This English version is provided for your convenience. In case of any discrepancy, the German version (Datenschutzerklärung) shall prevail.
We are very pleased that you have shown interest in our organisation. Data protection is of particular importance to our management. You can use our websites without providing any personal data. However, if you wish to use special services via our websites, including other web presences, applications and social media pages of ours, it may be necessary for us to process your personal data. If we wish to process data about you and cannot rely on any other legal basis, we will always ask for your consent first (e.g. via a cookie banner).
When handling your personal data (such as name, address, email or telephone number), we always comply with the applicable data protection laws. In this privacy policy we inform you which data we process. You will also learn which rights you have as a data subject.
We have taken various technical and organisational measures to protect your data on our websites as well as possible. Nevertheless, the internet always carries risks, and complete protection is not possible. You may therefore also transmit your personal data to us by other means, for example by telephone, if you prefer.
This privacy policy not only serves to fulfil the obligations under the GDPR and to comply with the law of the Member States of the European Union (EU) and the European Economic Area (EEA). It is also intended to serve compliance with legal provisions such as those of the United Kingdom (UK GDPR), the Swiss Federal Act on Data Protection and Swiss Data Protection Ordinance (FADP, DPO), the California Consumer Privacy Act (CCPA/CPRA), China’s Personal Information Protection Law (PIPL), the Delaware Personal Data Privacy Act (DPDPA), the Tennessee Information Protection Act (TIPA), the Minnesota Consumer Data Privacy Act (MCDPA), the Iowa Act Relating to Consumer Data Protection (ICDPA), the Maryland Online Data Privacy Act (MODPA), the Nebraska Data Privacy Act (NDPA), the New Hampshire Consumer Data Privacy Law (SB255), the New Jersey Data Privacy Law (SB332), the South Carolina Consumer Privacy Bill (House Bill 4696) and other global data protection regulations, and is to be interpreted accordingly. For each country, state or federal state, this privacy policy is to be interpreted in such a way that the terms and legal bases used correspond to the terms and legal bases used in the respective state or federal state.
For better readability, our websites, publications, communication and privacy policy do not use male, female, diverse and other gender forms (m/f/d/other) simultaneously. All wording applies equally to all genders.
For suggestions for improving the texts in this privacy policy, or if you need an external data protection officer, please contact the author of the texts: Prof. Dr. h.c. Heiko Jonny Maniero, LL.B., LL.M. mult., M.L.E..
In our privacy policy we use specific terms from various data protection laws. We want our policy to be easy to understand, so we explain these terms in advance.
The following definitions may be interpreted or extended on the basis of the case law of the General Court of the European Union (EGC), the Court of Justice of the European Union (CJEU), the Swiss Federal Supreme Court (BGE), the Supreme Court of the United Kingdom (UKSC), or on the basis of national data protection laws or national case law of a state or federal state, including but not limited to California, including judge-made law, also under common law, where this is necessary for the application of the law in the individual case.
In this privacy policy we use, among others, the following terms:
a) Personal data
Personal data means any information relating to an identified or identifiable natural person (hereinafter, where applicable, “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person, or who must be regarded as such under national data protection laws or the national case law of a state or federal state, including judge-made law, also under common law.
b) Data subject
Data subject means any identified or identifiable natural person whose personal data is processed by the controller, a processor, an international organisation or another data recipient, as well as persons who must be regarded as such under national data protection laws or the national case law of a state or federal state, including judge-made law, also under common law.
c) Processing
Processing means any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
d) Restriction of processing
Restriction of processing means the marking of stored personal data with the aim of limiting its processing in the future.
e) Profiling
Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
f) Pseudonymisation
Pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.
g) Controller
Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
h) Processor
Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
i) Recipient
Recipient means a natural or legal person, public authority, agency or another body to which the personal data is disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law are not regarded as recipients.
j) Third party
Third party means a natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
k) Consent
Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them.
The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and the European Economic Area, the UK data protection laws, the Swiss data protection laws (FADP, DPO), the California data protection laws (CCPA/CPRA), Chinese data protection law (PIPL), as well as international laws and other provisions of a data protection nature is:
Arthur Homa
Weyerhofstr. 33
47803 Krefeld, Germany
Phone: 01638726177
Email: legal@arthurhoma.eu
Website: arthurhoma.eu
Each time our websites are accessed by a data subject or an automated system, our websites collect a series of general data and information. This general data and information is stored in the log files of the respective server. The following may be collected: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our websites (so-called referrer), (4) the sub-pages accessed via an accessing system on our websites, (5) the date and time of access to the website, (6) an Internet Protocol address (IP address), (7) the internet service provider of the accessing system and (8) other similar data and information that serve to avert danger in the event of attacks on our information technology systems.
When using this general data and information, we do not draw any conclusions about the data subject. Rather, this information is needed to (1) deliver the content of our websites correctly, (2) optimise the content of our websites and the advertising for them, (3) ensure the long-term functionality of our information technology systems and the technology of our websites, and (4) provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack. We therefore analyse this anonymously collected data and information statistically and with the aim of increasing data protection and data security in our company, ultimately to ensure an optimal level of protection for the personal data we process. The data in the server log files is stored separately from all personal data provided by a data subject.
The purpose of the processing is to avert danger and ensure IT security, as well as the purposes mentioned above. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest is in particular the protection of our information technology systems. The log files are deleted once the stated purposes have been achieved.
Our websites contain information that enables quick electronic contact with our company and direct communication with us, which also includes a general email address and, where applicable, a telephone number. If a data subject contacts us by email, via a contact form, an input form or otherwise, the personal data transmitted by the data subject is stored automatically. Personal data transmitted to us voluntarily by a data subject in this way is processed for the purpose of handling the request or contacting the data subject.
For the transmission, storage and processing of your contact data and requests, and for contacting you, we obtain your consent pursuant to Art. 6 (1) (a) GDPR and Art. 49 (1) (1) (a) GDPR as follows:
By transmitting your personal data, you voluntarily consent to the processing of the personal data you have entered or transmitted for the purposes of handling your request and to being contacted. By transmitting your data to us, you also voluntarily give your explicit consent pursuant to Art. 49 (1) (1) (a) GDPR to data transfers to third countries to and by the companies named in this privacy policy and for the purposes stated, in particular for transfers to third countries for which an adequacy decision of the EU/EEA does or does not exist, and to companies or other bodies that are not covered by an existing adequacy decision on the basis of self-certification or other accession criteria, and in which or for which there are significant risks and no appropriate safeguards for the protection of your personal data (e.g. due to Section 702 FISA, Executive Order EO12333 and the CLOUD Act in the USA). When giving your voluntary and explicit consent, you were aware that an adequate level of data protection may not exist in third countries and that your data subject rights may not be enforceable. You can withdraw your consent under data protection law at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of the consent before its withdrawal. With a single action (entering and transmitting), you give several consents. These include consents under EU/EEA data protection law as well as under the CCPA/CPRA, ePrivacy and telemedia law, and other international legal provisions, which are required, among other things, as the legal basis for a planned further processing of your personal data. With your action you also confirm that you have read and taken note of this privacy policy.
We process and store personal data for the period necessary to achieve the purpose of the processing, or where this has been provided for by the European legislator or another legislator in laws or regulations to which we are subject, or for as long as a legal basis for the processing exists.
If the purpose of the processing ceases to apply, a storage period prescribed by the European legislator or another competent legislator expires, or the legal basis for the processing ceases to apply, the personal data is routinely restricted or erased in accordance with the statutory provisions.
a) Right of confirmation
Every data subject has the right to obtain from the controller confirmation as to whether or not personal data concerning them is being processed.
If a data subject wishes to exercise this right, they may contact us at any time.
b) Right of access
Every data subject has the right to obtain from the controller, at any time and free of charge, information about the personal data stored about them and a copy of this data. Furthermore, the European legislator has granted the data subject access to the following information:
Furthermore, the data subject has the right to be informed whether personal data has been transferred to a third country or to an international organisation. Where this is the case, the data subject also has the right to be informed of the appropriate safeguards relating to the transfer.
If a data subject wishes to exercise this right, they may contact us at any time.
c) Right to rectification
Every data subject has the right to obtain without undue delay the rectification of inaccurate personal data concerning them. Taking into account the purposes of the processing, the data subject also has the right to have incomplete personal data completed, including by means of providing a supplementary statement.
If a data subject wishes to exercise this right, they may contact us at any time.
d) Right to erasure (right to be forgotten)
Every data subject has the right to obtain from the controller the erasure of personal data concerning them without undue delay where one of the following grounds applies and insofar as the processing is not necessary:
If one of the above grounds applies and a data subject wishes to request the erasure of personal data stored by us, they may contact us at any time.
Where we have made the personal data public and our organisation, as controller, is obliged pursuant to Art. 17 (1) GDPR to erase the personal data, we take reasonable steps, including technical measures, taking account of available technology and the cost of implementation, to inform other controllers processing the published personal data that the data subject has requested the erasure by such controllers of any links to, or copies or replications of, that personal data, insofar as the processing is not necessary.
e) Right to restriction of processing
Every data subject has the right to obtain from the controller restriction of processing where one of the following applies:
If one of the above conditions is met and a data subject wishes to request the restriction of personal data stored by us, they may contact us at any time.
f) Right to data portability
Every data subject has the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format. They also have the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided, where the processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Furthermore, in exercising their right to data portability pursuant to Art. 20 (1) GDPR, the data subject has the right to have the personal data transmitted directly from one controller to another, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.
If a data subject wishes to exercise this right, they may contact us at any time.
g) Right to object
Every data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them which is based on Art. 6 (1) (e) or (f) GDPR. This also applies to profiling based on these provisions.
In the event of an objection, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defence of legal claims.
Where we process personal data for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data for such marketing. This also applies to profiling to the extent that it is related to such direct marketing. If the data subject objects to processing for direct marketing purposes, we will no longer process the personal data for these purposes.
In addition, the data subject has the right, on grounds relating to their particular situation, to object to the processing of personal data concerning them which we carry out for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.
If a data subject wishes to exercise this right, they may contact us at any time. In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, the data subject is also free to exercise their right to object by automated means using technical specifications.
h) Automated individual decision-making, including profiling
Every data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, unless the decision (1) is necessary for entering into, or performance of, a contract between the data subject and the controller, or (2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, or (3) is based on the data subject’s explicit consent.
Where the decision (1) is necessary for entering into, or performance of, a contract between the data subject and the controller, or (2) is based on the data subject’s explicit consent, we implement suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express their point of view and to contest the decision.
If a data subject wishes to exercise this right, they may contact us at any time.
i) Right to withdraw consent under data protection law
Every data subject has the right to withdraw consent to the processing of personal data at any time.
If a data subject wishes to exercise this right, they may contact us at any time.
The general purpose of processing personal data is the handling of all operations concerning the controller, customers, prospective customers, business partners or other contractual or pre-contractual relationships between the groups mentioned (in the broadest sense) or legal obligations of the controller. This general purpose applies where no more specific purposes are stated for a particular processing operation.
The categories of personal data processed by us are customer data, prospective customer data, employee data (including applicant data) and supplier data. The categories of recipients of personal data are public bodies, external bodies, internal processing, intra-group processing and other bodies.
A list of our processors and of data recipients in third countries and, where applicable, international organisations is either published on our website or can be requested from us free of charge.
Art. 6 (1) (a) GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, when processing operations are necessary for the supply of goods or the provision of any other service or consideration, the processing is based on Art. 6 (1) (b) GDPR. The same applies to processing operations necessary for carrying out pre-contractual measures, for example in the case of enquiries about our products or services. If we are subject to a legal obligation that requires the processing of personal data, such as for the fulfilment of tax obligations, the processing is based on Art. 6 (1) (c) GDPR.
In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor were injured on our premises and their name, age, health insurance data or other vital information had to be passed on to a doctor, hospital or other third party. The processing would then be based on Art. 6 (1) (d) GDPR.
If the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, the legal basis is Art. 6 (1) (e) GDPR.
Finally, processing operations may be based on Art. 6 (1) (f) GDPR. This legal basis applies to processing operations not covered by any of the above legal bases where the processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. We are permitted to carry out such processing operations in particular because they have been specifically mentioned by the European legislator, which considered that a legitimate interest could be assumed, for example, where the data subject is a customer of the controller (Recital 47, sentence 2 GDPR).
Where the processing of personal data is based on Art. 6 (1) (f) GDPR and no more specific legitimate interests are stated, our legitimate interest is the conduct of our business for the benefit of the well-being of our staff and our shareholders.
We may send you direct marketing about our own goods or services that are similar to the goods or services you have enquired about, ordered or purchased. You may object to direct marketing at any time (e.g. by email). This will not incur any costs other than the transmission costs according to the basic rates. The processing of personal data for direct marketing purposes is based on Art. 6 (1) (f) GDPR. The legitimate interest is direct marketing.
Our messages and newsletters may also constitute communication for direct marketing purposes within the meaning of Art. 13 (2) of EU Directive 2002/58 (Directive on privacy and electronic communications) and the national law resulting from that Directive, where we have obtained your electronic and other contact details in connection with the sale of a service or product, which includes the creation of a free user account that allows you, among other things, to access free content on our websites and publications (newsletters etc.), provided that we advertise similar products or services through the direct marketing, so that the direct marketing is permissible even without consent (cf. CJEU, judgment of 13 November 2025, Case C-654/23). In such cases you can refuse the use of your contact details at any time free of charge.
The criterion for the duration of storage of personal data is the respective statutory retention period. If there is no statutory retention period, the criterion is the contractual or internal retention period. After the period has expired, the corresponding data is routinely deleted, provided it is no longer required for the performance or initiation of a contract. This applies in particular to all processing for which no more specific criteria have been defined.
We inform you that the provision of personal data is partly required by law (e.g. tax regulations) or may also result from contractual provisions (e.g. information about the contracting party). Sometimes it may be necessary for the conclusion of a contract that a data subject provides us with personal data which must subsequently be processed by us. The data subject is, for example, obliged to provide us with personal data when our organisation concludes a contract with them. Failure to provide the personal data would mean that the contract with the data subject could not be concluded. Before providing personal data, the data subject must contact us. We will inform the data subject on a case-by-case basis whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data, and what the consequences of failure to provide the personal data would be.
As a responsible company, we normally do not use automated decision-making or profiling. If, in exceptional cases, we carry out automated decision-making or profiling, we will inform the data subject either separately or in a sub-section of our privacy policy (here on our website). In this case the following applies:
Automated decision-making, including profiling, may occur if this (1) is necessary for entering into or performing a contract between the data subject and us, or (2) is authorised by Union or Member State law to which we are subject and which also lays down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, or (3) is based on the data subject’s explicit consent.
In the cases referred to in Art. 22 (2) (a) and (c) GDPR, we implement suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests. In these cases you have the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.
Meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject, is set out in this privacy policy where applicable.
Pursuant to Art. 46 (1) GDPR, a controller or processor may transfer personal data to a third country only if the controller or processor has provided appropriate safeguards, and on condition that enforceable data subject rights and effective legal remedies are available. Appropriate safeguards may be provided, without requiring any specific authorisation from a supervisory authority, by standard data protection clauses, Art. 46 (2) (c) GDPR.
Before the first transfer of personal data, the EU standard data protection clauses or other appropriate safeguards are agreed with all recipients in third countries, or the transfers are based on adequacy decisions. This ensures that appropriate safeguards, enforceable rights and effective legal remedies are guaranteed for all processing of personal data. Every data subject can obtain a copy of the standard data protection clauses or adequacy decisions from us. The standard data protection clauses and adequacy decisions are also available in the Official Journal of the European Union.
Art. 45 (3) GDPR empowers the European Commission to decide, by means of an implementing act, that a non-EU country ensures an adequate level of protection. This means a level of protection for personal data that is essentially equivalent to the level of protection within the EU. As a result of adequacy decisions, personal data can flow from the EU (as well as from Norway, Liechtenstein and Iceland) to a third country without further obstacles. Similar rules apply to the United Kingdom, Switzerland and some other countries.
In all cases where the European Commission, or a government or competent authority of another country, has decided that a third country ensures an adequate level of protection and/or a valid framework exists (e.g. EU-U.S. Data Privacy Framework, Swiss-U.S. Data Privacy Framework, UK Extension to the EU-U.S. Data Privacy Framework), all transfers by us to members of such frameworks (e.g. self-certified organisations) are based exclusively on that organisation’s membership of the respective framework or on the respective adequacy decisions. If we or one of our group companies are a member of such a framework, all transfers to us or our group company are based exclusively on the respective company’s membership of that framework. If we or one of our group companies are located in a third country with an adequate level of protection, all transfers to us or our group company are based exclusively on the respective adequacy decisions.
Every data subject can obtain a copy of the frameworks from us. The frameworks are also available in the Official Journal of the European Union, in published legislative materials, or on the websites of data protection supervisory authorities or other authorities or institutions.
As controller, we are obliged to inform the data subject of the existence of a right to lodge a complaint with a supervisory authority. The right to lodge a complaint is governed by Art. 77 (1) GDPR. According to this provision, every data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement, without prejudice to any other administrative or judicial remedy, if the data subject considers that the processing of personal data relating to them infringes the General Data Protection Regulation. The Union legislator has restricted the right to lodge a complaint solely to the extent that it can only be exercised before a single supervisory authority (Recital 141, sentence 1 GDPR). This rule is intended to avoid duplicate complaints in the same matter by the same data subject. If a data subject wishes to complain about us, we therefore ask that only one supervisory authority be contacted.
Instagram is a widely used social network that allows users to share photos and videos, publish stories and interact with followers and friends. Instagram offers a variety of features, including direct messages, IGTV for longer videos, Instagram Live for real-time broadcasts and an Explore page for discovering new content and users.
When Instagram is used, personal data such as names, email addresses, telephone numbers, user content (photos, videos, comments etc.), location data, usage information and in some cases payment information is processed. This data helps to provide the service, ensure the security of the platform, offer personalised advertising and improve the user experience.
The operating company of the service and therefore the recipient of the personal data is: Meta Platforms, Inc., 1 Meta Way, Menlo Park, CA 94025, USA. For data subjects in the EU and the EEA, Meta Platforms Ireland Ltd., Merrion Road, Dublin D04 X2K5, Ireland acts as contact and representative within the meaning of Art. 27 GDPR. The representative under national law in the United Kingdom is: Meta Platforms Technologies UK Ltd, 10 Brock Street, Regent’s Place, London, NW1 3FG, United Kingdom.
Purposes for which the personal data is to be processed and the legal basis for the processing: The purpose of the processing is the use and optimisation of the social network functions. The processing is based on Art. 6 (1) (b) GDPR for the performance of a contract to which the data subject is party, and on Art. 6 (1) (f) GDPR, the legitimate interest being the improvement and personalisation of the user experience, the provision of customer support and ensuring the security and integrity of the platform, as well as the use of the platform and marketing.
The operating company of the service is located in a third country, namely the USA. Transfers to third countries may be based on standard contractual clauses or on other appropriate or suitable safeguards referred to in Art. 46 (2) GDPR. The operating company of the service may be a certified member of one or more of the Data Privacy Frameworks. Further details can be found at https://www.dataprivacyframework.gov/list. You can request a copy of the appropriate or suitable safeguards from us.
The criteria for determining the period for which the personal data is processed are the contractual relationship between us and the operating company of the service, or statutory or contractual retention periods. The provision of the personal data is neither required by law or contract nor necessary for the conclusion of a contract. You are not obliged to provide personal data to us or to the operating company of the service. If you do not provide it, however, you may not be able to use our services or those of the operating company of the service.
Further information and the applicable privacy provisions of Instagram can be found at https://instagram.com.
LinkedIn is a social network for professional contacts and career development. The platform allows users to create a professional profile, connect with colleagues, business partners and potential employers, share professional experience and skills, and keep up to date with industry news. LinkedIn also offers tools for companies and recruiters to search for talent, publish job advertisements and build a brand presence.
When LinkedIn is used, personal data such as names, email addresses, job titles and experience, educational background, skills, interests and platform usage data is processed. This information is necessary to provide and use the service, create networking opportunities, present personalised content and job offers, and ensure the security of user data.
The operating company of the service and therefore the recipient of the personal data is: LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.
Purposes for which the personal data is to be processed and the legal basis for the processing: The purpose of the processing is the use and optimisation of networking and career services. The processing is based on the user’s consent (Art. 6 (1) (a) GDPR), the performance of a contract to which the data subject is party (Art. 6 (1) (b) GDPR), and legitimate interests (Art. 6 (1) (f) GDPR) such as marketing and recruitment.
The operating company of the service is located in a third country, namely the USA. Transfers to third countries may be based on standard contractual clauses or on other appropriate or suitable safeguards referred to in Art. 46 (2) GDPR. The operating company of the service may be a certified member of one or more of the Data Privacy Frameworks. Further details can be found at https://www.dataprivacyframework.gov/list. You can request a copy of the appropriate or suitable safeguards from us.
The criteria for determining the period for which the personal data is processed are the contractual relationship between us and the operating company of the service, or statutory or contractual retention periods. The provision of the personal data is neither required by law or contract nor necessary for the conclusion of a contract. You are not obliged to provide personal data to us or to the operating company of the service. If you do not provide it, however, you may not be able to use our services or those of the operating company of the service.
Further information and the applicable privacy provisions of LinkedIn Corporation can be found at https://www.linkedin.com.
X (formerly known as Twitter) is a global platform for public self-expression and real-time conversation. Users can create and share short messages, so-called tweets, which may contain text, images, videos and links. The platform allows users to follow current news, interact with others and take part in global discussions.
When X is used, various types of personal data are processed, including user names, email addresses, telephone numbers and location data. This information may be used for account creation, personalisation of content, delivery of advertising, security purposes and analytical evaluations.
The operating company of the service and therefore the recipient of the personal data is: X Corp., 865 FM-1209, Building 2, Bastrop, TX 78602, USA. For data subjects in the EU and the EEA, X Internet Unlimited Company, 1 Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland acts as contact and representative within the meaning of Art. 27 GDPR. The representative under Art. 14 of the Swiss Federal Act on Data Protection (FADP) is: X Schweiz GmbH, c/o Wasag Treuhand AG, Normannenstrasse 8, 3018 Bern, Switzerland.
Personal data is processed, among other things, on the basis of the user’s consent (Art. 6 (1) (a) GDPR), for the performance of a contract to which the data subject is party (Art. 6 (1) (b) GDPR), or on the basis of legitimate interests (Art. 6 (1) (f) GDPR), such as the use of the platform and improving communication with the public.
The operating company of the service is located in a third country, namely the USA. Transfers to third countries may be based on standard contractual clauses or on other appropriate or suitable safeguards referred to in Art. 46 (2) GDPR. The operating company of the service may have concluded one of the EU standard contracts with us. You can request a copy of the appropriate or suitable safeguards from us.
The criteria for determining the period for which the personal data is processed are the contractual relationship between us and the operating company of the service, or statutory or contractual retention periods. The provision of the personal data is neither required by law or contract nor necessary for the conclusion of a contract. You are not obliged to provide personal data to us or to the operating company of the service. If you do not provide it, however, you may not be able to use our services or those of the operating company of the service.
Further information and the applicable privacy provisions of X can be found at https://twitter.com/.
YouTube is a platform for sharing and watching videos, used by individuals, artists, companies and media companies to publish a wide range of content such as music videos, vlogs, educational material and much more. YouTube allows users to upload, share and comment on videos and to interact with a broad community.
When YouTube is used, personal data such as IP addresses, user interactions (e.g. videos watched, comments), location data (if enabled for services) and information from linked Google accounts is processed. This information is required to offer personalised content and advertising, enable user interactions, keep the platform secure and improve the user experience.
The operating company of the service and therefore the recipient of the personal data is: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For data subjects in the EU and the EEA, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland acts as contact and representative within the meaning of Art. 27 GDPR. The representative under national law in the United Kingdom is: Google UK Limited, Belgrave House, 76 Buckingham Palace Road, London SW1W 9TQ, United Kingdom. The representative under Art. 14 of the Swiss Federal Act on Data Protection (FADP) is: Google Switzerland GmbH, Brandschenkestrasse 110, 8002 Zurich, Switzerland.
Purposes for which the personal data is to be processed and the legal basis for the processing: The purpose of the data processing is the use of the video-sharing services. The processing is based on the performance of a contract pursuant to Art. 6 (1) (b) GDPR to which the data subject is party, and on legitimate interests pursuant to Art. 6 (1) (f) GDPR, such as the use of an efficient video platform, improving the user experience, the use of personalised advertising and the use of embedded videos on our website.
The operating company of the service is located in a third country, namely the USA. Transfers to third countries may be based on standard contractual clauses or on other appropriate or suitable safeguards referred to in Art. 46 (2) GDPR. The operating company of the service may be a certified member of one or more of the Data Privacy Frameworks. Further details can be found at https://www.dataprivacyframework.gov/list. You can request a copy of the appropriate or suitable safeguards from us.
The criteria for determining the period for which the personal data is processed are the contractual relationship between us and the operating company of the service, or statutory or contractual retention periods. The provision of the personal data is neither required by law or contract nor necessary for the conclusion of a contract. You are not obliged to provide personal data to us or to the operating company of the service. If you do not provide it, however, you may not be able to use our services or those of the operating company of the service.
Further information and the applicable privacy provisions of YouTube can be found at https://policies.google.com.
This privacy policy was created with a generator developed with the expertise of lawyers for digital law, the advice of data protection audit specialists and the certification competence of the ISO 22000 certification body.