B. Collection and Processing of Your Personal Data When Using Our Website
1. Technical Provision of the Website, Hosting
For the informational use of our website, you generally do not need to actively provide personal data. Each time you use the internet, your browser is transmitting certain information which we store in so-called log files, such as:
- Date and time of retrieval of one of our web pages;
- your IP address;
- the hostname of the connecting device;
- the website from which our website was accessed;
- following websites that were accessed via our website;
- the page visited on our website;
- the transmitted amount of data and the access status (file transmission, file not found etc.);
- your browser type and version used;
- the operating system used.
The temporary storage of the data is necessary for the course of a website visit to enable delivery of the website. Further storage of the log files takes place in order to ensure the functionality of the website and the security of the information technology systems (especially to prevent abusive attacks, so-called DDoS attacks). Unless otherwise specified, your IP address will be shortened as soon as possible so that it is no longer possible to identify you. The legal basis for the temporary storage is to provide you with our website for the fulfillment of a contract or to processing operations necessary for the implementation of pre-contractual measures. The legal basis for further storage with a shortened IP address is our legitimate interest to protect our information technology systems. A personal evaluation of the data, in particular for marketing purposes, does not take place without prior consent.
2. Security and Performance
a. Technical Security of this Website
To ensure the technical stability of our service, we monitor it using Tenable, Inc., 6100 Merriweather Drive, 12th Floor, Columbia, MD 21044, USA and Acunetix Security Scanner, a service of Invicti Security, 220 Industrial Blvd., Suite 102, Austin, TX 78745 (USA)
Among other things, this allows code errors to be identified and then corrected. Sentry does not process data for advertising purposes or for the purpose of analysing your usage behaviour. Information on possible causes of errors is collected anonymously or anonymised immediately after collection.
The legal basis for the use of Sentry is our legitimate interests in a secure and user-friendly design of our services.
We have concluded a data processing agreement with Sentry, on the basis of which Sentry may only process and delete your personal data on our instruction.
In addition, we have concluded European standard contractual clauses with the provider, with which the provider has undertaken to comply with European data protection law for the services it provides. Furthermore, we have agreed with Sentry on the encryption of data during transmission and in the stored state as additional measures.
You can find further information at https://tenable.com/privacy-policy and https://www.acunetix.com/privacy-policy
b. Content Delivery Network and Web Application Firewall (CloudFlare)
This website uses CloudFlare (Service Provider: Cloudflare Inc., 101 Townsend Street, San Francisco, California 94107, USA) to safeguard our website (Web Application Firewall) and optimise loading times (Content Delivery Network).
When you load our website, your requests are routed by the CloudFlare Server and statistical data about your visit is being collected and stored on a cookie on your device. This data includes your IP-address, accessed websites, type and version of your browser, your operating system, the referrer-URL (the site, from where you reached us), the length of your stay and the frequency of requests on our pages. The analysis based on this data is necessary to detect and defend attacks. Cookies are used to recognise your device. An analysis for the purpose of statistical evaluation or for advertising purposes is not performed.
CloudFlare guarantees by means of standard contractual clauses to maintain the EU level of data protection.
The legal basis is our legitimate interest in safeguarding and optimizing the functionality of our website.
For further details, please see www.cloudflare.com/privacypolicy.
3. Other plugins and embedded third-party content
a. Google Fonts
This website uses Google Fonts of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Holding Company: Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA). Google Fonts is an interactive register with over 800 fonts, that Google provides free of charge.
Google Fonts is an important tool, to keep the high quality of our website. With Google Fonts we can use fonts without having to upload them to our servers. These fonts are automatically optimised for the web and there save data traffic and result in quicker loading times.
Google Fonts supports all established browsers and works reliantly on most mobile devices.
The legal basis is formed by our legitimate interests in the efficient and secure provision of the website.
Google Fonts does not set any cookies on your device. The data is requested via the google-domains fonts.googleapis.com and fonts.gstatic.com. According to Google, these requests are processed separately from other services Google provides. This includes your Google account, if you have one.
Google captures the usage of CSS (Cascading Style Sheets) as well as the fonts used and saves this data securely. Google stores CSS-requests for a day on their servers, which mostly are located outside of the EU. Insofar as Google Ireland Limited transfers personal data to the US parent company Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, Google guarantees by means of standard contractual clauses to maintain the EU level of data protection. Google’s goal is to improve loading time of websites by caching the fonts once and then using them again on any other website that uses Google Fonts. Next to this data, every Google Fonts request also automatically transmits data like your IP-address, language settings, screen resolution, name, and version of your browser to the Google Servers. This is necessary to ensure a correct graphical display.
4. Newsletter
We use your personal data to send you our newsletters and to inform you about news from our company, new services, new products, and events tailored to your interests. This includes information on current or future range of services and products as well as functions and events with participation of our company or group companies (e.g. trade fairs). To send you the newsletter, we need your e-mail address. The legal basis for the processing is your consent. We will use the personal data you provided during registration exclusively for sending our newsletter. After the registration of your e-mail address, you will receive an e-mail from us asking for you to confirm that you wish to receive the newsletter by clicking a link. If the confirmation by hyperlink is not given within a period of 7 days, your information will be blocked and deleted after a month. We are also entitled to keep your IP addresses, and times of registration and confirmation times to verify your registration and to appropriately clarify any possible misuse of your personal data.
We can analyse our newsletter campaigns. When you open an e-mail, a file contained in the e-mail (so-called web-beacon) connects to our newsletter-server. This makes it possible to determine whether a newsletter message has been opened and which links, if any, have been clicked on. In addition, technical information is recorded (e.g. time of retrieval, IP address, browser type and operating system). This information cannot be assigned to the respective newsletter recipient. It is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients. If you do not want any analysis, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message.
The legal basis for this is your consent and the necessity for compliance with a legal obligation to which we are subject. The legal basis for the transfer to a third country is as well your consent. Please note that the level of EU data protection cannot be guaranteed in the third country. In particular, effective legal remedies against official access to your personal data may not exist.
Your data will be processed in an electronic newsletter system for the duration of your subscription. For this purpose and for sending the newsletter, we use the processor "HubSpot" of the provider HubSpot Ireland Ltd, One Dockland Central, Guild Street, Dublin 1, Co. Dublin, Ireland (US parent company HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA), which processes the data on our behalf.
If personal data is transferred to the US parent company HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA, HubSpot guarantees by means of standard contractual clauses plus UK Data Transfer Addendum to maintain EU and UK data protection level. For more information, please visit https://legal.hubspot.com/security. For more information about HubSpot's privacy policy, please visit https://legal.hubspot.com/privacy-policy.
Since we base our processing on your consent, this means that you have the right to withdraw your consent at any time or to object to the processing of your personal data for the purpose of sending the newsletter. If you do so, we will immediately remove you from our newsletter distribution list to comply with your request. You can withdraw your consent at any time by sending an e-mail to our data protection officer or by following the instructions at the end of a promotional/newsletter e-mail. If you send us an e-mail, please let us know what your withdrawal should refer to so that we can assign your request.
5. Commercial Services
In order to provide pre-contractual and contractual services, to issue invoices, for the purpose of customer support, to fulfil entrepreneurial and other legal obligations and for the purpose of internal organisation and administration, we need to process personal data provided by you. As part of the data collection process, we will inform you which categories of data are required for this purpose. These are usually contact data, payment data (type of payment, invoices, payment history), detailed data on the contract (actual service, contract term, remuneration information).
Beyond the end of the contractual services (including continuing obligations), there may be legal obligations to store your personal data. Relevant here are, in particular, retention obligations under tax and commercial law. In addition, we need to store personal data insofar as guarantee or warranty periods are running.
a. Account Registration
You may register a customer account. Registration of domain names or the use of our other commercial services is only possible if you have a registered account. You will need to provide some personal data during the registration process, which is marked with "mandatory field". These are generally the following categories of data:
Contact Name (First Name, Last Name), Address, City, Zip Code, Country Phone number, E-Mail address
In addition, the date and time of registration and the used IP-address are stored.
If you are registering an account as a company, we furthermore collect the following data:
Company/Organisation, Tax registration number
We will use this data for identification of customers and to administer your account. Additionally, the data will be used to pre-fill your domain name registration forms when you register an account. The legal basis for the data processing is the necessity to process personal data for the fulfilment of a contract or to process operations necessary for the implementation of pre-contractual measures.
Additionally, you may voluntarily provide further categories of data. This data will be processed for our legitimate interest of additional verification and quicker communication.
Furthermore, you will choose a User-ID and a password to log into your account. Please make sure that no unauthorised person gets access to the log-in credentials for your account.
A registered account is necessary to register domain names. For the processing of your personal data for domain name registrations, please refer to our Domain Name Registration Privacy Policy.
b. Payment
We use various payment methods from third party payment providers. If you choose one of these payment methods, your payment data will be forwarded to the respective payment service provider for payment processing. These third-party providers process your personal data as an independent controller according to their privacy terms. The transfer is based on the fulfilment of the contract and on our legitimate interests in secure payment processing and fraud prevention.
Please refer to the Terms and Conditions, Terms of Use and Privacy Policy of the respective payment provider.
- PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=en_DE
- Alipay (Europe) Limited, 11-13, Boulevard de la Foire, L – 1528, Luxembourg. https://render.alipay.com/p/f/agreementpages/alipayglobalprivacypolicy.html
- Adyen N.V., Simon Carmiggelstraat 6 – 50, 1011 DJ Amsterdam. https://www.adyen.com/policies-and-disclaimer/cookie-policy
- Little Pay Ltd, contact for EU/EEA citizens: VeraSafe Ireland Ltd. Unit 3D North Point House North Point Business Park New Mallow Road Cork T23AT2P Ireland. https://littlepay.com/privacy-policy/
When selecting the payment methods purchase on account and instalment purchase, in particular the following personal data is processed by us or our payment service provider as a controller for the purpose of payment processing and in this context for identity and credit checks:
- Contact and identification information: name, date of birth, national identification number, title, billing and delivery address, e-mail address, mobile phone number; nationality, salary, etc.
- Payment information: debit and credit card data (card number, expiry date and the CVV check digit), account number, etc.
- Information about the processing of the order, such as product type, product number, price, etc.
In the event that the payment method "purchase on account" or "instalment purchase" is selected, we or our payment service provider may process personal data and information about the user's previous payment history as well as probability values for the user's payment history in the future (so-called scoring) in order to decide whether the payment method can be offered to the user. The scoring is calculated on the basis of scientifically recognised mathematical-statistical methods.
c. Direct Marketing
We have a legitimate interest (direct advertising) in advertising customers (persons with whom we have had a business relationship) by e-mail or post. In particular, we may send you news about our company or group companies, information on events and invitations to review our services and products.
For this purpose and for sending the newsletter, we use the processor “HubSpot“ HubSpot Ireland Ltd, One Dockland Central, Guild Street, Dublin 1, Co. Dublin, Ireland (US parent company HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA), which processes data on our instructions.
If personal data is transferred to the US parent company HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA, HubSpot guarantees by means of standard contractual clauses plus UK Data Transfer Addendum to maintain EU and UK data protection level. For more information, please visit https://legal.hubspot.com/security. For more information about HubSpot's privacy policy, please visit https://legal.hubspot.com/privacy-policy.
To send you advertising by post, we use a post service partner.
You can object to the sending of advertising at any time by sending an e-mail to our data protection officer or by following the instructions at the end of a promotional e-mail. If possible, please send your e-mail from the same e-mail address you used for registration, so that we can assign you more easily.
d. Domain Query (Whois)
We offer the possibility to obtain information about certain owner data of already registered domain names. In the event of a search query, the data you enter into the search field and the categories of data listed under “log files” are processed. The legal basis for the processing is the necessity to process personal data for the fulfilment of a contract or to process operations necessary for the implementation of pre-contractual measures in connection with the domain guidelines. Search requests are deleted no later than seven days after the request.
6. Contact, CRM
You can contact us by e-mail, telephone, fax and via our contact forms to request a quote or to conduct other correspondence.
In order to process your request, we process names, e-mail addresses, possibly the names of your company, position, mandatory information, which are absolutely necessary to create an offer. The processing of your data in the context of contact made by e-mail, a contact form or by telephone takes place on the basis of our legitimate interest to provide a good customer service or is necessary to fulfil a contract or to process operations necessary for the implementation of pre-contractual measures insofar as the contacts are related to contractual performance obligations such as the request of a dispute entry.
Contacting us for abuse and complaint messages requires users to log into their account. In addition, the categories of data listed in “log files” are processed. If you want to request a dispute entry, we also need your further contact details (last name, first name, address, name of the company) as well as a description of your request, stating the domain in question.
We will delete your contact requests immediately after processing unless statutory retention periods require continued retention. After answering your inquiry, we will archive your request immediately. Access is only possible to a very limited extent. Solely informative inquiries, i.e. which do not result in a contract or do not contain any other content that needs to be retained, will be deleted at the end of the year in which the request was made. See "Retention periods" for more information.
We use a ticket management system to process customer claims and inquiries by e-mail and via the contact forms. The legal basis for the processing is our legitimate interest in the efficient processing of requests.
When you use our contact form, we also process data about your location (country and city based on IP address), data obtained from our tracking system, and data about the browser and device used. We use the "HubSpot" service of the provider HubSpot Ireland Ltd, One Dockland Central, Guild Street, Dublin 1, Co. Dublin, Ireland (US parent company HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA) as part of the contact form. For this purpose, we have concluded a data processing agreement with HubSpot, in which HubSpot undertakes to process data only in accordance with our instructions. We process your data based on our legitimate interests (efficient processing of requests).
As soon as the contact form is filled out, this information is linked to HubSpot's tracking information if you have consented to this in the cookie settings at the outset. If the email address filled in the form can be linked to an existing contact, we can identify you as an existing contact. The legal basis is your consent, which can be given when you first visit the website. You can withdraw your consent at any time with effect for the future via the cookie settings.
Insofar as personal data is transferred to the US parent company HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA, HubSpot guarantees by means of standard contractual clauses plus UK Data Transfer Addendum to maintain EU and UK data protection level. For more information, please visit https://legal.hubspot.com/security. For more information about HubSpot's privacy policy, please visit https://legal.hubspot.com/privacy-policy.
Your inquiry and your contact data may be stored in a customer relationship management system ("CRM system") if a business relationship exists or if a business initiation can be expected on the basis of prior communication. We use the CRM system "HubSpot" of the provider HubSpot Ireland Ltd, One Dockland Central, Guild Street, Dublin 1, Co. Dublin, Ireland (US parent company HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA). For this purpose, we have concluded a data processing agreement with HubSpot, in which HubSpot undertakes to process user data only in accordance with our instructions. We process your data based on our legitimate economic interests in being able to systematically manage customer and potential customer contact data. In the case of personal data in the CRM system, a check is made after two years at the end of the respective calendar year to determine whether further storage is necessary. If there is no need to do so or if there are no further legal retention obligations, the data will be deleted. If personal data is transferred to the US parent company HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA, HubSpot guarantees by means of standard contractual clauses plus UK Data Transfer Addendum to maintain EU and UK data protection level. For more information, please visit https://legal.hubspot.com/security. For more information about HubSpot's privacy policy, please visit https://legal.hubspot.com/privacy-policy.
In addition, we use a ticket management system to process customer claims and inquiries via e-mail and the contact forms. For this purpose, we use cookies that are technically necessary to secure the technical functionality of the website and to protect the website from attacks by bots. These legitimate interests also constitute the legal basis for the processing. The legal basis for the processing is our legitimate interests in efficient processing of requests. We use the Zendesk ticket system, a platform of our processor Zendesk Inc, 1019 Market Street, San Francisco, CA 94103, to process customer inquiries by e-mail and via the contact forms. Further information can be found at https://www.zendesk.com/company/customers-partners/eu-data-protection/ We have concluded standard contractual clauses of the European Commission with Zendesk, whereby Zendesk assures to maintain European data protection levels.
7. Social-Media
Unless otherwise stated, we process your data on the basis of our legitimate interests in order to improve content and to make it more convenient for you to use. The purposes described coincide with our legitimate interests. If cookies are used in connection with the embedding of social media content, this is done on the basis of your consent.
a. Links to Social-Media Profiles
Our website integrates links to our presences on different social media sites. This is done via a linked graphic of the respective site. This prevents an automatic transfer of data to the site. A transfer will only take place when you click the link ad, being forwarded to the respective site. The respective site will then collect information whereby the data might be processed in the USA.
The collected data includes your IP-address, time, and date and from where you clicked the link. If you are logged into your social media account of the respective site, the site operator might assign the data to your account. You can prevent this by logging out on your social media account.
Links to the following social networks could be found at our site:
Facebook
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA.
Privacy Policy: https://www.facebook.com/policy.php
Instagram
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA.
Privacy Policy: https://www.instagram.com/legal/privacy/
Twitter
Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA.
Privacy Policy: https://twitter.com/privacy
LinkedIn
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA.
Privacy Policy: https://www.linkedin.com/legal/privacy-policy
Xing
New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany.
Privacy Policy https://privacy.xing.com/en
b. YouTube
This website uses YouTube, a service of the Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Holding Company: Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA) to embed videos.
The embedding improves our online presence by enabling us to provide you with information about our company and products in an easily accessible way.
By integrating the YouTube plugin, information about the use of this website including your IP-address is collected and send to a google server located in the United States. If you are logged into your YouTube or Google account, this data will be assigned to it. Otherwise, it will be assigned to a separate Ad-ID.
We use YouTube in its advanced privacy mode. According to YouTube, this means that data will only be transferred to YouTube servers when you start the video.
Insofar as Google Ireland Limited transfers personal data to the US parent company Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, Google guarantees by means of standard contractual clauses to maintain the EU level of data protection.
The legal basis is your consent. Upon the first visit to our website, we ask for your consent. Consent may be withdrawn at any time. This can be done by using our consent manager or by deleting the cookies in your browser.
YouTube permanently stores cookies on your device. If you do not agree to this processing, you have the option of preventing the installation of cookies in the settings in your browser.
Further information about purpose and extent of processing and the storage time can be found at https://policies.google.com/privacy.