When you access our website, your web browser automatically transmits the following data to our web server for technical reasons:

• IP address
• Date and time of the server request
• URL of the file accessed
• Amount of data transferred
• Operating system
• Information about the browser type and version used
• Name of the Internet service provider
• Website from which this website was accessed
• Page visited on our website

The collection, processing, and use of the above-mentioned data are carried out for the purpose of enabling the use and delivery of our website. Additional purposes include the security of our IT systems and technical administration. The legal basis for the processing is Article 6(1)(f) of the GDPR, whereby our legitimate interest arises from the purposes mentioned above.

Our website uses technically necessary cookies and similar storage technologies to the extent that they are required to provide basic website functions. These include, in particular, managing language settings, session management, security functions, logging in to restricted areas, and storing consent status.

For the language setting, an identifier may be stored in the browser so that the selected language version is retained when you visit subsequent pages. When logging in to restricted areas, session and authentication identifiers may be processed. These identifiers are necessary for the function you have requested and are not used for audience measurement or advertising.

The legal basis for storing information on your device or accessing information already stored is Section 25(2)(2) of the TDDDG. The legal basis for the subsequent processing of personal data is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure, stable, and user-friendly provision of the website and the features you have requested.

We use Cookiebot to manage your preferences. The provider is Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter “Cookiebot”). Cookiebot is used to obtain and document consent for cookies that are not technically necessary, as well as for analytics, marketing, and external media services, and to implement any subsequent revocation of consent.

When you visit the website, Cookiebot processes, in particular, the URL, the website language, browser information, the IP address (for the technical display of the consent dialog), your selections, a consent identifier, and the date and time of your decision. The consent status is stored in the “CookieConsent” cookie. In accordance with the service’s specifications, the setting generally remains in effect for up to twelve months and is then queried again.

The legal basis for storing the consent decision is Section 25(2)(2) of the TDDDG. The processing of personal data is carried out to fulfill legal documentation and accountability obligations based on Article 6(1)(c) of the GDPR. Additionally, the processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the legally compliant management of the services used on the website and in the verifiable implementation of your selections.

You may change your selections at any time via the cookie settings available on the website or revoke your consent with future effect. Cookiebot processes the data collected for consent management on our behalf within the European Union and the European Economic Area.

For more information on the processing of personal data by Cookiebot, please see Usercentrics’ privacy policy: https://www.cookiebot.com/de/privacy-policy/

We use Google Tag Manager for the technical management of certain website tags. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”). This service enables us to centrally integrate analytics and marketing services and trigger them in accordance with the selections you have made in the cookie management settings.

Google Tag Manager is a management tool. Depending on the configuration, technical request data and information from a data layer provided on the website may be processed. This may include event information, page views, clicks, form events, device and browser information, and online identifiers. Non-essential tags are triggered only after you have consented to the respective category.

The legal basis for storing information on your device or accessing information stored there is Section 25(1) of the TDDDG. The legal basis for processing personal data is Article 6(1)(a) of the GDPR. You may revoke your consent at any time via the cookie settings with future effect.

Google processes the data generated through our use of the service in accordance with the contractual documents applicable to the service. To the extent that Google Ireland Limited transfers data to Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA, the transfer is based on the European Commission’s Adequacy Decision regarding the EU-US Data Privacy Framework pursuant to Article 45 of the GDPR. Google LLC is certified under the EU-US Data Privacy Framework.

For more information on Google’s processing of personal data, please see Google’s Privacy Policy: https://policies.google.com/privacy

For more information about Google Tag Manager, please visit Google: https://support.google.com/tagmanager/answer/9323295?hl=de

We use Google Analytics 4 for the statistical analysis of the website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”). The service helps us understand how visitors use our website, what content is accessed, and how users navigate through the website.

Google Analytics 4 processes, in particular, page views, events, clicks, approximate location information, the source of the visit, the time and duration of the visit, device and browser information, and pseudonymous online identifiers. Google uses, among other things, the identifier from the “_ga” cookie. According to Google, IP addresses are used to derive approximate location information for visits originating from the European Union and are discarded before being logged.

We use Google Analytics 4 only if you have previously consented to the “Statistics” or “Analysis” category. The legal basis for storing information on your device or accessing information stored there is Section 25(1) of the TDDDG. The legal basis for the subsequent processing of personal data is Article 6(1)(a) of the GDPR. You may revoke your consent at any time via the cookie settings with future effect.

Google processes the analytics data on our behalf. The retention period for user and event data is specified in the Google Analytics settings. Data is deleted or anonymized when it is no longer needed for statistical analysis or when the configured retention period has expired.

To the extent that Google Ireland Limited transfers data to Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA, the transfer is based on the European Commission’s Adequacy Decision regarding the EU-U.S. Data Privacy Framework pursuant to Article 45 of the GDPR. Google LLC is certified under the EU-U.S. Data Privacy Framework.

For more information on Google’s processing of personal data, please see Google’s Privacy Policy: https://policies.google.com/privacy

You can find information about data processing in Google Analytics on Google’s website: https://support.google.com/analytics/answer/11593727?hl=de

We use Google Ads to measure the effectiveness of our advertising and for interest-based advertising. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”). We use this service in particular to determine, after a user clicks on an ad, whether a specific action was performed on our website, and to target ads to specific audiences.

Within the scope of Google Ads, the following data may be processed in particular: cookies and advertising IDs, click and conversion IDs, IP addresses, device and browser information, pages visited, interactions, timestamps, and details regarding the associated advertising campaign. Google may link this information to data from a Google Account if you are signed in to Google and the relevant settings allow it.

We use Google Ads only if you have previously consented to the “Marketing” category. The legal basis for storing information on your device or accessing information stored there is Section 25(1) of the TDDDG. The legal basis for the subsequent processing of personal data is Article 6(1)(a) of the GDPR. You may revoke your consent at any time via the cookie settings with future effect.

To the extent that Google Ireland Limited transfers data to Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA, the transfer is based on the European Commission’s Adequacy Decision regarding the EU-U.S. Data Privacy Framework pursuant to Article 45 of the GDPR. Google LLC is certified under the EU-U.S. Data Privacy Framework.

For more information on Google’s processing of personal data, please see Google’s Privacy Policy: https://policies.google.com/privacy

For more information on Google’s advertising technologies, please visit: https://policies.google.com/technologies/ads

We use the LinkedIn Insight Tag to measure the success of our LinkedIn advertising and for targeted advertising campaigns. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (hereinafter “LinkedIn”). The service enables the tracking of website visits following interaction with a LinkedIn ad and the creation of target audiences for advertising campaigns.

In particular, the LinkedIn Insight Tag processes the URL of the page visited, the previously visited page, IP address, device and browser information, timestamps, cookies and other online identifiers, as well as information about clicks and defined conversion events. If you are logged into LinkedIn, LinkedIn may associate this information with your LinkedIn account.

We use the LinkedIn Insight Tag only if you have previously consented to the “Marketing” category. The legal basis for storing information on your device or accessing information stored there is Section 25(1) of the TDDDG. The legal basis for the subsequent processing of personal data is Article 6(1)(a) of the GDPR. You may revoke your consent at any time via the cookie settings with future effect.

LinkedIn processes the data received via the LinkedIn Insight Tag as an independent data controller in accordance with the addendum applicable to Marketing Solutions. We are responsible for selecting the tag, defining our campaigns, and ensuring its lawful integration on our website. LinkedIn is responsible for further processing within its platform, linking the data to LinkedIn accounts, and creating its own advertising audiences. For this processing, there is no joint controllership between us and LinkedIn under Article 26 of the GDPR.

To the extent that LinkedIn Ireland Unlimited Company transfers data to LinkedIn Corporation, 1000 West Maude Avenue, Sunnyvale, California 94085, USA, the transfer is based on the European Commission’s Adequacy Decision regarding the EU-U.S. Data Privacy Framework pursuant to Article 45 of the GDPR. LinkedIn Corporation is certified under the EU-U.S. Data Privacy Framework.

For more information on LinkedIn’s processing of personal data, please see LinkedIn’s Privacy Policy: https://www.linkedin.com/legal/privacy-policy

The addendum regarding independent responsibility for LinkedIn Marketing Solutions can be found here: https://www.linkedin.com/legal/l/linkedin-independent-controller-addendum

We use Leadfeeder by Dealfront to analyze visits to our website. The provider is Dealfront Group GmbH, Durlacher Allee 73, 76131 Karlsruhe, Germany (hereinafter “Dealfront”). The service is used to evaluate the use of our website and to attribute visits to a specific company based on network and company information.

Dealfront processes, in particular, IP addresses and network information, pages visited, times of access, duration of visits, source of access, device and browser information, online identifiers, and a company assignment derived from publicly available company data. The identification of individual natural persons is not the purpose of our use of this service.

We use Dealfront only if you have previously consented to the “Statistics” or “Marketing” categories. The legal basis for storing information on your device or accessing information stored there is Section 25(1) of the TDDDG. The legal basis for the subsequent processing of personal data is Article 6(1)(a) of the GDPR. You may revoke your consent at any time via the cookie settings with future effect.

Dealfront processes the data collected for our analysis on our behalf. According to the provider’s information, the data processing carried out for the website tracker takes place on servers located within the European Union.

For more information on the processing of personal data by Dealfront, please see Dealfront’s privacy policy: https://www.dealfront.com/de/privacy-notice/

We use HubSpot for contact management, forms, sales-related communication, newsletters, email marketing, and certain analytics functions. The provider for customers in Germany is HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin, Germany (hereinafter “HubSpot”). HubSpot provides us with features for managing prospect and customer contacts, as well as for documenting communication and marketing activities.

In the course of using HubSpot, the following data may be processed in particular: name, business contact information, company, job title, information from forms, message and communication content, newsletter data, sales status, website interactions, IP address, device and browser information, cookies and other online identifiers, as well as the times and sources of interactions. To the extent that chat or form functions are used, HubSpot also processes the information you enter there.

To the extent that HubSpot is used to process inquiries, manage business contacts, or carry out pre-contractual and contractual measures, the processing is based on Article 6(1)(b) of the GDPR and Article 6(1)(f) of the GDPR. Our legitimate interest lies in ensuring consistent, transparent, and efficient communication with customers, prospects, and partners, as well as in organizing our sales processes.

To the extent that HubSpot tracks usage behavior on our website using cookies or similar technologies, we use these features only after you have given your consent in the “Statistics” or “Marketing” category. The legal basis for storing information on your device or accessing information stored there is Section 25(1) of the German Telemedia Act (TDDDG). The legal basis for the subsequent processing of personal data is Article 6(1)(a) of the GDPR. You may revoke your consent at any time via the cookie settings with future effect.

HubSpot processes customer and communication data on our behalf within the scope of the functions we have commissioned. The respective HubSpot company is independently responsible for data that HubSpot processes independently for the purposes of managing its own contractual relationship, security, billing, or compliance with its own legal obligations.

In providing its services, HubSpot, Inc., Two Canal Park, Cambridge, Massachusetts 02141, USA, processes personal data in the United States. HubSpot, Inc. is certified under the EU-U.S. Data Privacy Framework. The transfer to HubSpot, Inc. is based on the European Commission’s adequacy decision pursuant to Article 45 of the GDPR.

For more information on HubSpot’s processing of personal data, please see HubSpot’s Privacy Policy: https://legal.hubspot.com/de/privacy-policy

HubSpot’s Data Processing Agreement can be found here: https://legal.hubspot.com/dpa

We use the video service Vimeo to display videos. The provider is Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, New York 10001, USA (hereinafter “Vimeo”). Vimeo enables us to embed product, informational, and training videos on our website.

Embedded Vimeo content is initially blocked. A connection to Vimeo is established only after you give your consent via the cookie settings or on the respective content page. In doing so, Vimeo processes, in particular, your IP address, approximate location information, device and browser information, the previously visited and currently accessed page, cookies and other online identifiers, as well as information regarding playback and interaction with the video. If you are logged in to Vimeo, Vimeo may associate this information with your user account.

The legal basis for storing information on your device or accessing information stored there is Section 25(1) of the TDDDG. The legal basis for the processing of personal data is Article 6(1)(a) of the GDPR. You may revoke your consent at any time via the cookie settings with future effect.

Vimeo processes the data generated when loading and playing the video for the purpose of providing the video service and for its own purposes, as described in its privacy policy, under its own responsibility. We are responsible for selecting the video, embedding it on our website, and obtaining your consent.

The data is transferred to Vimeo.com, Inc. in the United States. Vimeo.com, Inc. is certified under the EU-U.S. Data Privacy Framework. The transfer is based on the European Commission’s adequacy decision pursuant to Article 45 of the GDPR.

For more information on Vimeo’s processing of personal data, please see Vimeo’s Privacy Policy: https://vimeo.com/legal/privacy/policy

We use Supademo for interactive product demonstrations. The provider is Supademo, Inc., 651 N Broad Street, Suite 201, Middletown, Delaware 19709, USA (hereinafter “Supademo”). The service allows you to explore the features of our software through interactive step-by-step sequences.

The embedded Supademo content is initially blocked. A connection to Supademo is established only after you give your consent via the cookie settings or on the respective content page. In particular, the following data may be processed: IP address, session ID, device and browser information, the demonstration accessed, click, navigation, and scroll events, timestamps, and details regarding the use of the demonstration.

The legal basis for storing information on your device or accessing information stored there is Section 25(1) of the TDDDG. The legal basis for processing personal data is Article 6(1)(a) of the GDPR. You may revoke your consent at any time via the cookie settings with future effect.

If a form is provided within a product demonstration and you enter contact information or a message there, we process this information to handle your inquiry. The legal basis is Article 6(1)(b) of the GDPR, provided the inquiry is aimed at initiating or performing a contract. In all other cases, processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the proper handling of your inquiry and in providing interactive product advice.

Supademo processes the data collected for our product demonstrations on our behalf. According to the provider’s information, data processing takes place primarily in the United States. The transfer to Supademo, Inc. is safeguarded by the European Commission’s Standard Contractual Clauses pursuant to Article 46(2)(c) of the GDPR. The Standard Contractual Clauses form an integral part of Supademo’s data processing agreement. A copy may be requested via the contract documents listed below or from us using the contact information provided in Section 2.

For more information on the processing of personal data by Supademo, please see Supademo’s privacy policy: https://supademo.com/privacy-policy

The data processing agreement, including the Standard Contractual Clauses, can be found here: https://supademo.com/dpa

To protect our forms from automated submissions, spam, bots, and unauthorized access, we use Google reCAPTCHA. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”). The service uses technical and behavioral characteristics to determine whether an entry is made by a human or by an automated process.

Google reCAPTCHA processes, in particular, the IP address, date and duration of the visit, device and browser information, referrer URL, mouse and keyboard movements, interactions with the form, reCAPTCHA result, and security identifiers. In particular, the “_GRECAPTCHA” cookie, which is required for the security check, may be used.

The legal basis for the processing of personal data is Article 6(1)(f) of the GDPR. Our legitimate interest lies in protecting the forms and our website from spam, bots, misuse, and automated attacks, as well as in ensuring functionality and IT security. To the extent that reCAPTCHA stores information on your device or accesses information already stored there, this is done on the basis of Section 25(2)(2) of the German Telecommunications Data Protection Act (TDDDG), as the security check is necessary for the secure form function you have requested.

Google processes reCAPTCHA customer data in accordance with the terms and conditions applicable to the service as a data processor on our behalf. To the extent that Google Ireland Limited transfers data to Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA, the transfer is based on the European Commission’s Adequacy Decision regarding the EU-U.S. Data Privacy Framework pursuant to Article 45 of the GDPR. Google LLC is certified under the EU-U.S. Data Privacy Framework.

For more information on Google’s processing of personal data, please see Google’s Privacy Policy: https://policies.google.com/privacy

For more information about Google reCAPTCHA, please visit Google: https://docs.cloud.google.com/recaptcha/docs/faq

If you use a contact, callback, trial access, consultation, or other inquiry form, we process the information you enter. This may include, in particular, your name, company, job title, address, email address, phone number, selected product or inquiry, message text, consent details, and any information you voluntarily provide. In addition, technical log data such as IP address, time of transmission, and information about the browser used are processed.

The purpose of the processing is to handle your inquiry, establish contact, prepare a quote or trial access, carry out pre-contractual measures, and document the communication. The legal basis is Article 6(1)(b) of the GDPR, insofar as your inquiry is aimed at initiating or performing a contract. In all other cases, processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the proper and transparent handling of incoming inquiries and in the organization of our business communications.

We use Elementor Site Mailer for the technical transmission of form messages. The contractual partner for customers in the European Economic Area is Elementor EU Ltd., Griva Digeni 42–44, 3rd Floor, Flat/Office 302, 1080 Nicosia, Cyprus. As part of the technical service provision, Elementor Ltd., Tuval 40, Ramat Gan 5252247, Israel, processes sender and recipient data, subject lines, message content, form data, and technical delivery information on our behalf.

The transfer to Elementor Ltd. in Israel is based on the European Commission’s Adequacy Decision for Israel pursuant to Article 45 of the GDPR. To the extent that form data is transferred to HubSpot, the provisions in Section 5.9 apply in addition. To protect against fraudulent submissions, Google reCAPTCHA may be used in accordance with Section 5.12.

If a form includes a separate consent request for newsletters or marketing communications, this consent is voluntary and not a prerequisite for processing the inquiry. The corresponding processing is carried out solely on the basis of Article 6(1)(a) of the GDPR and may be revoked at any time with future effect.

For more information on the processing of personal data by Elementor, please see Elementor’s privacy policy: https://elementor.com/about/privacy/

When you request white papers, studies, product information, or other restricted-access content, we process, in particular, your email address, optionally your name and company, the requested content, the status of a confirmation, timestamps, IP address, and technical log data. This information is used to provide the requested content, manage access permissions, and prevent fraudulent registrations.

If email address confirmation is required, we will first send a message containing a confirmation link. The request will not be activated until confirmation is received. The legal basis for providing the requested content is Article 6(1)(b) of the GDPR, insofar as the request serves to initiate a contract. In all other cases, processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure, traceable, and needs-based provision of our technical and product information.

Subsequent marketing communications will only be sent if there is a separate legal basis for doing so. If you have consented to receiving marketing communications, the legal basis is Article 6(1)(a) of the GDPR. Consent may be revoked at any time with future effect. The data related to the content request will be deleted as soon as the request has been processed and there is no further permissible contact, obligation to provide evidence, or statutory retention requirement.

When you create or use a user account for a restricted area, we process, in particular, your name, email address, company, username, encrypted password, roles and permissions, profile information, registration and login times, IP address, security logs, and information regarding your use of the account. Required fields are marked as such. Additional information is voluntary.

The purpose of the processing is to set up, manage, and secure the user account; to provide the associated content and functions; to authenticate users; to communicate regarding account-related processes; and to prevent unauthorized access. The legal basis is Article 6(1)(b) of the GDPR, insofar as the account is created for the purpose of entering into or performing a contract. In all other cases, processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the orderly, secure, and user-oriented provision of protected content.

Technically necessary session and authentication identifiers are stored for the login process. The legal basis for this storage is Section 25(2)(2) of the German Telecommunications Data Protection Act (TDDDG). The user account and the data stored therein are deleted when the account is no longer needed and there are no contractual, legal, or security-related reasons for further retention.

Our website contains links to external websites, platforms, portals, and social media services. These links are provided solely as hyperlinks. Simply visiting our website does not establish a connection to the respective external provider via the link.

Only when you click on an external link will the target page be opened. In doing so, the operator of the target page processes, in particular, your IP address, device and browser information, the origin of the request, and other details in accordance with the privacy policy applicable there. From that point on, the respective operator is responsible for the processing on the target page. We have no influence over the nature, scope, or purposes of this processing.

External links are provided on the basis of Article 6(1)(f) of the GDPR. Our legitimate interest lies in the user-friendly provision of further information, our external portals, and our corporate websites.

In the context of establishing, conducting, and managing business relationships, we process personal data of customers, prospects, suppliers, service providers, sales partners, and other business partners. This includes, in particular, name, company, position, business contact information, communication content, and data related to quotes, contracts, orders, projects, services, licenses, billing, and payments, as well as information regarding support and service processes.

The purposes of processing include handling inquiries, preparing quotes, negotiating contracts, executing contracts, managing projects and licenses, providing services, billing, support, quality assurance, maintaining business relationships, and fulfilling legal obligations. The legal bases are Article 6(1)(b) of the GDPR for contracts with natural persons and pre-contractual measures, Article 6(1)(c) of the GDPR for legal obligations, and Article 6(1)(f) of the GDPR for the processing of contact data of employees and contact persons of our business partners. Our legitimate interest lies in establishing, properly conducting, documenting, and maintaining our business relationships.

We generally receive the data directly from you or your company. In addition, we may obtain business contact information from colleagues at your company, affiliated companies, sales partners, event organizers, publicly accessible professional directories, company websites, or procurement platforms. In these cases, we process, in particular, the name, company, position, business contact information, and the business context. The information is used only to the extent necessary for the specific business relationship and as permitted under Article 6(1)(f) of the GDPR.

Recipients may include internal departments responsible for sales, contract management, project implementation, support, accounting, and management; necessary companies within the OMNINET Group; IT and communications service providers; banks; tax and legal advisors; and other partners engaged to provide services. Data is disclosed only to the extent necessary and based on the applicable legal basis in each case.

To the extent that a company within the OMNINET Group in Switzerland is involved in the specific business relationship, the transfer is made on the basis of the European Commission’s adequacy decision for Switzerland pursuant to Article 45 of the GDPR. Companies in Austria, Belgium, and the Netherlands are located within the European Union or the European Economic Area, respectively.

If you use a trial account, support services, the customer or partner portal, a document database, or license management functions, we process, in particular, your identification and contact information, company details, user account, roles and permissions, product and license data, contract and customer numbers, technical system information, support requests, error descriptions, log data, files provided, and communication content.

The purposes of processing are to set up and manage access, authenticate users, provide software, licenses, and documentation, handle support cases, analyze errors, communicate, bill, provide proof of service delivery, and protect systems from unauthorized use. The legal basis is Article 6(1)(b) of the GDPR. To the extent that contact persons of a corporate customer or partner are involved, processing is additionally based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure and efficient provision of our contractual services and in the transparent handling of service requests.

To the extent that data from customer systems is required for error analysis, any unnecessary personal data must be removed or anonymized prior to transmission, where possible. Processing of content from customer systems takes place only to the extent necessary for the support request and in accordance with the contractual data protection provisions.

When you register for a training session, event, or webinar, we process, in particular, your name, company, job title, contact information, selected event, booking and billing data, participation information, communication content, questions, and feedback. For digital events, we may also process your IP address, device and browser information, login and participation times, as well as audio, video, or chat data, to the extent that you use the corresponding features.

The purposes of processing include organizing, conducting, and following up on the event; communicating with participants; providing materials; billing; issuing certificates of participation or qualification; and quality assurance. The legal basis is Article 6(1)(b) of the GDPR. To the extent that contact persons of a corporate client are involved or we evaluate voluntary feedback, processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the organized conduct, documentation, and improvement of our event and training offerings.

Video, audio, or chat recordings are made only if we inform you in advance and obtain the necessary consent pursuant to Article 6(1)(a) of the GDPR. Recipients may include internal organizers, speakers, event venues, technical event service providers, and billing service providers. Data is disclosed only to the extent necessary for the event’s execution.

We use HubSpot to send and manage our newsletters. The service provider for customers in Germany is HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin, Germany. In particular, we process your email address, as well as—on an optional basis—your name, title, company, job title, and areas of interest, along with the dates and times of your subscription, confirmation, and unsubscription, your IP address, and details regarding the newsletter communications you have selected.

After you subscribe, we send a confirmation message to the email address you provided. Your subscription is not complete until you click the link contained in that message. This double opt-in procedure is designed to prevent fraudulent subscriptions and to document your consent.

The legal basis for sending the newsletter is Article 6(1)(a) of the GDPR. The logging of the registration and confirmation process is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the legally compliant documentation of the registration, the prevention of fraudulent registrations, and the defense against potential claims.

To the extent that you have separately consented to performance tracking, our emails contain tracking pixels and tagged links. This allows us to determine whether and when a message was opened, which links were clicked, and what device and browser information was generated in the process. The legal basis for the personal data-based analysis of opens and clicks is Article 6(1)(a) of the GDPR. Without this consent, no personalized performance tracking will take place.

You may revoke your consent at any time with future effect by using the unsubscribe link in each message or by sending a notice to the contact information provided in Section 2. After unsubscribing, your email address will be removed from the active mailing list. Your email address may be temporarily stored in a block list to permanently record the revocation and to verify that you have successfully unsubscribed.

In providing its services, HubSpot, Inc., Two Canal Park, Cambridge, Massachusetts 02141, USA, processes personal data in the United States. HubSpot, Inc. is certified under the EU-US Data Privacy Framework. The transfer to HubSpot, Inc. is based on the European Commission’s adequacy decision pursuant to Article 45 of the GDPR. Further information on HubSpot can be found in Section 5.9.

For more information on HubSpot’s processing of personal data, please see HubSpot’s Privacy Policy: https://legal.hubspot.com/de/privacy-policy

If we have received your email address in connection with the sale of a product or service, we may use it to inform you about our own similar products and services. The processing is based on Article 6(1)(f) of the GDPR in conjunction with Section 7(3) of the German Unfair Competition Act (UWG). Our legitimate interest lies in maintaining existing customer relationships and providing information tailored to your needs regarding our own similar offerings.

You may object to this use at any time with future effect, without incurring any costs other than the transmission costs according to the standard rates. To do so, you may use the unsubscribe link in the respective message or notify us via the contact information provided in Section 2. After you object, we will no longer use your email address for this purpose.

We may use an email address received in connection with a registration, inquiry, order, or business relationship to invite you to participate in a customer satisfaction survey. In doing so, we process, in particular, your email address, the context of the business relationship, dispatch and response data, as well as the answers you voluntarily provide.

The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in measuring customer satisfaction, ensuring quality, and improving our products and services. You may object to the use of your email address for customer satisfaction surveys at any time with future effect by using the contact information provided in Section 2.

When you apply for a position with us, we process personal data necessary for conducting the application process and deciding whether to establish an employment relationship. You may submit your application to us, in particular, via an online application form, by email, through a job portal, via a staffing agency, or during an interview.

The purposes of processing include receiving, reviewing, and processing your application; conducting the selection process; communicating with you; organizing and documenting interviews or tests; and deciding whether to establish an employment relationship.

In addition, with your separate consent, we may use your data to consider you for future or alternative positions within the OMNINET Group. Inclusion in a candidate pool is limited to the duration specified in your consent and may be revoked at any time.

The legal basis for processing your application data to decide whether to establish an employment relationship is Section 26(1) of the German Federal Data Protection Act (BDSG). To the extent that processing is necessary for as a pre-contractual measure outside the scope of Section 26 BDSG, it is additionally based on Article 6(1)(b) of the General Data Protection Regulation (GDPR).

To the extent that you have consented to further processing—in particular, inclusion in an applicant pool or consideration for other positions—the legal basis is Article 6(1)(a) of the GDPR in conjunction with Section 26(2) of the BDSG. To the extent that we store data for the purpose of asserting, exercising, or defending legal claims, this is done on the basis of Article 6(1)(f) of the GDPR. Our legitimate interest lies in legal defense and the provision of evidence, particularly in connection with claims under the General Equal Treatment Act.

To the extent that we are legally obligated to process data, the legal basis is Article 6(1)(c) of the GDPR.

As part of the application process, the following categories of personal data, in particular, may be processed:

• Basic and contact information such as name, address, email address, and phone number
• Information from the application form, such as motivation, availability, and salary expectations
• Application materials such as a cover letter, resume, transcripts, supporting documents, and file uploads
• Information regarding education, professional history, qualifications, skills, and language proficiency
• Communication content, meeting notes, and results of selection processes
• References, to the extent that you provide them to us
• Technical data from the online application process, such as IP address, timestamps, and log data
• Special categories of personal data, to the extent that their processing is permitted under Section 9.7

We primarily process the personal data that you provide to us directly via the application form, by email, during an interview, or through any other method you choose.

In addition, we may receive applicant data from job and application portals, recruitment agencies, recruiting service providers, professional social networks, references you have provided, or a company within the OMNINET Group. In these cases, the categories of data include the contact, application, and qualification information you provided to the respective service, uploaded documents, and professional information that you have made publicly available for the purpose of your application.

To the extent that we do not collect data directly from you, we process it only if the source is authorized to transfer it and the information is specifically related to the application or your professional activities. The legal basis is Section 26(1) of the German Federal Data Protection Act (BDSG) and Article 6(1)(f) of the General Data Protection Regulation ( ) for the review of professionally published information. Our legitimate interest lies in the proper review of your application and the filling of open positions.

Within our company, access is granted only to those departments and individuals involved in the preparation, review, and decision-making processes of the application procedure. This includes, in particular, the Human Resources department, the relevant functional departments, the respective managers, and the necessary decision-makers.

Data will only be transferred to other companies within the OMNINET Group if you are applying for a position there, if the company is involved in the selection process for that specific position, or if you have consented to being considered for alternative positions. For transfers to a Group company in Switzerland, the European Commission’s adequacy decision for Switzerland pursuant to Article 45 of the GDPR applies.

In addition, technical service providers, applicant tracking system providers, recruitment agencies, and providers of selection processes may be involved to the extent necessary. To the extent that these service providers process data on our behalf, their involvement is based on a contract pursuant to Article 28 of the GDPR.

Application documents may contain special categories of personal data as defined in Article 9(1) of the GDPR, such as health data, information regarding a severe disability, religious information, or information indicating union membership. We ask that you provide such information only if it is necessary for the application process.

To the extent that special categories of personal data are necessary for the exercise of rights or the fulfillment of legal obligations under labor law and social security law, processing is based on Article 9(2)(b) of the GDPR in conjunction with Section 26(3) of the BDSG. To the extent that you provide us with such data voluntarily and with your express consent, the legal basis is Article 9(2)(a) of the GDPR in conjunction with Section 26(2) of the BDSG. Article 9(2)(f) of the GDPR may apply for the establishment, exercise, or defense of legal claims.

In the case of an unencrypted job application sent via email, confidentiality during transmission cannot be technically guaranteed to the same extent as with a secure application portal. For confidential or particularly sensitive documents, we therefore recommend using the online application form provided or a secure transmission method previously agreed upon with us.

We store your application data for the duration of the application process. If no employment relationship is established, the data is typically deleted six months after the conclusion of the process. Data may be stored for a longer period only to the extent necessary due to a specific legal dispute, legal obligations, or to assert, exercise, or defend legal claims.

If you have consented to being included in a candidate pool, we will store your data until you revoke your consent, but no longer than the period specified at the time of consent. In the event of a hire, the data required for the employment relationship will be transferred to the personnel file and further processed in accordance with the privacy policy applicable to employees.

To the extent that processing is based on your consent, you may revoke it at any time with future effect. The lawfulness of the processing carried out prior to revocation remains unaffected. To the extent that we process data based on Article 6(1)(f) of the GDPR, you may object at any time for reasons arising from your particular situation.

No decision based solely on automated processing within the meaning of Article 22 of the GDPR that produces legal effects concerning you or similarly significantly affects you takes place in the application process.