You are currently on the Bosnia and Herzegovina version.
Looks like you are in United States.
Switch to local content?
Get new perspectives with the Heidelberg Engineering Account. Sign up to access exclusive resources and insights.
To make sure you don't miss any news, sign up for our newsletter!
We are committed to providing quick, reliable solutions that support your work and help enable high-quality patient care and research.
Providers and Technologies List
| Provider / Service | Purpose(s) | Categories of Data | Legal Basis |
Optimizely CMS | Hosting, operation and delivery of the website | IP address, log files, technical access data | Art. 6(1)(f) GDPR |
Usercentrics | Collection and management of user consents | Consent data, IP address, timestamps | Art. 6(1)(c), (f) GDPR |
Google Analytics | Website analytics and optimization | Usage data, truncated IP address, device information | Art. 6(1)(a) GDPR. The storage of and access to information on your device is based on your consent pursuant to Section 25(1) TDDDG. Where personal data is transferred to the US, such transfer is based on the European Commission’s SCCs pursuant to Art. 46(2)(c) GDPR together with additional safeguards. |
Totara | Learning management system and provision of training and e-learning content | Master data, contact details, login credentials, usage data, learning and progress data, technical access data | Art. 6(1)(b), (f) GDPR |
Google Tag Manager | Management and deployment of website tags and tracking services | IP address, technical access data, consent information | Art. 6(1)(a), (f) GDPR. Where cookies or similar technologies are used through this service, the storage of and access to information on your device is based on your consent pursuant to Section 25(1) TDDDG. Where personal data is transferred to the US, such transfer is based on the European Commission’s SCCs pursuant to Art. 46(2)(c) GDPR together with additional safeguards. |
| Provider / Service | Purpose(s) | Categories of Data | Legal Basis |
Microsoft 365 (including Outlook, Teams and Bookings) | Communication, appointment scheduling and meetings | Contact details, communication data, appointment data | Art. 6(1)(b), (f) GDPR |
| Provider / Service | Purpose(s) | Categories of Data | Legal Basis |
Salesforce Marketing Cloud Account Engagement (MCAE) | Distribution and analysis of newsletters | Contact details, usage data (opens and clicks) | Art. 6(1)(a) GDPR |
| Provider / Service | Purpose(s) | Categories of Data | Legal Basis |
Salesforce | CRM, customer management, support and ticketing | Contact details, contract data, communication data | Art. 6(1)(b), (f) GDPR |
Microsoft 365 | Communication and documentation | Contact details, communication data | Art. 6(1)(b), (f) GDPR |
| Provider / Service | Purpose(s) | Categories of Data | Legal Basis |
Salesforce | CRM, customer management, support and ticketing | Contact details, usage data (opens and clicks) | Art. 6(1)(b), (f) GDPR |
Microsoft 365 / Azure AD | Authentication and access control | Login credentials, IP address, log data | Art. 6(1)(f) GDPR |
| Provider / Service | Purpose(s) | Categories of Data | Legal Basis |
| Microsoft Teams | Delivery of webinars and training sessions | Participant data, communication data | Art. 6(1)(b), (f) GDPR |
| GoToWebinar | Delivery of webinars | Contact details, participant data | Art. 6(1)(b), (f) GDPR |
| Provider / Service | Purpose(s) | Categories of Data | Legal Basis |
| Personio | Applicant management | Application data, contact details | Art. 6(1)(b) GDPR |
| talentsconnect / JobShop | Career website and application forms | Application data, uploaded documents | Art. 6(1)(b) GDPR |
| Provider / Service | Purpose(s) | Categories of Data | Legal Basis |
| Salesforce | Lead management and sales operations | Contact details, interaction data | Art. 6(1)(f) GDPR |
| Salesforce Marketing Cloud Account Engagement (MCAE) | Marketing automation | Usage data and interaction data | Art. 6(1)(f), where applicable Art. 6(1)(a) GDPR |
| Provider / Service | Purpose(s) | Categories of Data | Legal Basis |
| Pretix | Registration and ticketing | Contact details, participant data | Art. 6(1)(b) GDPR |
| Microsoft Teams | Virtual events | Participant data | Art. 6(1)(b), (f) GDPR |
| Provider / Service | Purpose(s) | Categories of Data | Legal Basis |
| Corporate presence | Usage and interaction data | Art. 6(1)(f) GDPR | |
| XING / kununu | Corporate presence | Usage and interaction data | Art. 6(1)(f) GDPR |
| Corporate presence | Usage and interaction data | Art. 6(1)(f) GDPR | |
| YouTube | Video platform | Usage and interaction data | Art. 6(1)(f) GDPR |
| Vimeo | Video platform | Usage and interaction data | Art. 6(1)(f) GDPR |
| Hootsuite | Social media management and analytics | Interaction data | Art. 6(1)(f) GDPR |
| Provider / Service | Purpose(s) | Categories of Data | Legal Basis |
| EQS Integrity Line | Whistleblowing system | Report data, communication data | Art. 6(1)(c), (f) GDPR |