Privacy Policy

Responsible person:

INEX - solutions GmbH
Industrial road 32
75015 Bretten
Bretten, Germany
Phone: 07042 / 82 45 - 15
E-Mail: info(at)inex-solutions.de
Website https://www.inex-solutions.de/

Data protection officer:

PRIOLAN GmbH
Steinsfeldstraße 46,
74626 Bretzfeld
Phone: +49 (0) 7946 9893516
E-mail: info@priolan.de

- Introduction
- Legal basis
- Definitions
- Our data processing and its purposes
- Processing in the case of sending e-mails and contacting us by telephone
- Processing in connection with your use of the website
- Processing in the event of use of the contact form
- Processing in the event of registration for our newsletter
- Processing of data for fault and abuse control
- Storage of consents
- Order processing
- Use of our social media profiles
- Existence of suitable guarantees
- Recipients and further processing
- Rights of data subjects

I. Introduction

With the following declaration, the controller (hereinafter also referred to as “we” or the “provider”) informs you about the type, scope and purposes of the collection, processing and use of your data when you contact the controller by telecommunication or exchange data with the controller.

This privacy policy applies in particular to our website and our other digital services such as company pages, social media profiles and video channels. Insofar as we handle data processing uniformly across the digital services we use, we have summarized the relevant information on the processing purposes, the relevant legal bases and the storage periods for you. The necessary details on the digital services we use and their third-party providers (hereinafter referred to as service providers) can be found at the end of the summary section.

Your point of contact for all data protection issues is the controller named above, who you can reach at the address and contact details given above.

II Legal basis

Legal basis consent
The legal basis for the processing of data is Art. 6 para. 1 lit. a General Data Protection Regulation (GDPR) if you have given us your consent. You have the option to withdraw your consent to the processing of personal data at any time. You can find more information in the section below entitled Data subject rights.

Legal basis Contract fulfillment
If the purpose of the data processing is the initiation or performance of a contract, Art. 6 para. 1 lit. b GDPR is a legal basis for the data processing.

Legal basis for the legitimate interests pursued
We are entitled to process your personal data if it is necessary to safeguard legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR. However, such data processing cannot be considered if your interests or fundamental rights and freedoms, which require the protection of personal data, prevail. Our legitimate interests include the presentation of our company, the implementation of advertising measures and the guarantee of IT security. However, we will only ever process data on the basis of our legitimate interests for the appropriate purpose and only to the extent necessary.

Legal basis for fault monitoring and prevention of misuse
The legal basis for data processing to detect faults or errors in telecommunications systems is Section 12 TDDDGS in conjunction with Art. 95 GDPR. Art. 95 GDPR as well as Art. 6 para. 1 lit. c GDPR, insofar as action is required for reasons of information security.

If there are actual indications of unlawful use of a telecommunications network or telecommunications service, in particular unreasonable harassment in accordance with Section 7 UWG, we may process traffic data required to detect and prevent unlawful use of the telecommunications network or service in order to protect end users. The legal basis is § 12 TDDDGS in conjunction with. Art. 95 GDPR.

III. Definitions

Definition of inventory data
Inventory data is personal data of a user that is required for the establishment, content design or modification of a contractual relationship between the service provider and the user regarding the use of digital services.

Definition of cookies
Cookies are small text files that are stored on the user's end device. Cookies always have a validity period, which may be limited to the end of the user session (so-called session cookies) or may last for a longer period of time (so-called persistent cookies). These persistent cookies remain on the user's end device and enable the provider or its partner companies (so-called third-party cookies) to recognize the end device on your next visit. You can set your browser so that you are informed about the setting of the cookie and can decide individually whether to accept it or to reject the setting of the cookie in certain cases or in general. If you do not accept cookies, the functionality of the website may be restricted.

Definition of data processing
Data processing means any operation relating to personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Data storage associated with data processing on the end device in question is deemed necessary if the provider of a digital service cannot otherwise provide a digital service expressly requested by the user.

Data processing is optional if data is to be stored on your device that is not necessary or if we require your consent for data processing for other reasons.

Definition of device fingerprinting
Device fingerprinting is a technology for tracking a user. It enables the identification and tracking of an end device based on a variety of specific features and characteristics. In contrast to cookies, which are explicitly stored on an end device, device fingerprinting uses existing information that is disclosed by an end device when visiting a website or using a digital service in order to identify it. For example, such characteristics and properties may include the following information: the device type (e.g. smartphone, laptop), the operating system and its version, the screen resolution, the browser type and the version of the browser. By combining these and other characteristics and properties, a unique fingerprint of an end device can be created, which can be used to track users across different sessions, even if they do not allow cookies or regularly delete them.

Definition of service provider
A digital service provider (hereinafter also referred to as “digital service provider”) is any natural or legal person who provides their own or third-party digital services, participates in the provision of digital services or arranges access to the use of their own or third-party digital services.

Definition of digital service
A digital service is an information society service, i.e. any service normally provided for remuneration by electronic means at a distance and at the individual request of a recipient. For the purposes of this definition, 'service supplied at a distance' means a service supplied without the simultaneous physical presence of the contracting parties; 'service supplied electronically' means a service which is sent by means of equipment for the electronic processing (including digital compression) and storage of data at the origin and received at the destination and which is transmitted, conveyed and received wholly by wire, by radio, by optical means or by other electromagnetic means; 'service supplied at the individual request of a recipient' means a service supplied by the transmission of data on individual request.

Definition of log data
Log data is usage and traffic data that is automatically transmitted to the provider's server by the user's end device when accessing the provider's website for technical reasons. This data is stored in so-called log files.

Definition of user
A user is a natural person who uses digital services, in particular to obtain or access information, such as a person who accesses the provider's website. A user is always a data subject within the meaning of the GDPR.

Definition of usage data
Usage data is a user's personal data that is required to enable and charge for the use of digital services.This includes, in particular, characteristics for identifying the user, information about the start and end as well as the scope of the respective use and information about the digital services used by the user.

Definition of personal data
Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Definition of pseudonymization
Pseudonymization is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

Definition of reach measurement
Reach measurement is the measurement of visitor flows and the behavior of individual users in relation to the provider's digital services.

Definition of tracking
The term user tracking technology (“tracking”) refers to technologies used by providers of digital services, such as cookies and device fingerprinting, which can be used to track the individual behavior of users on the Internet.

Definition of processing
Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Definition of traffic data
Traffic data is data whose collection, processing or use is necessary for the provision of a telecommunications service.

Definition of website
A website, also known as a web presence, is the presence of a private or corporate provider of digital services on the global network (World Wide Web), summarized under a specific Internet address. The web presence includes web pages or subpages and optionally available downloadable documents as well as other retrievable audiovisual media services.

IV. Our data processing and its purposes

1. processing for the purpose of general customer communication
We process the following data in order to be able to communicate with you for business purposes. This includes, for example, responding to your inquiry, preparing an offer, making an appointment and also your subsequent support. If you contact us via the e-mail addresses and telephone numbers provided by us or if you contact us by post, we will store your data in our data processing systems and process it until the intended purposes have been fulfilled or until the storage periods have expired.

Data characteristics (inventory data):
- Salutation, title, first name and surname,
- company name,
- Address data (regarding contact and billing address) such as street, zip code, city and country,
- Communication data such as telephone (landline and cell phone number), fax and e-mail address,
- industry,
- website,
- message data.

In principle, we only process the data that you expressly provide to us.

Legal basis:
- Your consent,
- our legitimate interests (company presentation, target group-oriented advertising),
- the fulfillment of contractual obligations or the initiation of a contract.

Right to object:
As we process your data on the basis of our legitimate interests, you have the right to object.

Storage period:
Data provided by you will be deleted immediately after your request has been dealt with or, if it has not been dealt with, no later than 3 years after the last contact, unless your data is subject to a longer storage period for a separate reason (e.g. the storage of information used to fulfill a contract). The request is completed when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

2. processing in connection with your use of the website
We process the data you provide to enable you to use our website. We publish information about our company and our services and products via the website.

a. Function of the cookie banner
When you visit our website, you can decide for which optional data processing you would like to give us your consent. For this purpose, we show you an overview of these optional data processing operations via a so-called cookie banner. You can activate or deactivate certain data processing via buttons. We store this decision on your end device. Furthermore, the optional data processing operations that you have activated generally also store information on your device.

You can revoke or change your decision at any time via the Consent Management Platform icon at the bottom left of the website. You can find more information on the cookie banner function in the section “Storing consent”. You can find an overview of the data processing that leads to data storage on your end device in our “Cookie Policy”.

b. Processing when using the contact form
We provide a contact form on our website that you can use to send us your request. We process the data you provide to answer your request.

Data characteristics (inventory data):

- Salutation, title, first name and surname (*),
- job title,
- Age/birthday,
- Address data (regarding contact and billing address) such as street, zip code, town and country,
- Communication data such as telephone (landline and cell phone number), fax and e-mail address,
- Department,
- company name,
- Role in the purchasing process (consumer/entrepreneur/employee of a company),
- Budget responsibility (yes/no),
- Interest in products,
- Consent to receive the e-mail newsletter,
- Preferred language,
- Industry,
- Website,
- Message (*).

* Mandatory information

Legal basis:

- Your consent,
- our legitimate interests (company presentation, target group-oriented advertising),
- the fulfillment of contractual obligations or the initiation of a contract.

Right to object:
As we process your data on the basis of our legitimate interests, you have the right to object.

c. Processing in the case of registration for our newsletter
You can subscribe to our newsletter on our website. You can register by first entering your e-mail address in the form field provided and submitting the form. In the next step, you will receive an e-mail from us to the e-mail address you have provided, with which you can confirm your registration for the specific e-mail address by clicking on a link contained in the e-mail (so-called double opt-in procedure). If you confirm your registration as described, this also constitutes your consent under data protection law to the processing of your e-mail address for the sending of the newsletter.

We use the newsletter to inform recipients about developments in our company and about the products and services we offer. We process the data transmitted by you exclusively for the purpose of sending the newsletter.

Data characteristics (inventory data):

- E-mail address (*).
* Mandatory data

Legal basis:
- Your consent.

Storage period:
We will store the data you provide until you withdraw your consent, but for no longer than 3 years from the time you give your consent.

d. Processing of data for disruption and abuse control
We analyze the log data of our digital services for the purposes of malfunction and abuse control. A malfunction is defined as a malfunction of a telemedium. Misuse of a telemedium exists, for example, if there is unreasonable harassment. The measures we take include the evaluation of error states and system monitoring to detect and prevent system threats.

Data characteristics (traffic data):

- Browser type and browser version,
- operating system used,
- URL,
- Referrer URL,
- Host name of the accessing computer,
- Date and time of the server request,
- IP address.

We do not merge this data with other data sources.

Legal bases:

- Our legitimate interests (protection of our IT systems),
- Disruption control and prevention of misuse.

Right to object:
As we process your data on the basis of our legitimate interests, you have the right to object. The collection of data for the provision of the telemedium and the storage of data in log files is absolutely necessary for its operation and may also be justified for other legal reasons. However, you can exercise your right to object by means of automated procedures that use technical specifications, e.g. in the case of anonymization of your IP address by VPN providers.

Storage period:
If the data is stored in log files, the data is deleted after 7 days at the latest. Storage beyond this period is possible in accordance with data protection legislation.

e. Storage of consents
We place a permanent cookie on your end device if you have given us at least one consent for the data processing mentioned above in the section “Website cookies”. We use this cookie to store the consent given on your device so that it is taken into account for further use of the website and for your subsequent visits.

You can use the consent management platform icon at the bottom left of the website to change the cookie settings and thus revoke your previous cookie consents.

Data characteristics (inventory data):
- Pseudonymous identifier of the end device
- Processing relevant to consent

Legal basis:
- Your consent.

Storage period:
Your data will be deleted after 12 months, unless your data is subject to a longer storage period for a separate reason.

f. Processing for marketing, tracking and reach measurement
We process your traffic data for our marketing measures if you have given us special consent to do so. Marketing measures also include tracking and measuring the reach of our digital services.

We use the Google Tag Manager for this purpose. As part of the tracking and reach measurement, we determine your traffic data in pseudonymous form and we can thus recognize, for example, how often the website is frequented by a pseudonymous user from which regions and with which types of end devices the user accesses the website. We store the information collected in this way exclusively on our server within the European Union. We cannot draw any conclusions about the identity of a pseudonymous user. It is therefore not possible for us to identify the natural person. After one day, this pseudonymous data is immediately anonymized.

Data characteristics (traffic data)
- Name of the website or url accessed
- Date and time of the request,
- Website from which the request comes,
- Language setting of the browser,
- Browser software and software version,
- Device manufacturer and model name of the display device,
- Operating system and version,
- screen resolution,
- location, country and geocoordinates,
- Number of views within 24 hours,
- Returns within 24 hours.

Legal basis
- Your consent.

Storage period
The pseudonymous data will be deleted after 1 day at the latest. Storage beyond this period is possible in accordance with data protection legislation.

Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

The storage of Google Analytics cookies is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the analysis of user behavior in order to optimize both its website and its advertising.

IP anonymization
We have activated the IP anonymization function on this website. This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Browser plugin
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: tools.google.com/dlpage/gaoptout.

Objection to data collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this website: Deactivate Google Analytics. You can find more information on how Google Analytics handles user data in Google's privacy policy: support.google.com/analytics/answer/6004245.

Order data processing
We have concluded a contract with Google for commissioned data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic characteristics with Google Analytics
This website uses the “demographic features” function of Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and from visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section “Objection to data collection”.

g. Plugins & Tools

HubSpot prospect data and marketing platform
We integrate the “HubSpot” service of HubSpot, Inc, 2 Canal Park, Cambridge, MA 02141, USA, on our websites. In the European Union (EU) and the European Economic Area (EEA), the service is offered by HubSpot Ireland Limited, 1 Sir John Rogerson's Quay, Dublin 2, Ireland.
Description of data processing and purpose

The platform enables us to
- manage prospective customer and customer data,
- analyze and evaluate interactions with our websites,
- to create, analyze and evaluate interactions with our social media presences and to contact and communicate via social media,
- the implementation and analysis of email marketing campaigns and
- the creation, enrichment and evaluation of profiles of potential interested parties with the aim of acquiring new interested parties for our products and services, targeting interested parties and existing customers and optimizing our marketing strategy, especially in online and email marketing, through evaluations and analyses.

Cookies and similar technologies, in particular JavaScript, are also used to store and read data on your end device. Details on the cookies and similar technologies used can be found under “Access to and storage of information in end devices” and “Cookies and similar technologies” as well as in our cookie policy, which you can access via our consent management platform orest bida . or via the consent management platform icon at the bottom left of the website.

We use “HubSpot” to manage prospective customer and customer data.

For this purpose, we process personal data provided by you via forms on our websites (title, first name, surname, contact data such as e-mail address and telephone number and, if applicable, data about your company), information about which of our products you are interested in and other information that you provide to us voluntarily. In addition, we also use the platform to manage our customer contacts, including the aforementioned data of our customer contacts.

We use “HubSpot” to analyze and evaluate website visits.

We observe and analyze the behavior of website visitors and their use of our websites. In this way, we are able to recognize returning visitors pseudonymously and count them as such. We process data on how a visitor arrived at our websites (e.g. via web search, direct page views, social media pages, redirects from other websites and, if applicable, via marketing emails or other advertising campaigns), how many visits took place, how long a visit lasted and how many individual pages were accessed.

We also process additional data about your interactions and behavior on our website (e.g. filling out forms, downloading documents, playing media, etc.).

We use this data to compile statistics in order to improve the attractiveness of our website, optimize the effectiveness of our marketing measures and manage our advertising strategy.

We use HubSpot to analyze and evaluate interactions with our social media presences and to establish contact and handle communication via the social media platform

We publish posts and, if applicable, newsletters on our social media presences, such as LinkedIn, via HubSpot and analyze the interactions of visitors (e.g. sharing or liking posts, user interaction with newsletters, for example, to what extent the content was interacted with, in particular which links were clicked on and to what extent the newsletter was read or skimmed). We use this data to compile statistics in order to improve the attractiveness of our social media presence, optimize the effectiveness of our marketing measures and manage our advertising strategy.

When responding to your inquiry, we process the personal data you provide (title, first name, surname, contact details such as e-mail address and telephone number and, if applicable, data about your company), information about which of our products you are interested in and other information that you provide to us voluntarily.

We also use “HubSpot” to prepare and carry out email marketing and, if necessary, for email tracking.

If you give us separate consent on our website, we will also use your e-mail address and telephone number to contact you via marketing e-mails and by telephone and to inform you about our products and services, current events, promotions and events as well as offers by means of direct advertising.

If you also give us separate consent, you allow us to process data on whether you have received our marketing emails and whether you have opened them, which email client software you use, the extent to which you have interacted with the content, in particular which links you have clicked on and the extent to which you have read or skimmed our emails. We use this data to compile statistics in order to improve the attractiveness of our marketing emails, optimize the effectiveness of our marketing measures and manage our advertising strategy.

After your e-mail address has been submitted via a form on our website, you will receive an e-mail from us with a link asking you to confirm your e-mail address and thus sign up to receive marketing e-mails. In this way, we want to ensure that only authorized persons register to receive our promotional emails.

We use “HubSpot” to create, enrich and analyze prospect profiles.

We compile the data processed via the platform in a personalized profile, enrich it with data from other sources if necessary, evaluate it in the profile using score values and carry out analyses in order to conclude which of our products and services, current events, promotions and events as well as offers you are interested in, which customer segment you can be assigned to and with what probability your interest in our products and services would lead to the conclusion of a contract.

We process the following data for this purpose:

- on your person (title, first name, surname, contact data such as e-mail address and telephone number and, if applicable, data on your company),
- your use, interactions and behavior on our website (e.g. page views, filling out forms, downloading documents, playing media, etc.),
- your use of our marketing emails (receipt and opening, email client software used, click data, read rate)
- your interactions with our social media presence. In this way, we optimize our marketing measures and control our advertising strategy in order to address you in the most targeted way possible.

Legal basis for data processing
The legal basis for using the platform to manage prospect and customer data is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in effectively managing the contact data of potential interested parties and customers and also using it for the other data processing made possible by the platform.

The legal basis for the integration and use of the platform on our websites to analyze and evaluate interactions with the website is your consent, provided you have given it via our consent management platforms.

The use of cookies and similar technologies is based on Section 25 (1) TTDSG. The subsequent data processing is based on Art. 6 para. 1 sentence 1 lit. a GDPR.

Your consent is voluntary and can be freely revoked at any time with effect for the future. To exercise your revocation with regard to the analysis and evaluation of website visitors, please use the Consent Management Platform icon at the bottom left of the website to call up orest bida . again and change your settings or use the Consent Management Platform icon at the bottom left of the website.

The legal basis for the analysis and evaluation of interactions with our social media presences is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR if you have given this via the social media provider.

Your consent is voluntary and can be freely revoked at any time with effect for the future. You can find out how to exercise your revocation in the privacy policy of the respective social media provider. In addition, you can exercise your right to object with regard to the data processed exclusively by us by contacting info(at)inex-solutions.de.

The legal basis for establishing contact and processing communication via social media is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR if you have given this consent via the social media provider. The legal basis for processing inquiries via our social media presences is Art. 6 para. 1 sentence 1 lit. f GDPR and Art. 6 para. 1 sentence 1 lit. a GDPR if you voluntarily provide us with information in the correspondence. Our legitimate interest lies in being able to respond effectively to your request via the social media channel.

Your consent is voluntary and can be freely revoked at any time with effect for the future. To exercise your revocation with regard to the processing of data voluntarily provided in correspondence, please contact info(at)inex-solutions.de.

The legal basis for the processing of your data in the context of e-mail marketing and e-mail tracking as well as the creation, enrichment and evaluation of prospect profiles is also your consent, which is, however, obtained separately, e.g. in the context of forms.

Cookies and similar technologies are also used here on the basis of Section 25 (1) TTDSG. The subsequent data processing is based on Art. 6 para. 1 sentence 1 lit. a GDPR.

Your consent is voluntary and can be freely revoked at any time with effect for the future. To exercise your right of revocation with regard to data processing in the context of email marketing and email tracking, please use the unsubscribe link in our marketing emails or contact info(at)inex-solutions.de.

To exercise your right to object to the creation, enhancement and analysis of prospect profiles, please contact info(at)inex-solutions.de.

Recipients
As part of the use of the service, the data collected via our websites is transmitted to the following recipients:

- HubSpot Ireland Limited, 1 Sir John Rogerson's Quay, Dublin 2, Ireland,
- HubSpot, Inc, 2 Canal Park, Cambridge, MA 02141, USA.

Further information on the handling of personal data by the provider of the service can be found at legal.hubspot.com/de/privacy-policy.

Data processing in third countries
When using the service, your data may also be processed in countries outside the European Union (EU) and the European Economic Area (EEA) in third countries, in particular in the USA.

For data transfers to the USA, there is an adequacy decision of the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies with certification under the EU-U.S. Data Privacy Framework.

HubSpot Inc. is certified under the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link: Participant Search (dataprivacyframework.gov).

If your data is transferred to other third countries for which no adequacy decision exists, there is a risk that the authorities there may access your data for security and monitoring purposes without you being informed or having the right to appeal.

To ensure an adequate level of data protection when transferring your data to the third country, standard data protection clauses of the European Commission are concluded in accordance with Art. 46 para. 2 lit. c GDPR. They oblige the recipient of the data to process it in accordance with the European level of protection.

If the standard data protection clauses are not sufficient to guarantee the level of protection, additional technical, contractual or organizational measures are taken to secure the data transfer. We also regularly review and assess whether these additional measures continue to guarantee an adequate level of data protection or whether further supplementary measures may need to be taken.

Storage period
Unless otherwise stated, we store your data to the extent necessary for as long as this is required to achieve the aforementioned purposes. We will then delete your data unless data processing, possibly also in other systems, is still permitted to achieve other purposes on the basis of another legal basis or is mandatory for us (e.g. in the event of the existence of statutory retention or documentation obligations).

Access to and storage of information in terminal equipment

By using our website, information (e.g. IP address) may be accessed or information (e.g. cookies) may be stored in your end devices. This access or storage may involve further processing of personal data within the meaning of the GDPR.

In cases in which such access to information or such storage of information is absolutely necessary for the technically error-free provision of our services, this is done on the basis of § 25 para. 1 sentence 1, para. 2 no. 2 TTDSG.

In cases in which such a process serves other purposes (e.g. the needs-based design of our website), this is only carried out on the basis of Section 25 (1) TTDSG with your consent in accordance with Art. 6 (1) lit. a GDPR. Consent can be revoked at any time for the future. The provisions of the GDPR and the German Federal Data Protection Act (BDSG) apply to the processing of your personal data.

Further information on the processing of your personal data and the relevant legal bases in this context can be found in the following sections on the specific processing activities on our website.

Cookies and similar technologies
We may use cookies and similar technologies on this website to store data in the browser of your end device and to read previously stored data. Cookies, the local storage memory of your browser, pixels and so-called tags can be used for this purpose. Cookies are small text files that are stored on your end device and can be read.

A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session for a certain period of time.

In addition to cookies, we may use the local storage memory of your browser to store and read data. We may also integrate pixels into our websites. Pixels are small individualized image files that are loaded when the page is loaded and can be used to track user activity.

Finally, we may use tags (markers) on our websites. Tags are small HTML or Java Script code fragments or markers that enable services for website analysis or user tracking to differentiate or identify users and track certain user activities.

Further information on the cookies and similar technologies we use can be found in our Consent Management Platforms, which are displayed to you when you visit our website. You can access the Consent Management Platform orest bida . via the Consent Management Platform icon at the bottom left of the website and change your settings.

Please note that without the use of certain cookies and similar technologies, our websites may not be displayed correctly and some functions may no longer be technically available.

HRworks
We use the specialized software provider HRworks GmbH, Waldkircher Str. 28, 79106 Freiburg, Germany (hereinafter: “HRworks”) for talent acquisition and the application process.

What is HRworks?
HRworks is a provider of solutions in the field of digital HR management and offers software tools that support companies in the management of HR and payroll processes.

Why do we use HRworks services on our website?
We use the HRworks online application system to manage the application process. With HRworks, we offer an improved user experience on our website and increase the quality and efficiency of our application processes.

What data is processed by HRworks?
When you submit your application, the data you enter in the input screen and your IP address will be processed by HRworks in a database operated by HRworks. Personal data that you voluntarily enter in the online application system as part of the application process are in particular

- First name, surname
- Telephone number (private or mobile)
- e-mail address
- Application documents (cover letter, CV, references, certificates, etc.).

How long and where is the data stored?
The data is processed in a database operated by HRworks. We process the data that you have sent us in connection with your application in order to fill vacancies in our company. Your data will only be forwarded to the persons and specialist departments responsible for the application process. Your application data will not be used for any other purpose or passed on to third parties.

Legal basis and purpose for processing personal data
HRworks acts as our processor and is contractually restricted to using your personal data solely to provide services to us in accordance with the applicable data processing agreement.

According to § 26 BDSG-new, the processing of personal data required in connection with the decision to establish an employment relationship is permitted. Should the data be required for legal prosecution after completion of the application process, data processing may be carried out in accordance with Art. 6 GDPR, in particular to safeguard legitimate interests in accordance with Art. 6 para. 1 lit. f) GDPR. Our interest then lies in the assertion of or defense against claims.

Retention period of applicant data
Your application data will be deleted six months after completion of the application process. This does not apply if legal provisions prevent deletion, if further storage is necessary for the purpose of providing evidence or if you have consented to longer storage.

Further information on data protection and the storage period at HRworks can be found at www.hrworks.de/unternehmen/datenschutz/. It can also be requested by e-mail to the data protection officer at datenschutz@hrworks.de.

Right to information and revocation
By submitting your application, you consent to the storage of your personal data. You can revoke this consent at any time and object to the storage of your data.

Upon request, we will inform you in accordance with the applicable law which personal data we have stored about you. In addition, you have the right to have incorrect data corrected and to have your personal data blocked and deleted, provided that this does not conflict with any legal obligation to retain data. You can do this directly by contacting us at info(at)inex-solutions.de.

Place of data processing
The processing of your data takes place on HRworks servers in the Federal Republic of Germany and in a member state of the European Union (EU). HRworks has concluded a contract (Data Processing Addendum) with its subcontractor AWS, which ensures that the data processing is carried out in a permissible manner.

Data transfer to third countries
If personal data is transferred to countries outside the European Union, HRworks ensures that this is done in accordance with the data protection requirements of the GDPR, for example by concluding standard contractual clauses.

OpenAi

What is OpenAI?
OpenAI is a company based in the USA that specializes in the development of artificial intelligence (AI) systems. We use OpenAI's translation functions on our website via an API interface to automatically translate content into other languages.

Why do we use OpenAI for translation?
We only use OpenAI to automatically translate texts on our website. This is done via our internal WEB.kit system so that we can also provide you with content in other languages quickly and efficiently. The aim is to make our information more user-friendly and internationally accessible.

What data is processed?
When using the translation function, the relevant texts are transmitted to the OpenAI servers for automated translation. These texts may theoretically contain personal data if such data is included in the content to be translated. In addition, the IP address of the accessing device may be transmitted.

OpenAI processes this data to perform the translation function. Use for other purposes, in particular for training AI models, only takes place if chat log storage is activated at OpenAI. We have deactivated this function so that no permanent storage or use for training purposes takes place. The data is stored for a maximum of 30 days and then automatically deleted.

Legal basis for processing
Processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR, provided that personal data is contained in content to be translated. Our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR lies in the user-friendly and multilingual provision of content on our website.

Data transfer to third countries
OpenAI processes data on servers in the USA, among other places. There is currently no equivalent level of data protection as in the EU. To secure the data transfer, OpenAI relies on so-called standard contractual clauses in accordance with Art. 46 GDPR, which have been approved by the European Commission.

You can find more information on the standard contractual clauses at

eur-lex.europa.eu/eli/dec_impl/2021/914/oj

How can I prevent processing?
If you do not want data to be transmitted to OpenAI for automated translation, please do not use the corresponding functions on our website. In addition, you can exercise your right to information, erasure or objection at any time in accordance with Art. 15 et seq. GDPR at any time.

h. Hosting service providers
We use the services of specialized digital agencies, SaaS providers and data center service providers (collectively referred to as hosting service providers) to operate our website.

The hosting service providers work for us exclusively in accordance with our instructions. These are order processing operations in accordance with Art. 28 GDPR.

TREIBSTOFF agentur für marketing und mediendesign gmbh, Hinsbecker Löh 10, 45257 Essen (hereinafter referred to as TREIBSTOFF) is our processor and manages the data provided by you through the use of our digital services exclusively in accordance with our instructions. We have concluded an order processing contract with TREIBSTOFF.

TREIBSTOFF privacy policy: treibstoff.digital/datenschutz

The hosting service provider ALL-INKL.COM - Neue Medien Münnich, owner: René Münnich, Hauptstraße 68, D-02742 Friedersdorf acts for us as a sub-processor bound by instructions.

ALL-INKL.COM privacy policy: all-inkl.com/datenschutzinformationen/.

V. Processing principles and existence of appropriate safeguards

Data minimization
We process your data insofar as this is relevant and appropriate for the intended purpose. We limit data storage to what is necessary for the purposes of processing.

Pseudonymization
Insofar as we collect usage data, we always store it under pseudonyms (in the case of cookies, for example, via a unique session key). We do not merge pseudonymous data with data about the bearer of the pseudonym (such as inventory data).

Use of encryption technologies
We use the SSL security system (Secure Socket Layer) for data transfer between your computer or mobile device and our server. This technology is designed to protect your data from being read by unauthorized third parties and offers a very high standard of security. You can recognize that your data is transmitted in encrypted form by the closed display of a key or lock symbol in the lower status bar of your browser.

VI Recipients and further processing

Recipients of personal data in the EU
We transfer your data to the following companies:

ALL-INKL.COM - Neue Medien Münnich, Owner: René Münnich
Hauptstraße 68
D-02742 Friedersdorf
Germany

The purpose of the data transfer is hosting services.

Recipients of personal data in third countries
The provider does not transfer personal data to recipients outside the EU.

Further processing for other purposes
Unless otherwise stated above, your data will not be passed on to third parties or processed for purposes other than those stated.

VII Rights of data subjects

Right to information
You can request information about your personal data that we process in accordance with Art. 15 GDPR.

Right to object
You have the right to object for specific reasons (see point II).

Right to rectification
If the information concerning you is not (or no longer) accurate, you can request rectification in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.

Right to erasure
You can request the erasure of your personal data in accordance with Art. 17 GDPR.

Right to restriction of processing
In accordance with Art. 18 GDPR, you have the right to request that the processing of your personal data be restricted.

Right to lodge a complaint
If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority of your choice in accordance with Art. 77 (1) GDPR. This also includes the data protection supervisory authority responsible for the controller State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, www.ldi.nrw.de/kontakt/ihre-beschwerde.

Right to data portability
If the requirements of Art. 20 (1) GDPR are met, you have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to third parties. The collection of data for the provision of the website and the storage of log files are absolutely necessary for the operation of the website. They are therefore not based on consent pursuant to Art. 6 (1) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR, but are justified pursuant to Art. 6 (1) (f) GDPR. The requirements of Art. 20 para. 1 GDPR are therefore not met in this respect.

Right to object pursuant to Art. 21 (1) GDPR
You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (f) of Article 6 (1) GDPR. The controller will then no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims. The collection of data for the provision of the website and the storage of log files are absolutely necessary for the operation of the website.

If you would like to exercise your right to object, simply send a telephone message or an e-mail to info(at)inex-solutions.de

Right to withdraw consent in accordance with Article 7(3) GDPR
You can withdraw your consent at any time. As a result, we may no longer continue the data processing that was based on this consent in the future.

Made with and TREIBSTOFF.kits