Data Privacy

Website Privacy Notices 

Below we inform you about the protection of your personal data (hereinafter referred to as "data"). In this respect, the data protection information fulfills the information obligations in accordance with the requirements set out in Art. 12 et seq. of the EU General Data Protection Regulation (hereinafter "GDPR"). Hereby we would like to inform you about the data we process about you when you use our website and our services and products (hereinafter referred to as "services"). In addition, we would like to inform you about the rights to which you are entitled and the technical and organizational protective measures we have taken into account with regards to the processing of your data. 

1. Who is responsible for processing my data? 

The 

cormeo GmbH (hereinafter referred to as the "Company") 
Carl-Bertelsmann-Straße 270 
33335 Gütersloh 

E-Mail: info@cormeo.com 

Website: www.cormeo.com  

is the operator of the website and is responsible under data protection law for the processing of personal data. The company processes personal data in accordance with the provisions of the GDPR and relevant national data protection laws. 

You can contact the company's data protection officer at the above postal address, with the addition "To the data protection officer" or via the e-mail address at: privacy@cormeo.com 

2. Personal data

Personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an e-mail address, a postal address or an online identifier such as an IP address or a cookie identifier.  

Personal data may only be processed with legal permission. Your personal data will only be processed when you visit and use the website and its services and if the company has the legal permission to do so. 

3. What data is processed? 

When you use our website, some information is automatically collected from the accessing computer or mobile device (hereinafter referred to as "access data"). This access data includes server log files, which usually consist of information about the browser type and version, the operating system, the Internet service provider, the date and time of use of the website, the previously visited websites and newly accessed websites via the website, and the IP address of the computer.  

This data is stored for data security reasons and help us to ensure the stability and operational security of our website. The legal basis for processing the data is Art. 6 I lit. c GDPR and Art. 25 II No. 2 TDDDG. 

If we process data other than the data mentioned here by using our website, the relevant data categories and the purposes of data processing, the legal basis for data processing, the storage period and criteria for storage, possible data recipients and your rights in connection with the data processing relating to you are described in more detail under section 4 of this privacy notices. 

4. For what purposes is my data collected? 

The purposes of data processing within the scope of our offer may result from technical, contractual or legal requirements and, if applicable, from consent.  

The company uses the data referred to in section 3 and the data referred to in section 4 for the following purposes, among others:  

• to provide the website and ensure technical security, in particular to correct technical errors and to ensure that unauthorized persons do not gain access to the website systems; 

• to process your contact request; 

• planning and execution of online events; 

• for the purpose of improving the website; 

• for the purpose of web tracking and analysis of user behavior and 

• for direct marketing purposes. 

Further information on the listed purposes of data processing can be found in the following sections of this privacy notice. 

4.1 Use of Cookies 
Cookies are small text files that are used by websites to improve the user experience, among other things. We use cookies to technically provide the services offered, to personalize content and advertisements, and to analyze access to our website.  

Under applicable law, we may store cookies on your device if they are strictly necessary for the operation of the site. For all other cookie types, we need your permission, which we request using our Cookie Consent Manager when you visit the website. You can change or withdraw your consent regarding the use of cookies and the data processing associated with them at any time using our Cookie Consent Manager. 

Which cookies are used and to what extent can be tracked at any time via our Cookie Consent Manager.  

If we use the services of third parties when using cookies or provide them with the information collected by cookies, this is done exclusively on the basis of a so-called order processing relationship with the service provider concerned. Such a contract ensures that the processing is only carried out on our behalf and to the extent that we, as the data controller, are allowed to process the data. The provider is therefore bound by the instructions we have given, so that the processing is carried out exclusively for the purposes stated here. 

If these service providers are located outside the European Union or the European Economic Area (hereinafter referred to as "EU or EEA"), a so-called third country transfer takes place. This is permitted if you have consented to it, we have created a guarantee for a level of data protection appropriate to the European standard, or the EU Commission has classified the respective third country as a safe third country. If there is a transfer to a third country when using our cookies, we will inform you of this by providing appropriate information. Further information on the recipients of your data and the topic of third country transfers can be found in sections 6 and 7 of this privacy notice. 

4.1.1 Legal basis for data processing 
The legal basis for the setting of technically necessary cookies and the data processing associated with them is Art. 6 I lit. f GDPR in conjunction with §25 II No. 2 TDDDG. Necessary cookies are set to ensure the technical provision and usability of the website. The legal basis for setting optional cookies and the use of your data for these purposes is Art.. 6 I lit. a GDPR in conjunction with §25 I TDDDG. Data processing is therefore carried out on the basis of your consent, which we will ask for with the help of our cookie consent manager when you visit our website. 

4.1.2 Duration of storage or criteria for determining this duration 
The data that is collected and analyzed when optional cookies are used is generally stored until you object to the processing. Technically necessary cookies, on the other hand, are generally deleted at the end of the respective session. Further information on this can be found in our Cookie Consent Manager.  

4.1.3 Possibility of objection and removal 
You have the right to object to the processing of your personal data when using necessary cookies in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation. If you would like to exercise your right to object, please contact us at the address given in section 1. If you object to this data processing, you will only be able to use the website to a limited extent or not at all.  

Furthermore, you can revoke your consent to the processing of your data in the context of the use of optional cookies at any time with effect for the future. The objection can be made technically by opting out in our Cookie Consent Manager on this website or by technically clearing cookies using your browser. The following link will take you to the settings screen of our Cookie Consent Manager: 

4.2 Use of analysis & tracking mechanisms 
We use various security technologies as well as analysis and tracking mechanisms on our website to make our website more secure and to help us improve our services. What all analysis and tracking mechanisms have in common is that we only use them if and insofar as we have received your consent for this through our Cookie Consent Manager. When using security technology (e.g., web applications firewalls), the legal basis may be our legitimate interest (Art. 6 I lit. f GDPR) in data processing or your consent (Art. 6 I lit. a GDPR). It may also be the case that we have to process your personal data due to a certain legal obligation affecting us (Art. 6 I lit. c GDPR). 

Specifically, we use the following technologies and services for the specified purpose: 

• Consent management 

Provider: Hubspot Germany GmbH, Am Postbahnhof 17, 10243 Berlin ("Hubspot")

Cookie Name: __hstc, hubspotutk, __hssc, __hssrc 

Cookie duration: Max. 1 Years 

Data categories:  IP address, browser type, consent status 

Description: Our website uses Hubspot's consent technology to obtain your consent when storing certain cookies on your browser or when using certain technologies in order to document them in a privacy-compliant manner. 

Links to the provider: 

• https://knowledge.hubspot.com/privacy-and-consent/hubspot-cookie-security-and-privacy#necessary-cookies 

Legal basis: Art. 6 I lit. c GDPR, §25 II No. 2 TDDDG

• Google Analytics

Provider: Google Ireland Limited, Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") 

Cookie name: _ga, _gid, _gat, _ga_<container-id>, _gac_gb_<container-id> 

Cookie duration: Max. 2 Years 

Data categories: IP address, browser type, pages visited, session duration, user interactions 

Description: Google Analytics cookies collect and analyze data on website usage. They help us understand user behavior, measure the effectiveness of marketing campaigns, and improve the user experience. The data collected includes page views, session duration, and user interactions. 

Links to the provider: 

• Terms of use: http://www.google.com/analytics/terms/de.html 

• Data protection: http://www.google.com/intl/de/analytics/learn/privacy.html 

• Privacy policy: http://www.google.de/intl/de/policies/privacy 

Legal basis: Art. 6 I lit. a GDPR, §25 I TDDDG

• Google Tag Manager 

Provider: Google Ireland Limited, Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") 

Cookie name: gtm_auth, gtm_debug, gtm_previe 

Cookie duration: Max. 2 Years 

Data categories: IP address, browser type, websites visited, user interactions, unique user ID 

Description: Google Tag Manager allows you to manage and implement tags on the website without having to directly modify the source code. This makes it easier to integrate and manage tracking tags that are used to analyze user behavior and optimize marketing campaigns. 

Links to the provider: 

• Terms of use: http://www.google.com/analytics/terms/de.html 

• Data protection: http://www.google.com/intl/de/analytics/learn/privacy.html 

• Privacy policy: http://www.google.de/intl/de/policies/privacy 

• Data protection & security: https://support.google.com/tagmanager/answer/9323295?hl=de 

Legal basis: Art. 6 I lit. a GDPR, §25 I TDDDG

• Google Ads
  

Provider: Google Ireland Limited, Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") 

Cookie name: NID, __gsas, __eoi, __gpi, __gpi_optout. 

Cookie duration: Max. 1 Year 

Data categories: IP address, browser type, websites visited, click behavior, ad interactions, unique user ID. 

Description: We use Google Ads to promote our website through relevant advertising on third-party sites and in Google's search results. If you reach our site via a Google ad, a so-called conversion cookie is stored on your system. This cookie loses its validity after 30 days and is not used to identify you personally. 

The conversion cookie helps us to check whether certain subpages of our website, such as the shopping cart, have been accessed and whether sales have been generated. The data collected by the cookie is used by Google to compile visit statistics for our website and to measure the success of our ads. Neither we nor other Google Ads advertisers receive information that could identify you personally. 

You can object to interest-based advertising by Google by adjusting the settings at www.google.de/settings/ads. 

Links to the provider: 

• Terms of use: http://www.google.com/analytics/terms/de.html 

• Data protection: http://www.google.com/intl/de/analytics/learn/privacy.html 

• Privacy policy: http://www.google.de/intl/de/policies/privacy 

Legal basis: Art. 6 I lit. a GDPR, §25 I TDDDG 

•  Hubspot CMS / CRM 

Provider: Hubspot Germany GmbH, Am Postbahnhof 17, 10243 Berlin ("Hubspot") 

Cookie name: __hstc, hubspotutk, __hssc, __hssrc, messagesUtk. 

Cookie duration: Max. 2 Years 

Data categories: IP address, browser type, pages visited, user interactions, CRM data (e.g. contact information, interaction history). 

Description: HubSpot CMS/CRM cookies are used to support the management and optimization of website content and the management of customer relationships. These cookies help to deliver personalized content, improve the user experience and track interactions with customers. Further information on the use of Hubspot can be found in sections 4.5 and 4.6 of this data protection notice. 

Legal basis: Art. 6 I lit. f and a GDPR, §25 I TDDDG 

4.2.1 Legal basis for data processing
The legal basis for the processing of your data in connection with the use of our analysis and tracking mechanisms is Art. 6 I lit. a GDPR. Your data is therefore processed on the basis of your consent to data processing, which you have given us via our Cookie Consent Manager. The use of our Consent Management Platform, on the other hand, is based on Art. 6 I lit. c GDPR i.V.m. §25 II No. 2 TDDDG 

4.2.2 Duration of storage or criteria for determining this duration 
We process data that we collect using our security, analysis and tracking mechanisms for the duration of the respective cookie period. In all other cases, we process your data until you have objected to the use of the data for the specified purposes in the future (see below). 

4.2.3 Possibility of objection and removal
You have the right to object to the data processing described here with effect for the future.  

The objection can be made technically by opting out in our Cookie Consent Manager on this website or by technically clearing cookies using your browser. The following link will take you to the settings screen of our Cookie Consent Manager:

4.3 Use of personalized newsletters 
You can subscribe to our free newsletter on the website. To subscribe to our newsletter, you need to provide your e-mail address, your name, your job title, your interests in relation to our product portfolio, the name of your company and its registered office (country).  

To register for the newsletter, we use the so-called double opt-in procedure. After you have registered and given your consent, we will send you a message to the e-mail address you have provided asking you to confirm your registration. In order to prevent misuse of your data and to be able to prove the validity of your consent, we store the access data you entered when registering, as well as the registration notification and the texts used for this purpose. After confirmation, you are registered for the newsletter and your data will be stored in our customer database (see section 4.6). 

The newsletter will then be sent by e-mail using the data provided during registration until you object to the newsletter being sent with effect for the future (see section 4.3.4).  

When registering for the newsletter, you also agree that we may store and read tracking technologies such as cookies or white pixels on your end device, which we then use for the purpose of measuring reach.  

When measuring reach, we collect statistical data on the use of our newsletter in order to optimize our offers and adapt them further to your needs. Hereby we collect the data on the servers of our marketing automation tool and, if necessary, enrich it with other data that we have received from your visit to our website. We use the data collected in this way to create pseudonymized user profiles. However, the profiling described here can be stopped and/or prevented by deactivating the cookie function in your browser. 

4.3.1 Legal basis for data processing 
The purpose of sending our newsletter is to address business customers in order to inform them about the company's products, events, solutions and services. 

The legal basis for the processing of your data when registering and participating in the newsletter is your consent in accordance with Art. 6 I lit. a GDPR and § 7 II No. 2 of the German Act against Unfair Competition (hereinafter referred to as "UWG"). 

The legal basis for the storage and reading of cookies and white pixels as well as the subsequent data processing for the purpose of measuring reach is your consent in accordance with Art. 6 I lit. a GDPR and § 25 I TDDDG. 

We process data that we have collected for the purpose of preserving evidence in connection with the submission of your consent to receive the newsletter (including IP address) on the basis of Art. 6 I lit. c GDPR. 

4.3.2 Categories of personal data 
As part of the processing activities described here, we process the following categories of data: 

• E-mail address 

• Personal master data (surname, first name) 

• IP address 

• Telephone number (optional) 

• Job title 

• Organization / Company  

• Areas of interest for our products 

• Usage data (time of opening, click paths) 

4.3.3 Recipients of personal data 
We use the services of the following data recipients to process your data as part of the processing activities described here. These recipients have been commissioned by us through contracts for order processing to carry out data processing in accordance with our instructions or through contracts to regulate joint data processing. Further information on the data recipients used by us can be found in section 5 of this data protection notice. 

• Demodia GmbH, Rosenbergstrasse 69, 9000 St. Gallen, Switzerland 

• Hubspot Germany GmbH, Am Postbahnhof 17, 10243 Berlin 

4.3.4 Duration of storage or criteria for determining this duration 
Your data will be stored while you subscribe to our newsletter. If you unsubscribe from our newsletter, your data will be blocked and no longer used for sending the newsletter. Your data will be stored (for a maximum of 12 months) as proof that consent has been lawfully obtained and therefore as proof that the newsletter mailing procedure complies with applicable law. Data processing for the purposes described here will no longer take place once you have withdrawn your consent or unsubscribed from the newsletter 

4.3.5 Objection and removal options  
You can revoke your consent to processing in the context of receiving our newsletter at any time with effect for the future by notifying the company of your objection via the e-mail address listed in section 1 with the subject "Newsletter objection". You can also revoke your consent by clicking on the unsubscribe link in every newsletter e-mail. 

4.4 Contact options  
On the website, you have the option of contacting the company by telephone and e-mail. If you make use of this option, we will process your e-mail address and/or your details and your request when you contact the company. Depending on the request (e.g. questions about our products and services, assertion of your rights as a data subject such as right to access), your contact data will be processed further (if necessary, also with the help of service providers). In this context, it may also be necessary to involve other companies affiliated with cormeo GmbH within the meaning of Section 15 of the German Stock Corporation Act (AktG) at - for example, in cases where your request is aimed at contracting with these affiliated companies or exercising your rights as a data subject. In accordance with your presumed interest, we therefore forward this type of request internally to the desired office in order to ensure the most efficient and effective processing possible.  

4.4.1 Legal basis for data processing 
The legal basis for the processing of your contact data is Art. 6 I lit. f GDPR. Our legitimate interests lie in the handling of your request and carrying out further communication with you. If your contact is aimed at concluding a contract with the company, the legal basis for the processing of your contact data is Art. 6 I lit. b GDPR. If we process your data to fulfill legally granted data subject rights, the legal basis is Art. 6 I lit. c GDPR. The forwarding of inquiries to other affiliated companies is based on Art. 6 I lit. f GDPR. Our legitimate interest in the transfer of data lies in the efficient and effective processing of your request.  

4.4.2 Categories of personal data 
As part of the processing activities described here, we process the following categories of data: 

• E-mail address 

• Phone number 

• Position 

• Company information (company name, address, sector, number of employees, company website address)  

• Personal master data (first name, surname) 

• Concerns, Product interest and message content 

4.4.3 Recipients of personal data 
We use the services of the following data recipients to process your data as part of the processing activities described here. These have been commissioned by us via order processing contracts for data processing or via contracts regulating joint data processing. Further information on the data recipients we use can be found in section 5 of this data protection notice.  

• Rote Liste Service GmbH, Mainzer Landstraße 55, 60329 Frankfurt am Main  

• EXTEDO d.o.o. Radnička cesta 50, 1000 Zagreb, Croatia 

• EXTEDO Inc. 40 Lloyd Avenue, Suite 305, Malvern, PA 19355, USA 

• EXTEDO GmbH , Einsteinstrasse 30, 85521 Ottobrunn 

• Docuvera, 1-17 Fitzherbert Avenue, Palmerston North, 4410, New Zealand 

• Demodia GmbH, Rosenbergstrasse 69, 9000 St. Gallen, Switzerland 

• Hubspot Germany GmbH, Am Postbahnhof 17, 10243 Berlin 

• Microsoft  

4.4.4 Duration of storage or criteria for determining this duration 
After your request has been processed and further communication has ended, your contact details will be deleted. This does not apply if your contact is aimed at concluding a contract with the company or if you assert your rights as a data subject, such as right to access, or if you have given us your consent to contact you for advertising purposes. In this case, your data will be stored until the contractual and/or legal obligations have been fulfilled and statutory retention periods do not prevent deletion. If the data processing is based on consent and you have revoked your consent with effect for the future, we will block your data for a period of 12 months after receiving of objection. Your data will be stored for the purpose of proving that your consent has been lawfully obtained. However, your data will no longer be used for the purposes on which your consent was based.  

If we transfer your data to an affiliated company, the retention periods applicable to that company apply, depending on the underlying purpose of the communication. 

4.4.5 Objection and removal options 
You have the right to object to the processing of your contact data on grounds relating to your particular situation. If you wish to exercise your right to object, please contact us at the address given in section 1. If you object, the communication cannot be continued. This does not apply if the processing of your data is necessary for the initiation or fulfillment of a contract or the assertion of your rights as a data subject. In such a case, there is no right to object to the processing of your data. If you do not agree to the transfer of your data to an affiliated company, please inform us about this when you contact us. Your data will then not be transmitted in such cases.  

4.5 Content management and marketing automation (Hubspot CMS) 
We use Hubspot, a content management system (CMS) and marketing automation tool from -Hubspot Germany GmbH, Am Postbahnhof 17, 10243 Berlin (hereinafter referred to as "Hubspot CMS"). This is an integrated software solution that we use to cover various aspects of our online marketing. These include, among others: Newsletter Management (see section 4.3), Social Media Publishing & Targeting (see section 4.9), Analytics & Tracking (see section 4.2) and Contact Management (see section 4.6). 

HubSpot places a cookie on your computer. This allows personal data to be stored and evaluated, in particular the user's activity (in particular which pages have been visited and which elements have been clicked on), device and browser information (in particular the IP address and operating system), data about the advertisements displayed (in particular which advertisements have been displayed and whether the user has clicked on them) and also data from advertising partners (in particular pseudonymized user IDs). 

The data collected is merged with the personal data you provide on the website to create a profile. Profiling can be stopped by deactivating the cookie function in your browser. This measure does not constitute profiling in accordance with Art. 22 GDPR. 

Further information on the processing of data by HubSpot can be found here: https://legal.hubspot.com/de/privacy-policy 

4.5.1 Legal basis for data processing 
The legal basis for the data processed with the help of the Hubspot content management and marketing automation solution results from the purposes pursued with its help. Please refer to the above paragraphs and explanations. The legal basis for data processing carried out with the help of tracking technologies is Art. 6 Ilit. a GDPR. The processing of your data is therefore carried out on the basis of your consent to data processing, which you have given us via our cookie consent management tool. 

4.5.2 Categories of personal data 
As part of the processing activities described here, we process the following categories of data: 

• User IDs 

• E-mail addresses 

• Personal master data 

4.5.3 Recipients of personal data 
We use the services of the following data recipients to process your data as part of the processing activities described here. These have been commissioned by us via order processing contracts for data processing or via contracts regulating joint data processing. Further information on the data recipients we use can be found in section 5 of this data protection notice.  

• Amazon Web Services, Inc. 410 Terry Avenue North, Seattle, WA 98109-5210, USA 

• Google, Inc. 1600 Amphitheatre Parkway in Mountain View, California 94043 ? 

• Cloudflare, Inc. Rosental 7, 80331 Munich, Germany  

• Twilio, Inc. 101 Spear Street, 5th Floor San Francisco, CA 94105 

• Message Systems, Inc. 

• SendGrid, Inc. 

• Snowflake, Inc. 

• HubSpot, Inc. 2 Canal Park, Cambridge, MA 02141, USA 

• HubSpot Ireland, Ltd. 1 Sir John Rogerson's Quay, Dublin 2, Ireland 

• HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin 

• HubSpot Australia Pty Ltd. 20 Hunter St, Level 7, Sydney NSW 2000 

• HubSpot Asia Pte. Ltd. 60 Anson Road, Mapletree Anson, 10-03, Singapore 079914 

• HubSpot Japan KK. 4-1, Marunouchi 1-chome, Chiyoda City, Tokyo 100-0005, Japan 

• HubSpot Latin America, S.A.S. Carrera 11 #79-35, Bogotá, Colombia, 111321TBD 

4.5.4 Duration of storage or criteria for determining this duration 
The duration of the storage of data that we process with the help of Hubspot CMS is determined by the respective purposes on which the processing is based. Please refer to the respective explanations in this privacy policy. Data that we process in this context on the basis of your consent will be stored until you object to the use of the data with effect for the future.  

4.5.5 Objection and removal options  
You can prevent the collection and processing of your personal data by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. 

Further information on objection and removal options vis-à-vis HubSpot can be found at: https://legal.hubspot.com/de/privacy-policy 

4.6 Customer Relationship Management (Hubspot CRM) 
Whenever you contact us and/or use our services or services or enter into any other contractual relationship with us, we create an entry in our customer relationship management software Hubspot CRM of - Hubspot Germany GmbH, Am Postbahnhof 17, 10243 Berlin (hereinafter referred to as "Hubspot CRM"). 

With the help of Hubspot CRM, we administer and manage our contacts throughout their entire customer lifecycle. 

4.6.1 Legal basis for data processing 
The legal basis for the processing of your data in connection with the use of our CRM tool is Art. 6 I lit. b GDPR, if and to the extent that the processing of your data is necessary for the performance of a contract to which you are a party or for the implementation of pre-contractual measures taken at your request. 

In addition, we rely on Art. 6 I lit. f GDPR, i.e. our legitimate interest in building a customer database if and to the extent that we receive data in a business-to-business context in order to use it to contact potential customers. In the context of telephone conversations between business partners resulting from the databases of our CRM tool, we also invoke § 7 II No. 1 UWG and therefore assume that such calls are made in your presumed consent. Accordingly, private individuals are only contacted under the additional conditions of Art. 6 lit. a GDPR in conjunction with § 7 II No. 1 Alt. 1 UWG, i.e. only if and insofar as we have your consent to do so.  

If we contact you by email, we will contact you within the scope of our legitimate interests vis-à-vis our existing customers (Art. 6 I lit. f) GDPR in conjunction with Art. 6 I lit. f) GDPR). § 7 (3) UWG or if and insofar as you have authorized us to do so by giving us your consent. 

4.6.2 Categories of personal data 
As part of the processing activities described here, we process the following categories of data: 

• Personal master data (surname, first name, address data) 

• E-mail address 

• Telephone numbers  

• Job title 

• Company data (affiliation, position, role) 

• Product interest 

• Event participation 

• E-mail openings 

• User behavior (e.g.,  click behavior) 

4.6.3 Recipients of personal data 
We use the services of the following data recipients to process your data as part of the processing activities described here. These have been commissioned by us via order processing contracts for data processing or via contracts regulating joint data processing. Further information on the data recipients we use can be found in section 5 of this data protection notice.  

• Amazon Web Services, Inc. 

• Google, Inc. 

• Cloudflare, Inc. 

• Twilio, Inc. 

• Message Systems, Inc. 

• SendGrid, Inc. 

• Snowflake, Inc. 

• HubSpot, Inc. 

• HubSpot Ireland, Ltd. 

• HubSpot Germany GmbH 

• HubSpot Australia Pty Ltd. 

• HubSpot Asia Pte. ltd. 

• HubSpot Japan KK 

• HubSpot Latin America, S.A.S. 

• HubSpot Sweden 

4.6.4 Duration of storage or criteria for determining this duration 
Your data will be stored for as long as necessary to fulfill the purposes described in this privacy notices or as required by law, e.g. for tax and accounting purposes. 

4.6.5 Objection and removal options  
You have the right to object to the processing of your contact data on grounds relating to your particular situation. If you wish to exercise your right to object, please contact us at the address given in section 1. This does not apply if the storage of your contact data is necessary for the initiation or fulfillment of a contract or the assertion of your rights as a data subject. In such a case, there is no right to object to the processing of your data. If we store and process your data on the basis of your consent, you have the right to object to this at any time with effect for the future by sending a message to the contact details provided in section 1 of this privacy policy with the subject "Objection regarding Hubspot CRM".  

4.7 Competitions & Advertising 
On our website, at trade fairs / events and on our social media channels, we regularly offer online competitions and promotions in which you can participate via a corresponding registration form (offline or online using QR codes) in return for receiving advertising. When you participate in a competition or promotion, we process the data you provide in the registration form and other information required for participation in the competition or promotion. We use this data to run the competition, including registration, prize draw and the dispatch of any prizes. We may also need to collect and process additional data, e.g. your postal address, for the purpose of sending and delivering prizes. 

Participation in the competitions is always subject to and in compliance with our general terms and conditions of participation.  

Please note that upon conclusion of the competition participation contract, we will use the e-mail address, personal master data and address data provided by you to contact you by e-mail or post about interesting products and services of our company (advertisement).  

4.7.1 Legal basis for data processing 
The legal basis for the processing of your data in connection with participation in competitions and/or promotions is Art. 6 I lit. b GDPR. The data processing is therefore carried out for the execution of the free competition participation contract with you. For more details, please refer to our general terms and conditions of participation in the competition. 

4.7.2 Categories of personal data 
As part of the processing activities described here, we process the following categories of data: 

• E-mail address 

• Personal master data (surname, first name) 

• Address data 

• Information regarding the competition and/or promotion (e.g. interests) 

4.7.3 Duration of storage or criteria for determining this duration 
The data collected and processed as part of participation in competitions and/or promotions will be deleted as soon as they are no longer required for the purpose for which they were collected.  

As participation in the prize draw also involves the possibility of being contacted for advertising purposes, we will store your data until you have objected to its further use for the purposes listed here with effect for the future. Once you have objected, we will delete your data in accordance with statutory retention periods. In this case, your data will be stored exclusively for the respective retention purposes and will not be processed for any other purposes. 

4.7.4 Objection and removal options 
If your contact details change after registering for the competition and/or the respective promotion, you can notify us of this change at any time using the contact options specified in section 1. You also have the option of terminating the free prize draw participation contract with effect for the future. To do so, simply send your notice of termination to the contact details provided in section 1 with the subject "Termination of participation in prize draw". The consequence of termination is that you are no longer entitled to take part in the competition. For further details, please refer to the general terms and conditions of participation in the competition.  

If you no longer consent to the sending of advertising emails or postal mailings, you can object to this at any time with effect for the future. You can declare your revocation either via the "Unsubscribe" button in the relevant e-mail or via e-mail to the e-mail address listed in section 1 with the subject "Objection to advertising". Advertising will no longer be sent via e-mail after receipt of the revocation.  

4.8 Digital events and functions 
The company regularly offers digital events for its employees, customers and/or service providers (hereinafter referred to as "participants"). The events take place on separate areas of the company's own website or on externally hosted platforms of connected service providers. Depending on the respective event, participants are required to visit the website prepared for the event (so-called landing page) using a user name and password or a password defined in advance for the event or other access data (hereinafter referred to as "participation data"). This may involve processing the IP address and the required participation data of the participants. 

4.8.1 Legal basis for data processing 
The purpose of data processing is to enable participation in the company's digital events. The legal basis under data protection law is based on the purposes pursued with the events. For example, in the case of mandatory training for our employees, the legal basis is regularly Art. 6 I lit. b) GDPR / § 26 I BDSG. Participation and the associated data processing is therefore necessary for the performance of the employment relationship. If the event offered is optional, i.e. voluntary training or an information event for the participants, the legal basis is regularly Art. 6 I lit. f) GDPR. The processing is therefore carried out on the basis of a legitimate interest, which lies in the creation of a corresponding offer for the participants and is also voluntary. It may also be the case that service providers do not provide the event offered as processors within the meaning of Art. 4 No. 8 GDPR, but act as controllers within the meaning of Art. 4 No. 7 GDPR. In these cases, these are always voluntary events whose participation depends on your consent to data processing by the service provider. If it is such an event, you will be asked on the landing page to give your consent to the data processing of the respective organizer. The legal basis for data processing is then Art. 6 I lit. a) GDPR. In this case, you must assert your rights as a data subject directly with the organizer. In all other cases, the company is responsible for the data processing as data controller. Further information on this can be found in section 7. 

We may also contact participants for advertising purposes following the event and/or the event itself. However, we will only contact you for advertising purposes if you have given us your consent to do so for direct marketing purposes when registering for the event. 

4.8.2 Categories of personal data 
As part of the processing activities described here, we process the following categories of data: 

• Personal master data 

• IP address 

• E-mail address 

• Company affiliation, if applicable 

4.8.3 Recipients of personal data 
We use the services of the following data recipients to process your data as part of the processing activities described here. These have been commissioned by us via data processing contracts for data processing in accordance with instructions. Further information on the data recipients we use can be found in section 5 of this data protection notice.  

• GoToWebinar: GoTo Technologies Ireland Unlimited Company, The Reflector 10 Hanover Quay, Dublin 2, D02R573, Ireland 

4.8.4 Duration of storage or criteria for determining this duration 
The company processes your data as part of the offer of digital events until the end of the respective event. Your participation data will therefore be completely deleted after the end of the event. This only does not apply if you have given us your consent to use your data for direct marketing purposes.  In such a case, we will use your data until you have objected to 

its use for advertising purposes in the future. In this case, your data will be included in our customer database (see section 4.6 of this privacy notices). 

If the organizer processes your data under its own responsibility, the duration of storage is determined by the respective data protection information of the organizer. In such a case, we refer you to the provider's data protection information via the respective landing page.  

4.8.5 Objection and removal options  
If the data processing is based on a contractual relationship and/or employment relationship agreed between you and us, there is no right to object to the described processing operation in accordance with Art. 21 GDPR. If your consent is the legal basis for the data processing, you have the right to object to this processing at any time for the future. You also have the right to request the erasure of your data in accordance with Art. 17 GDPR. In addition, you have the right to correct your data and to receive information about the data stored by us. To exercise your rights as a data subject, please contact the address stated in section 1. 

If the data processing is based on Art. 6 I lit. f GDPR, you have the right to object to the processing of your data if there are reasons for this arising from your particular situation. If you would like to exercise your right to object, please contact us at the address given in section 1. 

4.9 Use of social media 
We maintain a company presence on the social media portal LinkedIn. 

By presenting our company on social media portals, we would like to seek active communication with you and offer you the opportunity to find out about the products and services of our company and the group of companies in this way. In addition, we use social media portals to carry out marketing measures, including competitions (see section 4.7) 

If you use the contact options to contact us on these social media portals, we will process the data you provide in order to process your request and answer your questions. Your feedback and reactions on the portals also help us to further develop and improve our product portfolio. 

The operators of these social media portals provide our company with statistical data (so-called "page insights") for the purposes described, which provide us with information about user activities on our company websites. As part of marketing measures, we also use the options provided by the social media portals to address specific target groups ("targeting") on the respective platform. 

The social media portals are not operated by us, but by the respective service providers under their own responsibility. The product sovereignty and product design of the respective social media portal lies with the respective social media portal operator, depending on the platform. We have no influence on the data and data processing procedures collected by the service provider, nor are we aware of the full extent of the data collection, the purposes of the processing or the storage periods of the data concerned. Only insofar as the social media portals process personal data on our instructions in certain cases do the social media portals act as our processors (see section 5). 

We would like to point out that the processing of personal data in countries outside the European Union and the European Economic Area, in particular in the USA, cannot be ruled out. Under certain circumstances, this may be associated with the risk of more difficult legal enforcement, which represents a risk for the individual user. For further information on this, please refer to section 6 of this privacy notices. 

For the collection, processing and use of data by the operators of the social media portals, please refer to their privacy notices: 

• LinkedIn (LinkedIn Ireland Unlimited Company): https://www.linkedin.com/legal/privacy-policy 

In the case of requests for information and the assertion of your rights, we would like to point out that these can be asserted most effectively with the respective provider of the social network. Only the provider has access to the processed data and can take the measures requested by you and provide information. 

4.9.1 Legal basis for data processing 
We process your personal data on the basis of our legitimate interest, Art. 6 I lit. f GDPR, in communicating with you and in the continuous optimization of our corporate image. If processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract, we process your personal data on this basis, Art. 6 I lit. b GDPR. Advertising measures (e.g. retargeting), on the other hand, are only carried out if you have given us your consent in advance (Art. 6 I lit. a GDPR).   

4.9.2 Categories of personal data 
As part of the processing activities described here, we process the following categories of data: 

• IP address 

• Referrer URL 

• Social media account data 

• Transaction data (previous website visits) 

• Social media content (posts, comments) 

4.9.3 Recipients of personal data 
We use the services of the following data recipients to process your data as part of the processing activities described here. These have been commissioned by us via data processing contracts for data processing in accordance with instructions or via contracts regulating joint data processing. Further information on the data recipients we use can be found in section 5 of this data protection notice.  

• LinkedIn: LinkedIn Ireland Unlimited Company, Ireland 

4.9.4 Duration of storage or criteria for determining this duration 
We store your personal data for as long as is necessary to process your respective request or for as long as we are entitled or obliged to store it due to statutory retention obligations. 

4.9.5 Objection and removal options  
You have the right to object to the processing of your data for the data processing described here in accordance with Art. 21 GDPR, insofar as there are reasons for this arising from your particular situation. If you would like to exercise your right to object, please contact us at the address given in section 1. If the processing is based on consent, you have the right to object at any time with effect for the future. The objection can be made technically by opting out in our Cookie Consent Manager on this website or by technically clearing cookies using your browser. The following link will take you to the settings screen of our Cookie Consent Manager:

5 Who receives my data?  
Within the company, those departments that need your data to fulfill the purposes described in section 4 will have access to it. Service providers used by the company may also receive access to your data (so-called "processors", e.g. data centers, hosting, IT infrastructure support or web design). Contracts for order processing ensure that these service providers are bound by instructions, data security and the confidential handling of your data.  

We will only disclose your data to third parties if this is necessary for the fulfillment of the contract, if we or the third party have a legitimate interest in the disclosure or if we have your consent to do so. In addition, data may be transferred to third parties if we are obliged to do so by law or by an enforceable official or court order. 

Please note that we will not sell your personal data to third parties. Furthermore, we will not share your data with third parties for direct marketing or other forms of direct marketing, opinion polls or market research unless you have given us your consent to do so. 

Further information on the specific data recipients can be found in the processing descriptions in section 4 of this data protection notices.  

6. Will my data be processed outside the EU or the EEA (third country transfer)? 

Insofar as the service providers and/or third parties outside the EU or the EEA mentioned in section 4 process your data for the purposes set out in section 4, this may result in your data being transferred to a country where a level of data protection appropriate to the EU or the EEA cannot be guaranteed without additional safeguards. However, such a level of data protection can be ensured with these safeguards. Suitable safeguards include standard contractual clauses provided by the EU Commission. In accordance with the judgment of the European Court of Justice of 16 July 2020 (Case C-311/18), service providers commissioned by us in third countries may be obliged to disclose to us which additional appropriate technical and organizational measures have been implemented to prevent state monitoring mechanisms. If there are doubts about the legality of such data processing, the service providers concerned will be obliged to adapt their technical and organizational measures.  

You can request a copy of these guarantees using the contact details given in section 1.  

Any guarantees may be waived in exceptional cases, for example, if you give your consent or if the third country transfer is necessary for the performance of a contract with the company. The EU Commission has also recognized certain third countries as safe third countries or agreed corresponding certification mechanisms, so that suitable guarantees in the above sense can also be waived by the company at this point. 

A third country transfer takes place in the following cases, among others: 

• For the provision and default settings of the website, service providers are used whose data centers are located in a third country or who can access the data centers within the European Union or the EEA from a branch in a third country. The company has agreed compliance with the European level of data protection with these service providers via standard contractual clauses. 

• For the use of our web tracking & analysis services (see section 4.2), service providers are used whose data centers are located in a third country or who can access the data centers within the European Union or the EEA from a branch in a third country. The company has agreed compliance with the European level of data protection with these service providers via standard contractual clauses in accordance with Art. 46 II lit. c GDPR. If no standard contractual clauses have been concluded with the service providers concerned, data will only be transferred if they have consented to the processing in accordance with Art. 49 I lit. a GDPR or if a corresponding certification mechanism secures the data transfer. 

7. What data protection rights do I have?  
You have the right to access regarding the personal data we have stored about you at any time. If your personal data is incorrect or no longer up to date, you have the right to request that it be corrected. You also have the right to request the erasure or restriction of the processing of your data in accordance with Art. 17 or Art. 18 GDPR. You may also have the right to receive the data you have provided to us in a commonly used and machine-readable format (right to data portability). If you have given your consent to the processing of personal data for certain purposes, you can revoke your consent at any time with effect for the future. The revocation must be addressed to the company at the contact address stated in section 1. In accordance with Art. 21 GDPR, you also have the right to object at any time, on grounds relating to your particular situation, to the processing of your data which is carried out on the legal basis of Art. 6 I lit. f GDPR.  

You also have the option of contacting a data protection authority and lodging a complaint there. The authority responsible for the company is the 

State Commissioner for Data Protection and Information Security NRW 

NRW Kavalleriestraße 2 - 4 
40213 Düsseldorf 
0211 38424 0 
poststelle@ldi.nrw.de 

However, you can also contact the data protection authority responsible for your place of residence. 

8. How do we ensure the security of the processing? 
The Company takes all necessary technical and organizational measures to protect your data from unauthorized access, disclosure, destruction or other unauthorized processing. The security measures include firewalls, encryption, the use of secure IT environments, access controls, training for employees who work with your data and the careful selection of processors who process personal data for us in accordance with our instructions. In addition, access to your data is restricted to persons who need your data to perform their tasks. 

We do not use automated decision-making within the meaning of Art. 22 GDPR for the purposes mentioned under section 4.

10. Does profiling take place? 
No profiling within the meaning of Art. 22 GDPR takes place for the purposes mentioned under section 4. 

Should this data protection notices be amended, the amendment will be indicated in this notice, on the website and in other appropriate places.  

Status: April 2025

Website Datenschutzhinweise  

Nachfolgend informieren wir Sie über den Schutz Ihrer personenbezogenen Daten (im Folgenden „Daten“). Die Datenschutzhinweise erfüllen insofern die Informationspflichten gemäß den Anforderungen aus Art. 12 ff. der EU-Datenschutzgrundverordnung (im Folgenden „DSGVO“). Hiermit möchten wir Sie ausführlich darüber informieren, welche Daten wir über Sie bei der Verwendung unserer Webseite und der Nutzung unserer Services und Produkte verarbeiten (im folgenden „Dienstleistungen“). Darüber hinaus möchten wir Sie über die Ihnen zustehenden Rechte und die von uns getroffenen technischen und organisatorischen Schutzmaßnahmen bezüglich der Verarbeitung Ihrer Daten informieren. 

1. Wer ist für die Verarbeitung meiner Daten verantwortlich? 

Die 

cormeo GmbH (nachfolgend „Firma“ genannt) 
Carl-Bertelsmann-Straße 270  
33335 Gütersloh 

E-Mail: info@cormeo.com 

Website: www.cormeo.com  

ist Betreiber der Webseite und datenschutzrechtlich verantwortlich für die hier über Sie erhobenen personenbezogenen Daten. Die Firma verarbeitet personenbezogene Daten im Einklang mit den Bestimmungen der DSGVO und einschlägiger nationaler Datenschutzgesetze. 

Den Datenschutzbeauftragten der Firma erreichen Sie unter der oben genannten Postadresse, mit dem Zusatz „An den Datenschutzbeauftragten“ oder über die E-Mail-Adresse: privacy@cormeo.com. 

2. Personenbezogene Daten 

Personenbezogene Daten sind alle Informationen, die sich auf eine identifizierte oder identifizierbare natürliche Person beziehen. Als identifizierbar wird eine natürliche Person angesehen, die direkt oder indirekt insbesondere mittels Zuordnung einer Kennung wie einem Namen, einer E-Mail-Adresse, einer Postanschrift oder einer Online-Kennung wie bspw. einer IP-Adresse oder einer Cookie-Kennung identifiziert werden kann.  

Eine Verarbeitung personenbezogener Daten ist nur mit gesetzlicher Erlaubnis zulässig. Ihre personenbezogenen Daten werden bei Besuch und Nutzung der Webseite und der darauf angebotenen Services ausschließlich verarbeitet, wenn die Firma eine gesetzliche Erlaubnis dafür hat. 

3. Welche Daten werden erfasst? 

Wenn Sie unsere Webseite nutzen, werden vom aufrufenden Rechner bzw. mobilen Gerät automatisch Informationen erfasst (nachfolgend „Zugriffsdaten“ genannt). Diese Zugriffsdaten beinhalten Server-Log-Files, die in der Regel aus Informationen über den Browsertyp und die Browserversion, dem Betriebssystem, dem Internet-Service-Provider, dem Datum und der Uhrzeit der Verwendung der Webseite, die zuvor besuchten Webseiten und über die Webseite neu aufgerufene Webseiten und die IP-Adresse des Rechners bestehen.  

Die Speicherung dieser Daten erfolgt aus Gründen der Datensicherheit, um die Stabilität und die Betriebssicherheit unseres Internetauftritts zu gewährleisten. Die Rechtsgrundlage hierfür ist Art. 6 Abs. 1 lit. c DS-GVO sowie Art. 25 II S. 2 TDDDG. 

Sollten wir durch Ihren Besuch auf unserer Webseite weitere als die hier genannten Daten verarbeiten, so sind die betreffenden Datenkategorien sowie die Zwecke der Datenverarbeitung, die Rechtsgrundlage der Datenverarbeitung, die Speicherdauer und Kriterien der Speicherung, mögliche Datenempfänger sowie ihre Rechte im Zusammenhang mit den Sie betreffenden Datenverarbeitungen unter Ziffer 4 dieser Datenschutzhinweise ausführlich beschrieben. 

4. Zu welchen Zwecken werden meine Daten erfasst? 

Die Zwecke der Datenverarbeitung im Rahmen unseres Angebotes können sich aus technischen, vertraglichen oder gesetzlichen Erfordernissen sowie ggf. aus einer Einwilligung ergeben.  

Die Firma verwendet die in Ziffer 3 genannten Daten und die unter Ziffer 4 genannten Daten u.a. zu folgenden Zwecken:  

• zur Bereitstellung der Webseite und Gewährleistung der technischen Sicherheit, insbesondere zur Behebung technischer Fehler und um sicherzustellen, dass Unbefugte keinen Zugriff auf die Systeme der Webseite erlangen; 

• zur Bearbeitung Ihrer Kontaktanfrage; 

• Vorbereitung und Durchführung von Onlineveranstaltungen; 

• zum Zwecke der Verbesserung des Webseitenangebotes; 

• zum Zwecke des Web Trackings und zur Analyse des Nutzerverhaltens und 

• für Zwecke des Direktmarketings. 

Weitere Informationen zu den aufgeführten Zwecken der Datenverarbeitung finden Sie in den nachfolgenden Abschnitten dieser Datenschutzhinweise. 

4.1 Einsatz von Cookies  
Cookies sind kleine Textdateien, die von Webseiten verwendet werden, um u.a. die Benutzererfahrung zu verbessern. Wir verwenden Cookies, um die angebotenen Services technisch bereitzustellen, Inhalte und Anzeigen zu personalisieren und die Zugriffe auf unser Angebot zu analysieren.  

Nach geltendem Recht können wir Cookies auf Ihrem Gerät speichern, wenn diese für den Betrieb der Seite unbedingt notwendig sind. Für alle anderen Cookie-Typen benötigen wir Ihre Erlaubnis, die wir mithilfe unseres Cookie Consent Managers bei Aufruf der Webseite abfragen. Sie können Ihre Einwilligung in Bezug auf die Verwendung von Cookies und den mit Ihnen verbundenen Datenverarbeitungen jederzeit mithilfe unseres Cookie Consent Managers ändern oder widerrufen. 

Welche Cookies im Einzelnen eingesetzt werden und in welchem Umfang, kann über unseren Cookie Consent Manager jederzeit nachvollzogen werden.  

Sollten wir beim Einsatz von Cookies auf Dienstleistungen von Dritten zurückgreifen oder diesen Informationen aus den Cookies zur Verfügung stellen, so geschieht dies ausschließlich unter Geltung eines s.g. Auftragsverarbeitungsverhältnis mit dem betreffenden Dienstleister. Ein solches stellt die weisungsgebundene Verarbeitung sowie Zweckbindung der Verarbeitung sicher, sodass ihre Daten nicht zu anderen – von diesen Datenschutzhinweisen abweichenden – Zwecken verwendet werden dürfen.  

Sofern diese Dienstleister außerhalb der Europäischen Union bzw. des Europäischen Wirtschaftsraumes (nachfolgend „EU bzw. EWR“ genannt) niedergelassen sind, findet ein sogenannter Drittlandtransfer statt. Dieser ist zulässig, sofern Sie darin eingewilligt haben, wir eine Garantie für ein dem europäischen Standard angemessenes Datenschutzniveau geschaffen haben oder die EU-Kommission das jeweilige Drittland als sicheres Drittland eingestuft hat. Sollte es beim Einsatz unserer Cookies zu einem Drittlandtransfer kommen, informieren wir Sie hierrüber durch entsprechende Hinweise. Weitere Informationen zur den Empfängern Ihrer Daten und dem Thema Drittlandtransfer können Sie Ziffer 6 und Ziffer 7 dieser Datenschutzhinweise entnehmen. 

4.1.1 Rechtsgrundlage der Datenverarbeitung 
Die Rechtsgrundlage für das Setzen technisch notwendiger Cookies und die mit Ihnen einhergehenden Datenverarbeitungen ist Art. 6 Abs. 1 lit. f DSGVO iVm. §25 Abs. 2 S. 2 TDDDG. Das Setzen notwendiger Cookies erfolgt zur Sicherstellung der technischen Bereitstellung und Nutzbarkeit der Webseite. Rechtsgrundlage für das Setzen optionaler Cookies und die Verwendung Ihrer Daten für diese Zwecke ist Art. 6 Abs. 1 lit. a DSGVO iVm. §25 Abs. 1 TDDDG. Die Datenverarbeitung erfolgt demnach auf Grundlage einer von Ihnen abgegebenen Einwilligung in die Datenverarbeitung mithilfe unseres Cookie-Consent Managers. 

4.1.2 Dauer der Speicherung oder Kriterien für die Festlegung dieser Dauer 
Die Daten, die bei dem Einsatz optionaler Cookies erfasst und ausgewertet werden, werden in der Regel so lange gespeichert, bis Sie deren Einsatz widersprechen. Technisch notwendige Cookies werden hingegen in aller Regel nach Beendigung der jeweiligen Session gelöscht. Näheres hierzu kann dem Cookie Consent Manager entnommen werden.  

4.1.3 Widerspruchs- und Beseitigungsmöglichkeit 
Sie haben das Recht, Widerspruch nach Maßgabe des Art. 21 DSGVO gegen die Verarbeitung Ihrer personenbezogenen Daten beim Einsatz notwendiger Cookies einzulegen, soweit dafür Gründe vorliegen, die sich aus Ihrer besonderen Situation ergeben. Möchten Sie von Ihrem Widerspruchsrecht Gebrauch machen, wenden Sie sich bitte an die unter Ziffer 1 angegebenen Kontaktadresse. Sofern Sie dieser Datenverarbeitung widersprechen, können Sie die Webseite nur noch eingeschränkt oder gar nicht mehr nutzen.  

Überdies können Sie Ihre Einwilligung zur Verarbeitung Ihrer Daten im Rahmen des Einsatzes optionaler Cookies jederzeit mit Wirkung für die Zukunft widersprechen. Der Widerspruch kann technisch durch ein Opt-Out in unserem Cookie Consent Manager auf dieser Webseite erfolgen oder durch das technische Bereinigen von Cookies mithilfe ihres Browsers. Über den nachfolgenden Link gelangen Sie in die Einstellungsmaske unseres Cookie Consent Managers: 

4.2 Einsatz von Analyse & Tracking Mechanismen 
Auf unserer Webseite setzen wir diverse Sicherheitstechnologien sowie Analyse- und Trackingmechanismen ein, um unser Webseitenangebot sicherer machen und uns dabei helfen die Angebote zu verbessern. Allen Analyse- und Trackingmechanismen ist gemein, dass wir sie ausschließlich dann einsetzen, wenn und soweit wir hierfür ihre Einwilligung durch unser Cookie Consent Manager erhalten haben. Beim Einsatz von Sicherheitstechnologie (z.B. Web Applications Firewalls), kann Rechtsgrundlage unser Berechtigtes Interesse (Art. 6 Abs. 1 lit. f) DS-GVO) an der Datenverarbeitung oder Ihre Einwilligung (Art. 6 Abs. 1 lit. a DS-GVO) sein. Auch kann es vorkommen, dass wir Ihre personenbezogenen Daten aufgrund einer auf uns einwirkenden gesetzlichen Verpflichtung (Art. 6 Abs. 1 lit. c DS-GVO) verarbeiten müssen. 

Konkret setzen wir für den bezeichneten Zweck die nachfolgenden Technologien bzw. Dienste ein: 

• HubSpot Einwilligungsmanagement

Anbieter: Hubspot Germany GmbH, Am Postbahnhof 17, 10243 Berlin („Hubspot“) 

Cookie Name: __hstc, hubspotutk, __hssc, __hssrc 

Cookie Laufzeit: Maximal 1 Jahr 

Datenkategorien:  IP-Adresse, Browser-Typ, Einwilligungsstatus 

Beschreibung: Unsere Website nutzt die Consent-Technologie der Firma Hubspot, um Ihre Einwilligung zur Speicherung bestimmter Cookies in Ihrem Browser oder zum Einsatz bestimmter Technologien einzuholen und diese datenschutzkonform zu dokumentieren.  

Links zum Anbieter: 

• https://knowledge.hubspot.com/privacy-and-consent/hubspot-cookie-security-and-privacy#necessary-cookies 

Rechtsgrundlage: Art. 6 Abs. 1 lit. c DSGVO, §25 Abs. 2 Nr. 2 TDDDG 

• Google Analytics
  

Anbieter: Google Ireland Limited, Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland (“Goolgle”) 

Cookie Name: _ga, _gid, _gat, _ga_<container-id>, _gac_gb_<container-id> 

Cookie Laufzeit: Maximal 2 Jahre 

Anbieter: Google Ireland Limited, Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland (“Goolgle”) 

Cookie Name: _ga, _gid, _gat, _ga_<container-id>, _gac_gb_<container-id> 

Cookie Laufzeit: Maximal 2 Jahre 

Datenkategorien: IP-Adresse, Browser-Typ, besuchte Seiten, Sitzungsdauer, Nutzerinteraktionen 

Beschreibung: Google Analytics-Cookies sammeln und analysieren Daten über die Nutzung der Website. Sie helfen dabei, das Nutzerverhalten zu verstehen, die Effektivität von Marketingkampagnen zu messen und die Benutzererfahrung zu verbessern. Zu den gesammelten Daten gehören Seitenaufrufe, Sitzungsdauer und Nutzerinteraktionen. 

Links zum Anbieter: 

• Nutzungsbedingungen: http://www.google.com/analytics/terms/de.html 

• Datenschutz: http://www.google.com/intl/de/analytics/learn/privacy.html

• Datenschutzerklärung: http://www.google.de/intl/de/policies/privacy 

Rechtsgrundlage: Art. 6 Abs. 1 lit. a DSGVO, §25 Abs. 1 TDDDG 

• Google Tag Manager
  

Anbieter: Google Ireland Limited, Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland (“Google”) 

Cookie Name: gtm_auth, gtm_debug, gtm_previe 

Cookie Laufzeit: Maximal 2 Jahre 

Datenkategorien: IP-Adresse, Browser-Typ, besuchte Webseiten, Nutzerinteraktionen, eindeutige Nutzer-ID 

Beschreibung: Google Tag Manager ermöglicht die Verwaltung und Implementierung von Tags auf der Website, ohne den Quellcode direkt ändern zu müssen. Dies erleichtert die Integration und Verwaltung von Tracking-Tags, die zur Analyse des Nutzerverhaltens und zur Optimierung von Marketingkampagnen verwendet werden. 

Links zum Anbieter: 

• Nutzungsbedingungen: http://www.google.com/analytics/terms/de.html 

• Datenschutz: http://www.google.com/intl/de/analytics/learn/privacy.html 

• Datenschutzerklärung: http://www.google.de/intl/de/policies/privacy 

• Datenschutz & Sicherheit: https://support.google.com/tagmanager/answer/9323295?hl=de 

Rechtsgrundlage: Art. 6 Abs. 1 lit. a DSGVO, §25 Abs. 1 TDDDG