Skip to main content

Privacy Policy / Protection of Your Personal Data

The protection of your personal data is important to us. Below, we inform you about the collection, processing, and use of your data in accordance with applicable data protection laws.

This privacy notice applies exclusively to the processing of personal data that is unrelated to the use of our Software-as-a-Service (SaaS) products. For information on data processing within our SaaS products, please refer to the specific privacy policies applicable to their use.

Data Controller and Contact Information

Nexato GmbH, represented by its Managing Directors, Marius Hornung and Marcus Wöhler, is responsible for processing your personal data.

For data protection inquiries, you can reach us at:

Postal Address
Nexato GmbH
Florengasse 18
36043 Fulda
Deutschland

Email
privacy@nexato.de

 

Your Rights as a Data Subject

As a data subject, you are entitled to the following rights concerning the personal data we process about you:

  • Access: You have the right to obtain confirmation as to whether or not personal data concerning you is being processed and, if so, access to the personal data and detailed information pursuant to Article 15 GDPR.
  • Rectification: Under Article 16 GDPR, you have the right to request the correction of inaccurate personal data concerning you or to have incomplete personal data completed without undue delay.
  • Erasure: You may request the deletion of your personal data in accordance with Article 17 GDPR if certain grounds apply, such as if the data is no longer necessary for the purposes for which it was collected.
  • Restriction of Processing: Under Article 18 GDPR, you may request the restriction of the processing of your data under certain conditions.
  • Data Portability: If the requirements of Article 20 GDPR are met, you have the right to request the transfer of your personal data in a structured, commonly used, and machine-readable format.
  • Objection: You have the right to object to the processing of your personal data under Article 21 GDPR when processing is based on legitimate interests (Art. 6(1)(f) GDPR). If processing is based on consent, you can withdraw this consent at any time.
  • Complaint: If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority under Article 77 GDPR. This can be a supervisory authority in the Member State of your habitual residence, workplace, or the place of the alleged violation. A list of supervisory authorities in Germany can be found here: https://www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html

 

Our Security Measures

We implement technical and organizational measures that comply with legal requirements to ensure a level of security appropriate to the risk. In doing so, we take into account:

  • The state of the art,
  • Implementation costs,
  • The nature, scope, context, and purposes of the processing,
  • The varying likelihood and severity of risks to the rights and freedoms of natural persons.

Our measures include, in particular:

  • Ensuring the confidentiality, integrity, and availability of data,
  • Access controls (physical access to data and systems),
  • User access controls (authorization levels for data access),
  • Input, transmission, availability, and separation controls.

Additionally, we have procedures in place to:

  • Facilitate the exercise of data subject rights,
  • Enable the secure deletion of data,
  • Respond to potential data breaches.

We incorporate privacy protection into the design and default settings of our hardware, software, and processes, in line with the principles of “Privacy by Design” and “Privacy by Default.”

 

1. Collection of General Information During Website Visits

1.1 Nature and Purpose of Processing

When you access our website without registering or providing information, general information is automatically collected. This information (server log files) includes details such as:

  • Browser type and version,
  • Operating system used,
  • Domain name of your Internet Service Provider,
  • IP address,
  • Other similar data.

This data is processed for the following purposes:

  • Ensuring a seamless connection to the website,
  • Ensuring smooth usability of the website,
  • Evaluating system security and stability,
  • Administrative purposes,
  • Potential further communication.

This data is not used to identify you personally. The information may, however, be statistically analyzed to improve our website and its technical infrastructure.

1.2 Legal Basis

The processing of data is based on our legitimate interest in ensuring the stability and functionality of our website (Article 6(1)(f) GDPR).

1.3 Recipients

Recipients of this data may include technical service providers responsible for the operation and maintenance of our website, acting as data processors.

1.4 Storage Duration

The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. For data required for website functionality, this typically occurs at the end of the browsing session.

1.5 Provision Mandatory or Required

Providing the aforementioned personal data is neither legally nor contractually required. However, without this data, the functionality and service of the website cannot be guaranteed, and certain features may be unavailable or limited.

 

2. Cookies

2.1 Nature and Purpose of Processing

Like many other websites, we use “cookies.” Cookies are small text files that are stored on your device (e.g., laptop, tablet, smartphone) when you visit our website. They help us gather specific information such as:

  • IP address,
  • Browser and operating system details,
  • Other technical data.

Cookies cannot launch programs or transfer viruses to your device. They facilitate navigation and help us display our website correctly.

We do not link cookie data with personal information or share it with third parties without your consent.

You may access our website without cookies. Most browsers accept cookies by default, but you can adjust your settings to disable cookies. Note that some website functions may be unavailable or limited if cookies are disabled.

2.2 Storage Duration and Types of Cookies

Depending on your browser settings or explicit consent, the following cookie types may be used on our website:

  • Necessary Cookies: Ensure essential website functionality.
  • Functional Cookies: Enhance features like saving user preferences.
  • Analytical Cookies: Help analyze user behavior for website improvement.
  • Marketing Cookies: Allow personalized content and advertising.

See the following Details about specific cookies used, their purpose, and retention periods:

Cookie Name Duration Description
wordpress_logged_in_[session id] Session Recognizes whether and with which session ID the user has logged in
wordpress_sec_[session id] Session Recognizes whether and with which session ID the user has logged in
cookie_notice_accepted 30 days Recognizes when the cookie notice has been accepted.
_ga 2 years Used to differentiate between users.
_gid 24 hours Used to differentiate between users.
_gat 1 minute Used to throttle the request rate. If Google Analytics is provided via Google Tag Manager, this cookie is renamed to _dc_gtm_<property-id>.
AMP_TOKEN 30 seconds up to 1 year Contains a token that can be used to retrieve a client ID from the AMP Client ID service. Other possible values are opt-out, inflight request or an error when retrieving a client ID from the AMP Client ID service.
_gac_<property-id> 90 days Contains campaign-related information for the user. If you have linked your Google Analytics and Google Ads accounts, this cookie will be read by Google Ads website conversion tags unless you opt out. Find out more.
ga-disable-<property-id> unlimited Recognizes when tracking by Google Analytics has been prevented by an opt-out link

Insofar as cookies may affect personal data, we will inform you in the respective sections of our privacy policy.

You can delete individual cookies or the entire cookie stock via the settings of your browser. You can also set your browser to block cookies in advance. You can find information on this in the support documentation of the most common browsers:

2.3 Withdrawing Cookie Consent

You can withdraw your cookie consent at any time by clicking the link below to reset your cookie settings:

Withdraw-Cookie-Settings

3. Use of the Chat Feature

We use HelpCrunch to offer live chat functionality and provide help center resources. HelpCrunch Corporation, based at 1811 Silverside Rd, Wilmington, DE 19810, USA, is the service provider.

3.1 Nature and Purpose of Processing

When you activate the chat feature, HelpCrunch temporarily collects:

  • Your IP address to determine your location,
  • Browser data to facilitate continued communication.

These cookies identify users for uninterrupted interactions and help optimize the chat service.

3.2 Legal Basis

The processing is based on our legitimate interest in providing effective customer support (Article 6(1)(f) GDPR).

3.3 Recipients and Third-Country Transfer

The data is processed by HelpCrunch Corporation in the USA under EU-approved Standard Contractual Clauses (SCCs).

3.4 Storage Duration

Chat logs and related data are stored for 180 days unless you request earlier deletion.

3.5 Data Transmission Control

To prevent HelpCrunch from processing data, you can disable cookies in your browser. Note that this may reduce website functionality. More information about HelpCrunch’s privacy practices can be found here: https://helpcrunch.com/privacy-policy.html

 

4. Provision of Paid Services

4.1 Nature and Purpose of Processing

When you purchase services from us, additional information (e.g., payment data) is required to fulfill contractual obligations.

4.2 Legal Basis

The data is processed to fulfill contractual obligations (Article 6(1)(b) GDPR).

4.3 Recipients

Third-party payment processors and other service providers may receive this data under data processing agreements.

4.4 Storage Duration

We retain this data for legal compliance, including six to ten years under German commercial and tax laws.

4.5 Provision Mandatory or Required

Providing payment and other necessary information is voluntary but required to enter into and perform a contract.

 

5. Applicant Data

We provide you with the opportunity to apply to us, either via an online form, postal mail, or email. Below, we outline the scope, use, and purpose of data processing during the application process. The collection, processing, and use of your data comply strictly with applicable data protection laws and other legal requirements. We handle your data confidentially at all times.

5.1 Scope and Purpose of Data Collection

We process your personal data insofar as it is necessary for decision-making regarding a potential employment relationship. This includes:

  • Application documents (e.g., CV, cover letter, references),
  • Contact and communication details,
  • Notes from interviews or telephone conversations.

The data is used exclusively for processing your application and making decisions about potential employment.

5.2 Legal Basis

The legal basis for data processing includes:

  • Section 26 BDSG: Data processing for purposes related to employment,
  • Article 6(1)(b) GDPR: Execution of pre-contractual measures,
  • Article 6(1)(a) GDPR: Consent for additional purposes (e.g., inclusion in an applicant pool).

You may withdraw your consent at any time with future effect. Data is shared only with individuals involved in the application process. If hired, your data will be stored for the duration of your employment under Section 26 BDSG and Article 6(1)(b) GDPR.

5.3 Storage Duration

If your application does not result in employment, is withdrawn, or the process otherwise concludes, your data will be retained for up to six months after the conclusion of the application process. The legal basis for this retention is Article 6(1)(f) GDPR and serves to defend against potential legal claims.

After six months, your data will be fully deleted unless:

  • Retention is necessary for legal defense,
  • Legal obligations (e.g., commercial or tax laws) prevent deletion,
  • You have expressly consented to longer storage (Article 6(1)(a) GDPR).
5.4 Inclusion in Applicant Pool

If no position is available, you may consent to be included in our applicant pool. This allows us to contact you for future opportunities.

Inclusion in the applicant pool requires your explicit consent under Article 6(1)(a) GDPR. Consent is voluntary and unrelated to the ongoing application process. You can withdraw your consent at any time. Applicant pool data is deleted after two years unless renewed consent is obtained.

 

6. Comments Feature

6.1 Nature and Purpose of Processing

When you leave comments on our website, we process:

  • Your comment,
  • The date and time of its creation,
  • The username you provide.

This data enables us to:

  • Provide the comment functionality,
  • Interact with you,
  • Protect against liability for illegal content posted by users.

Your details may also be used for follow-up questions.

6.2 Legal Basis

The processing is based on our legitimate interest under Article 6(1)(f) GDPR in providing a user-friendly comment feature and protecting against legal risks.

6.3 Recipients and Third-Country Transfer

The data may be shared with service providers acting as processors (e.g., hosting or maintenance providers). Data transfers to third countries only occur with appropriate safeguards (e.g., Standard Contractual Clauses).

6.4 Storage Duration

Data is deleted when the purpose for its collection no longer applies. Public comments may remain visible indefinitely unless you request their removal.

6.5 Provision Mandatory or Required

Providing your personal data is voluntary, but without it, you cannot use the comment feature.

 

7. Newsletter

7.1 Nature and Purpose of Processing

We process your data solely to send you our newsletter. This includes:

  • Your email address (required),
  • Your name (optional, for personalized communication).

We use a double-opt-in process to verify email ownership. The following is logged:

  • Newsletter subscription,
  • Confirmation email dispatch,
  • Receipt of your confirmation.

Your data is used exclusively for newsletter delivery and is not shared with third parties.

You can unsubscribe at any time using the link in each newsletter or by contacting us directly. Upon unsubscribing, your data is deleted.

7.2 Tracking and Objection Rights

The newsletter contains tracking features (e.g., web beacons, tracking links) to analyze your behavior, such as:

  • Opening the newsletter,
  • Clicking links,
  • Interacting with our website.

This data helps us tailor content to your interests. You can object to tracking by unsubscribing from the newsletter or contacting us.

7.3 Legal Basis

The processing is based on your explicit consent under Article 6(1)(a) GDPR.

7.4 Recipients and Third-Country Transfer

The data may be processed by third-party service providers. Any transfer to third countries occurs under adequate safeguards (e.g., Standard Contractual Clauses).

7.5 Storage Duration

Data is stored only as long as you subscribe to the newsletter. Upon unsubscribing, your data is deleted.

7.6 Provision Mandatory or Required

Providing your email address is voluntary, but without it, we cannot send you the newsletter.

 

8. Contact Forms

8.1 Nature and Purpose of Processing

Data entered into contact forms is processed to facilitate personalized communication and respond to your inquiry. At minimum, the following data is required:

  • Your name,
  • A valid email address or phone number,
  • Additional mandatory fields specific to the inquiry.

Optional fields may be included to help us better address your inquiry. Data is used solely for responding to your inquiries and follow-up communication.

8.2 Legal Basis

Processing is based on our legitimate interest under Article 6(1)(f) GDPR to provide an easy-to-use contact method and effectively process inquiries. If the inquiry concerns pre-contractual measures or contract fulfillment, Article 6(1)(b) GDPR also applies.

8.3 Recipients and Third-Country Transfer

Data may be shared with service providers acting as processors (e.g., for hosting or IT support). Transfers to third countries are subject to appropriate safeguards, such as Standard Contractual Clauses (SCCs).

8.4 Storage Duration

Data is deleted six months after the inquiry has been processed unless a contractual relationship arises. If a contract is established, data is stored according to statutory retention periods (e.g., commercial or tax laws).

8.5 Provision Mandatory or Required

Providing your data is voluntary. However, we cannot process your inquiry without your name, a valid email address or phone number, and the subject of your inquiry.

 

9. Microsoft Bookings

9.1 Nature and Purpose of Processing

We use Microsoft Bookings to provide an efficient way to schedule appointments. The service is provided by Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, or Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

The following personal data may be processed through Microsoft Bookings:

  • Contact and communication details: Name, email address, and phone number,
  • Appointment details: Time, date, type (e.g., virtual or on-site), and agenda,
  • Availability of Nexato staff,
  • Free-text fields for additional information.

Microsoft Bookings notifies participants via email about appointment confirmations and provides links for online meetings (e.g., Microsoft Teams).

9.2 Legal Basis

Processing is based on Article 6(1)(b) GDPR (contract fulfillment) to arrange and facilitate appointments. For additional purposes, such as marketing, explicit consent under Article 6(1)(a) GDPR is required.

9.3 Recipients and Third-Country Transfer

Data is processed by Microsoft and may be stored on servers in or outside the EU. Transfers to third countries rely on adequate safeguards such as Standard Contractual Clauses (SCCs). Details on Microsoft’s data processing can be found in their privacy policy.

9.4 Storage Duration

Data is stored only as long as necessary for appointment management. It will be deleted unless statutory retention periods apply (e.g., for accounting purposes).

9.5 Provision Mandatory or Required

Providing your data is voluntary. Without it, we cannot schedule appointments via Microsoft Bookings. Alternatively, you may contact us through other means, such as email or phone.

 

10. Telephone Inquiries

10.1 Nature and Purpose of Processing

When you contact us by phone, we process personal data you share with us during the call, such as:

  • Your name,
  • Phone number,
  • Customer number,
  • Customer details
  • Reason for your inquiry.

The data is used to respond to your inquiry, provide information, or address contract-related matters.

10.2 Legal Basis

Processing is based on Article 6(1)(f) GDPR (legitimate interest) for responding to your inquiry. If the call pertains to contract execution or pre-contractual measures, Article 6(1)(b) GDPR also applies.

10.3 Recipients and Third-Country Transfer

Data may be processed by service providers acting as processors. Transfers to third countries are subject to appropriate safeguards, such as SCCs.

10.4 Storage Duration

Data is stored for the duration of the inquiry and deleted once no longer required unless statutory retention periods apply (e.g., tax or commercial laws).

10.5 Provision Mandatory or Required

Providing your data is voluntary. However, we cannot process your inquiry without your name, phone number, and reason for the call.

 

11. Embedded YouTube Videos

11.1 Art und Zweck der Verarbeitung

Our website embeds videos hosted by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When visiting a page with an embedded YouTube video, a connection is established with YouTube’s servers, and the following information may be processed:

  • The pages you visited,
  • Your IP address.

If you are logged into your YouTube account, your activity may be linked to your profile. You can prevent this by logging out of YouTube before visiting our website.

11.2 Legal Basis

Processing is based on your explicit consent under Article 6(1)(a) GDPR.

11.3 Recipients and Third-Country Transfer

Data is processed by YouTube, a Google company, and may be transferred to servers in the USA. U.S. authorities may access the data without adequate recourse under EU law.

11.4 Storage Duration and Revocation

YouTube may set cookies to collect information about user behavior. You can block these cookies by adjusting your browser settings.

More information about Google’s privacy policy can be found here.

11.5 Provision Mandatory or Required

Providing your data is voluntary. Without consent, embedded YouTube videos may not function properly.

 

12. Use of Google Analytics

12.1 Nature and Purpose of Processing

We use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses cookies to analyze how you interact with our website. The information generated by these cookies, such as:

  • Your IP address,
  • The time spent on our website,
  • Your navigation patterns,

is typically transmitted to and stored on a Google server in the USA. However, IP anonymization is enabled on this website, ensuring that your IP address is shortened within EU member states or other contracting states of the European Economic Area before being transmitted to Google. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there.

Google uses this data to analyze your use of our website, compile reports on website activity, and provide additional services related to website usage and internet activity.

12.2 Legal Basis

Processing is based on your explicit consent under Article 6(1)(a) GDPR.

12.3 Recipients and Third-Country Transfer

Google processes the data on our behalf. Transfers to third countries, such as the USA, rely on safeguards like Standard Contractual Clauses (SCCs). For details, refer to Google’s privacy policy.

12.4 Storage Duration

Data is deleted once it is no longer needed for the purposes of recording and analyzing website activity.

12.5 Revocation of Consent

You can revoke your consent by:

  • Adjusting your browser settings to block cookies, or
  • Installing the Google Analytics Opt-out Browser Add-on, available here.

Additionally, you can click to disable Google Analytics tracking for your current session.

12.6 Profiling

Google Analytics enables the creation of pseudonymized user profiles for behavioral analysis and interest assessment.

12.7 Provision Mandatory or Required

Providing your data is voluntary. Without your consent, Google Analytics will not be used, but this may limit our ability to improve your user experience.

 

13. Use of Google Fonts

13.1 Nature and Purpose of Processing

We use Google Fonts, a service by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to ensure consistent and visually appealing font rendering on our website. The fonts are embedded locally on our server to prevent connections to Google’s servers.

More information about Google’s privacy policy you can find here:
13.2 Legal Basis

Processing is based on your explicit consent under Article 6(1)(a) GDPR.

13.3 Recipients and Data Transfer

Because fonts are embedded locally, no data is transferred to Google or other external recipients.

13.4 Storage Duration

No personal data is collected or stored through the use of Google Fonts.

13.5 Provision Mandatory or Required

Providing your data is voluntary. Without Google Fonts, default system fonts may be used, which could affect the website’s appearance.

 

14. Use of Google Maps

14.1 Nature and Purpose of Processing

Our website integrates Google Maps to provide interactive maps. This service is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

When you use Google Maps on our website, Google collects information such as:

  • Your IP address,
  • Location data (if enabled),
  • The pages you visit on our website.

Google uses this data to offer personalized map experiences and to improve its services.

More information about Google’s Data Processing can be found in it’s Privacy Policy as well as in it’s Data Privacy Center.

14.2 Legal Basis

Processing is based on your explicit consent under Article 6(1)(a) GDPR.

14.3 Recipients and Third-Country Transfer

Google may process and store data on servers located in the USA. Transfers to third countries are based on Standard Contractual Clauses (SCCs) to ensure data protection.

14.4 Storage Duration

We do not store any data related to the integration of Google Maps. Google manages its data according to its own policies.

14.5 Revocation of Consent

You can revoke your consent by disabling JavaScript in your browser. However, this may limit the functionality of our website, including the interactive map feature.

14.6 Provision Mandatory or Required

Providing your data is voluntary. Without it, interactive map features may not be available.

 

15. Google reCAPTCHA

15.1 Nature and Purpose of Processing

We use Google reCAPTCHA to prevent unauthorized and automated access (e.g., bots) to our forms. The service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA analyzes user interactions, such as:

  • Mouse movements,
  • Time spent on the website,
  • IP address.

These interactions help differentiate between human users and automated bots.

15.2 Legal Basis

Processing is based on our legitimate interest in preventing spam and abuse under Article 6(1)(f) GDPR. If consent is required, it is obtained under Article 6(1)(a) GDPR.

15.3 Recipients and Third-Country Transfer

Data is processed by Google and may be transferred to servers in the USA. Safeguards such as Standard Contractual Clauses (SCCs) apply.

15.4 Storage Duration

Data is stored only as long as necessary to prevent spam and abuse.

15.5 Provision Mandatory or Required

Providing your data is voluntary. Without it, you may not be able to use certain forms or services on our website.

 

16. Embedded Vimeo Videos

16.1 Nature and Purpose of Processing

We embed videos hosted on Vimeo, a service by Vimeo, LLC, 555 West 18th Street, New York, NY 10011, USA. When accessing pages with embedded Vimeo content, the following data may be processed:

  • Your IP address,
  • The specific pages visited,
  • Technical data (e.g., browser and device type).

More details about Vimeo’s Privacy Policy can be found here: Vimeo Privacy Policy.

16.2 Legal Basis

Processing is based on Article 6(1)(f) GDPR, with our legitimate interest in enhancing user experience through video content.

16.3 Recipients and Third-Country Transfer

Data may be processed on servers in the USA. Vimeo complies with Standard Contractual Clauses (SCCs) to ensure data protection.

16.4 Revocation of Consent

You can prevent Vimeo from collecting data by disabling cookies or logging out of your Vimeo account.

 

17. Use of LoopedIn

17.1 Nature and Purpose of Processing

We use LoopedIn, a tool provided by MINTDESIGNSUK Ltd., 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, UK, to manage feedback, project progress, and ideas. LoopedIn allows us to:

  • Collect and organize feedback,
  • Facilitate idea-sharing, and
  • Streamline project management processes.

The following personal data may be processed:

  • Contact and communication details (e.g., name, email address),
  • Feedback and interaction data (e.g., comments, votes, suggestions),
  • Technical information (e.g., IP address, browser type).
17.2 Legal Basis

Processing is based on our legitimate interest in improving our communication and project workflows under Article 6(1)(f) GDPR.

17.3 Recipients and Third-Country Transfer

LoopedIn data is processed by MINTDESIGNSUK Ltd. Data may be transferred to locations outside the EU/EWR, but safeguards such as Standard Contractual Clauses (SCCs) are implemented to ensure data protection.

17. 4 Storage Duration

Data is retained as long as necessary for the intended purpose, such as project completion or feedback resolution.

17.5 Provision Mandatory or Required

Providing your data is voluntary. However, without it, certain features of LoopedIn, such as submitting feedback, may not be available.

More information can be found in LoopedIn’s Privacy Policy: LoopedIn Privacy Policy.

 

18. Use of Loom

18.1 Nature and Purpose of Processing

We use Loom, provided by Loom, Inc., 171 2nd Street, Floor 5, San Francisco, CA 94105, USA, to create and share video recordings. Loom facilitates:

  • Internal communication,
  • Customer interactions, and
  • Training or instructional content.

The following data may be processed:

  • Contact and communication details (e.g., name, email address),
  • Video and audio recordings,
  • Technical information (e.g., IP address, browser type, session details).
18.2 Legal Basis

Data is processed under Article 6(1)(f) GDPR, based on our legitimate interest in enhancing communication and providing video resources. If consent is required (e.g., for certain recordings), Article 6(1)(a) GDPR applies.

18.3 Recipients and Third-Country Transfer

Data collected via Loom may be processed on servers in the USA. Loom ensures an adequate level of protection through Standard Contractual Clauses (SCCs) and similar safeguards.

18.4 Storage Duration

Data is retained as long as necessary for the purpose of the recording or until you request deletion.

18.5 Provision Mandatory or Required

Providing data for Loom is voluntary. Without this data, video communication and resource sharing may not be possible.

More information about Loom’s Data Privacy Policy: Atlassian (Loom) Privacy Policy.

 

19. Social Media

19.1 Nature and Purpose of Processing

Our website does not use active social media plugins that directly transfer your data to social media providers. Instead, we use Shariff buttons to create passive links to the respective social media platforms.

Using Shariff buttons prevents the automatic transfer of data such as:

  • The URL of the current page,
  • Your IP address,
  • Browser type and version.

Only when you actively click a Shariff button is a connection to the respective social media provider established, and data may be transferred according to the provider’s policies.

19.2 Why We Avoid Active Plugins

Active plugins from social media providers could collect data as soon as you visit our website, even if you do not interact with the plugin. By using Shariff buttons, we ensure that no data is shared without your active consent.

19.3 Third-Party Data Processing

Once you interact with a Shariff button, the data processing falls under the respective provider’s terms. Please review the provider’s privacy policies to understand their data practices.

 

20. Reviews

20.1 Nature and Purpose of Processing

Our website displays reviews and customer testimonials from external platforms such as Google, Facebook, Yelp, Trustpilot, Kununu, and others. These reviews are integrated to provide insights into customer experiences and build transparency.

20.2 External Sources

As the reviews originate from third-party platforms, we cannot guarantee that all displayed reviews are exclusively from verified customers or interested parties. The content, accuracy, and management of the reviews are under the control of the respective platforms.

20.3 Data Responsibility

We do not process personal data associated with these reviews. The platforms managing these reviews are solely responsible for their content and data practices. For more information, refer to the privacy policies of the respective platforms.

 

21. SSL/TLS Encryption

21.1 Purpose of Encryption

We use SSL/TLS encryption to ensure the secure transmission of sensitive data (e.g., inquiries) between your browser and our website.

21.2 Identifying an Encrypted Connection

An encrypted connection can be identified by:

  • “https://” in the browser’s address bar,
  • A lock symbol in the browser’s address bar.
21.3 Data Security

SSL/TLS encryption ensures that any data you transmit to us is protected against unauthorized access by third parties.

 

22. Updates to this Privacy Policy

22.1 Reasons for Changes

We reserve the right to amend this Privacy Policy to reflect:

  • Changes in legal requirements, or
  • Adjustments to our services (e.g., the introduction of new features).
22.2 Applicability of Updates

The updated Privacy Policy will apply from the date of publication on our website. We recommend that you review this Privacy Policy periodically to stay informed about how we handle your data.