Privacy policy

1. Privacy at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data refers to any data that can be used to personally identify you. For detailed information on data protection, please refer to our Privacy Policy listed below this text.

Data collection on this website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find the operator’s contact information in the “Information on the responsible party” section of this Privacy Policy.

How do we collect your data?

Your data is collected, on the one hand, when you provide it to us. This may include, for example, data that you enter into a contact form.

Other data is collected by our IT systems automatically or with your consent when you visit the website. This primarily consists of technical data (e.g., internet browser, operating system, or time of page view). This data is collected automatically as soon as you access this website.

How do we use your data?

Some of the data is collected to ensure the website functions properly. Other data may be used, provided you have given your consent, to analyze your user behavior.

What rights do you have regarding your data?

You have the right at any time to receive, free of charge, information about the source, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data, as well as to have its processing restricted. If you have given your consent, you may revoke it at any time with future effect. In addition, you have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to file a complaint with the competent supervisory authority. You may contact us at any time regarding this matter or any other questions about data protection.

Analytics tools and third-party tools

When you visit this website, your browsing behavior may be statistically analyzed, provided you have given your consent. This is primarily done using analytics tools. Detailed information about these analytics tools can be found in the following Privacy Policy. You can revoke your consent at any time via our consent banner or change your selection.

2. Hosting and content management system

Hosting (Vercel)

We host our website with Vercel. The provider is Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA (“Vercel”). When you visit our website, your personal data is processed on Vercel’s servers. This may include, in particular, IP addresses, contact requests, metadata and communication data, website visits, and other data generated through a website.

We use Vercel to ensure the secure, fast, and efficient delivery of our online services through a professional provider (Art. 6(1)(f) GDPR) and to fulfill our contractual obligations toward our potential and existing prospects and clients (Art. 6(1)(b) GDPR). If consent has been obtained, processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device; consent may be revoked at any time.

Vercel also processes data in the United States. Vercel is certified under the EU-U.S. Data Privacy Framework (DPF); in addition, Vercel relies on the European Commission’s Standard Contractual Clauses as the basis for data transfers to the United States. We have entered into a Data Processing Agreement (DPA) with Vercel in accordance with Article 28 of the GDPR. This is a contract required under data protection law that ensures Vercel processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

For more information about Vercel’s privacy policy, visit: https://vercel.com/legal/privacy-policy.

Content management system and image delivery (Sanity)

We manage the content of this website using the Sanity content management system. The provider is Sanity US Inc., 351 California Street, Suite 650, San Francisco, CA 94104, USA (“Sanity”). Sanity delivers images and files from this website via its Content Delivery Network (cdn.sanity.io). For technical reasons, your browser transmits your IP address, the requested file, the date and time, and information about your browser and operating system to the servers of Sanity or its service providers. We do not store any information you enter into forms on this website in Sanity.

We use Sanity based on our legitimate interest in efficiently managing our content and ensuring fast, reliable delivery of the website (Art. 6(1)(f) GDPR). Sanity primarily stores content in data centers within the EU (Belgium). When content is delivered via Sanity’s global network and when accessed from the U.S., data may also be processed in the U.S.; this is based on the European Commission’s Standard Contractual Clauses. We have entered into a Data Processing Agreement (DPA) with Sanity in accordance with Article 28 of the GDPR.

For more information about data protection at Sanity, visit: https://www.sanity.io/legal/privacy.

3. General information and mandatory disclosures

Privacy

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with applicable data protection laws and this Privacy Policy.

When you use this website, various types of personal data are collected. Personal data is data that can be used to identify you personally. This Privacy Policy explains what data we collect and how we use it. It also explains how and for what purpose this is done.

Please note that data transmission over the Internet (e.g., when communicating via email) may be subject to security vulnerabilities. It is not possible to completely protect data from access by third parties.

Information on the data controller

The entity responsible for data processing on this website is:

UX&I GmbH Kopernikusstr. 28 40223 Düsseldorf Germany

Phone: +49 (0)211 868 0910 Email: info@uxi.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g., names, email addresses, etc.).

Retention period

Unless a more specific retention period is stated in this Privacy Policy, we will retain your personal data until the purpose for which it was collected no longer applies. If you submit a valid request for deletion or revoke your consent to data processing, we will delete your data unless we have other legally permissible grounds for storing it (e.g., retention periods under tax or commercial law); in the latter case, we will delete the data once these grounds no longer apply.

Recipients of personal data

As part of our business operations, we collaborate with various external parties. In some cases, this requires the transfer of personal data to these external parties. We share personal data with external parties only when necessary to perform a contract, when legally obligated to do so, when we have a legitimate interest in the disclosure, or when another legal basis permits the disclosure of data. When using data processors, we disclose our clients’ personal data only on the basis of a valid data processing agreement.

Withdrawal of your consent to data processing

Many data processing operations are only possible with your explicit consent. You may revoke any consent you have already given at any time. The lawfulness of the data processing carried out prior to the revocation remains unaffected by the revocation.

Right to object to data collection in specific cases and to direct marketing (Art. 21 GDPR)

If data processing is based on Article 6(1)(e) or (f) of the GDPR, you have the right at any time to object to the processing of your personal data on grounds relating to your particular situation; this also applies to profiling based on these provisions. The specific legal basis on which processing is based can be found in this Privacy Policy. If you object, we will no longer process your personal data in question, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims (objection under Article 21(1) of the GDPR).

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling to the extent that it is related to such direct marketing. If you object, your personal data will no longer be used for the purposes of direct marketing (objection pursuant to Art. 21(2) of the GDPR).

Right to file a complaint with the competent supervisory authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work, or the location of the alleged violation. The right to lodge a complaint is without prejudice to any other administrative or judicial remedies. For us, the competent supervisory authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.

Right to data portability

You have the right to receive data that we process automatically, based on your consent or in fulfillment of a contract, or to have it transmitted to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another data controller, this will only be done to the extent that it is technically feasible.

Access, correction, deletion, and restriction of processing

In accordance with applicable legal provisions, you have the right at any time to receive, free of charge, information about your stored personal data, its origin and recipients, and the purpose of data processing, as well as the right to have this data corrected or deleted, if applicable. You also have the right to request the restriction of the processing of your personal data in accordance with Article 18 of the GDPR. You may contact us at any time regarding this matter or any other questions you may have about personal data.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential information, such as orders or inquiries you send to us as the website operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the padlock icon in your browser’s address bar.

When SSL or TLS encryption is enabled, the data you send to us cannot be read by third parties.

Opting out of marketing emails

We hereby object to the use of contact information published in accordance with legal disclosure requirements for the purpose of sending unsolicited advertising and informational materials. The operators of this website expressly reserve the right to take legal action in the event of the unsolicited transmission of promotional information, such as through spam emails.

4. Data protection officer

We have appointed a data protection officer for our company.

sicdata Management Consulting Tobias Erdmann Heiligenstock 34d 42697 Solingen

Phone: 0212 / 73 87 24-0 Email: erdmann@sicdata.de

5. Data collection on this website

Cookies

Some parts of our website use so-called “cookies.” Cookies do not harm your computer and do not contain viruses. Cookies help make our website more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called “session cookies.” They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser the next time you visit.

Cookies may be set by us (first-party cookies) or by third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain third-party services into websites.

Cookies that are necessary for the electronic communication process (essential cookies) or for providing certain features you have requested (functional cookies, e.g., for the shopping cart feature) are stored pursuant to Article 6(1)(f) of the GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to ensure the technically error-free and optimized provision of its services. If consent to the storage of cookies and similar recognition technologies has been requested, processing is carried out exclusively on the basis of this consent (Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG); consent may be revoked at any time.

You can configure your browser to notify you when cookies are set and to allow cookies only on a case-by-case basis, to block cookies in specific cases or generally, and to enable the automatic deletion of cookies when you close your browser. Disabling cookies may limit the functionality of this website.

You can find out which cookies and services are used on this website in this Privacy Policy.

Consent via consent banner

Our website uses a consent management system (consent banner) to obtain your consent to the storage of certain cookies or the use of certain technologies on your device and to document this in compliance with data protection regulations. When you visit our website, the consent banner will appear, allowing you to select individual processing operations or services and grant your consent. Services that do not require consent are not covered by this process.

Using the consent banner, you can grant or deny your consent to certain technologies and change or revoke your selection at any time with future effect. The purpose of consent management is to enable users to grant consent and to demonstrate compliance with legal requirements. Data is stored to assign consent to the respective users and to provide evidence of its revocation. The legal basis for this is Article 6(1)(c) of the GDPR.

In the consent banner, you can select two separate categories: “Statistics and Advertising” (advanced analytics and session replay with PostHog, conversion tracking from Google Ads and Microsoft Advertising using cookies, LinkedIn Insight Tag, and OpenAI Ads Measurement Pixel) and “External Media” (embedded YouTube videos and Miro boards). We store your selections in your browser’s local storage. You can change them at any time by clicking the “Cookies” link at the bottom of each page.

Server log files

The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This information includes:

• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

This data is not combined with other data sources.

This data is collected on the basis of Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in ensuring the technically error-free display and optimization of its website, to this end server log files must be collected.

Contact form

If you submit inquiries to us via the contact form, we will store the information you provide in the inquiry form, including the contact information you provide there, for the purpose of processing your inquiry and in case of follow-up questions. We will not share this data without your consent.

We process this data based on Article 6(1)(b) of the GDPR if your inquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in handling inquiries directed to us effectively (Article 6(1)(f) of the GDPR) or on your consent (Article 6(1)(a) of the GDPR), provided that such consent was requested; you may revoke your consent at any time.

The data you enter in the contact form will remain with us until you request that we delete it, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g., after your inquiry has been processed). Mandatory legal provisions, in particular retention periods, remain unaffected.

If you attach documents to the contact form (for example, a briefing), these files are stored in a temporary storage area on our host Vercel (Vercel Blob, located in Frankfurt am Main) when uploaded. After you submit the form, we transfer the files along with your inquiry into our system for processing inquiries and delete them from the temporary storage; we delete any unsubmitted files from there within one day at the latest. The same legal basis and retention periods apply to these files as to the rest of the information you provide in the contact form.

We will log your inquiry in Notion, our inquiry management system, and confirm receipt via email using the Resend service. Details about both services can be found further down in this section.

Schedule an appointment

You can schedule an appointment with us directly through our website. To show you available time slots, we query the calendars of our contact persons via Google Calendar; no data about you is transmitted during this process. When you book an appointment, we process your name, your email address, the selected time, and, if provided, your request. We then create an appointment in the respective contact person’s calendar and generate a link for a video conference using Google Meet. Google Calendar sends the invitation to the appointment to your email address. We also save the booking in Notion, just as we would an inquiry submitted via the contact form.

Google Calendar and Google Meet are provided by Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland (“Google”). Google processes the data on our behalf; we have entered into a data processing agreement with Google in accordance with Article 28 of the GDPR. Data transfers to the United States are based on the EU Commission’s adequacy decision (“EU-US Data Privacy Framework”), under which Google LLC is certified. The EU Commission’s Standard Contractual Clauses also apply.

Data processing is based on Article 6(1)(b) of the GDPR, as the appointment booking serves the purpose of taking pre-contractual measures; otherwise, it is based on our legitimate interest in facilitating the appointment booking process (Article 6(1)(f) of the GDPR). We will retain the data until the purpose no longer applies (e.g., after your request has been fully processed); statutory retention periods remain unaffected.

Questionnaire

When you fill out a questionnaire on our website, the information and answers you provide will be stored and processed for the following purposes:

• Presentation of results: The results can be viewed on a results page via a personalized link.
• Empirical analysis: The collected responses will be used for scientific or empirical analysis and, if applicable, published in aggregated and anonymized form.

In addition, we store the email address you provide so that we can send you a personalized link to your results upon request and, if necessary, contact you regarding the topic of the respective questionnaire.

We store your information and responses in Notion; we’ll send you the link to the results via email using the Resend service.

Your data is processed based on your consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect. The lawfulness of the processing carried out prior to the withdrawal remains unaffected by the withdrawal.

Your personal data will be deleted as soon as the purpose for which it was collected no longer applies or you revoke your consent, unless statutory retention requirements prevent its deletion. Anonymized data that does not allow any conclusions to be drawn about your identity may be stored permanently for statistical analysis.

Inquiries by email or phone

If you contact us by email, phone, or fax, your inquiry, including all personal data contained therein (name, inquiry), will be stored and processed by us for the purpose of handling your request. We will not disclose this data without your consent.

We process this data based on Article 6(1)(b) of the GDPR if your request relates to the performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on your consent (Article 6(1)(a) of the GDPR) and/or on our legitimate interests (Article 6(1)(f) of the GDPR), as we have a legitimate interest in effectively processing the inquiries directed to us.

The data you send us via contact requests will remain with us until you request that we delete it, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g., after your request has been processed). Mandatory legal provisions, in particular statutory retention periods, remain unaffected.

Booking training sessions

When you book a spot in one of our training sessions, reserve a spot, or join a waiting list, we process your name, your business email address, the selected training session with its date, and the number of spots. If you then provide additional booking details, we also process your company name, billing address, order number, VAT ID number, and the names of the participants. We store this data in Notion, confirm the booking via email, send you an email reminder regarding missing billing information, and issue the invoice based on this information.

Data processing is carried out for the purpose of fulfilling the contract or implementing precontractual measures (Art. 6(1)(b) GDPR). We retain invoices and accounting documents for as long as required by commercial and tax law retention obligations (Art. 6(1)(c) GDPR in conjunction with § 257 HGB and § 147 AO). If you provide the names of other participants, please inform them of this Privacy Policy.

Downloads

For certain content, such as white papers, we ask for your name and email address. You can then download the file directly; we will also send you the link via email. We store your request in Notion. The legal basis is Article 6(1)(b) of the GDPR (provision of the requested content).

Notion (Management of Inquiries and Bookings)

We store inquiries submitted via the contact form, appointment bookings, downloads, questionnaires, and training course registrations in Notion, our system for processing inquiries. The provider is Notion Labs, Inc., 685 Market Street, San Francisco, CA 94105, USA (“Notion”). The data you enter, any attached files, the page from which you submitted the form, and the time of submission are stored.

The legal basis for processing your information is as stated above in the form; our use of Notion is based on our legitimate interest in orderly and reliable processing (Art. 6(1)(f) GDPR). Notion processes the data on our behalf based on a data processing agreement in accordance with Art. 28 GDPR. Notion also processes the data in the United States; the transfer is based on the EU Commission’s Standard Contractual Clauses.

For more information about Notion’s privacy practices, visit: https://www.notion.com/trust/privacy-policy.

Resend (Sending Emails)

We send emails that this website generates automatically, such as confirmation of receipt, download links, survey results, and booking confirmations, via the Resend service. The provider is Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA (“Resend”). Resend processes your email address, your name, the content of the email, and technical details regarding delivery for this purpose.

The legal basis specified in the form applies to the mailing; the use of Resend is based on our legitimate interest in reliable delivery (Art. 6(1)(f) GDPR). Resend processes the data on our behalf based on a data processing agreement in accordance with Art. 28 GDPR. Resend also processes the data in the United States. The transfer is based on the EU Commission’s Standard Contractual Clauses; in addition, Resend participates in the EU-U.S. Data Privacy Framework.

For more information about data protection at Resend, please visit: https://resend.com/legal/privacy-policy.

6. Analytics tools and advertising

PostHog (product and web analytics, session replay)

This website uses PostHog, a tool for analyzing user behavior as well as for product and web analytics. The provider is PostHog, Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA (“PostHog”).

PostHog allows us to analyze the use of our website statistically, and, with your consent, to record individual sessions in order to improve our services and identify errors. This may involve collecting information such as pages visited, duration of visit, sequence of page views, anonymized country/region of origin, browser and device type used, as well as interactions with the website (e.g., clicks).

Hosting in the EU

We use PostHog Cloud EU. Data is processed and stored exclusively on servers located within the European Union (Frankfurt am Main, Germany). In the EU Cloud, IP address collection is disabled by default; your IP address is not stored for analytical purposes.

Default setting: no cookies

PostHog is configured by default on this website in what is known as “cookie-free mode.” In this mode, no cookies are set, and no information is stored on or retrieved from your device. Users are not recognized across individual sessions. The legal basis for this processing is our legitimate interest in conducting data-minimal, reach- and usage-based analysis of our website in accordance with Article 6(1)(f) of the GDPR.

Advanced analytics after consent (consent upgrade)

If you give your consent via our consent banner, PostHog will be set to an advanced mode. In this case, cookies or similar technologies (e.g., local storage) are used to recognize you across multiple sessions, thereby enabling a more accurate analysis. The legal basis for this is your consent pursuant to Art. 6(1)(a) of the GDPR in conjunction with § 25(1) of the TDDDG. Consent is voluntary and may be revoked at any time with future effect.

Session replay (session recording)

If you give your consent via our consent banner, we also use PostHog’s session replay feature. This records your interactions with the website (e.g., mouse movements, clicks, scrolling behavior, page views, and input) and saves them as a replayable session. This is used to analyze the usability of our website and identify errors. Input in form fields and other potentially sensitive content is masked by default and is therefore not recorded in plain text. The legal basis is your consent pursuant to Art. 6(1)(a) of the GDPR in conjunction with § 25(1) of the TDDDG. No session recording takes place without your consent. You may revoke your consent at any time with future effect.

Objection and opt-out

You can object to PostHog’s analytics and session recording at any time via our consent banner or change the selection you made there. In cookie-free mode, no further analytics data regarding your visit will be collected if you object. Any consent granted for advanced mode or session replay will be revoked, and cookies that have already been set will no longer be used.

Data processing on behalf of a client

We have entered into a Data Processing Agreement (DPA) with PostHog in accordance with Article 28 of the GDPR. PostHog processes the data exclusively in accordance with our instructions and for the purposes specified in this agreement.

Data transfer to third countries

When using PostHog Cloud EU, analytics and session replay data remain within the European Union. To the extent that PostHog, as a U.S. company, may gain access to data in individual cases for support or technical provisioning purposes, such access is safeguarded by the Standard Contractual Clauses provided by the European Commission.

Retention period

By default, PostHog stores event data collected as part of the analysis for 7 years and then deletes it. Session replay recordings are retained in the PostHog Cloud for 3 months by default and are then automatically deleted. Anonymized data that cannot be used to identify you may be retained for a longer period for statistical purposes.

Transmission via our domain

Your browser sends the data for PostHog to an address on our own domain; from there, we forward it to PostHog. No additional data is collected in the process.

Link to inquiries and bookings

When you submit a form or book an appointment or a training session, we send PostHog an event from our server indicating the successful completion (e.g., “contact request”). A pseudonymous value, which we calculate from your email address using a secret key, serves as an identifier; we do not transmit your email address itself. The legal basis for this is our legitimate interest in measuring the success of our website (Art. 6(1)(f) GDPR).

If you have consented to enhanced analytics, we will also link your visit to this identifier and store your email address and, if provided, your name in your PostHog profile. This allows us to track which content led you to our site. The legal basis for this is your consent (Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG).

For more information about PostHog’s privacy practices, please visit: https://posthog.com/privacy.

Google Ads and Google conversion tracking

This website uses Google Ads. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google Ads allows us to display ads in the Google search engine or on third-party websites when users enter specific search terms into Google (keyword targeting). As part of Google Ads, we use what is known as conversion tracking. When you click on an ad placed by Google, a cookie is set for conversion tracking. Cookies are small text files that the web browser stores on the user’s computer. These cookies expire after 30 days and are not used to personally identify users. If the user visits certain pages on this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to that page.

Each Google Ads customer receives a different cookie. These cookies cannot be tracked across Ads customers’ websites. The information collected using the conversion cookie is used to generate conversion statistics for Ads customers who have opted in to conversion tracking. Customers are informed of the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

The storage of conversion cookies and the use of this tracking tool are based on your consent in accordance with Article 6(1)(a) of the GDPR in conjunction with Section 25(1) of the TDDDG. You may revoke your consent at any time with future effect. You can revoke or modify your consent at any time via our consent banner.

Data transfers to the U.S. are based, where necessary, on the EU Commission’s adequacy decision (“EU-U.S. Data Privacy Framework”), provided that Google is certified accordingly; otherwise, they are based on the EU Commission’s Standard Contractual Clauses. For more information, please see Google’s Privacy Policy: https://policies.google.com/privacy.

Google Consent Mode

We use Google’s “Consent Mode.” The Google tag is loaded on every page, but it only sets cookies once you have given your consent under “Statistics and Advertising.”

Microsoft Advertising

This website uses conversion tracking from Microsoft Advertising (Universal Event Tracking). The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (“Microsoft”). We use this to measure whether people who visit our website via a Microsoft ad (e.g., on the Bing search engine) submit an inquiry, book an appointment or a training session, or request a white paper. Like the Google tag, the Microsoft tag is loaded on every page in consent mode; it sets cookies only with your consent under “Statistics and Advertising” (Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG), which you can revoke at any time via the consent banner.

Data transfers to the United States are based on the EU Commission’s Adequacy Decision (“EU-US Data Privacy Framework”), under which Microsoft Corporation is certified. For more information, please see Microsoft’s Privacy Statement at https://www.microsoft.com/de-de/privacy/privacystatement.

LinkedIn Insight Tag

With your consent under “Statistics and Advertising,” we use the LinkedIn Insight Tag. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”). The tag sets cookies and transmits information to LinkedIn about your visit, such as the page you viewed, the referring page, your browser, the time of your visit, and your IP address, as well as whether you submitted an inquiry, booked an appointment, or requested a white paper. If you are logged into LinkedIn, LinkedIn can associate the visit with your account. We receive only aggregated reports from LinkedIn that do not contain any personally identifiable information, and we use them to measure the success of our ads on LinkedIn.

The legal basis is your consent (Art. 6(1)(a) of the GDPR in conjunction with § 25(1) of the TDDDG), which you may revoke at any time via the consent banner. Data transfers to the U.S. are based on the EU Commission’s adequacy decision (“EU-U.S. Data Privacy Framework”), under which LinkedIn Corporation is certified. For more information, please see LinkedIn’s Privacy Policy at https://www.linkedin.com/legal/privacy-policy; you can opt out of the use of your data for advertising purposes at https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

OpenAI Ads Measurement Pixel (Ads in ChatGPT)

With your consent under “Statistics and Advertising,” we use OpenAI’s Measurement Pixel. The provider is OpenAI Ireland Ltd, 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland (“OpenAI”). We use this to track whether people who have viewed or clicked on one of our ads in ChatGPT submit an inquiry on our website, book an appointment or a training session, or request a white paper. The pixel loads a script from OpenAI’s servers, sets cookies, and transmits information about the page visited, the event, your browser, and your IP address. The cookies store an identifier for the ad click (for up to 30 days) and a random identifier for your browser (for up to one year). OpenAI processes this data as an independent data controller, including to serve and measure ads, create ad audiences, and improve its own services.

The legal basis is your consent (Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG). If you revoke your consent via the consent banner, we will delete the pixel cookies from your browser. To the extent that data is transferred to the U.S., this is based on the EU Commission’s Standard Contractual Clauses. For more information, please visit https://openai.com/policies/eu-privacy-policy/.

7. Plugins and tools

Google Web Fonts (locally hosted)

This site uses so-called web fonts provided by Google to ensure consistent font display. The Google Fonts are installed locally. No connection to Google’s servers is established.

For more information about Google Web Fonts, visit https://developers.google.com/fonts/faq and see Google’s Privacy Policy: https://policies.google.com/privacy.

YouTube (Enhanced Privacy Mode)

We embed YouTube videos on some pages. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use the enhanced privacy mode (youtube-nocookie.com). A video is not loaded until you click on it or have given your consent under “External Media”; until then, you will only see a thumbnail image that we provide ourselves, and there is no connection to YouTube. Once the video is loaded, YouTube receives your IP address and the address of the page you are visiting and may use cookies or similar technologies. If you are logged into YouTube, YouTube can associate the view with your account.

The legal basis is your consent (Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG), which you provide by clicking on the video or in the consent banner and which you may revoke at any time. Data transfers to the United States are based on the EU Commission’s Adequacy Decision (“EU-US Data Privacy Framework”), under which Google LLC is certified. For more information, please see Google’s Privacy Policy at https://policies.google.com/privacy.

Miro

On some pages, we embed boards from Miro, a tool for collaborative work on whiteboards. The provider is RealtimeBoard, Inc. dba Miro, 315 Montgomery Street, Suite 900, San Francisco, CA 94104, USA (“Miro”). A board is not loaded until you click on it or have given your consent under “External Media.” Once it is loaded, Miro receives your IP address and the address of the page you visited and may use cookies or similar technologies.

The legal basis is your consent (Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG), which you provide by clicking on the board or in the consent banner and which you may revoke at any time. Data transfers to the United States are based on the EU Commission’s adequacy decision (“EU-US Data Privacy Framework”), under which RealtimeBoard, Inc. is certified. For more information, visit https://miro.com/legal/privacy-policy/.

Eventbrite

On our website, we offer you the option to register for events. To do this, we use the “Eventbrite” platform, which is operated by Eventbrite, Inc., 95 Third Street, 2nd Floor, San Francisco, CA 94103, USA.

Eventbrite has designated a representative for the purposes of European data protection legislation. Please refer to Eventbrite’s Privacy Policy for the current EU representative.

When you register for an event, you will be redirected to the Eventbrite website. Eventbrite collects personal data and then transmits it to us as the event organizer. To register for an event on Eventbrite, the following data must be provided to Eventbrite, Inc.:

• Last name, first name
• Email address
• Payment information
• Location
• Ticket type
• Event ID
• IP address
• Characteristics of the device used to access the site and/or the browser

As the event organizer, we receive access from Eventbrite to the data listed above regarding participants in the booked event. We use this data for the purposes of preparing for and following up on the respective booked events. In addition, registered participants will receive information about the booked event and our contact details via email before and after the event.

Data processing is carried out on the basis of Article 6(1)(b) of the GDPR.

Eventbrite also stores personal data on servers in the United States. Data transfers to the U.S. are based, where necessary, on the EU Commission’s adequacy decision (“EU-U.S. Data Privacy Framework”), provided that Eventbrite is certified accordingly; otherwise, they are based on the EU Commission’s Standard Contractual Clauses. For more information, please see the Eventbrite Privacy and Security Policy at https://www.eventbrite.de/security.

8. Social media presence

Data processing by social networks

We maintain publicly accessible profiles on social media platforms. You can find a list of the specific social media platforms we use below.

Social networks such as LinkedIn, Facebook, Instagram, etc., can generally analyze your user behavior in detail when you visit their website or a website with integrated social media content (e.g., “Like” buttons or advertising banners). Visiting our social media pages triggers numerous data processing operations relevant to data protection. Specifically:

If you are logged into your social media account and visit our social media page, the operator of the social media platform may associate this visit with your user account. However, your personal data may also be collected even if you are not logged in or do not have an account with the respective social media platform. In this case, data collection occurs, for example, through cookies stored on your device or by recording your IP address.

Using the data collected in this way, the operators of social media platforms can create user profiles that store your preferences and interests. This allows them to display interest-based advertising to you both on and off the respective social media platform. If you have an account with the respective social network, interest-based advertising may be displayed on all devices on which you are currently logged in or have previously been logged in.

Please also note that we cannot track all data processing activities on social media platforms. Depending on the provider, additional data processing operations may therefore be carried out by the operators of the social media platforms. For details, please refer to the terms of use and privacy policies of the respective social media platforms.

Legal basis

Our social media presence is intended to ensure the broadest possible online presence. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR. The analytics processes initiated by social networks may be based on different legal grounds, which must be specified by the operators of the social networks (e.g., consent within the meaning of Article 6(1)(a) of the GDPR).

Data controller and exercising your rights

When you visit one of our social media pages (e.g., Facebook), we are jointly responsible with the operator of the social media platform for the data processing activities triggered by that visit. You may generally exercise your rights (right of access, rectification, erasure, restriction of processing, data portability, and the right to lodge a complaint) both with us and with the operator of the respective social media platform (e.g., Facebook).

Please note that, despite our joint responsibility with the social media platform operators, we do not have full control over the data processing activities of these platforms. Our options are largely determined by the corporate policies of the respective provider.

Retention period

Data collected directly by us through our social media presence will be deleted from our systems as soon as the purpose for storing it no longer applies, you request that we delete it, you revoke your consent to its storage, or the purpose for storing the data no longer applies. Stored cookies remain on your device until you delete them. Mandatory legal provisions, in particular retention periods, remain unaffected.

We have no control over how long your data is stored by social media platform operators for their own purposes. For more details, please contact the social media platform operators directly (e.g., by reviewing their privacy policies, see below).

Social networks in detail

LinkedIn

We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies. Data transfers to the United States are based, where necessary, on the EU Commission’s adequacy decision (“EU-US Data Privacy Framework”), provided that LinkedIn is certified accordingly; otherwise, they are based on the EU Commission’s Standard Contractual Clauses.

If you would like to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

For details on how LinkedIn handles your personal data, please refer to LinkedIn’s Privacy Policy: https://www.linkedin.com/legal/privacy-policy.

Facebook

We have a profile on Facebook. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Meta”). According to Meta, the data collected is also transferred to the United States and other third countries. Data transfers to the United States are based, where necessary, on the EU Commission’s adequacy decision (“EU-US Data Privacy Framework”), provided that Meta is certified accordingly; otherwise, they are based on the EU Commission’s Standard Contractual Clauses.

We have entered into a joint processing agreement (Controller Addendum) with Meta. This agreement specifies which data processing operations we and Meta are responsible for when you visit our Facebook page. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.

You can adjust your advertising settings yourself in your user account. To do so, click the following link and log in: https://www.facebook.com/settings?tab=ads.

For details, please refer to Meta’s Privacy Policy: https://www.facebook.com/privacy/policy/.

Instagram

We have an Instagram profile. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

For details on how Instagram handles your personal data, please refer to Instagram’s Privacy Policy: https://privacycenter.instagram.com/policy.

XING

We have a profile on XING. The provider is New Work SE, Am Strandkai 1, 20457 Hamburg, Germany.

For details on how XING handles your personal data, please refer to XING’s Privacy Policy: https://privacy.xing.com/de/datenschutzerklaerung.

Kununu

This website uses features provided by the Kununu network. The provider is kununu GmbH, Neugasse 4–8, Top 3.02, A-1010 Vienna, Austria. Each time you access one of our pages that contains Kununu features, a connection is established to Kununu’s servers. To the best of our knowledge, no personal data is stored during this process. In particular, IP addresses are not stored, nor is user behavior analyzed.

Data is stored and analyzed in accordance with Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in achieving the widest possible visibility on social media. If consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG; consent may be revoked at any time. For more information on data protection, please see Kununu’s Privacy Policy at: https://privacy.xing.com/de/datenschutzerklaerung.