Below you will find information about how your personal data is collected and used, e.g., when you visit our website or otherwise contact us (such as when you contact us by e-mail or via our contact form). 

You can access this Privacy Notice at any time on our website at www.cerpro.io/en/privacy-policy.

1. Definitions

Following the example of Art. 4 GDPR, this Privacy Notice utilizes the following definitions:

• “Personal data” (Art. 4 (1) GDPR) is any information that relates to an identified or identifiable natural person (also referred to as a “data subject”). A person is identifiable if they can be identified either directly or indirectly, in particular by associating them with an identifier, such as a name, identification number or online identifier or location data, or by using information about their physical, physiological, genetic, psychological, economic, cultural, or social identity. Individuals may also be identifiable if they can be linked to such information or other additional knowledge. The precise form or embodiment of the information is irrelevant in this regard, as is the way in which it is created (photos, video, or sound recordings may also contain personal data).

• “Processing” (Art. 4 (2) GDPR) is any process used to handle personal data, with or without the help of automated (i.e., technology-based) processes. This includes, in particular, collection (i.e., procurement); recording; organization; ordering; storage; adaptation or modification; reading; querying; use; disclosure through transmission, dissemination, or the provision of the data in any other way; comparison; linking; and the restriction, erasure, or destruction of personal data, as well as any change of the objective or purpose for which data processing was originally performed.

• The (data) “Controller” (Art. 4 (7) GDPR) is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

• A “third party” (Art. 4 (10) GDPR) is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data. This also includes other corporate entity legal persons.

• A (data) “processor” (Art. 4(8) GDPR) is a natural or legal person, authority, institution, or other body that processes personal data on behalf of the data controller, in particular in accordance with its instructions (e.g., IT service providers). For the purposes of data protection law, a processor is specifically not considered a third party.

• “Consent” (Art. 4 (11) GDPR) means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

2. Controller’s details

We are the responsible data controller that processes your personal data within the meaning of Article 4 (7) EU General Data Protection Regulation (GDPR). Our details are as follows:

Cerpro GmbH

Dolomitenstraße 97, 13187 Berlin

Phone: +49 176 32026354

3. Your rights

3.1  You have the right to request information from us at any time about the data we hold about you as well as the origin of the data, recipients or categories of recipients to whom this data is transmitted, and the purpose for which the data is stored.

3.2  You have the right to demand that we rectify any incorrect personal data concerning you, or to restrict its processing. Taking into account the purposes of the processing, you also have the right to request that incomplete personal data be supplemented, including by means of a supplementary statement.

3.3   You have the right to demand that we immediately erase personal data relating to you. Among other things, we are obliged to erase this information if it is no longer necessary for the purposes for which it was collected or otherwise processed, or if you have revoked your consent.

3.4  You have the right to receive a copy of personal data about you that you have provided to us. This copy must be in a structured, common, and machine-readable format, and you have the right to transfer this data to another data controller without interference, provided that the processing is based on your consent or the processing was performed using automated procedures.

3.5  If you have given your consent to the use of data, you can revoke this consent at any time.

3.6  If we process your personal data on the basis of legitimate interests, you may object to this processing.

3.7  Please send all requests for information or objections to data processing by e-mail to info@cerpro.io, or to the address specified in Section 2.

3.8  If data protection law is breached, you have the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the Berlin State Office for Data Protection Supervision (address and contact information is available at https://www.datenschutz-berlin.de 

4. Data security

We use both technical and organizational security measures to protect your data managed by us against accidental or deliberate manipulation, loss, and destruction, as well as against access by unauthorized persons. Your data is transmitted in encrypted form. The encryption protocol in use is TLS 1.2.

5. Collection of personal data in the context of the use of the website for information purposes, cookies

5.1  Even if you only use the website for information purposes, i.e., if you do not contact us beyond the mere use of the website or otherwise provide us with other information, we will still collect usage data that your browser automatically transmits to enable your use of the website. This information is only stored for system-related and statistical purposes (on the basis of Art. 6 (1)(b) GDPR), as well as in exceptional cases for reporting criminal offenses (based on Art. 6 (1) (e) GDPR). 

5.2   Data that is collected under Section 5.1 includes:

•  IP address

•  Date and time of the request

•  Time zone difference to Greenwich Mean Time (GMT)

•  Content of the request (specific page)

•  Access status/HTTP status code

•  Amount of data that is transmitted in each case

•  Website that sent the request

•  Browser

•  Operating system and its interface

•  Language and version of the browser software

•  Collection of location data

•  Functions accessed on the mobile end device when the website visitor visits the website using this device.

5.3   In addition to the purely informational use of our website, we also give you the option to subscribe to our newsletter, which we use to inform you about current developments relating to our software and products, upcoming events, and news. We use the so-called “double opt-in” procedure when you sign up for our newsletter. This means that after you register, we will send you an e-mail to the e-mail address you provide to us. In this e-mail, we will ask you to confirm that you wish to receive the newsletter. In addition, we will save your IP addresses and the times of registration and confirmation. The purpose of this procedure is to be able to confirm your registration and to investigate any potential misuse of your personal data. You may revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can revoke your consent by clicking on the “unsubscribe” link that you can find in every newsletter e-mail, by sending an e-mail to info@cerpro.io, or by sending a message to the address provided in the contact information given in the legal notice.

      If you sign up for our newsletter, the following “newsletter data” will be collected, saved, and processed by us:

• The page from which the page was requested (known as the referrer URL”)

• The date and time of the request

• The description of the type of web browser used

• The IP address of the requesting computer, which is shortened in such a way that it can no longer be associated with a particular person

• The e-mail address

• The date and time of registration and confirmation

We would like to make you aware that we evaluate your user behavior  when you open the newsletter. In order to do this, the sent e-mails contain so-called web beacons or tracking pixels. These are single-pixel image files that are stored on our website. To evaluate your user behavior, we link the data mentioned above and the web beacons to your e-mail address and an individual ID. The links found in the newsletter also contain this ID. The data is only collected in pseudonymized form. This means that the IDs are not linked to your other personal data, and it is impossible to connect it directly to you.

5.4  Furthermore, cookies are stored on your computer when you use the website. Cookies are small text files that are stored on your hard drive and associated with the browser you are using. They are used to transmit certain information back to the entity that originally stored the cookie (in this case, us). Cookies do not damage your computer and do not contain viruses. Cookies are used to make our website more user-friendly, effective, and secure. Most of the cookies we use are so-called “session cookies”. Some cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser the next time you visit.

5.5  Cookies that are required for the electronic communication process or to provide certain features that you wish to use (e.g., shopping cart features) are stored on the basis of Art. 6 (1) (f) GDPR. We have a legitimate interest in storing cookies in order to optimize the provision of services and eliminate errors. To the extent other cookies (e.g., cookies that analyze your browsing behavior) are stored, these cookies are discussed separately in this Privacy Notice.

5.6  You may configure your browser settings in accordance with your wishes, including, for example, you refusing to accept cookies. However, we would like to point out that if you choose to do this, you may not be able to use all of the features of this website. 

5.7  This information is stored separately from any data that may be provided to us. In particular, the data taken from the cookies is not associated with your other data.

6. Collection and processing of personal data when you contact us and for advertising purposes

6.1  Personal data (including, for example, your name, phone number, and e-mail address) will only be collected and processed if you expressly communicate this information to us via our contact form. This personal data is used exclusively for the purpose of processing your inquiries and on the basis of Art. 6 (1) (f) GDPR.

6.2  This information will only be used for advertising purposes if you have given your prior consent, and on the basis of Art. 6 (1) (a) GDPR. The data that you share with us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter, and will be deleted after you unsubscribe from the newsletter.

6.3 By subscribing to the Cerpro software, customers agree that Cerpro may utilize their brand logos for marketing purposes. This includes, but is not limited to, showcasing customer brands on our website, in promotional materials, and across social media platforms. We value the trust our customers place in us and strive to represent their brands in a positive and respectful manner. If there are any concerns regarding the use of brand logos, customers are encouraged to reach out to our support team for clarification and potential adjustments.

7. Collection and processing of personal data for fulfilling orders, opening a customer account, providing customer service, and for direct marketing

7.1   Personal data is collected on the basis of Art. 6 (1) (1) (b) GDPR if you voluntarily provide it for purposes of executing a contract or opening a customer account. If you place an order or register as the point of contact for a legal entity, data is processed in accordance with Art. 6 (1) (1) (f) GDPR to safeguard our legitimate interests in communicating with the legal entity’s point of contact. This data will only be used without your express consent to process a contract, answer your inquiries, and provide the services you have ordered. Once the term of the contract has ended and full payment for the purchase price is received, your data will be stored in accordance with the retention periods set out in tax and commercial law, and will be deleted after these periods have expired.

7.2  Your personal data will also be processed in accordance with Art. 6 (1) (f) GDPR in order to add you, or the company you work for, as a contact in our ERP and CRM system. The processing is carried out for the purpose of providing customer service, acquisition, and order processing, e.g., sending documents by e-mail, such as documents related to our business relationship, offers, and complaints.

7.3  The e-mail address you provided to us when you concluded the contract will also be used for our own advertising purposes to advertise our own products or services similar to those you have ordered. These advertisements will be included as part of our newsletter. You can object to the use of your e-mail address at any time without incurring any costs other than the transmission costs in accordance with the schedule of basic fees. You may object (and thus cancel your subscription to our newsletter) by clicking the link provided in the newsletter or by sending us a message to this effect. Following your objection, your e-mail address will be deleted immediately. The legal basis for processing is Art. 6 (1) (f) GDPR.

8. Collection and processing of personal data for processing job applications

8.1   We also collect personal data when you submit a job application to us. We have to process this personal data in order to complete the application process, including setting up an electronic application file, managing your application, and organizing interviews. In short, we must process your information in order to enter into an employment contract with you. Processing takes place on the basis of Art. 6 (1) (b) GDPR.

8.2  We also use your personal data on the basis of Art. 6 (1) (f) GDPR to consider you for possible future vacancies, and it is for this purpose that we store your data for a limited period of one year after an unsuccessful application. You may object to this use of your personal data at any time.

8.3  If you sign up to receive job vacancy notifications, we will inform you about open positions at CERPRO via e-mail on the basis of Art. 6 (1) (a) GDPR. You may unsubscribe from these notifications at any time.

9. Recipients/categories of recipients of personal data, third-country data transfers, and legitimate interests that we pursue in this regard

9.1   Your data will not be transmitted to third parties. This provision does not apply to service providers that we have hired to perform data processing or analytics within the scope of this Privacy Notice, e.g., for purposes of analysing customer requests. All of the services provided are compliant with the GDPR law, supported by the signing of a data processing agreement (Art. 28 GDPR), conducting a transfer impact assessment (Art. 44 ff. GDPR), carrying out a data protection impact assessment (Art. 35 GDPR) and documenting processing activities where needed (Art. 30 GDPR). A list of the service providers in use and the processing activities can be requested by the customer at any time.

10. Period for which the personal data is stored

If your data is no longer needed, it will be deleted after the retention obligations set out in tax and commercial law have expired (this may be up to 10 years for invoices).

11. Use of Google Analytics

This website uses Google Analytics, a web analytics service from Google LLC (“Google”). Google Analytics uses “cookies”, which are text files that are stored on your computer and that allow your use of the website to be analyzed. The information generated by the cookie about your use of this website is transmitted to and stored by Google on servers in the U.S. If IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address will only be sent to a Google server in the U.S. and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide the website operator with other services relating to website activity and Internet usage. The IP address transmitted by your browser in the context of Google Analytics will not be combined with other Google data. You can prevent the storage of cookies by setting your browser software accordingly. However, we would like to point out that if you choose to do this you may not be able to use all of the features of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie relating to your use of the website (including your IP address), and prevent Google from processing this data, by downloading the browser plug-in available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de). As an alternative to installing the browser plug-in, or when using browsers on mobile devices, you can also prevent Google Analytics from collecting your data by clicking on the following link. Clicking on the link sets an opt-out cookie that prevents your data from being collected when you visit this website in the future:
Deactivate Google Analytics
An opt-out cookie will be stored on your device. If you clear your cookies, you will have to click this link again.

For more information on the terms of use and data protection, see http://www.google.com/analytics/terms/de.html or http://www.google.com/intl/de/analytics/privacyoverview.html. We would also like to point out that Google Analytics has been tweaked on this website using the code “gat._anonymizeIp();”, which ensures that IP addresses are collected anonymously (this is known as “IP masking”).
Data processing takes place on the basis of Art. 6 (1) (f) GDPR. We have a legitimate interest in analyzing the use of our website for optimization purposes.

12. Use of Google Tag Manager

This website uses Google Tag Manager, a tag management system from Google LLC (“Google”). Google Tag Manager does not collect any personal data. The Tag Manager makes it easier to integrate and manage certain tags. Tags are small code elements that are used for various reasons, including to measure traffic and visitor behavior, to record the impact of online advertising and social media channels, to set up re-marketing and targeting, and to test and optimize websites. If you have deactivated this feature, this deactivation will be taken into account by Google Tag Manager. For more information on Google Tag Manager, please see: https://www.google.com/intl/de/tagmanager/use-policy.html.

13. Use of Google Search Console

This site uses Google Search Console. Google Search Console is a free service provided by Google to monitor and analyze your own websites. However, no personal data is collected, stored, or displayed.

You can find more information about Google Search Console at the following link: https://support.google.com/webmasters/answer/9128668?hl=en&visit_id=637330051553584529-290567905&rd=1

14. Use of Google Data Studio

On the basis of Art. 6 (1) (f) GDPR (legitimate interest), we use an additional data management tool from Google Analytics – Google Data Studio – for the visual generation of user-defined reports and interactive dynamic dashboards. We use the data from Google Analytics and other data source interfaces (such as Google Ads, Google Search Console, Searchmetrics, etc.). The web tool does not require a local application and can be launched via the Internet. It is accessed via a web browser. The data sources are linked directly via Google Data Studio.

For more information on using Google Data Studio, please see: https://support.google.com/datastudio/answer/6283323?hl=en

15. Use of Google Remarketing

This website uses Google remarketing technology from Google Inc. (“Google”).

Cookies are placed on your computer for this purpose. They are used by third-party providers, including Google, to record which of our webpages have been visited using your browser. This information can be used to present our advertisements to you at a later point in time on other websites, e.g., on Google search results pages or other websites in the Google network. For more information on data protection at Google and how remarketing works, see Google’s privacy policy. You can also deactivate the storage of cookies by changing the settings in your browser and/or disabling Google Remarketing data collection in the Google display settings.

16. Use of DoubleClick by Google

This website also uses the online marketing tool DoubleClick by Google. DoubleClick uses cookies to show ads that are relevant to users, to improve reports on ad campaign performance, or to prevent a user from seeing the same ads multiple times. Google uses a cookie ID to record which ads are shown in which browser, and can thus prevent them from being displayed multiple times. In addition, DoubleClick can use cookie IDs to record so-called “conversions” relating to ad queries. This is the case, for example, when a user sees a DoubleClick ad and later goes to the advertiser’s website using the same browser and buys something there. According to Google, DoubleClick cookies do not collect any personal information. 

Your browser automatically establishes a direct connection with the Google server on the basis of the marketing tool used. We have no influence over the scope of data collection by Google using this tool or how this data is subsequently used by Google. Therefore, this information reflects the best of our knowledge. The use of DoubleClick means that Google is informed that you are using the relevant part of our website, or have clicked on one of our advertisements. If you are signed in to a Google service when you visit our site, Google can associate your visit with your account. Even if you are not registered with Google or have not logged in, the service provider may still be able to find out your IP address and store it.

You can opt out of this tracking process in various ways: 

a. by setting your browser software accordingly. In particular, if you choose to suppress third-party cookies, you will not receive any advertisements from third-party providers; 

b.     by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain “https://ads.google.com” and at https://www.google.de/settings/ads. Be aware that this setting will be reset each time you clear your cookies; 

c.      by deactivating interest-based advertisements served by providers that are part of the self-regulating campaign “About Ads” by visiting the link https://www.aboutads.info/choices. Be aware that this setting will be reset each time you clear your cookies; 

d.     by permanently deactivating cookies in your Firefox, Internet Explorer, or Google Chrome browsers using the link http://www.google.com/settings/ads/plugin. 

We would like to point out that if you choose to deactivate cookies, you may not be able to use all of the features of this website to their full extent. 

The legal basis for the processing of your data is Art. 6 (1) (1) (f) GDPR. You can learn more about DoubleClick from Google at https://www.google.de/doubleclickand https://support.google.com/adsense/answer, and you can also read Google’s general Privacy Notice: https://www.google.de/intl/de/policies/privacy. Alternatively, you can visit the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org. Google has submitted to the EU-US Privacy Shield. You can view details of this agreement at https://www.privacyshield.gov/EU-US-Framework. 

17. Use of Google Ads

On the basis of your consent (Art. 6 (1) (a) GDPR), we integrate the marketing and remarketing service Google Ads into our website. This service is also operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. You may revoke your consent to this at any time with future effect. To do so, simply use one of the listed opt-out options. Google is directly responsible for parts of the data processing.

We can use Google Ads to target advertisements for our website in Google Search. Google Ads allows us to set certain keywords. An ad in Google’s search engine results will only be displayed if you use the search engine to retrieve a keyword-relevant search result. The ads are distributed to topically related websites in the Google advertising network using an automatic algorithm while taking into account the previously defined keywords. If you click on a Google Ads ad and are redirected to our website, Google will place a remarketing tag and a conversion cookie on your device. This can be a cookie or a similar technology. If you then visit another website from the AdWords advertising network, this remarketing tag, will be read and, for example, you will receive a corresponding advertising message. The conversion cookie allows us to determine how many users are performing a certain action in relation to one of our ads.

This data is processed pseudonymously in connection with Google AdWords. This means that Google does not save and process your name or your e-mail address, for example. Rather, it processes the relevant cookie-related data as part of pseudonymous user profiles. These profiles cannot be directly associated with you. This means that neither we nor Google know who you are. The ads are shown to the holder of a specific cookie ID, rather than a specific person.

The information collected in the context of Google AdWords is transmitted to Google and stored on Google’s servers in the U.S. Google is certified under the Privacy Shield Agreement. This agreement ensures that a level of data protection comparable to that of the GDPR is observed (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). You can find additional information and the applicable Google data protection provisions at https://policies.google.com/privacy.

You can prevent our website from storing cookies on your end device at any time in your browser settings. This also prevents cookies associated with Google AdWords from being stored on your end device. You can delete cookies that are already stored on your end device.

You can also prevent interest-based advertising from Google. You can configure your desired settings at www.google.de/settings/ads. Finally, you can also configure a corresponding opt-out cookie at http://optout.networkadvertising.org/?c=1#!/.

18. Use of LinkedIn Ads

We also use “conversion tracking” via the LinkedIn Insights Tag, a tool from LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland, on our website. For this purpose, the LinkedIn Insight Tag is integrated into our website and a cookie is placed on your device by LinkedIn. This means that LinkedIn is notified that you have visited our website, and your IP address is also collected. Time stamps and events, such as page requests, are also saved. This allows us to statistically evaluate the use of our website in order to continuously optimize it. It allows us to find out which LinkedIn ads or interactions on LinkedIn brought you to our website. This allows us to better adjust how our advertising is displayed.

You can find additional information about conversion tracking here: https://www.linkedin.com/help/linkedin/answer/67595/linkedin-conversion-trackingubersicht. Please note that the data can be stored and processed by LinkedIn in such a way that it can be associated with the relevant user profile, and LinkedIn can use the data for its own advertising purposes. For more information, see the LinkedIn Privacy Policy at https://www.linkedin.com/legal/privacy-policy. You can also disable the analysis of your usage behavior on LinkedIn, as well as the display of interest-based recommendations, at https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

19. Use of YouTube

This website embeds videos from the YouTube website. The operator of the website is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

If you visit one of our websites on which YouTube videos are embedded, a connection to the YouTube servers will be established. As part of this process, the YouTube server is informed about which of our pages you have visited.

Furthermore, YouTube can save various cookies on your device, or use similar technologies to recognize you (e.g., device fingerprinting). This allows YouTube to receive information about the visitors to its website. This information is used to gather video statistics, improve usability, and prevent fraud, among other things.

If you are logged in to your YouTube account, YouTube will be able to associate your surfing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used in the interest of making the presentation of our website appealing. This is a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. Where you have been requested to provide your corresponding consent, processing takes place exclusively on the basis of Art. 6 (1) (a) GDPR. You may revoke this consent at any time.

Additional information on the handling of user data can be found in YouTube’s Privacy Policy at: https://policies.google.com/privacy?hl=de.

20. Use of Bing Ads Conversion Tracking and Remarketing

Bing Ads Conversion Tracking

We use the “Bing Ads Conversion Tracking” application from Microsoft Corporation (“Microsoft”) to measure the reach of advertisements. It determines how successful our individual advertising campaigns are on Bing and Yahoo. We use this service to develop and display advertising that is of interest to you and make our website more attractive. For this purpose, the UET Tag (Universal Event Tracking Tag) from Microsoft is integrated into our website. This JavaScript code allows Microsoft to use cookies to collect pseudonymized data about your visit and the use of our website (e.g., about the browser session and the displayed website) as well as aggregated, non-personal statistics (how many visitors have reached a certain target page, for example). This allows us to understand the actions that you performed after seeing an ad on Bing or Yahoo, or after clicking on it.

The legal basis for processing is Art. 6 (1) (f) GDPR.

Bing Ads Remarketing

We also use the “Bing Ads Remarketing” application. This application allows us to show you our advertisements after you visit our website as you continue to use the Internet. The intention behind the use of the application is to show you advertisements that are of interest to you. This is done via a cookie stored in your browser (see above), which records and evaluates your usage behavior. No personal information is disclosed to us about individual website visitors, and we can only advertise to website customer target groups in targeted advertisements if the customer target group has reached a critical size. This makes it impossible for us to determine the individual identities of visitors.

There are a number of ways you can turn off tracking. You can prevent the storage of cookies in your browser settings. However, if cookies are disabled, our the functionality of our website may be limited in your browser. You can also prevent Microsoft from collecting data on this website by clicking here: Deactivate Bing Ads Conversion Tracking and Remarketing. An opt-out cookie will then be stored on your that prevents future data collection when you visit our website. Please note that if you delete all cookies on your device, this opt-out cookie will also be deleted. Therefore, if you still want to opt out, you will have to set the cookie again using the button above. The opt-out cookie is set for each top-level domain, browser, and device, and it only prevents collection for this website. In addition, you can disable interest-based advertisements from providers who participate in the self-regulating campaign “YourAdChoices” (optout.aboutads.info) or in the Advertising Initiative Network, for example (optout.networkadvertising.org). However, this opt-out will be deleted if you clear your cookies. You can also deactivate interest-based advertisements by going to advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads.

The legal basis for processing is Art. 6 (1) (f) GDPR.

Details of third-party: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Microsoft Privacy Statement: privacy.microsoft.com/de-de/privacystatement. Microsoft has submitted to the EU-US Privacy Shield (www.privacyshield.gov/EU-US-Framework).

21. Use of Google Optimize

When you call up our website, the web analysis service Google Optimize is loaded for statistical evaluation of the use of the website. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Optimize uses cookies to help the website analyze how users use the site. When the website is used, the cookies generate information that is transmitted to and stored by Google. By using the “anonymizeIp()” extension, we ensure that Google Optimize only transmits a shortened version of your IP address to Google. You may refuse the use of cookies, which are stored on your device and allow an analysis of the use of the website by you.
The use of Google Optimize is for purposes of analyzing the use of our website, economic optimization and needs-based design of our website, and to perform A/B-Tests. Therefore, we process your connection and usage data. This processing is lawful because you have given us your consent in accordance with Art. 6 para. 1 letter a of the GDPR. In addition, we have concluded a contract with Google for order processing.
Your IP address is collected by us in order to enable the shortening and then transmission to Google. You are not obliged to provide this personal data, a use of our website is possible without the provision. You can prevent the provision of this personal data by refusing the setting of cookies for Google Optimize. Transfer of data to a third country takes place in individual cases to the USA on the basis of the Standard Contractual Clauses (SCC), Art. 46 para. 2 letter c GDPR. Further information on Google Optimize can be found at https://marketingplatform.google.com/intl/en_uk/about/optimize/. You can find Google’s data protection declaration at https://policies.google.com/privacy.