(Last updated: 21 August 2025)
Workist GmbH (hereinafter referred to as "we," "us") is pleased that you are visiting our website www.workist.com and our platform wb.workist.com. Unless otherwise indicated, references to the "website" in this privacy notice refer to both sites.
Our principle is to collect only the personal data necessary to provide you with the services you expect, and to process this data solely for that purpose.
The controller responsible for processing personal data on our website within the meaning of the General Data Protection Regulation (GDPR) is:
Workist GmbH
Linienstraße 126
10115 Berlin
Email: privacy@workist.com
Our appointed Data Protection Officer is:
Kertos GmbH
Briennerstraße 41
80333 München
Germany
Email: dsb@kertos.io
Personal data means any information relating to an identified or identifiable natural person. This includes, for example, your name, age, address, telephone number, date of birth, email address or IP address. Information for which we are unable to establish a link to your identity, or could only do so with disproportionate effort, is not considered personal data.
We process your data primarily within the European Union (EU) and the European Economic Area (EEA). Some of our service providers, however, may be located in so-called “third countries” outside the EEA. The GDPR imposes strict requirements on the transfer of personal data to third countries. All recipients of personal data must comply with these requirements. Before transferring your data to a provider in a third country, we assess their level of data protection. A provider is only selected if it can demonstrate an adequate level of protection outside the EEA. Regardless of whether our service providers are located within the EEA or in third countries, each provider is required to enter into a data processing agreement with us. For providers outside the EEA, additional safeguards are required. In accordance with Articles 44 et seq. GDPR, personal data may only be transferred to service providers that meet at least one of the following conditions:
Scope and purpose of data processing
We collect and process personal data of our users only to the extent technically necessary to provide a functional website, and to offer our content, services, or information.
When you access and use our website, certain personal data is automatically transmitted by your browser to our server and temporarily stored in so-called log files.
The following information is collected without your intervention and stored until automatic deletion:
We process this data for the following purposes:
Legal basis
The processing of the aforementioned data is necessary for the provision of the website and to enable secure and convenient use. Processing is therefore based on our legitimate interests in accordance with Article 6(1)(f) GDPR.
Retention and erasure of data
The aforementioned data is erased as soon as it is no longer required for the display of the website—at the latest after 30 days for data collected during visits to www.workist.com, and after 90 days for data collected when using wb.workist.com. The collection of data for the provision of the website and its storage in log files is essential for the operation of the website. Therefore, users do not have the option to object. Further storage may occur in individual cases if required by law.
Third Parties
Hosting for www.workist.com
Our website www.workist.com is hosted by an external service provider, Webflow, Inc, 398 11th St., Floor 2, San Francisco, CA 94103, USA (hereinafter "Webflow"). Your personal data is transferred to Webflow for the purpose of providing the requested services. Webflow is headquartered in the United States, which means personal data may be transferred to the United States. The European Commission has issued an adequacy decision for data transfers to the USA—the EU-U.S. Data Privacy Framework. Webflow is certified under this framework, so such transfers are based on Article 45 GDPR.
Host für wb.workist.com
The technical infrastructure for our platform at wb.workist.com is provided by Microsoft Azure, operated by Microsoft Ireland Operations Limited, 70 Sir John Rogerson's Quay, Dublin 2, Ireland. The following personal data is processed through the use of Microsoft Azure:
Processing is necessary to provide you with the website you requested. The legal basis is our legitimate interest in the provision of the technical infrastructure (Article 6(1)(f) GDPR), as the website could not otherwise be operated.
The service provider is based in the EU and is compliant with the GDPR. A server location in Germany has been selected; however, data transfers to the USA cannot be ruled out. For such transfers, the EU-U.S. Data Privacy Framework applies. Microsoft is certified under this framework, so these transfers are based on Article 45 GDPR. In addition, Standard Contractual Clauses (SCCs) have been concluded. Further information about data protection at Microsoft Azure can be found at: https://azure.microsoft.com/en-us/explore/trusted-cloud/privacy.
Fonts
To display the content of our website, we use “Google Fonts”, provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”).
In order to integrate Google Fonts, the fonts are loaded from a Google server. This typically involves the transfer of the following data:
Your data is generally transmitted to a Google server in the United States. For such transfers, the EU-U.S. Data Privacy Framework applies. Google is certified under this framework, so these transfers are based on Article 45 GDPR. When using Google Analytics, it cannot be ruled out that cookies set by Google Analytics may collect other personal data in addition to the IP address. Please note that Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.
You can generally prevent the storage of cookies by configuring your browser software accordingly. However, please note that if you do so, you may not be able to use all the functions of this website to their full extent.
For more information regarding data protection at Google, please refer to: https://policies.google.com/privacy
To improve the loading times of our website www.workist.com and to protect against Distributed Denial of Service attacks (an attack on our systems through a multitude of requests), we use the content delivery network "Cloudflare," provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107 (hereinafter: "Cloudflare").
When using Cloudflare, the following categories of personal data are processed:
The processing is based on Article 6(1)(f) GDPR. The processing of the aforementioned data is necessary to ensure the security of our website.
This information is generally transferred to a Cloudflare server in the USA, where it is stored. For data transfers to the USA, there is an adequacy decision of the European Commission, the EU-U.S. Data Privacy Framework. "Cloudflare" is certified under this framework, therefore such transfers are based on Article 45 GDPR.
For more information about data protection at "Cloudflare," please refer to: https://www.cloudflare.com/privacypolicy/
You have the option to book an appointment with us via our website www.workist.com . For this purpose, we provide the "Book a Meeting" function. In order to enable this, we use the service "Calendly," provided by Calendly LLC, 115 E Main St., Ste A1B, Buford, GA 30518, USA (hereinafter: "Calendly").
When using Calendly, the following categories of personal data are processed:
The use of Calendly serves the purpose of facilitating quick and easy appointment scheduling, enabling you to view available appointments and select one for a product demonstration meeting.
The processing of your personal data takes place solely on the basis of your consent given in the context of using the "Book a Meeting" function in accordance with Art. 6(1)(a) GDPR. You have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Your data will only be stored for as long as necessary. Further retention may occur if required by law or necessary for the performance of a contract.
This information is generally transferred to a Calendly server in the USA, where it is stored. For data transfers to the USA, there is an adequacy decision of the European Commission, the EU-U.S. Data Privacy Framework. "Calendly" is certified under this framework, therefore such transfers are based on Article 45 GDPR.
For more information on data protection at "Calendly," please refer to: https://calendly.com/legal/privacy-notice.
We use HubSpot Forms on our website, a service provided by HubSpot, Inc. (25 First Street, 2nd Floor, Cambridge, MA 02141, USA). When using HubSpot Forms, the following data is transmitted to HubSpot:
The purpose of HubSpot Forms is to enable the creation and management of online forms and to process the data collected through them. The service assists us in efficiently handling customer inquiries and optimizing our customer relationship management. This information is generally transferred to a HubSpot server in the USA, where it is stored.
For data transfers to the USA, there is an adequacy decision of the European Commission, the EU-U.S. Data Privacy Framework. HubSpot is certified under this framework, therefore such transfers are based on Article 45 GDPR. The data is retained for the duration of the business relationship or in accordance with statutory retention periods.
The use of HubSpot Forms is based on our legitimate interest in efficient customer service and the optimization of our business processes pursuant to Article 6(1)(f) GDPR. For more information about data protection at HubSpot, please refer to: https://legal.hubspot.com/de/privacy-policy
Our website www.workist.com uses Navattic, a service provided by Navattic, Inc., 475 Brannan St. #300, San Francisco, CA 94107, USA (hereinafter: "Navattic"), to provide interactive product demonstrations. Navattic enables us to offer engaging, interactive demos of our products and services.
When using Navattic, the following categories of personal data are processed:
This data processing is necessary to ensure the functionality of the interactive demos and to optimize your user experience. The legal basis for this processing is Article 6(1)(f) GDPR, as our legitimate interest lies in the provision of interactive and user-friendly product demonstrations.
Navattic stores the collected data on servers in the United States. For data transfers to the USA, there is an adequacy decision of the European Commission, the EU-U.S. Data Privacy Framework. Navattic is certified under this framework, and such transfers are therefore based on Article 45 GDPR.
For further information on data protection at Navattic, please refer to: https://www.navattic.com/legal/privacy
Scope and purpose of data processing
Our website uses various tracking technologies. These include, among others, the setting of cookies, the creation of a unique identifier through the combination of different device and browser information (device fingerprinting), or the use of so-called "universal IDs." For the purposes of this notice, the term "cookies" is used to refer to any tracking technology.
Cookies are data records that are stored on your computer when you visit our website and make it possible for your browser to be recognized. Cookies store information such as your language preferences, the duration of your visit to our website, or the entries you make there.
There are different types of cookies. Session cookies are temporary cookies that are stored in the user's internet browser until the browser window is closed and the session cookies are deleted. Persistent or permanent cookies are used for repeat visits and are stored in the user's browser for a predefined period. First-party cookies are set by the website that the user is visiting; only that website is authorized to read information from those cookies. Third-party cookies are set by organizations other than the operator of the website the user is visiting.
A distinction can also be made between technically necessary, functional, and advertising cookies. The former are required to ensure basic website functions (e.g., storing language preferences). Functional cookies collect information about user behaviour and whether error messages are received. Advertising cookies, on the other hand, are used to provide tailored advertising to the user.
Legal basis
The legal basis for the processing of personal data using technically necessary cookies is Article 6(1)(f) GDPR, as we have a legitimate interest in ensuring a user-friendly presentation of our website. If you have given your consent to the use of functional or advertising cookies via a notice provided on our website ("cookie banner"), the lawfulness of processing is also governed by Article 6(1)(a) GDPR.
Retention period and erasure of data
As soon as the data transmitted to us via cookies is no longer required to fulfil the purposes described above, this information will be deleted. Further storage may occur in individual cases if required by law.
Configuration of browser settings
Most browsers are set to accept cookies by default. However, you can configure your browser to accept only certain cookies or no cookies at all. Please note that if you disable cookies via your browser settings on our website, you may no longer be able to use all features of our website. You can also delete cookies already stored in your browser or view the storage duration through your browser settings. It is also possible to set your browser to notify you before cookies are stored. Since different browsers may vary in their functions, please refer to your browser's help menu for configuration options.
Consent Management
We use the Usercentrics Consent Management Platform (CMP) on our website, provided by Usercentrics GmbH, Rosental 4, 80331 Munich, Germany. When using the Usercentrics CMP, the following data is transmitted to Usercentrics:
The purpose of the Usercentrics CMP is to obtain, manage, and document user consents for data processing, in particular through cookies and similar technologies. The provider is based in the EU and is compliant with the GDPR. Further information on data protection at Cookiebot can be found at: https://www.cookiebot.com/de/privacy-policy/.
Data processing is necessary to provide you with the legally required consent management and to fulfil our documentation obligations. The legal basis is Article 6(1)(c) GDPR as well as Article 6(1)(f) GDPR, justified by our legitimate interest in fulfilling the legal requirements for consent management.
We use tracking and analytics tools to ensure the continuous optimization and user-centric design of our website. These tracking measures also enable us to statistically analyze the use of our website by visitors and to further develop our online offering based on the insights gained. Where you have provided your consent to the use of cookies via a notice displayed on our website (the "cookie banner"), the lawfulness of processing is also based on Article 6(1)(a) GDPR. The following descriptions of tracking and analytics tools set out the purposes of processing and the categories of personal data processed.
Google Tag Manager
We use Google Tag Manager, a service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (referred to collectively as "Google"). Google Tag Manager enables the management of website tags. When you visit our website, an HTTP request is sent to Google, resulting in the transfer of device information (such as your IP address) to Google, including to Google servers in the United States. There is an adequacy decision of the European Commission for data transfers to the USA, the EU-U.S. Data Privacy Framework. Google is certified under this Framework, so such transfers are based on Article 45 GDPR. It cannot be excluded that data collected by Google Tag Manager may include other personal data. Please note that Google may transfer this information to third parties where required by law, or where such third parties process the information on Google’s behalf.
Processing takes place exclusively on the basis of your explicit consent. You may withdraw your consent to processing and transfer to third countries at any time. The lawfulness of processing carried out prior to withdrawal is not affected.
For more information about data protection at Google, please refer to:
https://policies.google.com/privacy
Google - Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses cookies and similar tracking technologies such as device fingerprinting.
The information stored in these cookies, such as the time, location, and frequency of your use of our website, is generally transferred to and stored on a Google server in the United States. For data transfers to the USA, the EU-U.S. Data Privacy Framework applies. Google is certified under this framework, so such transfers are based on Article 45 GDPR. In addition, Standard Contractual Clauses (SCCs) have been concluded with Google. When using Google Analytics, it cannot be excluded that cookies set by Google Analytics may collect personal data in addition to the IP address. Please note that Google may transfer this information to third parties where legally required, or where such third parties process the information on Google's behalf.
Google will use the information generated by the cookie to analyze your use of the website, to compile reports on website activities, and to provide other services related to website and internet usage to the website operator. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can generally prevent the storage of cookies by configuring your browser accordingly. However, please note that if you do so, you may not be able to use all features of this website to their full extent.
You may withdraw your consent to the processing and transfer to third countries at any time. The lawfulness of processing carried out prior to withdrawal remains unaffected.
For more information on data protection at Google, please refer to: https://policies.google.com/privacy.
Google Ads
We use Google Ads, an online advertising service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as well as Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: “Google”). Google Ads enables us to place targeted advertisements in Google search results and on partner websites.
In the context of Google Ads, we use conversion tracking. If you reach our website via a Google advertisement, Google Ads sets a cookie on your device. This cookie contains information on whether you have performed certain actions on our website, such as purchasing a product or submitting a form. This information is generally transferred to a Google server in the United States and stored there.
For data transfers to the USA, there is an adequacy decision by the European Commission, the EU-U.S. Data Privacy Framework. Google is certified under this framework, so such transfers are based on Article 45 GDPR. In addition, Standard Contractual Clauses (SCCs) have been concluded with Google.
When using Google Ads, it cannot be excluded that Google may collect additional personal data beyond your IP address. Please note that Google may transfer this information to third parties where required by law, or where third parties process such data on behalf of Google.
Google uses the information generated by cookies to analyze the effectiveness of advertisements, compile reports on advertising activities, and provide further website and internet-related services to the website operator.
You may prevent the storage of cookies by adjusting your browser settings. Please note that, if you do so, you may not be able to use all functions of this website in full.
Processing is based on your consent. You may withdraw your consent to processing at any time. The lawfulness of processing conducted prior to withdrawal remains unaffected.
Further information on data protection at Google can be found at: https://policies.google.com/privacy.
DoubleClick
To plan, implement, and manage advertising campaigns, we use “DoubleClick” provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: “Google”). DoubleClick uses cookies and similar tracking technologies.
When using DoubleClick, the following personal data is transmitted to Google:
Your data is generally transferred to a Google server in the United States. For data transfers to the USA, the EU-U.S. Data Privacy Framework applies. Google is certified under this framework, so such transfers are based on Article 45 GDPR. When using DoubleClick, it cannot be excluded that cookies set by DoubleClick may collect additional personal data beyond the data listed above. Please note that Google may transfer this information to third parties if required by law or if third parties process such data on behalf of Google.
Processing takes place exclusively on the basis of your express consent. You may withdraw your consent to processing and transfer to third countries at any time via the consent tool “cookiebot.” The lawfulness of processing conducted prior to withdrawal remains unaffected.
For more information on data protection at Google, please refer to: https://policies.google.com/privacy.
Google Conversion Linker
We use conversion tracking provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google uses cookies and similar tracking technologies.
The information stored in these cookies, including the time, place, and frequency of your use of our website, is generally transferred to a Google server in the USA and stored there. For data transfers to the USA, the adequacy decision of the European Commission (EU-U.S. Data Privacy Framework) applies. Google is certified under this framework, so such transfers are based on Article 45 GDPR. Furthermore, Standard Contractual Clauses (SCCs) have also been concluded with Google.
When using Google Conversion Linker, it cannot be ruled out that cookies set by Google may collect, in addition to your IP address, other personal data. Please note that Google may transfer this information to third parties if required by law or if third parties process such data on Google's behalf.
Google uses the information generated by these cookies to evaluate your use of the website, compile reports about website activities, and provide other services associated with website and internet use for the website operator.
You can prevent the storage of cookies by adjusting your browser settings. However, please note that you may then not be able to use all the functions of this website to their full extent.
Processing is carried out on the basis of your consent. You may withdraw your consent at any time. The lawfulness of processing carried out prior to withdrawal remains unaffected.
Further information on data protection at Google can be found at: https://policies.google.com/privacy.
Google Remarketing
We use Google Remarketing, a service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
Google Remarketing enables us to target visitors to our website on other websites within the Google advertising network with interest-based advertising. For this purpose, Google uses cookies and similar tracking technologies to analyze usage patterns on our website and deliver personalized advertisements based on that analysis.
The following personal data is processed when using Google Remarketing:
The information collected by Google Remarketing is generally transferred to and stored on Google servers in the USA. For data transfers to the USA, the adequacy decision of the European Commission (EU-U.S. Data Privacy Framework) applies. Google is certified under this framework, so such transfers are based on Article 45 GDPR. Additionally, Standard Contractual Clauses (SCCs) have been concluded with Google.
Further information about Google's data processing and your settings options can be found at: https://policies.google.com/privacy.
HubSpot Analytics
We use "HubSpot," a service provided by HubSpot, Inc., 25 First Street, Cambridge, MA 02141 USA ("HubSpot").
The following personal data is processed by HubSpot:
The unique user ID is stored in the "hubspotutk" cookie, while other data is stored in the cookies "__hssc" and "__hstc". For more information about cookies set by HubSpot, visit: https://knowledge.hubspot.com/privacy-and-consent/what-cookies-does-hubspot-set-in-a-visitor-s-browser.
The use of "HubSpot" enables us to monitor our website and supports us in improving its functionality. The data is also used to support and enhance our digital marketing.
The processing of your personal data only takes place on the basis of your explicit consent pursuant to Article 6(1)(a) GDPR. You have the right to withdraw your consent at any time; the lawfulness of processing carried out before withdrawal remains unaffected.
Information is generally transferred to and stored on a HubSpot server in the USA. For data transfers to the USA, an adequacy decision by the European Commission (EU-U.S. Data Privacy Framework) applies. HubSpot is certified under this framework, so such transfers are based on Article 45 GDPR.
For more information about data protection at HubSpot, see: https://legal.hubspot.com/privacy-policy
LinkedIn Conversion
This website uses conversion tracking provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, and LinkedIn Corporation, 1000 W Maude Ave, Sunnyvale, CA 94085, USA ("LinkedIn"). LinkedIn uses cookies and similar tracking methods such as device fingerprinting.
Information stored in these cookies—such as the time, location, and frequency of your use of our website—is generally transferred to LinkedIn servers in the USA and stored there. For data transfers to the USA, an adequacy decision of the European Commission (EU-U.S. Data Privacy Framework) applies. LinkedIn is certified under this framework, so such transfers are based on Article 45 GDPR. Additionally, Standard Contractual Clauses (SCCs) have been concluded with LinkedIn.
It cannot be excluded that cookies set by LinkedIn may collect additional personal data beyond your IP address. Please note that LinkedIn may transfer this information to third parties where required by law or where such third parties process data on LinkedIn’s behalf.
LinkedIn will use the information generated by these cookies on behalf of the operator of this website to analyze your use of the website, compile reports on website activity, and provide other services relating to website and internet usage to the website operator.
You can generally prevent the storage of cookies by configuring your browser settings accordingly. However, please note that if you do so, you may not be able to use all features of this website to their full extent.
Processing is based on your consent. You may withdraw your consent at any time. The lawfulness of processing conducted prior to withdrawal remains unaffected.
Further information on data protection at LinkedIn can be found at: https://www.linkedin.com/legal/privacy-policy
SalesViewer
We use SalesViewer on our website, a technology provided by SalesViewer GmbH, Nikolaistraße 2, 44866 Bochum, Germany. SalesViewer analyzes user behaviour by sending an HTTPS request to SalesViewer’s servers each time a page is accessed. The following data is transmitted and processed:
The purpose of SalesViewer is to identify companies visiting our website and to analyze their behavior. The data collected is used to improve the relevance of our website for visitors and to provide targeted information. These data are not assigned to specific individuals.
Processing is based on your consent. You may withdraw your consent at any time. The lawfulness of processing conducted prior to withdrawal remains unaffected. For more information on data protection at SalesViewer, see: https://www.salesviewer.com/en/privacy-policy/.
Our presence on social networks and platforms aims to maintain active communication with our customers and interested parties. For this reason, we use various plugins to integrate content from other platforms into our website www.workist.com.
YouTube
www.workist.com uses YouTube, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter, “YouTube”), to embed videos on our website.
The following categories of personal data may be processed when using YouTube:
Data processing is carried out to provide you with embedded YouTube videos and to improve the user experience of our website.
When using YouTube, personal data may be transferred to the United States. For such data transfers, an adequacy decision by the European Commission exists—the EU-U.S. Data Privacy Framework. Google LLC is certified under this framework, meaning such transfers are based on Article 45 of the GDPR. Additionally, Standard Contractual Clauses (SCCs) have been concluded with Google.
The processing of your data is based on your consent. You may withdraw your consent to the processing and transfer of your data to third countries at any time. The lawfulness of any processing carried out prior to the withdrawal remains unaffected.
Further information on data protection at YouTube can be found at: https://policies.google.com/privacy
Our website provides several links to our profiles on social networks.
Our website includes a link to our company page on the social network "LinkedIn," operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Based on the data transmitted via the social plugin, the service may be able to associate you with your LinkedIn account.
No data will be transmitted to LinkedIn through this link before you click it. Only when you click the button will data be transferred; at that point, you will leave our website and establish a direct connection between your browser and LinkedIn's servers. For information about the data then collected by LinkedIn, please see: https://de.linkedin.com/legal/privacy-policy
Our website also includes a link to our company page on the social network "Instagram," provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
No data will be transmitted to Meta Platforms Ireland Limited through this link before you click it. Only when you click the button will data be transferred. At this point, you will leave our website and establish a direct connection between your browser and Meta's servers. For information about the data then collected by Instagram, please refer to: https://privacycenter.instagram.com/policy
We are committed to handling your personal data confidentially. To protect your data against unauthorized manipulation, loss, or misuse, we implement comprehensive technical and organizational security measures, which are regularly reviewed and updated in line with technological developments.
However, please note that, due to the nature of the internet, data protection regulations and the aforementioned security measures may not be observed by third parties or institutions outside our control. In particular, unencrypted data — such as data transmitted by email — may be accessed by third parties. We have no technical influence over this. It is your responsibility as a user to take appropriate steps, such as encryption, to protect the data you provide against misuse.
Personal data will be deleted or blocked as soon as the purpose for its storage no longer applies. Further retention may take place where required by European or national legislation in regulations, laws, or other provisions to which the controller is subject. Data will also be deleted or blocked once a legally mandated retention period expires, unless continued retention is necessary for concluding or performing a contract.
With regard to your personal data, you have the following rights under applicable data protection law:
Right of Access
You have the right to obtain confirmation as to whether we are processing your personal data. Where this is the case, you have the right to access that data and to receive additional information, such as the purposes of processing, recipients, the intended retention period, or the criteria used to determine this period.
Right to Rectification
You have the right to request the prompt rectification of inaccurate personal data. Taking the purposes of processing into account, you also have the right to have incomplete data completed.
Right to Erasure ("Right to be Forgotten")
You have the right to request erasure of your personal data where processing is no longer necessary. For example, this applies if your data is no longer needed for its original purpose, if you withdraw your consent, or if the data was processed unlawfully.
Right to Restriction of Processing
You have the right to request restriction of processing, for instance if you contest the accuracy of your personal data.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object
You have the right to object, on grounds relating to your particular situation, at any time to the processing of certain personal data concerning you. In the case of direct marketing, you have the right to object at any time to the processing of your personal data for such purposes; this also applies to profiling to the extent that it is related to direct marketing.
Right to Withdraw Consent
You may withdraw your consent to the processing of your personal data at any time with effect for the future. The lawfulness of processing carried out prior to withdrawal remains unaffected.
Irrespective of these rights, you have the right to lodge a complaint with a supervisory authority at any time if you believe that the processing of your personal data violates data protection law.
Revision Date | Version | Reason for the change
21.04.2023 | 1.0 | First version
10.12.2024 | 1.1 | Update of the Privacy Policy to add procedures for periodic review, notification of changes, information on use for new purposes and clarifications on disclosures to third parties and responsibilities of data subjects.
03.09.2025 | 1.2 | Adjustment of the privacy policy due to the introduction of new tools, updating of information on service providers used, and revision of the structure for greater clarity.