Data Protection

Data Protection

General Information

The following information provides a brief overview of what happens to your personal data when you visit this website. Personal data refers to any data that can personally identify you. Detailed information on data protection can be found in our privacy policy listed below this text.

Data collection on this website

Who is responsible for data collection on this website?

The data processing on this website is carried out by the website operator. You can find their contact details in the imprint or contact section of this website.

How do we collect your data?

Your data is collected in two ways. Firstly, by providing us with information, such as entering data into a contact form. Secondly, other data is collected automatically or with your consent when you visit the website through our IT systems. This includes primarily technical data (e.g., internet browser, operating system, or time of page access). The collection of this data occurs automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected to ensure the proper functioning of the website. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right to obtain, free of charge, information about the categories, origin, recipients, storage duration, and purpose of your stored personal data, as well as a copy of such data. You also have the right to request the correction, deletion, or blocking of this data. If you have given consent for data processing, you can revoke this consent at any time for the future. If processing is based on legitimate interests, you have the right to object to the processing. Additionally, under certain circumstances, you have the right to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority. For these matters and any further questions regarding data protection, you can contact us at any time using the contact information provided in the imprint.

Analysis tools and third-party tools

When visiting this website, your surfing behavior can be statistically evaluated. This is primarily done using cookies and so-called analysis programs. Detailed information about these analysis programs can be found in the following privacy policy.

 

General notes and obligatory information on data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations and this privacy policy. When you use this website, various personal data is collected. Personal data is data that can be used to personally identify you. This privacy policy explains what data we collect and how we use it. It also explains how and for what purpose this is done. We would like to point out that data transmission over the Internet (e.g., communication by email) can have security vulnerabilities. A complete protection of data against access by third parties is not possible.

Information about the responsible entity:

The responsible entity for data processing on this website is:

scaleon GmbH, Krottnaurerstr. 11, 14129 Berlin

Email:

Managing Directors: Stefan Benndorf, Philipp Engelhardt

The responsible entity is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Revocation of your consent to data processing

Many data processing operations are only possible with your explicit consent. You can revoke consent you have already given at any time. To do this, an informal notification by email to us is sufficient. The legality of the data processing carried out before the revocation remains unaffected by the revocation. Additionally, you can revoke your consent at any time through our Consent Management Platform. You can find these here.

Right to object to data collection in special cases and against direct marketing (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, INCLUDING PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS DATA PROTECTION DECLARATION. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 PARA. 1 GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING, INCLUDING PROFILING, INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21 PARA. 2 GDPR). IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT MARKETING PURPOSES.

Right to lodge a complaint with the competent supervisory authority.

In case of violations of the General Data Protection Regulation (GDPR), data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work, or the location of the alleged infringement. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedies.

Right to Data Portability.

You have the right to receive the data that we process automatically based on your consent or in fulfillment of a contract, either handed over to yourself or to a third party, in a common, machine-readable format. If you request the direct transmission of the data to another controller, this will only be done to the extent that it is technically feasible.

Information, Deletion, and Correction.

Within the framework of applicable legal provisions, you have the right to receive free information at any time about your stored personal data, its origin and recipient, the purpose of data processing, and, if applicable, the right to correction or deletion of this data. For this purpose, as well as for any further questions regarding personal data, you can contact us at any time using the address provided in the imprint.

Right to Restriction of Processing.

You have the right to request the restriction of the processing of your personal data. To exercise this right, you can contact us at any time using the address provided in the imprint. The right to restrict processing exists in the following cases: If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. During the verification period, you have the right to request the restriction of the processing of your personal data. If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion. If we no longer need your personal data, but you need it for the exercise, defense, or establishment of legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion. If you have objected pursuant to Article 21(1) GDPR, a balance must be made between your interests and ours. As long as it is not yet clear whose interests prevail, you have the right to request the restriction of the processing of your personal data. If you have restricted the processing of your personal data, except for storage, these data may only be processed with your consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

 

Data collection on this website

Processing Procedures

We collect and process the following personal data about you:

• Contact and address information, if you have provided us with your contact information or registered on our website
• Online identifiers (e.g., your IP address, browser type and version, related operating system, referrer URL, file name, access status, transmitted data volume, date, and time of server request).
• Social media identifiers.

Data sources

We receive the data processed on this website from you (including information about the devices you use). If we do not collect personal data directly from you, we will also inform you about the source of the personal data and, if applicable, whether they come from publicly accessible sources. Unless explicitly stated during collection, the provision of data is not required or mandatory. Such an obligation may arise from legal requirements or contractual arrangements.

Processing Purposes

We process your data for the following purposes:

• for the contact you requested,
• for the provision of our service,
• for contract processing, especially for processing orders and invoicing,
• for advertising purposes
• “for sending the email newsletter, if you have subscribed to it,
• for quality assurance and
• for our statistics.

Legal Basis for Data Processing.

The processing of your data is based on the following legal grounds:

• Consent (Art. 6(1) lit. a GDPR) – The data subject has given consent to the processing of their personal data for one or more specific purposes.
• Contractual performance and pre-contractual inquiries (Art. 6(1) lit. b GDPR) – Processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures requested by the data subject.
• Legal obligation (Art. 6(1) lit. c GDPR) – Processing is necessary for compliance with a legal obligation to which the controller is subject.
• Legitimate interests (Art. 6(1) lit. f GDPR) – Processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.

Legitimate Interests.

If we base the processing of your personal data on legitimate interests pursuant to Art. 6(1) lit. f GDPR, such interests, unless otherwise specified,

• the improvement of our offer,
• protection against abuse and
• “the compilation of our statistics.

Storage Duration

We only store your personal data for as long as necessary to achieve the processing purpose or as required by a legal retention period.
We store your data,

• if you have given consent for processing, for a maximum duration until you revoke your consent,
• if we need the data to perform a contract, for a maximum duration as long as the contractual relationship with you exists or legal retention periods are in effect
• if we process the data to fulfill a legal obligation, for a maximum duration as long as the legal obligation exists.
• if we use the data based on a legitimate interest, for a maximum duration as long as your interest in deletion or anonymization does not outweigh.

Recipient or Categories of Recipients of Personal Data.

In processing your data, we collaborate with the following service providers who have access to your data:

• Providers of web analytics tools,
• Web hosting providers,

There is a data transfer to third countries outside the European Economic Area. This is done based on legally required contractual agreements that are intended to ensure adequate protection of your data, and you can view them upon request.

Hosting and Content Delivery Networks (CDN)

This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers. This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access, and other data generated through a website. The use of the host is for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast, and efficient provision of our online offering by a professional provider (Art. 6 para. 1 lit. f GDPR). Our host will process your data only to the extent necessary to fulfill its performance obligations and will follow our instructions regarding this data.

SSL or TLS encryption.

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from ‘http://’ to ‘https://’ and by the lock symbol in your browser line. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Cookies

Our websites use so-called ‘cookies.’ Cookies are small text files that do not cause any harm to your device. They are either temporarily stored for the duration of a session (session cookies) or permanently (persistent cookies) on your device. Session cookies are automatically deleted after your visit ends. Persistent cookies remain stored on your device until you delete them yourself or an automatic deletion occurs through your web browser. In some cases, cookies from third-party companies may also be stored on your device when you enter our site (third-party cookies). These cookies enable us or you to use certain services of the third-party company (e.g., cookies for processing payment services).

Cookies serve various functions. Many cookies are technically necessary because certain website functions would not work without them (e.g., the shopping cart function or video display). Other cookies are used to analyze user behavior or display advertising. Cookies that are necessary for the electronic communication process (necessary cookies) or for the provision of specific functions you desire (functional cookies, e.g., for the shopping cart function) or for optimizing the website (e.g., cookies for measuring web audience) are stored based on Art. 6(1) lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. If consent for cookie storage has been requested, storage of the respective cookies will be based solely on this consent (Art. 6(1) lit. a GDPR); the consent can be revoked at any time. You can configure your browser settings to be informed about the setting of cookies, allow cookies only in specific cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website. If cookies are used by third-party companies or for analytical purposes, we will inform you separately in this privacy statement and, if necessary, request your consent.

Logfiles

With each access to our website, usage data is transmitted by the respective internet browser and stored in log files, the so-called server log files. The data records stored in this process contain the following information: domain from which the user accesses the website, date and time of access, IP address of the accessing computer, website(s) visited by the user within the scope of the offering, transmitted data volume, browser type and version, operating system used, name of the internet service provider, message indicating whether the access was successful. These log file records are evaluated in anonymized form to improve and make the offering more user-friendly, to find and fix errors, and to manage server loads.

Inquiry via email, telephone, or fax.

If you contact us by email, telephone, or fax, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us for the purpose of processing your request. We do not disclose this data without your consent. The processing of this data is based on Art. 6(1) lit. b GDPR, if your inquiry is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries directed to us (Art. 6(1) lit. f GDPR) or on your consent (Art. 6(1) lit. a GDPR) if requested. The data you send us via contact inquiries will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after completing the processing of your request). Mandatory legal provisions – especially legal retention periods – remain unaffected.

Google Analytics

We use the Google Analytics service provided by Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland; Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”). The service analyzes and evaluates the usage of our website and generates statistics and reports based on this data, which help us optimize and improve our site for visitors. Google Analytics uses cookies for this purpose. For this, the information generated by the cookie, such as your anonymized IP address, device and browser characteristics, session duration, visited pages, is transmitted to and stored on a Google server, where it is analyzed, on our behalf. On this website, we use the IP anonymization feature of Google Analytics, ensuring the anonymized collection of IP addresses. Typically, Google shortens your IP address within the European Union or other Contracting States to the Agreement on the European Economic Area (EEA) for this purpose. In exceptional cases, your IP address may be transmitted to a Google server in the USA and anonymized there. Your IP address transmitted during this process will not be merged with any other data from Google. Within the Google Analytics Advertising Features, remarketing and performance reports based on demographic characteristics and interests are utilized. These processes aim to align advertising efforts more closely with the interests of individual users based on their behavior. As part of remarketing, personalized advertising campaigns may be displayed on other websites based on the user’s browsing behavior on this website. These ads may contain products previously viewed by the user on the website. If you have consented to Google linking your web and app browsing history to your Google account and using information from your Google account to personalize ads, Google will use this data for cross-device remarketing. Data processing, particularly the setting of cookies, is carried out with your consent based on Article 6(1)(a) of the GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out prior to revocation based on your consent. Revocation can be done by disabling the corresponding selection on our Consent Management Platform, which you can access here.

Furthermore, you can prevent the collection and processing of data by Google by downloading and installing the browser add-on available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. Alternatively, or within browsers on mobile devices, please click on the following link: Disable Google Analytics.

In this process, an opt-out cookie is placed on your device for our websites, effective for the browser you are currently using. If you delete your cookies in this browser, you will need to click on this link again. Google offers registered Google users and other users the option to disable personalized advertising. You can find details here: https://support.google.com/ads/answer/2662922?hl=de.

You can also find Google’s privacy policy here: https://policies.google.com/privacy?hl=de

Google Tag Manager

This website also uses Google Tag Manager, a service provided by Google Ireland Limited, Gordon House Barrow Street Dublin 4, Ireland; Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”). Google Tag Manager is a solution that allows marketers to manage website tags through an interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect any personal data. The tool triggers other tags, which may collect data under certain circumstances. Google Tag Manager does not access this data. If deactivation has been performed at the domain or cookie level, it will remain in effect for all tracking tags implemented through Google Tag Manager.

 

Youtube

We have also embedded videos from YouTube on our website, a video portal operated by YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, which also provides the embedding function. For the European region, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is the service provider for YouTube. Embedding allows us to incorporate video files into our website, making them visually appealing and interesting for visitors. When you visit one of our pages that has a YouTube video embedded, a connection is made to the YouTube/Google servers. This involves the use of cookies, which store, among other things, your IP address, information about your device and browser, and the information about which of our pages you have visited, and transmit it to Google. Additionally, a connection is made to Google’s advertising network “DoubleClick”. If a “DoubleClick” cookie is already stored in your browser, the specific cookie ID will be transmitted to the network. If you are logged into Google, your data will be associated with your Google account. If you do not wish this association with your Google account, you must log out before visiting the pages. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. Google states that the purposes for the use of cookies include the analysis of the use of Google services and the personalization of advertising. Data processing and the setting of cookies are based on your consent according to Art. 6(1)(a) GDPR. You can find Google’s privacy policy here: https://policies.google.com/privacy?hl=de.

 

Hubspot

We also utilize the HubSpot service provided by HubSpot Inc., 25 First Street, Cambridge, MA 02141, USA (hereinafter referred to as “HubSpot”) for marketing, sales, and administrative purposes, such as organizing our customer relationships, engaging with users of our website, determining which services of our company are of interest to you, or for the efficient and prompt handling of user inquiries. For this purpose, we process contact data for marketing purposes from you. Additionally, so-called “web beacons” are used and cookies are set, which are stored on your computer and allow us to analyze your use of the website. HubSpot analyzes the collected information (e.g., IP address, type of browser, duration of visit, pages accessed) on our behalf to generate reports about visits and pages visited. For example, when newsletters are subscribed to and studies or other documents are obtained, we can also link a user’s visits with personal information (especially name/email address) based on provided consent, thus capturing personal data and informing users individually and targeted about preferred topics. Data processing, particularly the setting of cookies, is carried out with your consent based on Article 6(1)(a) GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out prior to revocation based on your consent. Revocation can be done by disabling the corresponding selection on our Consent Management Platform, which you can access here.

As part of the service, data is transferred to the USA. The transfer is based on the standard contractual clauses of the European Commission. Details can be found here: https://legal.hubspot.com/de/dpa and https://www.hubspot.de/data-privacy/privacy-shield. You can find HubSpot’s privacy policy here: https://legal.hubspot.com/privacy-policy.

 

Optinmonster

We also use the OptinMonster service provided by Retyp LLC, 7732 Maywood Crest Drive, West Palm Beach, FL 33412, USA. This allows us to display pop-ups on our website and prompt users to sign up for our newsletter or other actions. OptinMonster uses cookies for this purpose. Personal data is also collected when users provide their own information. OptinMonster does not store the collected data on its own servers but forwards it directly to us. Data processing, particularly the setting of cookies, is carried out with your consent based on Article 6(1)(a) GDPR. You can revoke this consent at any time. You can find OptinMonster’s privacy policy at https://optinmonster.com/privacy/.

 

Borlabs Cookie

We also use Borlabs Cookie on this website, a service provided by Borlabs GmbH, Hamburger Straße 11, 22083 Hamburg, Germany, as a consent management tool to obtain and document consents for storing certain cookies on your device or for other actions requiring consent, and to manage them. For this purpose, a cookie (borlabs-cookie) is set on your device. In order to request and store your consent for the use of certain cookies or other actions requiring consent, the cookie collects and stores the following information: cookie duration, cookie version, domain and path of the website, consents, and a randomly generated ID associated with the respective website visitor. No information is transmitted to the provider of Borlabs Cookie. The legal basis for managing your consents for the processing of your personal data is Article 6(1)(c) in conjunction with Article 7(1), Article 5(2) GDPR (fulfillment of our legal obligations regarding proof of consent) and Article 6(1)(f) GDPR. Our legitimate interest lies in the legally compliant documentation and verifiability of consents. The data is generally deleted when it is no longer needed. The cookie used has a duration of 1 year. You can also delete the cookie yourself via your browser settings. Upon revisiting our website, you will be asked for your consent again. Data regarding revoked consent will be retained for a period of three years. This retention period is based on both our legal obligation to provide evidence in data protection matters (as mentioned above) and the statutory limitation period according to § 195 of the German Civil Code (BGB). This limitation period begins at the end of the year in which consent or revocation is given and ends three years later. You can find Borlabs’ privacy policy here: https://de.borlabs.io/datenschutz/.

Status of this privacy policy

March 2024

We reserve the right to change this privacy policy at any time with effect for the future.