Privacy Policy

In this context, we process in particular your contact details (e.g. name, email address, telephone number), the content of your message, and any additional information you choose to provide. 

Where your request relates to the initiation or performance of a contract, the processing is carried out for the purpose of taking pre-contractual steps or performing a contract. In other cases, processing is based on our legitimate interest in ensuring the efficient and appropriate handling of incoming inquiries. 

If you schedule an appointment through our website, via online booking systems, we process the information required for this purpose (e.g. name, contact details, and preferred appointment date or time) to coordinate and conduct the appointment. 

To support communication and appointment scheduling, we use external service providers. Further information about the providers and technologies we use can be found in the Providers and Technologies List attached to this Privacy Notice.

To subscribe to our newsletter, we use the so-called double opt-in procedure. After registering, you will receive an email asking you to confirm your subscription. To document your consent, we store the date and time of registration and confirmation, as well as the technical information collected in connection with these actions. 

Your personal data is processed for the purpose of sending the newsletter, managing your subscription, and—where you have provided your consent—analysing and optimising our newsletter content. 

You may withdraw your consent at any time with effect for the future, for example by using the unsubscribe link included in every newsletter or by contacting us directly. 

Where you have given your consent, we analyse user behaviour in connection with the delivery of newsletters to improve our content and better tailor it to the interests of our subscribers. This may include information on whether a newsletter was opened and which links were clicked. The storage of, and access to, information on your device in this context is carried out—where required—based on your consent pursuant to Art. 6(1)(a) GDPR in conjunction with the applicable telecommunications privacy provisions (in particular Section 25(1) TDDDG). 

We use external service providers for the technical delivery of our newsletters. Further information about the providers and technologies we use can be found in the Providers and Technologies List attached to this Privacy Notice. 

Personal data will be retained for as long as your newsletter subscription remains active. Once you unsubscribe, your personal data will be deleted unless statutory retention obligations apply or further retention is required to document the consent you have provided. 

We process personal data that we receive from you during our business relationship or that is generated in connection with the use of our products and services. This generally includes your name, address and other contact details, information relating to your organisation or role, contractual and billing information, data relating to products and services, payment information, communication records, as well as authentication and access credentials for our website. 

As part of customer support and technical support, we also process personal data within support and ticketing systems to record, manage, process, and track requests in a structured manner. This may include communication records, contact details, and information relating to the specific request. It also includes efficient organisation and documentation of support requests as well as quality assurance activities within customer service. 

Processing is carried out for the performance of a contract or to take steps prior to entering into a contract (Art. 6(1)(b) GDPR), where this is necessary for establishing, managing, or administering the business relationship. If the required personal data is not provided, it may not be possible to enter or properly fulfil a contract. 

Where necessary, we also process personal data based on our legitimate interests (Art. 6(1)(f) GDPR). Our legitimate interests include: 

• administering our IT systems and maintaining IT operations (it cannot be ruled out that customer and prospect data may be accessed during administrative activities), 
• tracking downloads from our web portals to contact you where necessary if provided content is defective or its use may result in damage, and 
• establishing, exercising, or defending legal claims. 

Where we process personal data to comply with legal obligations (Art. 6(1)(c) GDPR), this is done to fulfil requirements under commercial, tax, and other applicable laws. 

Where you have provided your consent for specific processing activities (Art. 6(1)(a) GDPR), we process your personal data solely within the scope of that consent. You may withdraw your consent at any time with effect for the future. 

To support our business relationships and internal processes, we engage service providers (e.g. in the areas of IT services, telecommunications, service, and support). Where these providers act as processors, they process personal data on our behalf and in accordance with our instructions. We may also transfer personal data to subsidiaries or affiliated companies where this is necessary for the performance of a business relationship or to pursue legitimate interests. 

If you use one of our web portals and create a user account, we process personal data to provide access to protected content and functionalities and to manage your use of the portal. 

We process registration and contact information (e.g. name and email address), access credentials (e.g. username and password stored in encrypted form), information relating to your organisation, and information regarding your use of the portal. This may also include technical data such as login timestamps, IP addresses, and log data where necessary for the secure operation of the portal. 

Processing is carried out for the performance of a contract or for the implementation of pre-contractual measures where the use of the portal is connected to an existing or prospective business relationship. In addition, processing is carried out based on our legitimate interests, to ensure IT security, prevent misuse, and maintain the reliable operation of our systems. 

Where additional functionalities are used (such as downloads, support requests, or user interactions), further personal data may be processed. The corresponding processing activities are described in the relevant sections of this Privacy Notice. 

To provide and operate our web portals, we use technical service providers. Where necessary, these providers process personal data on our behalf and in accordance with our instructions.  Further information about the technologies and service providers we use can be found in the Providers and Technologies List attached to this Privacy Notice. 

As part of our Academy programs, training courses and webinars, we process personal data to manage registrations, administer participation, provide training content and facilitate the delivery of the respective event. This may include contact details, information about your organisation or role, registration and participation information, and – in the case of online formats – technical connection and usage data required for the provision and use of the relevant platform. 

The processing is carried out to conduct the respective event or training course, ensure the smooth organisation of related processes and enable your participation. Where webinars or training courses are offered as part of an existing business relationship, the processing may also be necessary for the performance of contractual obligations or the implementation of pre-contractual measures. 

In addition, personal data may be processed where necessary for the organisation and follow-up of events, quality assurance purposes, or the protection of our legitimate interests, for example to inform participants about organisational changes or to ensure the proper conduct of the event. 

To organise and deliver webinars, training courses and Academy programs, we may use technical services and external providers, for example for scheduling, participant management or the provision of online platforms. Depending on the service used, such providers process personal data either on our behalf or as independent controllers. Further information on the providers and technologies used can be found in the Providers and Technologies List of this Privacy Notice. 

As part of the recruitment process, we process personal data that you actively provide to us or that is generated during the application process. This may include: 

• Identification and contact data
• Application documents (e.g. CV/résumé, certificates, cover letter)
• Information regarding qualifications, skills and professional experience
• Information obtained during interviews or assessments 

The information marked as mandatory during the application process is required to assess your application and decide regarding the establishment of an employment relationship. Without this information, we may not be able to consider your application. 

In addition, we may consider publicly available professional information, for example from professional networking platforms such as LinkedIn or XING, where this is relevant for the assessment of your application. 

We ask that you do not provide us with special categories of personal data (e.g. information relating to health, political opinions or religious beliefs) unless this is expressly required or permitted by law. If you voluntarily provide such information, it will be processed only in accordance with applicable legal requirements. 

Your personal data is processed to: 

• Review and assess your application
• Compare your qualifications with the requirements of the relevant position
• Communicate with you throughout the recruitment process 

If you provide your explicit consent, your application data may be retained in our talent pool beyond the specific recruitment process. This enables us to inform you about future vacancies that may match your profile and, where appropriate, contact you regarding such opportunities. 

Your data will only be retained in the talent pool based on your consent. You may withdraw your consent at any time with future effect without any disadvantage to you. Withdrawal of consent will not affect any ongoing application processes. 

To support and administer recruitment processes, we use specialised IT systems and service providers. These providers process personal data solely on our behalf and in accordance with our instructions. Access to your application data is restricted to those individuals within our organisation who are directly involved in the relevant recruitment process. Further information on the providers and technologies used can be found in the Providers and Technologies List of this Privacy Notice. 

Once the recruitment process has been completed, your personal data will generally be deleted unless statutory retention obligations apply.  A longer retention period will only apply where you have provided your explicit consent, for example for inclusion in our talent pool. 

We process personal data that we receive from you during our collaboration or that is generated in connection with your role as a speaker. This may include your name, contact details, information about your organisation or role, contractual and payment-related information, communication data and, where relevant, photographs and video recordings.

Processing takes place where necessary for the implementation of pre-contractual measures, the performance of contractual obligations, and the organisation and delivery of the respective event or format. This includes planning, coordination, communication and the administrative management of your engagement as a speaker.

In addition, we may process personal data where necessary for the purposes of our legitimate interests pursuant to Art. 6(1)(f) GDPR. This includes the organisation and delivery of events, training courses and similar formats, communication with speakers, and the establishment, exercise or defense of legal claims.

Where you have provided your consent, we may process personal data – in particular photographs and video recordings – for additional purposes. These may include the presentation of our company and services, the promotion of in-person and online events, and the publication of recorded or previously conducted events. You may withdraw your consent at any time with effect for the future.

Where technical services or external service providers are used to support the organisation and delivery of our collaboration, they may process personal data either on our behalf or as independent controllers. Further information on the providers and technologies used can be found in the Providers and Technologies List of this Privacy Notice.

As part of our marketing and sales activities, we process personal data to communicate with prospective and existing customers in a targeted manner, provide relevant information, and organise and optimise our marketing and sales processes. 

For these purposes, we process personal data collected in connection with existing or prospective business relationships, the use of our website and web portals, the download of content, participation in events, or the receipt of marketing communications. This may include contact details, organisational information, information relating to interests and interactions, as well as usage and communication data. 

Processing is carried out for the purposes of our legitimate interests. These interests include informing prospective and existing customers in a targeted manner, providing contract-related information (e.g. about products, software updates or safety-related information), planning and carrying out marketing and sales activities, and continuously improving our products, services and communications. 

Where specific marketing activities, tracking technologies or personalization features require consent, personal data will be processed solely based on your consent. You may withdraw your consent at any time with effect for the future. 

To support marketing communications and lead management, we use centralized systems that enable us to manage, consolidate and analyze customer and prospect data in order to facilitate targeted communications. Information from different sources may be combined, for example from the use of our website or web portals, participation in events, the download of content, or other interactions with our company, where permitted under applicable data protection laws. The resulting information may be used to better align marketing and sales activities with the interests and needs of prospective and existing customers. 

Depending on the service used, providers process personal data either on our behalf or as independent controllers. Further information on the providers and technologies used can be found in the Providers and Technologies List of this Privacy Notice. 

As part of organizing and delivering our events, we process, in particular, contact details, registration and participant information, organisational details, communication data and any other information provided or generated in connection with registering for or attending the respective event. Where necessary, personal data may be shared with external service providers that support us with participant management, event logistics, technical event delivery or administrative services. 

Depending on the specific event, personal data is processed where necessary to perform a contract or to take steps prior to entering into a contract. Where no direct contractual relationship exists, we process personal data to pursue our legitimate interests, in particular to plan, organise, and administer events, regardless of whether they are held in person or online. Where required by law, we will ask for your consent before processing your personal data for specific purposes. 

If processing is based on your consent, you may withdraw that consent at any time with effect for the future. 

Photographs and video recordings may be taken during events. These may be used to document the event and for our corporate communications and public relations activities, for example on our website, in presentations or on our social media channels. Such processing is carried out where necessary for our legitimate interests or, where required, based on your consent. Where processing is carried out based on our legitimate interests, you have the right to object on grounds relating to your particular situation. 

To support the organisation and delivery of events, we may engage technical service providers, for example for participant management, event administration or the provision of digital event platforms. Depending on the service provided, these providers process personal data either on our behalf or as independent controllers. Further information about the providers and technologies we use can be found in the Providers and Technologies List of this Privacy Notice. 

Über unsere Social-Media-Präsenzen informieren wir über unser Unternehmen, unsere Produkte und Dienstleistungen sowie über Veranstaltungen und sonstige Neuigkeiten. Zudem bieten wir Interessierten die Möglichkeit, mit uns in Kontakt zu treten.

Unsere Website enthält Verlinkungen zu unseren Social-Media-Präsenzen. Beim bloßen Besuch unserer Website werden keine personenbezogenen Daten an die Betreiber der jeweiligen Plattform übermittelt. Erst durch Anklicken eines entsprechenden Links verlassen Sie unsere Website und werden auf die Plattform des jeweiligen Anbieters weitergeleitet. Dabei können technisch erforderliche Informationen (z. B. die Referrer-URL) an den jeweiligen Anbieter übermittelt werden.

Nach dem Aufruf der jeweiligen Plattform verarbeitet der jeweilige Anbieter personenbezogene Daten in eigener datenschutzrechtlicher Verantwortung. Dies gilt unabhängig davon, ob Sie dort über ein Nutzerkonto verfügen oder angemeldet sind. Sind Sie eingeloggt, können die erhobenen Daten Ihrem Benutzerkonto zugeordnet werden. Die Anbieter verarbeiten personenbezogene Daten regelmäßig zu eigenen Zwecken, insbesondere zur Erstellung von Nutzungsprofilen, für Marktforschung sowie zur bedarfsgerechten Gestaltung und Bewerbung ihrer Angebote. Dabei kann eine Verarbeitung auch außerhalb der Europäischen Union bzw. des Europäischen Wirtschaftsraums erfolgen. Auf Art, Umfang und Zwecke dieser Datenverarbeitung haben wir keinen Einfluss.

Sofern Sie über eine Social-Media-Plattform direkt mit uns in Kontakt treten, beispielsweise durch Kommentare oder Nachrichten, verarbeiten wir die von Ihnen bereitgestellten personenbezogenen Daten zur Bearbeitung Ihres Anliegens und zur Kommunikation mit Ihnen. Die Verarbeitung erfolgt auf Grundlage unserer berechtigten Interessen gemäß Art. 6 Abs. 1 lit. f DSGVO oder – sofern Ihre Anfrage auf den Abschluss oder die Durchführung eines Vertrags gerichtet ist – auf Grundlage von Art. 6 Abs. 1 lit. b DSGVO.

Soweit uns die Plattformanbieter statistische Auswertungen zur Nutzung unserer Social-Media-Präsenzen (z. B. Seiten-Insights) bereitstellen, kann – soweit gesetzlich vorgesehen – eine gemeinsame Verantwortlichkeit im Sinne des Art. 26 DSGVO bestehen.

Zur Verwaltung unserer Social-Media-Präsenzen sowie zur Planung und Veröffentlichung von Beiträgen setzen wir technische Management- und Analysetools ein. Soweit uns diese Dienste statistische Auswertungen bereitstellen, nutzen wir diese in der Regel in aggregierter Form zur Analyse der Nutzung unserer Social-Media-Präsenzen und zur Optimierung unserer Kommunikation. Je nach eingesetztem Dienst verarbeiten die Anbieter personenbezogene Daten in unserem Auftrag oder in eigener datenschutzrechtlicher Verantwortung. Weitere Informationen zhierzu finden Sie in der Anbieter- und Technologieliste dieser Datenschutzerklärung.

We process personal data in connection with receiving, assessing and investigating reports of suspected legal or other serious regulatory violations. This processing enables us to assess and investigate reported concerns and to take appropriate follow-up measures. 

A report may involve the processing of personal data relating to the reporting person (unless the report is submitted anonymously), individuals who are the subject of the report, and other persons identified in the report. This may include contact details, communications, case-related information and any supporting documentation provided. Reports can generally be submitted anonymously. If you choose to disclose your identity, we will treat your personal data confidentially in accordance with applicable legal requirements. Technical connection and usage data are processed only where necessary to ensure the secure and reliable operation of the whistleblowing system. 

Where necessary to comply with legal obligations or to pursue our legitimate interests, we process personal data for the purpose of detecting, investigating, preventing and addressing legal and regulatory violations. If a report contains special categories of personal data or information relating to criminal offences, such data will only be processed where permitted under the applicable legal provisions. 

Reports are handled by authorised internal personnel and, where appropriate, by external service providers engaged by us, such as external legal counsel. To provide our whistleblowing system, we use the specialised EQS Integrity Line platform operated by an external provider. Depending on the service involved, personal data may be processed either on our behalf or by the respective provider acting as an independent controller. Further information about the providers and technologies we use can be found in the Providers and Technologies List of this Privacy Notice. 

Documentation and personal data relating to whistleblowing reports are generally deleted three years after the investigation has been concluded. Data will only be retained for a longer period where this is required and proportionate under the German Whistleblower Protection Act or other applicable legal requirements. 

We protect the confidentiality of the identity of reporting persons and individuals named in a report to the extent required by law. Where legally required, individuals concerned may be informed that their personal data is being processed. Certain data subject rights may be restricted where permitted by law, particularly where this is necessary to protect the identity of the reporting person or to ensure the proper conduct of internal investigations.