Imprint & Privacy Handelskraft.com is the company blog of dotSource SE. Address: dotSource SE Goethe Strasse 07743 Jena German Telefon: +49 3641 797 9000 Telefax: +49 3641 797 9099 E-Mail (Blog): info@Handelskraft.com E-Mail (dotSource): info@dotSource.de Chairman of the Board of Directors: Christian Otto Grötsch Executive Directors: Christian Malik Frank Ertel Janine Bohnenberg Register court: Local court Jena Register number: HRB 520983 VAT identification number: DE 353 891 554 Tax identification number: 162/100/10258 Responsible for content: in accordance with § 55 Abs. 2 (RStV) Christian Otto Grötsch Notes on liability Responsible for the content of this website is dotSource SE. The content of this website is maintained and updated with the highest care. However, dotSource SE assumes no liability for the correctness, topicality or completeness of the information provided. All texts that you find on our pages are just general information. We have placed links to other sites on the Internet on some of our pages and checked them for correctness. However, we would like to explicitly emphasize that we have no influence on the design and content of the linked pages. It cannot be ruled out that third-party activities may change the content in such a way that it no longer complies to our intentions or is illegal. In this case, we would be grateful for any information. All liability claims against dotSource SE caused by non-use or use of the information provided are fundamentally excluded. Notes on copyright The contents of this website are protected by copyright. Their use is only permitted for private purposes. Any reproduction, presentation, broadcast, rental and/or loan of the website or individual contents without stating the copyright owner or source is prohibited and will have consequences under criminal or civil law. All rights reserved. Please send your questions about copyright to: datenschutz[at]dotsource.de Notes on data protection 1. General information Below you will find an overview of the type and scope of the processing of personal data by dotSource, which occurs when you visit our website. “Personal data” means any information relating to an identified or identifiable natural person. 2. Responsibility and data protection officer a. The controller responsible for data processing within the meaning of data protection law is dotSource SE, Goethestraße 1, 07743 Jena (following „dotSource“). b. dotSource has appointed a data protection officer. The data protection officer can be contacted at the above address and at datenschutz[at]dotsource.de 3. Mandatory information a. Revocation You can revoke your consent at any time. All you need to do is send us an informal email (datenschutz(at)dotsource.de). The legality of the data processing carried out until the revocation remains unaffected by the revocation. b. Right to complain In the event of violations of data protection law, you have the right to complain to the competent supervisory authority. The competent supervisory authority for data protection issues is the data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html. c. Data transfer You have the right to request that data which we process automatically on the basis of your consent or in fulfillment of a contract be handed over to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place if it is technically possible. d. Security This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. When SSL or TLS encryption is activated, the transmitted data cannot be read by third parties. e. Right to access information Within the framework of the applicable legal provisions, you have the right to obtain information free of charge at any time about your stored personal data, its origin and recipients and the purpose of the data processing. f. Right to correction, limitation of processing or deletion If the legal requirements are met, you have the right to correct, restrict the processing of or delete your personal data stored by us. You can contact us at any time at the address given above and at datenschutz(at)dotsource.de to contact us. 4. Purposes and legal basis of data processing a. Website access We collect the following data about access to the website and store it as “server log files” on the website server: Websites visited Time at the time of access Browser used Operating system used IP address used (anonymized) The server log files are stored for a maximum of 14 days and then deleted. The data is stored for security reasons, e.g. to be able to investigate cases of misuse. We host our website at Strato. The provider is Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin Deutschland (hereinafter referred to as Strato). For details, please refer to the privacy policy of Strato. This data is used to ensure the error-free provision of the website and is evaluated to improve it. The legal basis for data processing is Art. 6 para. 1 lit. f GDPR. The legitimate interest arises from the purposes of data collection listed below Trouble-free connection establishment Trouble-free and easy use (e.g. user-friendly optimization of the website) Security of the system and system stability b. Duration of storage Unless explicitly stated in this privacy policy, the data stored by us will be deleted immediately as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons. c. Forms If you enter personal data in the forms available on our website, this data will be used by us to process your request and stored until you withdraw your consent. The data entered will only be used internally. All data entered by you in the forms is provided voluntarily. The processing is therefore carried out exclusively based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time informally by e-mail to us (datenschutz(at)dotsource.de). This does not affect the lawfulness of the data processing carried out before you withdraw your consent. If we store your data in a third country outside the EU/EEA, this will only take place if suitable guarantees for the protection of your personal data in accordance with Art. 44 et seq. GDPR are in place. Our forms are linked to Marketing Cloud Account Engagement (formerly Salesforce Pardot or Pardot). For more information about Marketing Cloud Account Engagement, please read the relevant section on Marketing Cloud Account Engagement. d. Cookies Our website uses so-called cookies. These are small text files that your browser stores locally on your computer. So-called session cookies, which are necessary for the optimal and convenient functionality of our website, are deleted when you leave the website. Other cookies are deleted after a certain period and enable us to recognize you the next time you visit our website. The duration of storage can be found in the overview in the cookie settings of your web browser. The legal basis for the use of cookies is Art. 6 para. 1 lit. f GDPR, as they enable the optimal, error-free and convenient provision of our services to our customers. If we use cookies that, for example, analyze your surfing behavior on our website, these are treated separately in this data protection notice. e. Newsletter If you subscribe to a newsletter on our website, you will be added to our newsletter mailing list. The data you enter will be processed exclusively based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time, e.g. via the unsubscribe link in the newsletter or by sending an email to datenschutz(at)dotsource.de. If you withdraw your consent, we will delete your email address from the newsletter mailing list. In addition, we use Marketing Cloud Account Engagement (formerly Salesforce Pardot or Pardot) to send the newsletter. For more information about Marketing Cloud Account Engagement, please read the relevant section on Marketing Cloud Account Engagement. If you have entered your e-mail address and any other optional data to receive our free newsletter, we will only use the data to send you information in accordance with your newsletter registration. When you register for the newsletter, we will store your IP address and the date and time of registration. This storage serves solely as proof if a third party misuses an email address and registers to receive the newsletter without the knowledge of the authorized person. By agreeing to receive our newsletter, you also consent to us carrying out newsletter tracking and evaluating your interaction with our newsletter. As part of the evaluation, we find out who has opened our newsletter and which of the links contained therein have been clicked on. This enables us to recognize your interests and to send you a newsletter tailored to your interests in the future. We process the following data as part of newsletter tracking: Opening rate Click rate Subscribe/unsubscribe Delivery status The legal basis for the processing of your personal data is your consent pursuant to Art. 6 para. 1 lit. a GDPR. f. Lead Forensics For marketing and optimization purposes, products and services of Lead Forensics are offered on this website. The head office of Lead Forensics is located at Communication House 26 York Street, London, W1U 6PZ United Kingdom. Lead Forensics uses the imprint to determine details of your organization including telephone number, web address, SIC code and a description of the company. Lead Forensics shows the actual history of your visit to this website, including all the websites you have visited and viewed and how long you have spent on them. Under no circumstances will the data be used to personally identify an individual visitor. If IP addresses are collected, they are anonymized immediately after collection. On behalf of the operator of this website, Lead Forensics will use the information collected to evaluate your visit to the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website provider. If you do not agree to this, you can object to the collection, processing and storage of data at any time with effect for the future by clicking on the following link: Exclude from website tracking. LeadForensics is used based on Art. 6 para. 1 lit. f GDPR. You can find more information on what data LeadForensics collects in the privacy policy at www.leadforensics.com/privacy-policy/ g. Use of Facebook plugins Our website uses social plugins (“plugins”) from the social network Facebook, which is operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”). The plugins are marked with a Facebook logo or the addition “Facebook Social Plugin”. When you visit a page on our website that contains such a plugin, your browser establishes a direct connection with Meta’s servers. The content of the plugin is transmitted by Meta directly to your browser, which integrates it into the website. By integrating the plugins, Meta receives the information that you have accessed the corresponding page of our website. If you are signed into Facebook, Meta can assign the visit to your Facebook account. If you interact with the plugins, for example by clicking the “Like” button or posting a comment, the corresponding information is transmitted directly from your browser to Meta and stored there. The purpose and scope of the data collection and the further processing and use of the data by Meta as well as your rights in this context and setting options to protect your privacy can be found in the data protection information. If you do not want Meta to collect data about you via our website, you must log out of Facebook before visiting our website. h. Use of Meta (Facebook) Pixel We process your personal data in order to use Facebook Pixel to display advertisements. This website uses the Facebook pixel of Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland. This enables users of this website to be tracked via other websites that use Facebook pixel. This serves to analyze and optimize our online offer, in particular retargeting, i.e. the renewed advertising approach on our and other websites as well as the assignment to target groups for Facebook Ads. The meta pixel collects the following data: ads viewed, browser information, content viewed, device information, geographic location, interactions with ads, services and products, IP address, marketing information, non-confidential user-defined data, pixel ID, referrer URL, success of marketing campaigns, usage data, user behavior, Facebook user ID. We disclose your personal data to Facebook (Meta). We store your personal data for as long as is necessary for the use of the Facebook pixel for the display of advertisements. Facebook processes your personal data in the USA. There is an adequacy decision by the European Commission for the USA (Data Privacy Framework). The use of Meta (Facebook) Pixel is based on Art. 6 para. 1 lit. f GDPR. i. X (Twitter) plugin Functions of the X (Twitter) service are integrated on our website. These functions are offered by Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland. By using Twitter and the “Re-Tweet” function, the websites you visit are linked to your Twitter account and made known to other users. Data is also transmitted to Twitter in the process. You can find more information on what data is collected by X for this purpose in Twitter’s privacy policy at: https://twitter.com/de/privacy#x-privacy-3.1 You can change your data protection settings on Twitter in the account settings at twitter.com/account/settings. The use of X (Twitter) Plugin is based on Art. 6 para. 1 lit. f GDPR. j. LinkedIn plugin Our website uses functions of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Each time one of our pages which contains LinkedIn functions is accessed, a connection to LinkedIn servers is established. LinkedIn will be informed that you have visited our website with your IP address. If you click on the LinkedIn “Recommend” button and are logged into your LinkedIn account, LinkedIn can associate your visit to our website with you and your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by LinkedIn. Further information on this can be found in LinkedIn’s privacy policy at: https://www.linkedin.com/legal/privacy-policy. k. LinkedIn Insight Tag Our website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. LinkedIn Insight Tag collects the following data: advertisements viewed, advertising ID, articles viewed, device ID, device information, IP address, information about the operating system, websites visited, search terms, connections, followers, information provided on the profile, user agent data, videos viewed. Each time you visit one of our websites that contains LinkedIn functions, a connection to LinkedIn servers is established. LinkedIn will be informed that you have visited our website with your IP address. You can find more information on this in LinkedIn’s privacy policy at: www.linkedin.com/legal/privacy-policy. The use of LinkedIn Insight Tag is based on Art. 6 para. 1 lit. f GDPR. l. Piwik PRO Tag Manager and Piwik PRO Analytics Suite (together “Piwik PRO”) We use the Piwik Pro Tag Manager on our website. The provider of Piwik PRO is Piwik PRO GmbH, Knesebeckstraße 62/63, 10719 Berlin. Piwik PRO Tag Manager allows website tags to be managed via an interface. The Piwik Pro Tag Manager itself does not set cookies, but only tags and does not collect any personal data. The service triggers other tags, which themselves may collect data. Piwik PRO Analytics Suite is used to collect data for the needs-based design of our website and for the statistical evaluation of visitor flows for marketing and optimization purposes. Pseudonymous user profiles are also created. Cookies are used for this purpose, which are stored on your computer and enable your use of our website to be analyzed. The IP address is shortened immediately after collection and before it is stored. Piwik PRO is hosted by Microsoft Azure in the EU. You can find more information about Piwik PRO’s privacy policy at: piwikpro.com/privacy/. For more information about cookies that may be created by Piwik PRO, please click here help.piwik.pro/support/privacy/cookies-created-for-visitors-by-piwik-pro/ and here help.piwik.pro/support/privacy/what-data-does-piwik-pro-collect/. We collect the following data about website visitors: Operating system URL of the previously visited website URL of the page you access on the website IP address of the accessing device the name and URL of the requested file the amount of data transferred browser type/version Piwik PRO creates user profiles based on browsing history and calculates metrics related to website usage, such as bounce rate, intensity of visits, page views. The use of Piwik PRO is based on Art. 6 para. 1 lit. f GDPR. m. Piwik Heatmap & Clickmap Tracking We use Piwik Heatmap and Clickmap Tracking on our website to statistically analyze the use of our website. The provider of Piwik Heatmap & Clickmap Tracking is Piwik PRO GmbH, Knesebeckstraße 62/63, 10719 Berlin. A heatmap is a graphical representation of data that uses a system of color coding to represent different values. Heat maps are used in various forms of analysis but are most commonly used to represent user behavior on websites and in mobile applications. Using color codes, a heat map visually represents how a user interacts with a website. The color scale ranges from blue (least interaction) to red (most interaction). Heatmaps allow us to assess which website elements users click on and scroll through or which they ignore. The use of Piwik Heatmap & Clickmap Tracking is based on Art. 6 para. 1 lit. f GDPR. You can find more information about Piwik PRO’s privacy policy at: piwikpro.de/datenschutz/ n. Microsoft Advertising (Bing Ads) On our website, we use conversion tracking from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Microsoft Bing Ads stores a cookie on your computer if you have reached our website via a Microsoft Bing ad. In this way, Microsoft Bing and we can recognize that someone has clicked on an ad, has been redirected to our website and has reached a predetermined target page (conversion page). We only see the total number of users who clicked on a Bing ad and were then forwarded to the conversion page. No personal information about the identity of the user is disclosed. If you do not want information about your behavior to be used by Microsoft as explained above, you can refuse the setting of a cookie required for this – for example, by setting your browser to generally deactivate the automatic setting of cookies. You can also prevent the collection of data generated by the cookie and related to your use of the website and the processing of this data by Microsoft by declaring your objection at the following link: account.microsoft.com/privacy/ad-settings/signedout. Further information on data protection and the cookies used by Microsoft and Bing Ads can be found on the Microsoft website at privacy.microsoft.com/en/privacystatement Further information on the handling of user data can be found in Microsoft’s privacy policy at: privacy.microsoft.com/en/privacystatement Microsoft Bing Ads is used based on Art. 6 para. 1 lit. f GDPR. o. YouTube plugin Our website uses plugins from the Google-operated YouTube site. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit one of our websites equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our websites you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account. The use of YouTube is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. Further information on the handling of user data can be found in YouTube’s privacy policy at: www.google.de/intl/de/policies/privacy. p. Vimeo plugin Plugins from the Vimeo video portal of Vimeo.com Inc, 330 West 34th Street, New York, New York 10001, USA are integrated on our websites. Each time you access a page that offers one or more Vimeo video clips, a direct connection is established between your browser and a Vimeo server in the USA. Information about your visit and your IP address is stored there. By interacting with Vimeo plugins (e.g. clicking the start button), this information is also transmitted to Vimeo and stored there. If you have a Vimeo user account and do not want Vimeo to collect data about you via this website and link it to your membership data stored with Vimeo, you must log out of Vimeo before visiting this website. The privacy policy for Vimeo with more detailed information on the collection and use of your data by Vimeo can be found at https://vimeo.com/privacy. Vimeo also calls up the Google Analytics tracker via an iFrame in which the video is called up. This is Vimeo’s own tracking, to which we have no access. You can prevent tracking by Google Analytics by using the deactivation tools that Google offers for some Internet browsers. Users can also prevent Google from collecting the data generated by Google Analytics and relating to their use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout q. Marketing Cloud Account Engagement (formerly Salesforce Pardot or Pardot) Our website uses the Pardot Marketing Automation System from salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich, Germany. Pardot is special software for recording and analyzing the movement profiles of website visitors. This tracks visitor behavior using a cookie and ultimately displays reports in Marketing Cloud Account Engagement (Salesforce Pardot) (Account Engagement). When you visit our website, Pardot records your click path and uses this to create an individual user profile using a pseudonym. Cookies are used for this purpose, which enables your browser to be recognized. The following data is processed when you visit our website: IP address host name Information about the website from which you came to us Information about the search engine queries that brought you to us the number of your visits to our website the number of pages on our website that you have visited the date of your first visit to our website the date of your last visit to our website information about the campaign through which you came to us Information such as name and location about the company you work for Where Salesforce.com processes personal data, it does so exclusively on our behalf and in accordance with our instructions. Salesforce.com complies with the EU-U.S. Privacy Framework Agreement for the services they provide for which Salesforce.com acts as a data processor. You can find Salesforce’s current Privacy Framework Agreement at https://www.dataprivacyframework.gov/s/. You can prevent the storage of cookies at any time by configuring your Internet browser so that cookies from the domain “pardot.com” are not accepted. However, this may lead to certain restrictions on the functions and user-friendliness of our services. The data processed during communication is stored on the Salesforce servers. Personal data may also be transmitted to the parent company of salesforce.com Germany GmbH, salesforce.com inc, Salesforce Tower, 415 Mission Street, San Francisco, CA 94105, USA. The use of Marketing Cloud Account Engagement (formerly Salesforce Pardot) is based on Art. 6 para. 1 lit. f GDPR. r. Wistia plugin Videos from the online video provider Wistia are integrated on our website. Wistia is a service of Wistia, Inc, 17 Tudor Street, Cambridge, MA 02139, USA. The integration requires that Wistia can recognize the IP address of the user. The IP address is required to be able to send the content to the user’s browser. The use of Wistia is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. We have concluded an order data processing agreement with Wistia Inc. in accordance with the provisions of the GDPR. Further information on data protection and the cookies used can be found on the Internet at http://wistia.com/privacy s. Google Ads Our website uses Google Ads. Google Ads is an online advertising program of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads makes it possible to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms in Google (keyword targeting). Furthermore, targeted advertisements can be displayed based on the user data available at Google (e.g. location data and interests) (target group targeting). This data can be evaluated quantitatively, for example by analyzing which search terms led to the display of advertisements and how many advertisements led to corresponding clicks. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG. The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://policies.google.com/privacy/frameworks and https://business.safety.google/controllerterms/. The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780. t. Spotify We use the Spotify player to play certain audio and podcast content. This is offered by Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden (“Spotify”). For this purpose, we have embedded a so-called widget from Spotify on our website, which enables the playback of audio content (“Spotify player”). When you use the Spotify player, Spotify sets various cookies in your browser and processes your personal data, such as your IP address. Spotify uses the data collected via the cookies to, among other things Unlock content, record your interactions and preferences, such as the settings you have made on the player, and control and measure the display of ads. If you have a Spotify account, your visit to our website can be assigned to your Spotify account if you are logged in there. According to Spotify’s own statements, data may also be processed in third countries, i.e. outside the EU and the EEA. In this case, Spotify will take special measures, such as concluding the European Commission’s standard contractual clauses. We use the Spotify player so that you can play corresponding audio and podcast content directly on our website. Justification is provided in accordance with Art. 6 (1) (a) GDPR if you have given us your consent in advance. You can revoke this at any time with effect for the future. In this case, you will no longer be able to use the Spotify player. Further information on the use and processing of data by Spotify can be found in Spotify’s privacy policy at https://www.spotify.com/de/legal/privacy-policy/, in Spotify’s data protection center, available at https://www.spotify.com/de/privacy, and in the cookie policy at https://www.spotify.com/de/legal/cookies-policy/.
