you. Equalture will receive a pseudonym and not your family name nor any other personal data. After the execution of the assessment, Equalture will return the results of the assessment relating to your pseudonym.
The personal data will only be processed for the purpose of this assessment. The result of the assessment will be further processed by us for the purpose of vetting process.
After the assessment, we will approach you for scheduling a video call to discuss the result of the assessment. We will use for that purpose the WhatsApp Bot / Manychat (section 3.1) and Calendly (section 3.2). For the video call we will use Zoom (section 3.3.). The information resulting from the assessment and also the assessment call is stored in the central storage (section 3.8). Existing data is updated, if necessary.
Within the call, the result of the application / vetting process will be communicated orally. After the call, you will receive a “Welcome to the FOUND talent community” message via WhatsApp Bot / Manychat (section 3.1). After the approval of the application and the completed vetting, we will add you in our Notion data base (section 3.8) and create a talent profile.
The further matching process consists of phone calls between us and the potential employer, e-mail communication between us and the potential employer, a video pitch by the potential employer, communication between us and you via WhatsApp Bot / Manychat, and at the end direct communication between you and the potential employer. We will receive the status of the matching process and also the information whether the matching was successful.
For the video pitch, we upload the video received from the employer to an application called VideoAsk and you will receive a link to stream the video by WhatsApp / Manychat. VideoAsk is operated by TYPEFORM SL C/Bac de Roda, 163, Barcelona, Spain. You can find more information about the data processing by Typeform here.
3.5. Data processing on LinkedIn
We may approach you on LinkedIn. In doing so, we collect and process the following personal data: personal data which you have provided to us during our communication on LinkedIn or which we collect from you and by using Sales Navigator on LinkedIn and LinkedIn Insight Tag. We will only process the personal data from you that is necessary to evaluate whether a job vacancy is matching your profile and within the data privacy framework of LinkedIn.
LinkedIn, the Sales Navigator of LinkedIn and LinkedIn Insight Tag are software applications of LinkedIn Unlimited Company, Wilton Place, Dublin 2, Ireland. You can find more information about the data processing in connection with LinkedIn here.
We create automated routines on LinkedIn to track your messages on LinkedIn. Therefore, we work with a software application called LaGrowthMachine. The application is operated by the company LaGrowthMachine, Saint-mandé, Ile-de-France, France. You can find more information about the data processing in connection with LaGrowthMachine here.
3.6. Data processing on Facebook
We may approach you on Facebook. In doing so we collect and process personal data which you have provided to us during our communication on Facebook and which we collect by using Meta Pixel. We will only process the personal data from you that is necessary to evaluate whether a job vacancy is matching your job profile.
Facebook and Meta Pixel are software applications of the company Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. You can find more information about the data processing in connection with Facebook here.
3.7. Communication by email
We may contact you by email using a software application of Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399 USA. However, our contractual partner is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. In doing so, we collect and process the following personal data: email-address and personal data which you have provided to us during the onboarding and matching process. We will only process the personal data from you that is necessary to evaluate whether a job vacancy is matching your profile.You can find more information about the data processing in connection with Microsoft here.
We also use automated emails while contacting you by email. For the automating of the emails, we work with a software application called LaGrowthMachine. The application is operated by the company LaGrowthMachine, Saint-mandé, Ile-de-France, France. You can find more information about the data processing in connection with LaGrowthMachine here.
3.8. Central data storage and analysis
We will store and link the data described in this privacy statement, in particular your personal details, your contact details, the information you provided to us during the onboarding, vetting, video calls, assessments, the information you provided on LinkedIn and Facebook and your surfing behavior on our websites, in a central database. This serves the efficient administration of applicant data, allows us to adequately respond to your requests and enables the efficient provision of the services you have requested.
In connection with the central data storage and the analysis of this data, we work with the software application Notion of the company Notion Labs Inc, 548 Market St 74567, San Francisco, California, 94104, USA. You can find more information about the data processing in connection with Notion here;
In addition, we work with the software application Noloco of the company Noloco Limited, 68 Donnybrook Castle, Donnybrook, Dublin, D18 R6K5, Ireland. Noloco is the no-code platform for non-developers to build internal tools. We use Noloco to update the status of the onboarding, vetting, and assessment, and to trigger based on the status new communication via WhatsApp Bot / Manychat.You can find more information about the data processing in connection with Noloco here.
3.9. Email marketing
If you register for our marketing emails, the following personal data will be collected. Mandatory data is marked with an asterisk (*) in the registration form:
- Email address
- First and last name
To avoid misuse and to ensure that the owner of an e-mail address has actually given their consent, we use a double opt-in procedure for registration. After sending the registration form, you will receive an e-mail from us containing a confirmation link. To register for our marketing emails, you must click on this link. If you do not click on the confirmation link within the specified period, your data will be deleted again, and our marketing email will not be sent to this address.
By registering, you consent to the processing of your data to receive messages from us about our company, our offers, and related services. This may also include invitations to evaluate our services. The collection of the salutation and name allows us to verify any link between the registration and a possibly already existing customer account and to personalize the content of our messages to you. The link to a customer account helps us to make the offers and content contained in the marketing emails more relevant to you and better tailored to your potential needs.
We will use your data to email you until you revoke your consent. Revocation is possible at any time, in particular via the unsubscribe link in all our marketing emails.
Our marketing emails may contain a so-called web beacon or 1x1 pixel (tracking pixel) or similar technical tools. A web beacon is an invisible graphic that is linked to the user ID of the respective newsletter subscriber. For each marketing email sent, we receive information on which addresses have not yet received the email, to which addresses it was sent and for which addresses the sending failed. We also see which addresses have opened the email, for how long and which links they have clicked on. Finally, we receive information about which addresses have unsubscribed. We use this data for statistical purposes and to optimize our promotional emails in terms of frequency, timing, structure, and content. This allows us to better tailor the information and offers in our emails to the individual interests of recipients.
The web beacon is deleted when you delete the email. To prevent the use of the web beacon in our marketing emails, please set the parameters of your email program so that HTML is not displayed in messages if this is not already the case by default. In the help section of your email software you will find information on how to configure this setting, e.g. here for Microsoft Outlook.
By subscribing to the marketing emails, you also consent to the statistical evaluation of user behavior for the purpose of optimizing and adapting the marketing emails.
We use the email marketing software HubSpot from HubSpot Inc. (European Headquarters), 1 Sir John Rogerson's Quay, Dublin 2, Ireland, to send the marketing emails. You can find more information about the data processing in connection with HubSpot here. Your data will be stored in a database of Amazon Web Services (AWS) in the Germany. This allows AWS to access your data if this is necessary for the provision of the software and for support in the use of the software. You can find more information about the data processing in connection with AWS here.
4.0 Disclosure and transfer
4.1 Disclosure to and access by third parties
Without the support of other companies, we would not be able to provide our services in the desired form. For us to be able to use the services of these companies, it is also necessary to pass on your personal data to a certain extent. Such a transfer takes place to the extent that it is necessary for the fulfilment of the service requested by you, for example the disclosure to potential employers.
Furthermore, data is passed on to selected service providers, but only to the extent necessary for the provision of their services. Various third-party service providers are explicitly mentioned in this privacy statement, e.g., in the sections on marketing. These are, for example, IT service providers (such as providers of software solutions), advertising agencies and consultancies.
In addition, your data may be disclosed to authorities, legal advisors, or debt collection agencies, if we are legally obliged to do so or if this is necessary to protect our rights, in particular to enforce claims arising from our relationship with you. Data may also be disclosed if another company intends to acquire our company or parts thereof and such disclosure is necessary to carry out due diligence or to complete the transaction.
4.2 Transfer of personal data abroad
We are entitled to transfer your personal data to third parties abroad if this is necessary to carry out the data processing mentioned in this privacy statement. In doing so, we will of course comply with the statutory provisions on the disclosure of personal data to third parties. If the country in question does not have an adequate level of data protection, we guarantee through contractual regulations that your data is adequately protected by the recipients.
4.3 Note on data transmissions to the USA
Some of the third-party service providers mentioned in this privacy statement are based in the USA. For the sake of completeness, we would like to point out that there are surveillance measures in place in the USA by US authorities, which generally allow the storage of all personal data of all persons, whose data has been transmitted to the USA. This is done without any differentiation, limitation or exception based on the objective pursued and without any objective criterion that would make it possible to limit the access of the US authorities to the data and its subsequent use to very specific, strictly limited purposes that are capable of justifying the intrusion associated with both the access to and the use of this data. Furthermore, we would like to point out that in the USA, foreign data subjects do not have any legal remedies that allow them to obtain access to the data concerning them and to obtain its correction or deletion, or that there is no effective judicial legal protection against general access rights of US authorities. We explicitly draw the attention of data subjects to this legal and factual situation so that they can make an appropriately informed decision to consent to the use of their data.
We would like to point out that the USA does not have a sufficient level of data protection from the perspective of Switzerland – among other things, due to the issues mentioned in this section. Insofar as we have explained in this privacy statement that recipients of data are based in the USA, we will ensure that your data is protected at an appropriate level with our partners through contractual arrangements with these companies as well as any additional appropriate guarantees required, which protect the rights of individuals, whose personal data is transmitted to a third country.
5.0 Special provisions applicable to the use of our website
5.1 Log file data
When you visit our website, the servers of our hosting provider Amazon Web Services (AWS) located in Germany temporarily store every access in a log file. You can find more information about the data processing in connection with AWS here.
The following data is collected without your intervention and stored by us until automatically deleted:
- the IP address of the requesting computer,
- the date and time of access,
- the name and URL of the retrieved file,
- the website from which the access was made, if applicable with the search word used,
- the operating system of your computer and the browser you use (incl. type, version and language setting),
- device type in case of access by mobile phones,
- the city or region from where the access was made,
- the name of your internet access provider.
The collection and processing of this data is carried out for the purpose of enabling the use of our website (connection establishment), to permanently guarantee system security and stability as well as for error and performance analysis and enables us to optimize our website.
In the event of an attack on the network infrastructure of the website or a suspicion of other unauthorized or abusive website use, the IP address and the other data will be evaluated for the purpose of clarification and defense and, if necessary, used in the context of criminal proceedings to identify and take civil and criminal action against the users concerned.
Cookies are information files that your web browser stores on your computer's hard drive or memory when you visit our website. Cookies are assigned identification numbers that identify your browser and allow the information contained in the cookie to be read.
Most internet browsers automatically accept cookies. However, when accessing our website, we ask you for your consent to the cookies we use that are not technically necessary, especially when using third-party cookies for marketing purposes. You can use the corresponding buttons in the cookie banner to define your desired settings. Details of the services and data processing associated with the individual cookies can be found within the cookie banner and in the following sections of this privacy statement.
We use on our website cookies of the following companies:
- CookieYes Limited, 3 Warren Yard Warren Park, Wolverton Mill, Milton Keynes, United Kingdom, MK12 5NW. You can find more information about the data processing in connection with CookiYes here.
- Google Tag Manager of of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). You can find more information about the data processing in connection with Google Tag Manager here.
You may also be able to configure your browser so that no cookies are stored on your computer or so that a message always appears when you receive a new cookie. On the following pages you will find explanations of how you can configure the processing of cookies in selected browsers.
Deactivating cookies may mean that you cannot use all the functions of our website.
5.3Tracking and web analysis tools
5.3.1 General information on tracking
For needs-based design and continuous optimization of our website, we use the web analysis services listed below. In this context, pseudonymized usage profiles are created and cookies are used (section 5.2). The information generated by the cookie about your use of our website is usually transferred together with the log file data listed in section 5.1 to a server of the service provider, where it is stored and processed. This may also result in a transfer to servers abroad, e.g. the USA (see on this point, in particular on the guarantees taken, section 4.3).
In processing this data, we obtain the following information, among others:
- navigation path followed by a visitor on the site (including content viewed and products selected or purchased),
- time spent on the website or sub-page,
- the last sub-page viewed before leaving the website,
- the country, region or city from where access is made,
- end device (type, version, colour depth, resolution, width and height of the browser window), and
- returning or new visitor.
The provider will use this information on our behalf to evaluate the use of the website, to compile reports on website activities for us and to provide other services related to website and internet use for the purposes of market research and needs-based design of these internet pages. For these processing operations, we and the providers may to a certain extent be considered joint data controllers.
For the further processing of your data by the respective provider as the (sole) data protection controller, in particular also any forwarding of this information to third parties such as authorities on the basis of national legal regulations, please refer to the respective data protection information of the provider.
5.3.2 Google (Universal) Analytics
We use the web analytics service Google Analytics from Google Ireland Limited (Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) or Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) ("Google").
The data described about the use of the website may be transmitted to the servers of Google LLC. in the USA for the processing purposes explained (section 5.3.1). The IP address is shortened by activating IP anonymization ("anonymizeIP") on the website before transmission within the Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
Users can prevent the collection of the data generated by the cookie and related to their website use (inclunding the IP address) and its transmission to and processing by Google by downloading and installing a browser plugin under the following link: http://tools.google.com/dlpage/gaoptout?hl=de. Further information on data protection at Google can be found here.
5.5.3 Google Analytics 4 (GA4)
We use Google Analytics 4 (GA4), a web analytics service provided by Google Inc,1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. In the European Economic Area (EEA) and Switzerland, the Irish company Google Ireland Limited is responsible. Google Analytics 4 (GA4) uses methods that enable an analysis of the use of the website, such as cookies (section 5.2).
Google Analytics 4 (GA4) does not log or store individual IP addresses. No precise location data is provided in Google Analytics 4 (GA4). Instead, the following metadata is derived from IP addresses: "city" (and the derived latitude and longitude of the city), "continent", "country", "region", "subcontinent" (and the ID-based equivalents). For accesses originating from the EU, IP address data is only used to derive location data and is then immediately deleted. They are not logged, are not accessible and are not used for further applications. When collecting measurement data in Google Analytics 4 (GA4) Analytics, all IP searches take place on EU-based servers before the traffic is forwarded to Analytics servers for processing.
Regional data centres are used in Google Analytics 4 (GA4). If a connection is established in Google Analytics 4 (GA4) to the nearest available Google data centre, the measurement data is sent to Analytics via an encrypted HTTPS connection. At these centres, the data is further encrypted before being forwarded to Analytics' processing servers and made available on the platform. Based on the IP addresses, the most suitable local data centre is determined.
We also use the technical extension "Google Signals", which enables cross-device tracking. This makes it possible to associate a single website visitor with different end devices. However, this only happens if the visitor has logged into a Google service when visiting the website and has also activated the "personalised advertising" option in their Google account settings. Even then, however, no personal data or user profiles are made available to us; they remain anonymous for us.
If you do not wish to use "Google Signals", you can deactivate the "personalised advertising" option in your Google account settings.
Users can prevent the collection of the data generated by the cookie and related to their website use (inclunding the IP address) and its transmission to and processing by Google by downloading and installing a browser plugin under the following link: http://tools.google.com/dlpage/gaoptout?hl=de. Further information on data protection at Google can be found here.
We use the web analytics service Hotjar from Hotjar Ltd., Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta.
The data described about the use of the website may be transmitted to the servers of Hotjar in the EU for the processing purposes explained (section 5.3.1). The IP address is shortened by activating IP anonymization ("anonymizeIP") on the website before transmission within the Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Further information on data protection at Hotjar can be found here.
5.3.5 Google Tag Manager
We use the web analytics service Google Tag Manager Google Ireland Limited (Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) or Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) ("Google").
Google Tag Manager is a solution with which website tags can be managed via an interface. The Tag Manager tool (which implements the tags) is a cookieless domain and does not collect any personal data. The tool provides for the forwarding of data and triggering of other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.
5.4 Social media
5.4.1 Social media profiles
On our website, we have included links to our profiles in the social networks of the following providers:
- Meta Platforms Inc, 1601 S California Ave, Palo Alto, CA 94304, USA;
- Instagram Inc. 1601 Willow Road, Menlo Park, CA 94025, USA;
- Linkedin Unlimited Company, Wilton Place, Dublin 2, Ireland.
When you click on the icon of a social network on our website, you are automatically redirected to our profile in the respective network. This establishes a direct connection between your browser and the server of the respective social network. This provides the network with the information that you have visited our website with your IP address and clicked on the link.
If you click on a link to a network while you are logged into your user account with the network in question, the content of our website may be linked to your profile so that the network can assign your visit to our website directly to your account. If you want to prevent this, you should log out before clicking on the relevant links. A connection between your access to our website and your user account takes place in any case if you log in to the respective network after clicking on the link. The respective provider is responsible under data protection law for the associated data processing. Please note the information on the relevant network's website.
5.4.2 Social media plugins
On our website, you can use social plugins from the providers listed below:
- Instagram Inc, 1601 Willow Road, Menlo Park, CA 94025, USA, Privacy Notice;
- Linkedin Unlimited Company, Wilton Place, Dublin 2, Ireland, Privacy Notice.
We use the social plugins to make it easier for you to share content from our website. The social plugins help us to increase the visibility of our content on social networks and thus contribute to better promotion of our offerings.
The plugins are deactivated by default on our websites and therefore do not send any data to the social networks when you simply call up our website. To increase data protection, we have integrated the plugins in such a way that a connection is not automatically established with the network’s servers. Only when you activate the plugins and thus give your consent to the transmission and further processing of data by the providers of the social networks, does your browser establish a direct connection to the servers of the respective social network.
The content of the plugin is transmitted directly to your browser by the social network and integrated into the website by it. This provides the respective provider with the information that your browser has accessed the corresponding page of our website, even if you do not have an account with this social network or are not currently logged in to it. This information (including your IP address) is transmitted from your browser directly to a server of the provider (usually in the USA) and stored there. We have no influence on the scope of the data that the provider collects with the plugin, although from a data protection perspective we can to a certain extent be considered jointly responsible with the relevant social network provider.
If you are logged in to the social network, it can assign your visit to our website directly to your user account. If you interact with the plugins, the corresponding information is also transmitted directly to a server of the provider and stored there. The information (e.g. that you like a product of ours) may also be published on the social network and possibly displayed to other users of the social network. The provider of the social network may use this information for the purpose of placing advertisements and designing a respective offering according to your interests. For this purpose, usage, interest and relationship profiles could be created, e.g. to evaluate your use of our website with regard to the advertisements displayed to you on the social network, to inform other users about your activities on our website and to provide other services associated with the use of the social network. The purpose and scope of the data collection and the further processing and use of the data by the providers of the social networks, as well as your rights in this regard and options for changing your settings to protect your privacy can be found directly in the data protection information of the respective provider.
If you do not want the provider of the social network to assign the data collected via our website to your user account, you must log out of the social network before activating the plugins. You can revoke your consent at any time by declaring your revocation to the provider of the plugin in accordance with the information in their data protection notice.
6. Online advertising and targeting
6.1 In general
We use services of various companies to provide you with interesting offers online. In the process of doing this, your user behaviour on our website and websites of other providers is analysed to subsequently be able to show you online advertising that is individually tailored to you.
Most technologies for tracking your user behaviour and targeting advertisements work with cookies (section 5.2), which can be used to recognize your browser across different websites. Depending on the service provider, it may also be possible for you to be recognized online even when using different end devices (e.g. laptop and smartphone). This may be the case, for example, if you have registered for a service that you use with several devices.
- Information about you that you provided when registering or using a service from advertising partners (e.g. your gender, age group);
- User behaviour (e.g. search queries, interactions with advertising, types of websites visited, products viewed and purchased, newsletters subscribed to).
We and our service providers use this data to identify whether you belong to the target group we address and take this into account when selecting the advertisements. For example, after you have visited our site, you may be shown advertisements of the products you have consulted when you visit other sites ("re-targeting"). Depending on the scope of the data, a user's profile may also be created, which is evaluated automatically, and the ads are selected according to the information stored in the profile, such as membership of certain demographic segments or potential interests or behaviours. Such ads may be presented to you on various channels, which include, in addition to our website or app (as part of onsite and in-app marketing), ads provided through the online advertising networks we use, such as Google.
The data may then be analyzed for the purpose of billing the service provider and assessing the effectiveness of advertising measures to better understand the needs of our users and customers and to improve future campaigns. This may also include information that the taking of an action (e.g. visiting certain sections of our website or sending information) is due to a particular advertising ad. We also receive aggregated reports from service providers of ad activity and information about how users interact with our website and ads.
You can revoke your consent at any time by rejecting or deactivating the relevant cookies in the settings of your web browser (section 5.2). You can also find further options for blocking advertising in the information provided by the respective service provider, such as Google.
6.2 Google Ads
You can revoke your consent at any time by rejecting or deactivating the relevant cookies in the settings of your web browser (section 5.2). Further options for blocking advertising can be found here.
6.3 Facebook Ads / Facebook Pixel / Facebook Custom Audience
On our website, we use “Facebook Pixel” of the social network Facebook, which is operated by Meta Platforms Inc., One Hacker Way Menlo Park, CA 94025, USA, or, if you are a resident in the EU, Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Facebook can designate visitors to our website as a target group for displaying advertisements (so-called “Facebook Ads”) using Facebook-Pixel. Accordingly, we use Facebook-Pixel to display Facebook ads that are placed by us only to such Facebook users, who have also shown interest in our website or have shown specific characteristics (e.g. interests in specific topics or products that are determined based on the websites visited), which we transmit to Facebook (so-called “Custom Audiences”).
With the help of Facebook-Pixel, we would also like to ensure that our Facebook ads correspond to the potential interest of the users and are not harassing. Using Facebook-Pixel, we can also understand the effectiveness of Facebook Ads for statistical and market research purposes, in which we see as to whether users were forwarded to our website after clicking on a Facebook ad (so-called “Conversion”).
Facebook-Pixel is directly integrated by Facebook when accessing our website and can save a so-called cookie on your device. If you subsequently log in to Facebook or visit Facebook while being logged in, the visit to our website shall be noted in your profile. The data collected about you is anonymous for us, so it does not provide us with any conclusions about the identity of the users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible. The data can therefore be used by Facebook for its own market research and advertising purposes.
Furthermore, when using Facebook-Pixel, we use the additional function “expanded comparison”, in which data on the creation of target groups (“Custom Audiences” or “Look Alike Audiences”) is transmitted to Facebook in an encrypted form.
7. Data security
We use appropriate technical and organisational security measures to protect your personal data stored with us against loss and unlawful processing, namely unauthorised access by third parties. Our employees and the service companies commissioned by us are obliged by us to maintain confidentiality and data protection. Furthermore, these persons are only granted access to the personal data to the extent necessary for the fulfilment of their tasks.
Our security measures are continuously adapted in line with technological developments. However, the transmission of information via the Internet and electronic means of communication always involves certain security risks and we cannot provide an absolute guarantee for the security of information transmitted in this way.
8. Retention periods
We only store personal data for as long as is necessary to carry out the processing explained in this privacy statement within the scope of our legitimate interest. In the case of contractual data, storage is required by statutory retention obligations. Requirements that oblige us to retain data result from the provisions on accounting and from tax law regulations. According to these regulations, business communications, concluded contracts and accounting vouchers must be stored for up to 10 years. As far as we no longer need this data to perform the services for you, the data will be blocked. This means that the data may then only be used if this is necessary to fulfil the retention obligations or to defend and enforce our legal interests. The data is deleted as soon as there is no longer any obligation to retain it and we no longer have any legitimate interest in retaining it.
9. Your rights
Provided that the relevant legal requirements are met, as a person affected by data processing you have the following rights:
Right of access: You have the right to request access to your personal data stored and processed by us at any time and free of charge. This gives you the opportunity to check what personal data we process about you and that we use it in accordance with applicable data protection regulations.
Right to rectification: You have the right to have inaccurate or incomplete personal data rectified and to be informed of the rectification. In this case, we will inform the recipients of the data concerned of the adjustments made, unless this is impossible or involves disproportionate effort.
Right to deletion: You have the right to have your personal data deleted under certain circumstances. In individual cases, especially in the case of legal retention obligations, the right to deletion may be excluded. In this case, we may block your data instead, provided the conditions are met.
Right to restrict processing: You have the right to request that the processing of your personal data be restricted.
Right to data transfer: You have the right to obtain from us, free of charge, the personal data you have provided to us in a readable format.
Right to object: You can object to the processing of your data at any time, in particular for data processing in connection with direct advertising (e.g. advertising emails).
Right of withdrawal: In principle, where you have given consent you have the right to withdraw that consent at any time. However, processing activities that have already taken place based on your consent do not become unlawful because of your revocation of consent.
To exercise these rights, please send us an email to the following address: email@example.com
Right of complaint: You have the right to lodge a complaint with a competent supervisory authority, for example against the way your personal data is processed.