Privacy Policy

Thank you for visiting our website and for your interest in our company.

Our Privacy Policy explains what personal data we process during your visit to our website and what rights you have. For the terms used in this Privacy Policy, please refer to the definitions in Art. 4 of the General Data Protection Regulation (DSGVO).

Personal data means any information relating to an identified or identifiable natural person. This includes, for example, your name, address and communication data or your email address.

Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Data subject means any identified or identifiable natural person whose personal data are processed by the controller.

Controller or “data controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

Name and address of the data controller

FNT GmbH
IT-Campus 2-4
73479 Ellwangen
Germany

Phone: +49 7961 903 90
Email: info@fntsoftware.com
Website: https://www.fntsoftware.com/

Data protection officer

You can contact our data protection team by sending an e-mail to datenschutz@fntsoftware.com / DPO.SG@fntsoftware.com (Singapore) or via our postal address with the addition of “Data Protection Officer”. You can contact our data protection officer directly at DSB@fntsoftware.com.

If you have any questions or suggestions regarding data protection, you can contact the data protection officer directly at any time.

Data processing in third countries

We only process or allow personal data to be processed in third countries located outside the European Union (EU) or the European Economic Area (EEA) if there is either explicit consent or a recognized data protection standard in this third country, or if contractual obligations have been entered into through standard contractual clauses or corresponding certifications are available. This also applies if the processing takes place in the context of the disclosure or transfer of data to other persons, bodies or companies.

Please note that we use services and tools from companies based in the USA or other third countries that are not secure from a data protection point of view. This means that when these tools are active, your personal data may be transferred to and processed in these third countries. We would like to point out that it is not possible to guarantee a level of data protection in these countries that is comparable to that in the EU.

For example, companies based in the United States are obliged to hand over personal data to security authorities without you, the data subject, being able to take legal action against this. It can therefore not be ruled out that U.S. authorities (e.g. intelligence agencies) process, evaluate and permanently store your data located on U.S. servers for monitoring purposes. We have no influence on these processing activities.

Among other things, we use tools from companies based in third countries that are not secure under data protection law as well as US tools whose providers are not certified according to the EU-US Data Privacy Framework (DPF). When these tools are active, your personal data may be transferred to and processed in these countries. We point out that in third countries that are uncertain in terms of data protection, no level of data protection comparable to that of the EU can be guaranteed.

We point out that the USA, as a safe third country, basically has a level of data protection comparable to that of the EU. Data transfer to the USA is permissible if the recipient has certification under the "EU-US Data Privacy Framework" (DPF) or has suitable additional guarantees. Information on transfers to third countries, including data recipients, can be found in this privacy policy.

General information on the processing of your personal data

Unless otherwise stated, you as an interested party, communication partner or user, e.g. of the website or online service, are the data subject for the purposes of the GDPR in the processing operations described below.

We often collect your personal data because you provide it to us. This may include, for example, data that you enter in a contact form or that you have provided to us in some other way.

When visiting this website, your browsing activities may be statistically analyzed. This is done mainly with so-called analysis programs. In addition, we may use other tools and plug-ins from third-party providers. You can find detailed information about these analysis programs, tools and plug-ins in the remainder of this Privacy Policy.

Other data is collected by our IT systems automatically or after your consent when you visit the website. Most of this is technical data (e.g., Internet browser, operating system, or time of page request). These data are collected automatically when you enter our website.

To the extent that no further specific retention periods are mentioned in the remainder of this Privacy Policy, we will delete your personal data when the purpose for processing such data has been fulfilled. If you assert a request for deletion or revoke consent to data processing, your data will be deleted unless there are other legal reasons for storing your personal data (e.g. retention periods required by tax or commercial law, assertion or defense of legal claims). If the latter is the case, the deletion will take place once these reasons cease to exist.

If we have your consent, we process your personal data on the legal basis of Art. 6 (1) a) of the GDPR. If you have consented to the storage of cookies or to the access to information on your terminal device (e.g. via device fingerprinting), the data processing is additionally carried out on the basis of Section 25 (1) of the German Telecommunications-Telemedia Data Protection Act (TTDSG). You can revoke your consents at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation. If your data is required for the fulfillment of contractual purposes or for the implementation of pre-contractual measures, we will process your data on the legal basis of Art. 6 (1) b) of the GDPR. We also process your data, insofar as this is necessary for compliance with a legal obligation, on the basis of Art. 6 (1) c) of the GDPR. Furthermore, the data processing may be based on our legitimate interest according to Art. 6 (1) f) of the GDPR. The relevant legal bases in each individual case are discussed in the reminder of this Privacy Policy.

Passing on data to third parties will only occur within the scope of legal requirements. We will only disclose your data to third parties if this is necessary, for example, on the basis of Art. 6 (1) (b) of the GDPR for contractual purposes or on the basis of legitimate interests to operate our business economically and effectively in accordance with Art. 6 (1) (f) of the GDPR.

We use service providers who may receive knowledge of your personal data in the course of their tasks as part of a commissioned data processing in accordance with Art. 28 of the GDPR. We have therefore taken appropriate legal, technical and organizational measures with the service providers to ensure the protection of personal data in accordance with the relevant statutory regulations. Contracts required by data protection law ensure that your personal data is only processed in accordance with our instructions and in compliance with the GDPR.

Data security

We use the latest technical, contractual and organizational measures to ensure the security of data processing. This ensures that we comply with the provisions of data protection laws, in particular the GDPR, and that the data we process is protected against destruction, loss, manipulation and unauthorized access.

These security measures include the encrypted data transfer between your browser and our servers.

For security reasons and to protect the transmission of confidential content that you may submit to us as website operator, our website is secured by SSL or TLS encryption. An encrypted connection can be recognized by the fact that the address bar of the browser starts with “https://” and by the lock symbol next to it.

Encryption protects data transmission from unauthorized access by third parties. If this option is not available, you can also choose not to transmit certain data over the Internet.

Storage duration

Unless specific storage periods have been mentioned in this Privacy Policy, we will process your personal data until the purpose for the data processing ceases to apply. If you assert a legitimate request for deletion or revoke consent to data processing, your data will be deleted unless we have other legal reasons for storing your personal data (e.g. retention periods required by tax or commercial law). If the latter is the case, your data will be deleted as soon as these reasons cease to exist.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You may, at any time, revoke any consent you have already given. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Your rights

If we process your personal data, you are a data subject within the meaning of the General Data Protection Regulation (GDPR). Regarding your personal data, you have the following rights:

Right of access by the data subject (Art. 15 of the GDPR)
Right to rectification (Art. 16 of the GDPR)
Right to erasure (Art. 17 of the GDPR)
Right to restriction of processing (Art. 18 of the GDPR)
Right to data portability (Art. 20 of the GDPR)
Right to object to processing (Art. 21 of the GDPR)

Furthermore, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 of the GDPR).

An overview of the German supervisory authorities can be found here: https://www.datenschutzkonferenz-online.de/datenschutzaufsichtsbehoerden.html (in German)

Visiting our website

Scope of the data processing

When you visit our website, for technical reasons, your browser transmits certain data to our web server. This involves the following data (so-called server log files):

Name and URL of the requested file
Date and time of the request
Volume of data transferred
Message about successful request (HTTP response code)
Browser type and version
Operating system
Referrer URL (i.e. the previously visited page)
Websites through which our website is accessed by the system of the respective user
Internet service provider of the user
IP address and the requesting provider

This data is not stored with other personal data of the users.

Purpose of data processing

The temporary storage of the user's IP address by our web server is necessary for technical reasons in order to be able to display the website. For this purpose, the user's IP address must be stored necessarily for the duration of the session.

We use this log data without relating it to you personally or otherwise profiling it for statistical analysis in order to operate, secure and optimize our online services, but also to anonymously record the number of visitors to our website (traffic) and the extent and type of use of our website and services, as well as for billing purposes to measure the number of clicks received from cooperation partners.

Legal basis for processing personal data

We collect this data on the basis of our legitimate interest according to Art. 6 (1) f) of the GDPR in order to be able to display and operate our website in an optimal and efficient manner and to ensure the security of our website.

Storage duration

The aforementioned data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. When data is collected for the purpose of making the website available, this is the case when the respective session has ended.

Information in the log files is stored for security reasons (e.g. to resolve cases of abuse or fraud) for a period of 14 days and then deleted. Any data that requires further storage for evidentiary purposes shall be exempt from deletion until the respective incident has been conclusively resolved.

Possibility of objection and removal

The collection of data for the provision of the website and its storage in log files is mandatory for the operation of our website for technical reasons. Consequently, there is no possibility of objection on the part of the users.

Further information on data processing

We host our website in the European Union with Host Europe GmbH, Hansestraße 111, 51149 Cologne, Germany (www.hosteurope.de/en/) (in short: Host Europe). When you visit our website, Host Europe collects various log files, including your IP addresses. Details can be found in the Privacy Statement of Host Europe https://www.hosteurope.de/en/terms-and-conditions/privacy/.

The use of the services of Host Europe is based on Art. 6 (1) f) of the GDPR. We have a legitimate interest in ensuring that our website is displayed in a reliable and secure manner. Insofar as a corresponding consent has been requested, the processing is carried out exclusively based on Art. 6 (1) a) of the GDPR and Section 25 (1) of the TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's device (e.g. for device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.

We have signed a data processing agreement with Host Europe in accordance with Art. 28 of the GDPR.

Registration and login on our website

Inxmail GmbH, Wetzinger Straße 17, 79106 Freiburg, Germany (hereinafter: Inxmail)

The service provider can organize and analyze the dispatch of newsletters. If applicable, the data you entered to subscribe to the newsletter will be stored on servers of the service provider.

In addition, Inxmail allows us to analyze our newsletter campaigns. For instance, we can see whether a newsletter has been opened and which links, if any, have been clicked. This enables us to determine, among other things, which links have been clicked particularly often. These analyses are carried out with no direct reference to individual persons concerned, but only on a qualitative level.

If you don't want us to analyze your data, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter.

Legal basis for processing personal data

The legal basis for the processing of data collected during your registration for our newsletter is exclusively Art. 6 (1) a) of the GDPR (consent).

You can revoke your consent to the data and email address being stored and used for sending the newsletter at any time. This can be done, for example, via the “unsubscribe” link in the newsletter itself. The legality of the data processing operations already carried out remains unaffected by the revocation.

Should we, at our own discretion, remove your email address from the newsletter distribution list and/or add it to a so-called blacklist after you have unsubscribed from the newsletter, insofar as this is necessary to prevent future mailings, this will both be done on the basis of our legitimate interest according to Art. 6 (1) f) of the GDPR. Our legitimate interest is the compliance with legal requirements when sending newsletters or the maintenance of a newsletter distribution list that is as up-to-date as possible.

Storage duration

We delete personal data if it is no longer needed to achieve the purpose for which it was collected, or restrict it if there are statutory storage obligations. In the case of the newsletter, we delete your personal data from the newsletter distribution list when you have either unsubscribed from the newsletter or the purpose of the processing ceases to exist.

We reserve the right to delete or blacklist email addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest according to Art. 6 (1) f) of the GDPR. Data stored by us for other purposes remain unaffected by this.

After you have unsubscribed from the newsletter distribution list, your email address will be stored by us or the newsletter service provider in a blacklist, if necessary, to prevent future mailings.

Possibility of objection and revocation

You may object to the processing of your personal data or revoke your consent at any time. Then you will not receive any further newsletters from us. Please send any such objection or revocation to the communication channels mentioned above or use the unsubscribe link included in every newsletter.

Further information on data processing

The privacy policy of Inxmail can be found at https://www.inxmail.com/data-conditions. We have signed a data processing agreement with the service providers mentioned above for the use of their services in accordance with Art. 28 of the GDPR. This is an agreement required by data protection law, which ensures that the provider only processes personal data in accordance with our instructions and in compliance with the GDPR.

Processing in the context of audio and video meetings

Scope of the data processing

Among other things, we use online conferencing tools to communicate with you.

We primarily use Microsoft Teams. The provider of this service is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland (hereinafter referred to as MS Teams for short).

The conferencing tool collects all data that you provide/enter to use the tools (e.g. email address and/or your phone number, content data). Furthermore, it processes the duration of the conference, start and end (time) of participation in the conference, number of participants and other “context information” related to the communication process (meta data).

In addition, the provider of the tool processes all technical data required to process the online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, type and version of operating system, client version, camera type, microphone or speaker, and the type of connection.

If content is exchanged, uploaded or otherwise made available within the tool, it is also stored on the servers of the tool providers. Such content specifically includes cloud recordings, chat/instant messages, audio files, voice mails, uploaded photos and videos, files, white boards, and other information shared while using the service.

Please note that we do not have full control over the data processing operations of the tools used.

Purpose of data processing

The tool we use helps us communicate with you in an effective and targeted manner.

Legal basis for processing personal data

The service or tool is used in the context of contract performance or to clarify pre-contractual contexts in order to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6 (1) (b) of the GDPR).

Furthermore, our legitimate interest lies in generally simplifying and expediting communication with you (Art. 6 (1) f) of the GDPR).

Insofar as consent has been requested (e.g. consent to record calls or video conferences), the tool or features of the tool are used in accordance with this consent; the consent can be revoked at any time with future effect (Art. 6 (1) a) of the GDPR).

Recipients of the data

Your personal data is processed by us in the departments responsible for processing the respective request and by the provider of the respective service.

Storage duration

Any data we collect directly via the video and conferencing tools will be deleted from our systems as soon as you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies. Mandatory statutory retention periods remain unaffected.

Any cookies that are stored remain on your device until you delete them yourself. We do not have any influence on the storage period of your data, which is stored by the operator of the conferencing tool for its own purposes. If you need more details about this, please contact directly both companies running the conferencing tool.

Possibility of objection and removal

You may object to the processing of your personal data at any time with future effect using the communication channels outlined above. In this case, the service may not be provided or may no longer be provided in its entirety or conclusively.

Further information on data processing

Microsoft Teams

For more information on the terms of use and the privacy policy of MS Teams, please refer to the Microsoft Teams Privacy Statement: https://privacy.microsoft.com/de-de/privacystatement.

We have signed a data processing agreement with the provider in accordance with Art. 28 of the GDPR.

The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA designed to ensure compliance with European data protection standards in data processing in the USA. Every company certified under the DPF commits to adhering to these data protection standards. For more information, please visit the provider's website at the following link: https://www.dataprivacyframework.gov/participant/6474.

Processing in the context of events (face-to-face, hybrid, online/webinars)

Scope and purpose of data processing

We process your personal data as part of the organization and execution of events.

If the event is hybrid or online (including webinars), we will process your personal data using audio and video conferencing technologies to present the course content and to enable you to interact with the speakers and other attendees of the course.

We process the personal data you provided to us during your registration. This is master data (name, address and other communication data such as email address and, if applicable, phone number, company).

If the event is held as a hybrid event, you as a participant in the face-to-face event can process audio and video data.

If you participate in the event online, data about you as a user (first name, last name, phone number (optional), email address, profile picture (optional)), meta data (IP address, device or hardware information) as well as text, sound and image data may be processed.

Legal basis for processing personal data

We process your personal data to process your registration, billing (if applicable) and execution of the event. The legal basis for this is Art. 6 (1) b) of the GDPR (fulfillment of a contract).

Furthermore, we process your personal data to inform you about similar events in the future, if you have requested this. The legal basis for this is Art. 6 (1) a) of the GDPR (consent).

If the event is hybrid or online and uses audio and video conferencing technologies, we will process your personal data to present the course content and to enable you to interact with the speakers and other attendees of the course. The legal basis for this is Art. 6 (1) b) of the GDPR ((fulfillment of a contract) and our legitimate interest (Art. 6 (1) f) of the GDPR) in ensuring efficient, secure and accessible communication.

Recipients of the data

The recipients of your personal data are the employees responsible for registration, invoicing and execution of the event, internal departments and any service providers supporting us.

We do not share personal data processed during the online course with third parties, unless we are required to do so.

Storage duration

Possibility of objection and removal

We will delete your personal data after the event, provided there is no need for further storage, or you do not wish to be informed about other similar events. This may be necessary, in particular, if the data is still required to fulfill contractual obligations or to check and fulfill or defend against other claims. In the case of statutory storage obligations, we will only consider deleting the data after the respective storage obligation has expired.

Further information on data processing

In order to execute hybrid or online events, we need to use services or service providers for the technical implementation. These can be:

ClickMeeting: ClickMeeting Spółka z ograniczoną odpowiedzialnością with its registered office at al. Arkońska 6/A4, 80-387 Gdańsk, Poland

Website: https://clickmeeting.com/

Privacy policy: https://clickmeeting.com/legal?_gl=1*177xq9l*_ga*MTY1ODQzMTg3MC4xNjkxMTUwMjMy*_ga_K7H94QHX99*MTY5MTE1MDIzMS4xLjEuMTY5MTE1MDI1Ny4zNC4wLjA.

We have signed a data processing agreement with the provider in accordance with Art. 28 of the GDPR.

Applications

Scope of the data processing

When you apply for a job at our company, we collect data that you provide to us as part of the application process. These mostly include: Form of address, title, first name, last name, email address. Mobile phone number, desired annual salary, notice period, source of the job advertisement, and the documents you attach (e.g. cover letter, resume, relevant employment, education, or training credentials.).

In individual cases, the personal data processed may also include special categories of personal data pursuant to Article 9 (1) of the GDPR, provided that you disclose these to us as part of your application, or they result from the application documents (e.g. references to ethnicity, religion or health in the case of photos).

Purpose of data processing

We process your personal data for the selection process of suitable candidates and the administration of the application process in order to be able to make a decision regarding whether to hire you or not.

If the application leads to us hiring you, we will process the data we have already received from you in order to enter into the employment relationship, insofar as it is necessary to do so. In this case, your personal data will be included in the personnel file and in our human resources management systems.

Legal basis of data processing

The legal basis for this is Art. 6 (1) lit. b) GDPR in conjunction with Section 26 (1) of the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG).

If we process special categories of personal data, this is done on the basis of Art. 9 (2) a) of the GDPR in conjunction with Section 26 (3) of the BDSG.

Recipients of the data

Within our company, the human resources department and the manager responsible for the advertised position will have access to your data. We do not disclose your personal data to third parties unless you have expressly consented to the disclosure of data, or we are obliged to disclose data due to statutory provisions and / or official or court orders.

Transfer of data to a third country

If you apply for a position or a job posting outside the EU/EEA in our group of companies, the controller there will also have access to the personal data you have provided to us. Apart from that, your personal data will not be transferred to any third country or to any international organization.

Storage duration

If your application does not lead to an employment relationship, we will delete your personal data. This will be done at the latest 4 months after the end of the application process (e.g. notification of the rejection decision), taking into account the time limit for action under the German General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz, AGG), unless you have given us your consent in accordance with Art. 6 (1) a) of the GDPR to store your personal data for a longer period, so that we may consider you for new job offers, if applicable. In this case, we will request separate consent from you.

If your application is successful and leads to an employment relationship with us, we will store your application documents in our human resources management system and in your personnel file as necessary on the basis of Art. 6 (1) b) of the GDPR in conjunction with Section 26 (1) of the BDSG for the purpose of establishing the employment relationship. In this case, your application documents will not be deleted until your employment relationship has been terminated, and an additional three years have passed since the end of the year.

Possibility of objection and removal

You may request that your personal data submitted to us be renewed or deleted at any time. To do so, please email us at career@fntsoftware.com. This does not apply if you have applied for a specific position with us as part of an ongoing application process. In this case, we will store the information you provide for this position until the expiry of the statutory time limits for action (in particular Section 15 of the AGG).

Automated decision-making

We do not use automated decision-making.

Obligation to provide the data

You must provide us with your data in order for us to decide whether to establish an employment relationship. If you do not provide your data, you will not be able to apply for a job with us.

Further information on data processing

We may also use tools and online procedures or application portals from service providers to manage the application process. These can be:

perbit Software GmbH: perbit Software GmbH, Siemensstraße 31, 48341 Altenberge, Germany.

Website: https://www.perbit.de/

We have signed a data processing agreement with the service provider mentioned above for the use of their services in accordance with Art. 28 of the GDPR. This is an agreement required by data protection law, which ensures that the provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

Cookies

Scope of the data processing

Our website uses cookies. Cookies are small text files that are stored on your computer when you visit our website. Cookies do not harm your computer and do not contain malicious software, such as viruses or Trojans.

Depending on the purpose, they are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies).

Cookies contain a characteristic string of characters that enables unique identification of the browser or previous settings when you access the website again.

We use cookies that are necessary for the technical operation of our website, cookies that are used for analysis and marketing purposes, and cookies that we use for a convenient experience on our website.

Some cookies are also placed by third-party companies that are featured on our web pages. This allows us, or you, to use certain services provided by the third-party company.

As part of an informed consent, you can decide for yourself when initially accessing our website whether you wish to accept cookies that are not necessary for the technical functions of the website.

Specifically, the cookies we use on our website are those listed at https://www.fntsoftware.com/en/information/cookies.

You can view and change your settings regarding cookies and the other third-party services at any time via the following link https://www.fntsoftware.com/en/information/cookies.

Purpose of data processing

On the one hand, we use cookies to make our website appealing and user-friendly, to improve it and to speed up requests. These essential cookies are necessary for seamless access to our website. Some cookies are also necessary to provide features you request.

We use other cookies for statistical analysis of our website and possibly also for marketing and personalization purposes. For example, we use them to learn how and when visitors use our website or to provide them with route planning features and other services.

Legal basis

If you have consented to the use of cookies when visiting our website, the exclusive legal bases are Art. 6 (1) a) of the GDPR (declared consent) and Section 25 (1) of the TTDSG.

The legal basis for the use of essential cookies required for the operation of the website is Art. 6 (1) lit. f) of the GDPR. Our legitimate interest is the (economic and secure) operation, functionality and improvement of our services.

Storage duration

We use transient and persistent cookies.

Transient cookies include, the so-called session cookies, which are automatically deleted when you close the browser.

Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie. You can find all the information and storage periods for the cookies used at https://www.fntsoftware.com/en/information/cookies.

Possibility of objection, revocation and removal

As a user of our website, you have control over the use of cookies. You can manage each cookie and individual yourself at https://www.fntsoftware.com/en/information/cookies and revoke any consent you may have given for the future.

By changing the settings in your Internet browser, you can set it so that cookies are not stored or are automatically deleted at the end of your web session and thus object to the processing. To do this, select “do not accept cookies” in the settings of your browser.

Please refer to the help function of your browser to find out how to delete or disable cookies in your specific browser.

Please note that if you disable the cookies, you may not be able to use all the functions of our website.

In addition, you can view and change your settings regarding cookies and the other third-party services at any time via the following link https://www.fntsoftware.com/en/information/cookies.

Matomo

Scope of the data processing

Our website uses the open-source web analytics service Matomo to identify which pages were viewed and when, as well as the region of origin of our website users. We also collect various log files (e.g., IP address, referrer, browsers used, and operating systems) and can measure whether our website visitors perform certain actions (e.g., clicks, purchases).

Purpose of data processing

Matomo allows us to track and analyze how website visitors use the site. By evaluating the collected data, we can track the use of the individual components of our website. This helps us to improve our website and its user-friendliness.

Legal basis of data processing

The use of Matomo is based on Art. 6 (1) f) of the GDPR. We have a legitimate interest in analyzing user behavior in order to optimize both our offers and our advertising.

Insofar as a corresponding consent has been requested, the legal basis for the processing of personal data is Art. 6 (1) a) of the GDPR (consent) and Section 25 (1) of the TTDSG, if the consent includes the storage of or access to cookies and information in the user’s device (e.g. fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.

Storage duration

The user and event level data stored by Google Analytics is anonymized or deleted as soon as its purpose has been fulfilled.

Possibility of objection and removal

You can prevent the storage of cookies by changing the settings of your browser.

Further information on data processing

When analyzing with Matomo, we use IP anonymization. Your IP address is truncated before being analyzed so that it can no longer be clearly assigned to you.

We host Matomo exclusively on our own servers, so all analysis data remain with us and are not transmitted.

ActiveCampaign

Scope and purpose of data processing

We use ActiveCampaign on our website. The provider is ActiveCampaign, Inc, 1 N Dearborn, 5th Floor Chicago, Illinois 60602, USA (hereinafter referred to as ActiveCampaign).

Among other things, ActiveCampaign allows us to manage existing and potential customers, as well as customer contacts. Using ActiveCampaign, we are able to record, sort, schedule, analyze, and automate customer interactions across a wide variety of channels (email, social media, phone, demo requests, forms…). The personal data collected in this way can be evaluated and used to communicate with the potential customer or for other marketing activities.

Legal basis for processing personal data

The use of ActiveCampaign is based on Art. 6 (1) f) of the GDPR. As a website operator, we have a legitimate interest in the most efficient customer management and customer communication possible. If you want to use offers such as information events or downloads, we process your personal data in order to provide you these offers. The legal basis for this is Art. 6 (1) b) of the GDPR (fulfillment of a contract). Insofar as a corresponding consent has been requested, the processing is carried out exclusively based on Art. 6 (1) a) of the GDPR and Section 25 (1) of the TTDSG, if the consent includes the storage of cookies or access to information in the user's device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time with future effect.

Possibility of objection and revocation

You may object to the processing of your personal data or revoke your consent at any time. Please address such an objection or revocation to the communication channels mentioned above.

Further information on data processing

For more information on ActiveCampaign’s terms of use and privacy policy, please see their privacy policy at https://www.activecampaign.com/privacy-policy.

We have entered into agreements with ActiveCampaign that are required by data protection law, which ensure that ActiveCampaign only processes your personal data in accordance with our instructions and in compliance with the GDPR (e.g. an data processing agreement in accordance with Art. 28 of the GDPR). Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.activecampaign.com/legal/scc and https://www.activecampaign.com/legal/gdpr-updates/privacy-framework.

Oktopost

Scope and purpose of data processing

We use the service of the provider Oktopost Technologies (uk) Ltd, 2nd Floor, 201 Haverstock Hill, Belsize Park, London, United Kingdom, NW3 to manage our social media posts and to analyze the reach and interaction with them and our website.

Oktopost analyzes the interactions with our posts and the use of our website and provides us with anonymous reports on the reach and use of our presence. Oktopost stores the data pseudonymized and anonymizes it at a later stage.

Legal basis for processing personal data

The use of Oktopost is based on Art. 6 (1) f) of the GDPR. We have a legitimate interest in an informative and engaging public image and perception of our products and our company. When a corresponding consent has been requested, the processing is carried out exclusively based on Art. 6 (1) a) of the GDPR and Section 25 (1) of the TTDSG, if the consent includes the storage of or access to information in the user’s device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time with future effect.

Possibility of objection and revocation

You may object to the processing of your personal data or revoke your consent at any time.

You can object to the further collection of your data by Oktopost in the settings of our consent banner.

Further information on data processing

For more information on Oktopost’s terms of use and privacy policy, please see their privacy policy at https://www.oktopost.com/privacy.

We have entered into agreements with Oktopost that are required by data protection law, which ensure that Oktopost only processes your personal data in accordance with our instructions and in compliance with the GDPR (e.g. an data processing agreement in accordance with Art. 28 of the GDPR). Data transfer to the USA or other third countries is based on the standard contractual clauses of the EU Commission.

Google Analytics

Scope of the data processing

We use “Google Analytics” on our website, a web analytics service provided by “Google” (responsible service provider in the EU: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA).

Google Analytics tracks and systematically evaluates the interactions of website visitors.

Google Analytics allows the website operator to analyze the behavior of website visitors.

When doing so, the website operator receives different usage data, such as page views, time spent on the website, operating systems used and the origin of the user. This data is summarized in a user ID and assigned to the respective device of the website visitor.

Furthermore, Google Analytics allows us to track the movement of your mouse and your scrolling behavior, as well as clicks, among other things. In addition, Google Analytics uses various modeling approaches to supplement the data sets it collects and employs machine learning technologies in its data analysis.

This entails the use of technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information Google collects about the use of this website is usually also transmitted to and stored on a Google server in the USA.

We use the feature “anonymizeIP” (so-called IP masking). By activating IP anonymization on this website, your IP address will be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. The full IP address is only transmitted to a Google server in the USA and truncated there in exceptional cases. The IP address transmitted by your browser to Google Analytics is not aggregated with any other data held by Google.

Purpose of data processing

The processing of the user's personal data (website visitors) using Google Analytics enables us to analyze the browsing activities of our users. By evaluating the collected data, we can track the use of the individual components of our website. This helps us to improve our website and its user-friendliness.

Legal basis of data processing

Storage duration

The user and event level data stored by Google Analytics is anonymized or deleted as soon as its purpose has been fulfilled.

You can also find details of this here: https://support.google.com/analytics/answer/7667196?hl=en.

Recipients of the data

The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as processor. For this purpose, we have signed a data processing agreement with Google. Google LLC, headquartered in California, USA, and, if applicable, US authorities may access the data stored by Google.

Data transfer to a third country

It cannot be ruled out that data will be transferred to the USA.

Possibility of objection and removal

You can prevent the storage of cookies by changing the settings of your browser.

You can also use a browser add-on to opt-out of Google Analytics Java scripts (ga.js, analytics.js, dc.js) to prevent Google Analytics from using your data on our website.

If you want to opt-out of Google Analytics, you can download and install the opt-out browser add-on at https://tools.google.com/dlpage/gaoptout?hl=en.

As a user of our website, you also have control over the use of cookies and other third-party services.

You can view and change your settings at any time via the following link https://www.fntsoftware.com/en/information/cookies.

Further information on data processing

For more information on Google's terms of use and privacy policy, please visit: https://marketingplatform.google.com/about/analytics/terms/us/, https://marketingplatform.google.com/intl/en/about/analytics/ and https://policies.google.com/?hl=en.

More information on how Google Analytics handles user data can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Find out more here: https://privacy.google.com/businesses/controllerterms/mccs/.

Google Tag Manager

Scope of the data processing

We use Google Tag Manager on our website from the service provider Google Ireland Limited, Google Building Gordon House, Barrow Street, Dublin 4, D04 E5W5, Ireland.

This solution is a tag management system (TMS) that allows us to embed and manage tracking or statistical tools on our website. The tool itself, which implements the tags, does not store any personal data. It triggers other tags, which in turn can collect data (e.g. Google Analytics). The Tag Manager itself does not access this data and does not itself create user profiles, store cookies or perform any analyses on its own. It has the sole purpose of managing and running the tools that are integrated with it. However, the Google Tag Manager tracks your IP address.

Purpose of data processing

We use Google Tag Manager to install and easily manage tracking or statistical tools.

Legal basis of data processing

The use of these tools is based on Art. 6 (1) f) of the GDPR. Our legitimate interest is a fast and uncomplicated integration and management of various tools on our website. If you have given us your consent, the legal basis for the data processing is Art. 6 (1) (a) of the GDPR (consent) and Section 25 (1) of the TTDSG, insofar as it relates to the storage and/or reading of cookies or information on your device.

Recipient of the data processing

The recipient of the data is Google Ireland Limited, Google Building Gordon House, Barrow Street, Dublin 4, D04 E5W5, Ireland. There can also be a data transfer to the parent company in the USA.

Possibility of objection, revocation and removal

You can prevent the storage of cookies by changing the settings of your browser.

You can permanently disable cookies for ad preferences by opting out of them using the appropriate setting in your browser, or by downloading and installing the browser plug-in available at the following link:

http://www.google.com/settings/ads/plugin?hl=en

Please note that certain functions of this website may not be available or may be restricted if you have deactivated the cookies.

As a user of our website, you also have control over the use of cookies and other third-party services.

You can view and change your settings at any time via the following link https://www.fntsoftware.com/en/information/cookies.

Further information on data processing

You can find more information about Google’s privacy policy at https://marketingplatform.google.com/about/analytics/terms/us/ and at https://policies.google.com/?hl=en.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Find out more here: https://policies.google.com/privacy/frameworks?hl=en and https://privacy.google.com/businesses/controllerterms/mccs/.

Google reCAPTCHA

Scope of the data processing

We use Google reCAPTCHA on our website from the service provider Google Ireland Limited, Google Building Gordon House, Barrow Street, Dublin 4, D04 E5W5, Ireland.

This solution checks whether data inputs on this website (e.g. in a contact form) have been made by a human or by an automated program. For this purpose, Google reCAPTCHA analyzes the behavior of the website visitor based on various criteria. The analysis starts automatically as soon as the website visitor accesses the website. Various information is analyzed (e.g. IP address, time spent on the website by the website visitor or the user’s mouse movements). The data collected during the analysis is forwarded to Google.

The Google reCAPTCHA analyses are carried out entirely in the background. The analysis is not mentioned.

Purpose of data processing

We use Google reCAPTCHA to prevent the misuse of our offers.

Legal basis of data processing

The use of these tools is based on Art. 6 (1) f) of the GDPR. Our legitimate interest is fraud prevention and protection against misuse. If you have given us your consent, the legal basis for the data processing is Art. 6 (1) (a) of the GDPR (consent) and Section 25 (1) of the TTDSG, insofar as it relates to the storage and/or reading of cookies or information on your device.

Recipient of the data processing

The recipient of the data is Google Ireland Limited, Google Building Gordon House, Barrow Street Dublin 4, D04 E5W5, Ireland. There can also be a data transfer to the parent company in the USA.

Possibility of objection, revocation and removal

You can prevent the storage of cookies by changing the settings of your browser.

http://www.google.com/settings/ads/plugin?hl=en

Please note that certain functions of this website may not be available or may be restricted if you have deactivated the cookies.

Further information on data processing

You can find more information about Google’s privacy policy at https://policies.google.com/?hl=en and at https://policies.google.com/terms?hl=en.

YouTube videos

Scope of the data processing

This website uses the YouTube embedding feature to display and play videos of the provider “YouTube”, which belongs to “Google” (Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA).

Here, the extended data protection mode is used, which, according to the provider, only starts storing user information when the video(s) is/are played. Nevertheless, it cannot be absolutely ruled out that data will be transmitted to YouTube partners. Thus, YouTube establishes a connection to the Google DoubleClick network, regardless of whether a video is played or not.

When you play a YouTube video on our website, a connection is established to YouTube’s servers. It will be transmitted which of our pages you have visited.

If you are logged into your YouTube account, your browsing activities may be associated with your personal profile. You can prevent this by logging out of your YouTube account.

After starting a video, YouTube may store cookies on your device or use similar identification technologies (e.g. device fingerprinting). In this way, YouTube can obtain information about this website’s visitors. Among other things, YouTube may use this information to track video statistics, improve the user experience, and prevent fraud attempts.

In some cases, playing a YouTube video may trigger further data processing operations over which we have no control.

Purpose of data processing

We use YouTube to present our website in an appealing way and to share our offer with interested visitors.

Legal basis of data processing

Using YouTube is very important in order to present our products, our offer and their added value. This constitutes a legitimate interest in accordance with Art. 6 (1) f) of the GDPR.

If we request a corresponding consent, the processing is carried out exclusively on the basis of Art. 6 (1) a) of the GDPR and Section 25 (1) of the TTDSG, provided that it also involves the storage and/or read-out of information on the device. The consent can be revoked at any time.

Recipient of the data processing

If embedded YouTube videos are played, the provider “YouTube” uses cookies to collect information about user behavior. According to information from “YouTube”, these are used, among other things, to collect video statistics, improve the user experience and prevent misuse.

Possibility of objection, revocation and removal

You can prevent the storage of cookies by changing the settings of your browser.

As a user of our website, you also have control over the use of cookies and other third-party services. You can view and change your settings at any time via the following link https://www.fntsoftware.com/en/information/cookies.

Please note that certain functions of this website may not be available or may be restricted if you have deactivated the cookies.

Further information on data processing

Google is responsible for the further processing of data. For more information about how Google handles your data, please refer to Google's privacy policy at https://policies.google.com/privacy?hl=en.

LinkedIn Insight Tag

This website uses the LinkedIn Insight Tag. The provider of this service is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (in short: LinkedIn).

Scope of the data processing

We receive information about our website visitors through LinkedIn Insights Tag. If a website visitor has a LinkedIn account, we can analyze, among other things, professional data such as career level, company size, country, location, industry, and job title of our website visitors and thus better target our site to the respective groups. Additionally, we can use LinkedIn Insights Tag to measure whether our website visitors make a purchase or take any other action (conversion measurement). The conversion measurement can also be carried out across devices (e.g. from desktop to tablet). LinkedIn Insights Tag also provides a retargeting feature that allows us to show targeted off-site advertising to our website visitors. According to LinkedIn, they do not identify the recipient of the advertisement.

Purpose of data processing

Our goal is to evaluate our marketing activities and measure their success.

Legal basis of data processing

The legal basis for this data processing is Art. 6 (1) a) of the GDPR (consent) and Section 25 (1) of the TTDSG, provided that it also involves the storage and/or read-out of information on the device. You can revoke your consent at any time.

Storage duration

LinkedIn deletes the direct identifiers of LinkedIn members after seven days. The remaining pseudonymized data is deleted within 180 days.

Recipient of the data processing

LinkedIn itself keeps so-called log files (URL, referrer URL, IP address, device and browser properties, and time of access). IP addresses are truncated or pseudonymized (if used to target LinkedIn members across devices).

Possibility of revocation and objection

You can object to the analysis of user behavior and targeted advertising by LinkedIn through the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. Furthermore, LinkedIn members can control the use of their personal data for advertising purposes in their account settings. To avoid the linking of data collected on our website by LinkedIn and your LinkedIn account, you must log out of your LinkedIn account before visiting our website.

Furthermore, LinkedIn members can control the use of their personal data for advertising purposes in their account settings. To avoid the linking of data collected on our website by LinkedIn and your LinkedIn account, you must log out of your LinkedIn account before visiting our website.

Further information on data processing

As website operators, we cannot assign the data collected by LinkedIn to specific individuals. LinkedIn will store the collected personal data of the website visitors on its servers in the USA and use them in the context of its own advertising measures. You will find more information in LinkedIn’s privacy policy at: https://www.linkedin.com/legal/privacy-policy?#choices-oblig.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Find out more here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

We have signed a data processing agreement with the provider mentioned above. This is an agreement required by data protection law, which ensures that the provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

Social media presences

Scope and purpose of data processing

We have public profiles on social networks. You can find the social networks we use in detail below. Generally, social networks can comprehensively analyze your user behavior when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). By visiting our social media profiles, numerous data protection-relevant processing operations are triggered. Specifically:

If you are logged into your social media account and visit one of our social media profiles, the operator of the social media site can link this visit to your user account. However, your personal data may also be collected under certain circumstances if you are not logged in or do not have an account with the respective social media site. For instance, this data is collected via cookies that are stored on your device or by tracking your IP address.

The data collected in this way allows the operators of the social media sites to create user profiles in which your preferences and interests are stored. As a result, you may be shown interest-based advertising on and off the respective social media site. If you have an account with the respective social network, the interest-based advertising may be displayed on all devices on which you are or were logged in.

Please also note that we cannot retrace all processing operations carried out on the social media sites. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media sites. You can find more information on this in the terms of use and privacy policies of the respective social media sites.

Legal basis of data processing

With our social media profiles, we want to ensure that our Internet presence is as comprehensive as possible. This constitutes a legitimate interest in accordance with Art. 6 (1) f) of the GDPR. The analysis processes of the social networks may be subject to different legal bases, which are to be specified by the operators of the social networks (e.g. consent in the sense of Art. 6 (1) a) of the GDPR).

Storage duration

Any data we collect directly via the social media site will be deleted from our systems as soon as you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies. Any cookies that are stored remain on your device until you delete them. Mandatory statutory provisions, in particular retention periods, remain unaffected. We do not have any influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

Controller and assertion of rights

When you visit one of our social media profiles, we and the operator of the social media platform are co-responsible for the data processing operations triggered during this visit. You may assert your rights (information, rectification, deletion, restriction of processing, data portability and complaint) both against us and against the operator of the respective social media site.

Please note that despite the co-responsibility with the operators of the social media sites, we do not have full influence on the data processing operations of the social media sites. Our options are largely determined by the corporate policy of the respective provider.

Further information on data processing

We have profiles with the following providers:

XING

The provider is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany. For details on how they handle your personal data, please refer to XING’s Privacy Policy: https://privacy.xing.com/en/privacy-policy.

The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

LinkedIn uses advertising cookies. If you want to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission.

Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

For details on how they handle your personal data, please refer to LinkedIn’s Privacy Policy: https://www.linkedin.com/legal/privacy-policy.

Changes to the Privacy Policy

We reserve the right to change this Privacy Policy in order to adapt it to changed legal situations or in case of changes in the service as well as in the data processing. However, this only applies with regard to declarations on data processing. Insofar as user consent is required or parts of the Privacy Policy contain provisions of the contractual relationship with the users, the changes will only be made upon the users’ consent.

Please check back frequently to see any updates or changes to our Privacy Policy.

Status of the Privacy Policy: 10/9/2024