The protection of your personal data is very important to us. That is why we conduct our business in accordance with applicable laws and regulations regarding the protection of personal data and data security. Below, we would like to inform you about what data from your visit is collected and for what purposes it is used.
The data controller within the meaning of the General Data Protection Regulation and other data protection laws in force in the member states of the European Union, as well as other provisions relating to data protection, is:
Experience One AG
Seidenstraße 19
70174 Stuttgart
Tel.: +49 711 25 35 99 60
email: hello@experienceone.com
Data Protection Officer
The Data Protection Officer
Keyed GmbH
Siemensstraße 12
48341 Altenberge
email: info@keyed.de
The term “personal data” is defined in the Federal Data Protection Act and the EU General Data Protection Regulation (GDPR). According to these definitions, personal data refers to specific information about the personal or factual circumstances of an identified or identifiable natural person. This includes, for example, your legal name, your address, your phone number, or your date of birth.
Unless otherwise stated in the following sections, no personal data is collected, processed, or used when you use our websites. However, through the use of analytics and tracking tools, we obtain certain technical information based on the data transmitted by your browser (such as browser type and version, operating system used, web pages visited on our site—including the duration of your visit—and the website you visited prior to ours). We analyze this information solely for statistical purposes.
The Experience One AG website uses cookies. Cookies are pieces of data stored by the web browser on the user’s computer system. Cookies may be transmitted to a webpage when it is accessed, thereby enabling the user to be identified. Cookies help simplify the use of websites for users.
You may object to the use of cookies at any time by adjusting your browser settings accordingly. Cookies that have already been set can be deleted. Please note that if you disable cookies, you may not be able to use all features of our website to their full extent. User data collected in this manner is pseudonymized through technical measures. Consequently, it is no longer possible to link the data to the specific user accessing the site. The data is not stored together with any other personal data of the users. When visiting our website, users are informed via an information banner about the use of cookies for analytical purposes and are referred to this privacy policy. In this context, users are also informed about how to prevent the storage of cookies in their browser settings.
The legal basis for the processing of personal data using technically necessary cookies is Article 6(1)(f) of the GDPR. The legal basis for processing personal data using cookies for analytical purposes is Article 6(1)(a) of the GDPR, provided the user has given their consent. Please refer to our cookie banner and the information in this Privacy Policy to determine whether and to what extent cookies are used on our website.
Description and Purpose
This website uses Usercentrics’ cookie consent technology to obtain your consent to the storage of certain cookies on your device and to document and record this consent in compliance with data protection regulations. As soon as you access this website, the following personal data is transmitted to Usercentrics:
Your consent(s) or the revocation of your consent(s)
Your IP address
Information about your browser (HTTP agent, HTTP referrer),
Information about your device
Time of your visit to the website
The following additional data is also collected:
Opt-in and opt-out data
Referrer URL
User agent
User settings
Consent ID and consent number
Information on whether consent is implicit or explicit
Time (date and time) of consent
Consent type
Template version
Banner language
Furthermore, Usercentrics stores a cookie in your browser to be able to associate the consents you have granted or their revocation with you. The data collected in this manner is stored until you request that we delete it, delete the Usercentrics cookie yourself, or the purpose for storing the data no longer applies. Mandatory statutory retention requirements remain unaffected.
Legal Basis
Usercentrics is used to obtain the legally required consents for the use of cookies. The legal basis for the processing of your personal data is Article 6(1)(c) of the GDPR.
Recipient
The recipient of your personal data is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich.
Transfer to Third Countries
Your personal data will not be transferred to a third country. However, we are aware of our responsibility and regularly review the framework conditions and legal changes. In the event that a transfer to a third country does occur, we will update this information as soon as possible.
Duration of Data Storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In addition, the data will be deleted if you exercise your right to erasure within the meaning of Article 17(1) of the GDPR.
Contractual and Legal Obligations
Furthermore, you must provide those personal data that we are legally obligated to collect (or) the provision of which is necessary to fulfill a legal obligation. The legal obligation is established by Union law or the law of the Member States to which the controller is subject. In this case, the legal obligation arises from: Section 25(1) of the German Teleservices Data Protection Act (TTDSG) in conjunction with Article 7 of the GDPR. Failure to provide the data would result in this legal obligation not being fulfilled.
Additional Privacy Information
You can find further information regarding the processing of your personal data here:
Each time the website is accessed, Experience One AG collects data and information through an automated system. This data is stored in the server’s log files. The data is also stored in our system’s log files. This data is not stored together with any other personal data of the user.
The following data may be collected:
(1) Information about the browser type and version used
(2) The user’s operating system
(3) The user’s Internet service provider
(4) The user’s IP address
(5) Date and time of access
(6) Websites from which the user’s system accesses our website (referrer)
(7) Websites accessed by the user’s system via our website
Personal data is stored for the duration of the applicable statutory retention period. Once this period has expired, the data is routinely deleted, unless it is necessary for the initiation or fulfillment of a contract.
The data controller processes and stores the data subject’s personal data only for as long as is necessary to achieve the purpose of storage. Data may also be stored to the extent that this is provided for by European or national legislation in EU regulations, laws, or other provisions to which the data controller is subject. As soon as the purpose of storage no longer applies or a retention period prescribed by the aforementioned provisions expires, the personal data is routinely blocked or deleted.
If your personal data is being processed, you are a data subject within the meaning of the GDPR, and you have the following rights vis-à-vis the controller:
Right of access pursuant to Art. 15 of the GDPR
You may request confirmation from the controller as to whether we are processing personal data concerning you. If such processing is taking place, you may request the following information from the controller:
You have the right to request information regarding whether your personal data is transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Article 46 of the GDPR in connection with the transfer.
Right to Rectification pursuant to Article 16 of the GDPR
You have the right to request that the controller rectify and/or complete your personal data if the personal data concerning you that is being processed is inaccurate or incomplete. The controller must carry out the rectification without delay.
Right to Erasure pursuant to Article 17 of the GDPR
(1) You may request that the controller erase your personal data without undue delay, and the controller is obligated to erase such data without undue delay if any of the following grounds apply:
(2) If the controller has made your personal data public and is obligated to erase it pursuant to Article 17(1) of the GDPR, the controller shall, taking into account available technology and the cost of implementation, take appropriate measures, including technical measures, to inform controllers who process the personal data that you, as the data subject, have requested the erasure of all links to such personal data or of copies or replicas of such personal data.
(3) The right to erasure does not apply where the processing is necessary
Right to restriction of processing pursuant to Article 18 of the GDPR
You may request the restriction of the processing of your personal data under the following conditions:
If the processing of your personal data has been restricted, such data—apart from its storage—may be processed only with your consent, or for the purpose of asserting, exercising, or defending legal claims, or to protect the rights of another natural or legal person, or for reasons of an important public interest of the Union or a Member State. If processing has been restricted in accordance with the above conditions, the controller will notify you before the restriction is lifted.
Right to be informed pursuant to Art. 19 GDPR
If you have exercised your right to rectification, erasure, or restriction of processing with the controller, the controller is obligated to notify all recipients to whom your personal data has been disclosed of such rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed by the controller about these recipients.
Right to Data Portability pursuant to Article 20 of the GDPR
You have the right to receive your personal data, which you have provided to the controller, in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that
Right to Object under Art. 21 GDPR
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data carried out pursuant to Art. 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions. The controller will no longer process your personal data unless it can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims. If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, your personal data will no longer be processed for those purposes. In connection with the use of information society services—notwithstanding Directive 2002/58/EC—you have the option to exercise your right to object using automated procedures that employ technical specifications.
Right to Withdraw Consent Under Data Protection Law Pursuant to Art. 7(3) of the GDPR
You have the right to withdraw your consent to data processing at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to its withdrawal.
Right to lodge a complaint with a supervisory authority pursuant to Article 77 of the GDPR
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement, if you believe that the processing of your personal data violates the GDPR. The supervisory authority to which the complaint was submitted shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.
Automated Decision-Making in Individual Cases, Including Profiling
You have the right not to be subject to a decision based solely on automated processing—including profiling—that produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision
However, these decisions may not be based on special categories of personal data as defined in Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) applies and appropriate measures have been taken to protect your rights and freedoms as well as your legitimate interests.
With regard to the cases mentioned in a. and c., the controller shall take appropriate measures to safeguard your rights, freedoms, and legitimate interests, including, at a minimum, the right to request human intervention by the controller, to present your point of view, and to contest the decision.
Description and Purpose
It may happen that third-party content, such as videos, fonts, or graphics from other websites, is embedded within this online service. This always requires that the providers of this content (hereinafter referred to as “third-party providers”) obtain the user’s IP address. Without the IP address, they would not be able to send the content to the user’s browser. The IP address is therefore necessary for displaying this content. We make every effort to use only content whose respective providers use the IP address solely for the purpose of delivering the content. However, we have no control over whether third-party providers store the IP address, for example, for statistical purposes. To the best of our knowledge, we inform users of this. We use these integrations to provide and improve our online service.
Legal Basis
The legal basis for integrating other third-party services and content is Article 6(1)(f) of the GDPR. Our overriding legitimate interest lies in the desire to present our online presence appropriately and to provide user-friendly and economically efficient services. For further information, please refer to the respective privacy policies of the providers.
Contractual or Legal Obligation to Provide Personal Data
The provision of personal data is neither required by law nor by contract, nor is it necessary for the conclusion of a contract. You are also not obligated to provide personal data. However, failure to provide such data may, under certain circumstances, result in your inability to use this feature or to use it to its full extent.
The controller may transfer personal data to a third country. In principle, the controller can ensure an adequate level of protection for the processing through various appropriate safeguards. Data transfers may be carried out on the basis of an adequacy decision, internal data protection policies, approved codes of conduct, standard data protection clauses, or an approved certification mechanism in accordance with Article 46(2)(a)–(f) of the GDPR.
If the controller transfers data to a third country on the legal basis of Article 49(1)(a) of the GDPR, you will be informed here about the potential risks of a data transfer to a third country.
There is a risk that the third country receiving your personal data may not provide a level of protection equivalent to that of the European Union. This may be the case, for example, if the European Commission has not issued an adequacy decision for the respective third country or if certain agreements between the European Union and the respective third country are declared invalid. Specifically, in some third countries there are risks regarding the effective protection of EU fundamental rights due to the application of surveillance laws (for example, the United States). In such a case, it is the responsibility of the controller and the recipient to assess whether the rights of data subjects in the third country enjoy a level of protection equivalent to that in the Union and can also be effectively enforced.
However, the General Data Protection Regulation is intended to ensure that the level of protection guaranteed throughout the Union for natural persons is not undermined when personal data is transferred from the Union to controllers, processors, or other recipients in third countries or to international organizations, even where personal data is further transferred from a third country or an international organization to controllers or processors in the same or another third country, or to the same or another international organization.
Description and Purpose
We use Google Tag Manager (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) on our website. Google Tag Manager allows us to manage website tags through a single interface and is a cookie-free domain that does not collect personal information but may trigger other tags that collect data. Google pseudonymizes the data, and the IP address transmitted by your browser as part of Google Analytics is not combined with other data held by Google.
Legal Basis
The legal basis for the processing of your personal data is Article 6(1)(a) of the GDPR.
Recipient
The recipient of your personal data is Google LLC. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).
Transfer to Third Countries
Personal data is transferred to the United States. The transfer is subject to appropriate safeguards pursuant to Article 46 of the GDPR. To this end, we have, where necessary, entered into appropriate safeguards within the meaning of Article 46(2) of the GDPR with the data importer. Furthermore, we are aware of our responsibilities and, where necessary, take additional measures to protect the rights and freedoms of natural persons, thereby ensuring the protection of personal data.
Duration of Data Storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. Furthermore, the data will be deleted if you exercise your right to erasure within the meaning of Article 17(1) of the GDPR.
Withdrawal
You have the right to withdraw your consent at any time, see Article 7(3), sentence 1 of the GDPR. This may be done informally and without providing reasons, and takes effect for the future. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal. Further information on this can be found above in our Privacy Policy under “Rights of Data Subjects.”
Contractual and Legal Obligation
There is no contractual or legal obligation to provide the data.
Additional Privacy Information
Further information on the processing of your personal data can be found here:
https://policies.google.com/privacy?hl=de&gl=de
Description and Purpose
To protect your orders submitted via the online form, we use the reCAPTCHA service (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), which is equipped with an advanced risk analysis engine and adaptive challenges to protect against malware and abusive activities. The verification process is designed to distinguish whether the input is being made by a human or is the result of abusive automated processing. reCAPTCHA collects IP addresses and anonymizes them; typically, truncated IP addresses are transmitted. The IP address transmitted by your browser as part of reCAPTCHA is not combined with other data held by Google. Further information about reCAPTCHA can be found here.
Legal Basis
The legal basis for the processing of your personal data is Article 6(1)(a) of the GDPR.
Recipient
The recipient of your personal data is Google LLC. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)
Transfer to Third Countries
Personal data is transferred to the United States. The transfer is subject to appropriate safeguards in accordance with Article 46 of the GDPR. To this end, we have, where necessary, entered into appropriate safeguards within the meaning of Article 46(2) of the GDPR with the data importer. Furthermore, we are aware of our responsibilities and, where necessary, take additional measures to protect the rights and freedoms of natural persons, thereby ensuring the protection of personal data.
Data Retention Period
The data is automatically deleted after 14 months. Data for which the retention period has expired is automatically deleted once a month.
Withdrawal of Consent
You have the right to withdraw your consent at any time, see Article 7(3), first sentence, of the GDPR. This may be done informally and without providing a reason, and takes effect for the future. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal. Further information on this can be found above in our Privacy Policy under “Rights of Data Subjects.”
Contractual and Legal Obligation
There is no contractual or legal obligation to provide the data.
Additional Privacy Information
Further information on the processing of your personal data can be found here:
https://policies.google.com/privacy?hl=de&gl=del
Description and Purpose
To draw attention to our current projects and developments, planned activities, and services, we run Google AdWords ads and use Google Conversion Tracking as part of this process. Google AdWords (Google Ads) is a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). These ads are displayed on websites within the Google Display Network based on search queries. We have the option to target our ads using specific search terms. In addition, we use AdWords remarketing lists for search ads. This allows us to tailor search ad campaigns to users who have previously visited our website. Through these services, we can combine our ads with specific search terms or display ads to previous visitors promoting, for example, services that they viewed on our website. Interest-based advertising requires an analysis of online user behavior. Google uses cookies to perform this analysis. When a user clicks on an ad or visits our website, Google sets a cookie on the user’s computer. This information is used to target the visitor with relevant ads during a subsequent search query. Further information on the cookie technology used can also be found in Google’s guidelines on website statistics and in its privacy policy. With the help of this technology, Google and we, as the client, receive information indicating that a user clicked on an ad and was redirected to our website to contact us via the contact form. Similarly, Google and we, as the client, receive information via Google referral numbers indicating that a user clicked on one of our phone numbers online and contacted us by phone. The information obtained in this way is used exclusively for statistical analysis to optimize ads. We do not receive any information that can be used to personally identify visitors. The statistics provided to us by Google include the total number of users who clicked on one of our ads and, if applicable, whether they were redirected to a page on our website that is tagged with a conversion tag. Based on these statistics, we can determine which search terms resulted in our ad being clicked particularly often and which ads led users to contact us via the contact form or by phone. With regard to phone calls from prospective customers or clients, the statistics provided by Google include the start time, end time, status (missed or answered), duration (in seconds), the caller’s area code, call charges, and call types.
Legal Basis
The legal basis for the processing of your personal data is your consent pursuant to Article 6(1)(a) of the GDPR.
Recipient
The recipient of your personal data is Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). The data controller responsible for processing your information depends on your usual place of residence, unless otherwise specified in the privacy policy for a particular service:
Transfer to Third Countries
Personal data is transferred to the United States (server location). The transfer is subject to appropriate safeguards in accordance with Article 46 of the GDPR. To this end, we have entered into standard contractual clauses pursuant to Article 46(2)(c) of the GDPR with the data importer. Furthermore, we are aware of our responsibilities and, where necessary, take additional measures to protect the rights and freedoms of natural persons, thereby ensuring the protection of personal data.
Data Retention Period
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In addition, the data will be deleted if you exercise your right to erasure under Article 17(1) of the GDPR.
Withdrawal
You have the right to withdraw your consent at any time, see Art. 7(3), sentence 1 of the GDPR. This may be done informally and without providing a reason, and it takes effect for the future. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal. For more information on this, please see the section titled “Rights of Data Subjects” earlier in our Privacy Policy.
Contractual and Legal Obligations
There is no contractual or legal obligation to provide the data.
Additional Privacy Notices
For more information about the processing of your personal data, please visit: www.google.com/policies/privacy/
Description and Purpose
This website uses the “Google Analytics” service, provided by Google LLC, to analyze how users interact with the website. The service uses “cookies”—text files that are stored on your device. First-party cookies are used for this purpose. With a first-party cookie, the user can only be recognized by the site from which the cookie originates, not across multiple domains. The information collected by the cookies is generally sent to a Google server in the United States and stored there. Where applicable, Google Analytics is used on this website with the code “gat._anonymizeIp();” to ensure that IP addresses are collected anonymously (so-called IP masking). Please also note the following information regarding the use of Google Analytics: Users’ IP addresses are truncated within the member states of the EU and the European Economic Area. This truncation removes any personal reference from your IP address. For EU citizens, the IP address is also used only to derive location data and is then deleted. You also have the option to enable or disable the collection of detailed location and device data for individual regions (tracking settings). Additionally, Google Signals can be disabled to prevent association with a Google Account, and personalized ads can be disabled. Under the data processing agreement that the website operators have entered into with Google LLC, Google uses the collected information to analyze website usage and activity and to provide services related to internet usage.
Legal Basis
The legal basis for the processing of your personal data is Article 6(1)(a) of the GDPR.
Recipient
The recipient of your personal data is Google LLC. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).
Transfer to Third Countries
Personal data is transferred to the United States. The transfer is subject to appropriate safeguards in accordance with Article 46 of the GDPR. We have entered into standard contractual clauses with the data importer for this purpose. Furthermore, we are aware of our responsibility and, where necessary, take additional measures to protect the rights and freedoms of natural persons, thereby ensuring the protection of personal data.
Data Retention Period
The data will be erased as soon as it is no longer necessary for the purpose for which it was collected. Furthermore, the data will be deleted if you exercise your right to erasure within the meaning of Article 17(1) of the GDPR. The maximum retention period is 14 months.
Withdrawal
You have the right to withdraw your consent at any time, see Article 7(3), sentence 1 of the GDPR. This may be done informally and without providing reasons, and takes effect for the future. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal. Further information on this can be found above in our Privacy Policy under “Rights of Data Subjects.”
Contractual and Legal Obligations
There is no contractual or legal obligation to provide the data.
Additional Privacy Information
Further information regarding the processing of your personal data can be found here: https://support.google.com/analytics/answer/6004245?hl=de https://policies.google.com/privacy?hl=de&gl=de.
Description and Purpose
On our website, we use the LinkedIn Insight Tag service provided by LinkedIn Ireland Unlimited Company. This service sets a cookie that is stored on your device. As a result, LinkedIn collects data such as device characteristics, browser characteristics, URL, referrer URL, timestamp, and IP address. All collected data is encrypted and pseudonymized within seven days. This service enables us to display targeted advertising, create anonymous audiences, and view aggregated demographic information about our website visitors.
Legal Basis
The legal basis for the processing of your personal data is Article 6(1)(a) of the GDPR.
Recipient
The recipient of your personal data is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
Transfer to Third Countries
Through the use of this service, personal data may be transferred to a third country. In the event of a transfer of personal data, the provider ensures the level of protection required by the GDPR through compliance with Articles 44 et seq. of the GDPR. If no adequacy decision exists with respect to the third country in which the data importer is established, the transfer is subject to appropriate safeguards. If you have any questions, please contact our Data Protection Officer.
Data Retention Period
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In addition, the data will be deleted if you exercise your right to erasure within the meaning of Article 17(1) of the GDPR.
Withdrawal
You have the right to withdraw your consent at any time, see Article 7(3), sentence 1 of the GDPR. This may be done informally and without providing a reason, and takes effect for the future. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal. Further information on this can be found above in our Privacy Policy under “Rights of Data Subjects.”
Contractual and Legal Obligations
There is no contractual or legal obligation to provide the data.
Additional Privacy Information
Further information regarding the processing of your personal data can be found here: https://www.linkedin.com/legal/privacy-policy?trk=content_footer-privacy-policy
Description and Purpose
We use HubSpot (HubSpot, 2nd Floor, 30 North Wall Quay, Dublin 1, Ireland) for our online marketing activities. This is an integrated software solution that enables us to manage various aspects of our online marketing. These include, among other things:
Email marketing (newsletters and automated emails, e.g., to provide downloads), social media publishing and reporting, reporting (e.g., traffic sources, page views, etc.), contact management (e.g., user segmentation and CRM), landing pages, and contact forms.
Our registration service allows visitors to our website to learn more about our company, download content, and provide their contact information as well as additional demographic information. This information, along with the content of our website, is stored on servers belonging to our software partner HubSpot. We may use this information to contact visitors to our website and to determine which of our company’s services are of interest to them. All information we collect is subject to this Privacy Policy. We use all collected information exclusively to optimize our marketing activities.
Legal Basis
The legal basis for processing your personal data is Article 6(1)(a) (consent for live chat, the newsletter, and other performance measurements) and (f) of the GDPR. Our legitimate interest in using this service is to optimize our customer service and manage our contact information.
Recipient
The recipient of your personal data is HubSpot (2nd Floor, 30 North Wall Quay, Dublin 1, Ireland).
Transfer to Third Countries
At this time, it cannot be ruled out that personal data may be transferred to the United States of America. An adequacy decision (EU-US Data Privacy Framework) has been in effect for the U.S. since July 10, 2023. The parent company, HubSpot Inc., holds the corresponding certification under the EU-US Data Privacy Framework; therefore, an adequacy decision applies to transfers to third countries—specifically to the U.S.—to HubSpot Inc.
Duration of Data Storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In addition, the data will be deleted if you exercise your right to erasure within the meaning of Article 17(1) of the GDPR.
Withdrawal of Consent and Objection
In cases where processing is based on Article 6(1)(a) of the GDPR, you have the right to withdraw your consent at any time, see Article 7(3), first sentence, of the GDPR. This may be done informally and without providing a reason, and it takes effect for the future. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal. For more information on this, please see the section titled “Rights of Data Subjects” earlier in our Privacy Policy.
In cases where processing is based on Article 6(1)(f) of the GDPR, you have the right at any time, pursuant to Article 21(1) of the GDPR, to object to the processing of your personal data. If you exercise this right, processing for this purpose will no longer take place. Further information on this can be found above in our Privacy Policy under “Rights of Data Subjects.”
Contractual and Legal Obligation
There is no contractual or legal obligation to provide the data.
Additional Privacy Information
Further information regarding the processing of your personal data can be found here: https://legal.hubspot.com/privacy-policy
Description and Purpose
We use Vimeo, among other providers, to embed videos. Vimeo is operated by Vimeo LLC, headquartered at 555 West 18th Street, New York, New York 10011. On some of our web pages, we use plugins provided by Vimeo. When you visit pages on our website that include such a plugin—for example, our media library or e-learning section—a connection is established with the Vimeo servers, and the plugin is displayed. This transmits information to the Vimeo server about which of our web pages you have visited. If you are logged in as a Vimeo member at that time, Vimeo associates this information with your personal user account. When you use the plugin—for example, by clicking the play button on a video—this information is also associated with your user account. You can prevent this association by logging out of your Vimeo user account before using our website and deleting the relevant Vimeo cookies.
Legal Basis
The legal basis for the processing of your personal data is Article 6(1)(a) of the GDPR.
Recipient
The recipient of your personal data is Vimeo LLC, headquartered at 555 West 18th Street, New York, New York 10011.
Transfer to Third Countries
Personal data is transferred to the United States. The transfer is subject to appropriate safeguards in accordance with Article 46 of the GDPR. To this end, the provider has entered into standard data protection clauses with the data importer in accordance with Article 46(2)(c) of the GDPR. Furthermore, we are aware of our responsibility and, where necessary, take additional measures to protect the rights and freedoms of natural persons, thereby ensuring the protection of personal data.
Duration of Data Storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. Furthermore, the data will be deleted if you exercise your right to erasure within the meaning of Article 17(1) of the GDPR.
Withdrawal
You have the right to withdraw your consent at any time, see Article 7(3), sentence 1 of the GDPR. This may be done informally and without providing reasons, and takes effect for the future. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal. Further information on this can be found above in our Privacy Policy under “Rights of Data Subjects.”
Contractual and Legal Obligation
There is no contractual or legal obligation to provide the data.
Additional Privacy Information
Further information on the processing of your personal data can be found here:
https://vimeo.com/privacy
Beschreibung und Zweck
Wir nutzen die Plattform YouTube.com, um eigene Videos einzustellen und öffentlich zugänglich zu machen. Bei YouTube handelt es sich um das Angebot der Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Einige Internetseiten unseres Angebotes enthalten Links bzw. Verknüpfungen zu dem Angebot von YouTube. Generell gilt, dass wir für die Inhalte von Internetseiten, auf die verlinkt wird, nicht verantwortlich sind. Für den Fall, dass Sie einem Link auf YouTube folgen, weisen wir aber darauf hin, dass YouTube die Daten ihrer Nutzer (z.B. persönliche Informationen, IP-Adresse) entsprechend ihrer eigenen Datenverwendungsrichtlinien abspeichert und für geschäftliche Zwecke nutzt. Wir binden auf einigen unserer Internetseiten auch bei YouTube gespeicherte Videos unmittelbar ein. Bei dieser Einbindung werden in Teilbereichen eines Browserfensters Inhalte der YouTube Internetseite abgebildet. Die YouTube-Videos werden jedoch erst durch gesondertes Anklicken abgerufen. Diese Technik wird auch „Framing“ genannt. Wenn Sie eine (Unter-)Seite unseres Internetangebots aufrufen, auf der YouTube-Videos in dieser Form eingebunden sind, wird eine Verbindung zu den YouTube-Servern hergestellt und dabei der Inhalt durch Mitteilung an Ihren Browser auf der Internetseite dargestellt.
Rechtsgrundlage
Die Rechtsgrundlage der Verarbeitung Ihrer personenbezogenen Daten ist Art. 6 Abs. 1 lit. a) DSGVO.
Empfänger
Der Empfänger Ihrer personenbezogenen Daten ist die Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.
Übermittlung in Drittländer
Die personenbezogenen Daten werden in die Vereinigten Staaten übermittelt. Die Übermittlung erfolgt vorbehaltlich geeigneter Garantien gem. Art. 46 DSGVO. Wir haben dazu Standardvertragsklauseln mit dem Datenimporteur abgeschlossen. Darüber hinaus sind wir uns unserer Verantwortung bewusst und ergreifen, soweit erforderlich, zum Schutz der Rechte und Freiheiten natürlicher Personen weitere Maßnahmen, die den Schutz der personenbezogenen Daten sicherstellen.
Dauer der Datenspeicherung
Die Daten werden gelöscht, sobald sie für die Erreichung des Zweckes ihrer Erhebung nicht mehr erforderlich sind. Darüber hinaus werden die Daten gelöscht, wenn Sie Ihr Recht auf Löschung i. S. d. Art. 17 Abs. 1 DSGVO geltend machen.
Widerruf
Ihnen steht das Recht zu, Ihre erteilte Einwilligung jederzeit zu widerrufen, vgl. Art. 7 Abs. 3 S. 1 DSGVO. Dies kann formlos und ohne die Angabe von Gründen geschehen und erfolgt mit Wirkung für die Zukunft. Durch den Widerruf der Einwilligung wird die Rechtmäßigkeit, der bis zum Widerruf erfolgten Verarbeitung nicht berührt. Weitere Informationen hierzu finden Sie weiter oben in unserer Datenschutzerklärung unter “Rechte der betroffenen Personen”.
Vertragliche und gesetzliche Pflicht
Es besteht keine vertragliche oder gesetzliche Pflicht für die Bereitstellung der Daten.
Weitere Datenschutzhinweise
Weitere Informationen zur Verarbeitung Ihrer personenbezogenen Daten finden Sie hier:
Description and Purpose
Content from the Spotify streaming service is embedded on our website. The provider is Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden. When you visit a page with embedded Spotify content, a connection is established to Spotify’s servers. In the process, Spotify may receive information indicating that our website was visited via your IP address.
Legal Basis
The legal basis for the processing of your personal data is Article 6(1)(a) of the GDPR.
Recipient
The recipient of your personal data is Spotify AB, Regeringsgatan 19, SE-111 53 Stockholm, Sweden.
Transfer to Third Countries
Your personal data will not be transferred to a third country. However, we are aware of our responsibility and regularly review the framework conditions and legal changes. In the event that a transfer to a third country does occur, we will update this information as soon as possible.
Data Retention Period
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In addition, the data will be deleted if you exercise your right to erasure within the meaning of Article 17(1) of the GDPR.
Withdrawal
You have the right to withdraw your consent at any time, see Article 7(3), sentence 1 of the GDPR. This may be done informally and without providing a reason, and takes effect for the future. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal. Further information on this can be found above in our Privacy Policy under “Rights of Data Subjects.”
Contractual and Legal Obligation
There is no contractual or legal obligation to provide the data.
Additional Privacy Information
Further information on the processing of your personal data can be found here:
https://policies.google.com/privacy
Description and Purpose
We use the podcast hosting service Podigee provided by Podigee GmbH, Schlesische Straße 20, 10997 Berlin, Germany.
Podigee processes IP addresses and device information to facilitate podcast downloads and playback, as well as to generate statistical analyses of the use of our podcasts. When you access or play a podcast on our website, technical data is transmitted to Podigee’s servers.
Legal Basis
The legal basis for the processing of your personal data is Article 6(1)(f) of the GDPR. Our overriding legitimate interest lies in the technically flawless provision of our podcast content.
Recipient
The recipient of your personal data is Podigee GmbH, Schlesische Straße 20, 10997 Berlin, Germany.
Transfer to Third Countries
Your personal data will not be transferred to a third country. However, we are aware of our responsibility and regularly review the framework conditions and legal changes. In the event that a transfer to a third country does occur, we will update this information as soon as possible.
Duration of Data Storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In addition, the data will be deleted if you exercise your right to erasure within the meaning of Article 17(1) of the GDPR.
Objection
Pursuant to Article 21(1) of the GDPR, you have the right to object to the processing of your personal data at any time. If you exercise this right, processing for this purpose will no longer take place. For more information on this, please see the section titled “Rights of Data Subjects” earlier in our Privacy Policy.
Contractual or Legal Obligation
There is no contractual or legal obligation to provide the data.
Additional Privacy Information
You can find more information about the processing of your personal data here: Privacy Policy | Podigee
Description and Purpose
On our website, we offer you the opportunity to book your participation in events. To do this, we use the “Eventbrite” platform, which is operated by Eventbrite Inc. Eventbrite is a ticket booking and registration platform and collects personal data when you voluntarily provide such information as part of registering for an event. If you register for an event, subscribe to notifications, participate in a contest, or otherwise provide your personal data (for example, by filling out a web form) to contact an organizer or participate in an organizer’s event, the relevant organizer will have access to this data.
Legal Basis
The legal bases for the processing of your personal data are Article 6(1)(b) and (f) of the GDPR. Our overriding legitimate interest lies in protecting the security and integrity of our systems.
Recipient
The recipient of your personal data is Eventbrite Inc. (535 Mission Street, 8th Floor, San Francisco, CA 94103, USA).
Transfer to Third Countries
Personal data is transferred to the United States. The transfer is subject to appropriate safeguards in accordance with Article 46 of the GDPR. To this end, we have entered into standard contractual clauses pursuant to Article 46(2)(c) of the GDPR with the data importer. Furthermore, we are aware of our responsibility and, where necessary, take additional measures to protect the rights and freedoms of natural persons, thereby ensuring the protection of personal data.
Data Retention Period
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. Furthermore, the data will be deleted if you exercise your right to erasure within the meaning of Article 17(1) of the GDPR.
Objection
Pursuant to Article 21(1) of the GDPR, you have the right to object to the processing of your personal data at any time. If you exercise this right, processing for this purpose will no longer take place. For more information on this, please see the section titled “Rights of Data Subjects” earlier in our Privacy Policy.
Contractual and Legal Obligation
There is no contractual or legal obligation to provide the data.
Additional Privacy Information
Further information regarding the processing of your personal data can be found here: https://www.eventbrite.de/support/articles/de/Troubleshooting/datenschutzrichtlinien-von-eventbrite?lg=de
Description and Purpose
We use Sanity’s headless content management system (CMS) and content delivery network (CDN) to manage and deliver the content on our website. The provider is Sanity AS, Thorvald Meyers gate 49, 0555 Oslo, Norway.
Legal Basis
The legal basis for the processing of your personal data is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the technically error-free, secure, and efficient delivery of our website content.
Recipient
The recipient of your personal data is Sanity AS, Thorvald Meyers gate 49, 0555 Oslo, Norway.
Transfer to Third Countries
It cannot currently be ruled out that, in connection with the use of Sanity, personal data may be processed outside the European Union (EU) or the European Economic Area (EEA). Sanity uses international infrastructure and subprocessors. To the extent that personal data is transferred to countries outside the EU or the EEA and no adequacy decision by the European Commission exists for those countries, the transfer is based on appropriate safeguards in accordance with Article 46 of the GDPR, in particular through the conclusion of the European Commission’s Standard Contractual Clauses (SCCs) and, where necessary, supplementary technical and organizational measures.
Duration of Data Storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In addition, the data will be deleted if you exercise your right to erasure within the meaning of Article 17(1) of the GDPR.
Objection
Pursuant to Article 21(1) of the GDPR, you have the right to object to the processing of your personal data at any time. If you exercise this right, processing for this purpose will no longer take place. For more information on this, please see the “Rights of Data Subjects” section earlier in our Privacy Policy.
Contractual and Legal Obligation
There is no contractual or legal obligation to provide the data.
Additional Privacy Information
You can find more information about the processing of your personal data here:
Privacy Policy | Sanity
Description and Purpose
We host our website on the Vercel platform. The provider is Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit our website, technically necessary data is processed to make the website available and to ensure the security and stability of the service.
Legal Basis
The legal basis for the processing of your personal data is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure and efficient provision of our website.
Recipients
The recipient of your personal data is Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA.
Transfer to Third Countries
Personal data is transferred to the United States. The transfer is subject to appropriate safeguards in accordance with Article 46 of the GDPR. To this end, we have entered into standard contractual clauses with the data importer. Furthermore, we are aware of our responsibility and, where necessary, take additional measures to protect the rights and freedoms of natural persons, thereby ensuring the protection of personal data.
Data Retention Period
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. Furthermore, the data will be deleted if you exercise your right to erasure within the meaning of Article 17(1) of the GDPR.
Objection
Pursuant to Article 21(1) of the GDPR, you have the right to object to the processing of your personal data at any time. If you exercise this right, processing for this purpose will no longer take place. For more information on this, please see the section titled “Rights of Data Subjects” earlier in our Privacy Policy.
Contractual and Legal Obligation
There is no contractual or legal obligation to provide the data.
Additional Privacy Information
Further information regarding the processing of your personal data can be found here:
https://vercel.com/legal/privacy-notice
Description and Purpose
We use the Postal email delivery platform to send transactional emails (e.g., contact requests, registration confirmations, password reset emails, or other system notifications). Postal is open-source software for sending emails that is operated on our own servers.
Legal Basis
The legal basis for the processing of your personal data is Article 6(1)(f) of the GDPR. Our overriding legitimate interest in this regard is to ensure efficient and secure electronic communication.
Recipients
The recipients of the personal data are the respective hosting providers who process data in connection with email delivery. These include, in particular, the hosting provider on whose servers the Postal software is operated, as well as the email providers receiving the respective message (e.g., Microsoft, Google, or other email services used by the recipient).
Transfer to Third Countries
Your personal data is not transferred to a third country. However, we are aware of our responsibility and regularly review the relevant conditions and legal changes. In the event that a transfer to a third country does occur, we will update this information as soon as possible.
Duration of Data Storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In addition, the data will be deleted if you exercise your right to erasure pursuant to Article 17(1) of the GDPR.
Objection
Pursuant to Article 21(1) of the GDPR, you have the right to object to the processing of your personal data at any time. If you exercise this right, processing for this purpose will no longer take place. For more information on this, please see the “Rights of Data Subjects” section earlier in our Privacy Policy.
Contractual and Legal Obligation
There is no contractual or legal obligation to provide the data.
By submitting their application to us, applicants consent to the processing of their data for the purposes of the application process in accordance with the manner and scope set forth in this Privacy Policy. The legal basis for the processing of applicant data is Article 88 of the GDPR, Section 26 of the BDSG-neu, and Article 9(2)(b) of the GDPR. To the extent that special categories of personal data within the meaning of Article 9(1) of the GDPR are voluntarily provided as part of the application process, their processing is additionally carried out in accordance with Article 9(2)(b) of the GDPR (e.g., health data, such as severe disability status or ethnic origin). To the extent that special categories of personal data within the meaning of Article 9(1) of the GDPR are requested from applicants as part of the application process, their processing is additionally carried out in accordance with Article 9(2)(a) of the GDPR (e.g., health data, if such data is necessary for the performance of the job). If available, applicants may submit their applications to us via an online form on our website.
For this purpose, we use the Kenjo service provided by Kenjo GmbH, Donaustraße 44, 12043 Berlin. Kenjo is HR software (Human Resources Software) for small and medium-sized businesses. The platform supports HR departments in managing employees and automating HR processes. The data is transmitted to us in encrypted form using state-of-the-art technology.
Applicants may also submit their applications to us via email (jobs@experienceone.com). However, please note that emails are generally not sent in encrypted form, and applicants must ensure encryption themselves. We therefore cannot assume any responsibility for the transmission of the application between the sender and our server and recommend using an online form or sending the application by mail instead. In addition to applying via the online form or email, applicants still have the option of sending their application to us by mail.
The data provided by applicants may be further processed by us for the purposes of the employment relationship in the event of a successful application. Otherwise, if the application for a job opening is unsuccessful, the applicants’ data will be deleted. Applicants’ data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time. The data will be deleted after a period of six months has elapsed, so that we can answer any follow-up questions regarding the application and fulfill our documentation obligations under the General Equal Treatment Act. Invoices for any travel expense reimbursements will be archived in accordance with tax regulations.
To the extent permitted or required by law, or to the extent that you have given your consent, we also disclose your personal data to other recipients who provide services to us. In doing so, we limit the disclosure of your personal data to what is strictly necessary. In some cases, our service providers receive your personal data as data processors and are then strictly bound by our instructions when handling your personal data (Data Processing Agreement pursuant to Art. 28 of the GDPR). In other cases, the recipients act independently with the data we transfer to them. The following categories of service providers/recipients may receive your data:
The service providers we engage must comply with strict confidentiality requirements. They are granted only the access to your data necessary to perform their assigned tasks.
In the event of a suspected criminal offense, data may be disclosed to law enforcement authorities.
We have implemented comprehensive technical and operational safeguards to protect your data from accidental or intentional tampering, loss, destruction, or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological advancements. In addition, we ensure ongoing data protection through continuous auditing and optimization of our data protection organization.
Experience One AG reserves all rights to make changes and updates to this Privacy Policy. This Privacy Policy was prepared by Keyed GmbH.