Privacy Policy

We care about Your privacy

 

At PTM EDV Systeme GmbH, safeguarding your personal data and ensuring transparency in how we handle it is our top priority. As an internationally active provider of IT solutions, we strictly adhere to the General Data Protection Regulation (GDPR) and uphold the highest standards of information security, certified under ISO 27001. By maintaining these high standards, we are committed to building and preserving your trust in all interactions with PTM.

This privacy policy outlines the purposes, legal bases, and recipients of any personal data collected across our websites ptm-edv.at, mscrm-addons.com, and poweraddons.com.

 

Data Controller

 

PTM EDV Systeme GmbH

Bahnhofgürtel 59

A-8020 Graz

Contact Information:

Phone: +43 316 680 880-0

Fax: +43 316 680 880-25

E-Mail: office@ptm-edv.at

Company Information:

Legal Form: Company with limited liability

CEO: Christian Ternek Christian Ternek

CEO's E-Mail: christian.ternek@ptm-edv.at

Commercial Register Number: 173442m

Commercial Court: Landesgericht für ZRS Graz

Authority: Bezirkshauptmannschaft Graz Stadt

VAT Number: ATU45695403

External Privacy Officer:

Dominik Fünkner (PROLIANCE GmbH)

Privacy Authority:

Österreichische Datenschutzbehörde

 

External Data Protection Officer

 

PTM EDV Systeme GmbH takes data privacy very seriously and has appointed an external Data Protection Officer (DPO) to oversee all matters of data protection and compliance. Our DPO, Dominik Fünkner from Proliance GmbH, ensures that we meet our legal obligations and implement best practices to protect personal data.

DPO Contact Information:

PROLIANCE GmbH

Dominik Fünkner

Leopoldstraße 21

80802 Munich

Germany

Contact:

Phone: +4989250039227

Email: datenschutzbeauftragter@datenschutzexperte.de

Website: https://www.proliance.ai

For any questions related to data protection, please reach out to our DPO at the contact information

 

Purposes of Processing, Legal Bases, and Data Recipients

 

Contract Execution and Customer Support

• Websites: All three websites
• Purpose of Processing: Managing customer orders, providing licenses, delivering support services, and managing our relationships with business partners such as vendors and suppliers. This data processing is essential to fulfill our contractual obligations to our customers and business partners.
• Legal Basis: Performance of a contract under Article 6(1)(b) GDPR.
• Data Recipients: Internal departments such as customer service, support and procurement, and, where applicable, partner companies for international support. Data is retained as required by legal retention obligations and deleted once it is no longer necessary for these purposes. For details on how customer data is processed within our SaaS products (DocumentsCorePack and AttachmentExtractor), please see our Trust & Compliance page and our Data Processing Agreement.

Contact and Communication

• Websites: All three websites
• Purpose of Processing: Responding to inquiries submitted via our websites (contact forms, email inquiries). This data processing facilitates effective communication and response to customer inquiries.
• Legal Basis: Pre-contractual measures under Article 6(1)(b) GDPR.
• Data Recipients: Inquiries are internally forwarded to relevant departments. There are no external recipients except as required by law.

Marketing and Newsletter

• Websites: mscrm-addons.com, PowerAddons.com
• Purpose of Processing: Sending newsletters and product and service information to inform customers about new features and offers. Newsletters are sent only with prior consent.
• Legal Basis: User consent under Article 6(1)(a) GDPR.
• Data Recipients: Internal marketing departments and, where applicable, service providers for newsletter distribution. Data is stored only until consent is withdrawn.

Product-Related Communication (e.g. Demo, Trial & Webinar Follow-Up)

• Purpose of Processing: When you request a demo, activate a trial service, or register for a webinar, we send you information directly related to that specific request (e.g., access details, onboarding guidance, relevant follow-up content). This does not include general marketing or newsletter content.
• Legal Basis: Legitimate interest under Article 6(1)(f) GDPR. As this communication is strictly limited to the purpose you requested.
• Data Recipients: HubSpot, acting as our lead management platform, our Dynamics 365 CRM environment (Microsoft), and Rapidmail as our email delivery provider — all acting as processors pursuant to Art. 28 GDPR.
• Right to Object: You may object to this communication at any time, free of charge and without giving reasons, via the unsubscribe link included in each message.

Website Analysis and Optimization

• Websites: All three websites
• Purpose of Processing: Analyzing user behavior to improve our websites and optimize our offerings. This processing serves to enhance our services and improve user-friendliness.
• Legal Basis: Legitimate interest under Article 6(1)(f) GDPR.
• Data Recipients: External analytics providers, with whom we have data processing agreements, as well as internal IT and marketing departments. Data is not used for any other purposes.

Application Management

• Websites / Communication Channels: ptm-edv.at, mscrm-addons.com as well as other submission channels (e.g. email or job platforms)
• Purpose of processing: Processing and administration of applications within the recruitment procedure.
• Categories of data processed: Contact details and submitted application documents (e.g. CV, cover letter, certificates and other voluntarily provided information).
• Legal basis: Performance of pre-contractual measures at the request of the data subject pursuant to Art. 6(1)(b) GDPR.
• Recipients: The responsible employees of PTM EDV Systeme GmbH as well as the HR software platform Factorial HR acting as a processor pursuant to Art. 28 GDPR. Processing takes place on servers located within the European Union.
• Automated support: During the recruitment process, an automated summary of application documents and an internal indication of alignment with the advertised position may be generated. No automated decision-making within the meaning of Art. 22 GDPR takes place. Final decisions are made exclusively based on human review.
• Retention period: Application data will be deleted no later than six months after completion of the recruitment process, unless statutory retention obligations apply.

Data Access in Support Cases

• Websites: All three websites
• Purpose of Processing: In support cases involving third-party data, access is provided jointly with the customer to resolve the issue. This access always takes place in the presence of the customer.
• Legal Basis: Legitimate interest under Article 6(1)(f) GDPR.
• Data Recipients: Internal support department, and only when necessary and in the customer’s presence. Data is used solely for problem resolution and not for other purposes.

AI-Assisted Business Operations

• Websites / Communication Channels: All three websites, as well as other communication channels (e.g. email)
• Purpose of Processing: We use artificial intelligence tools, in particular Claude by Anthropic and Copilot by Microsoft, to support our employees in daily business operations, allowing us to respond to customer inquiries more efficiently and provide faster, more consistent support (e.g. by helping our support team summarize or categorize incoming correspondence within our CRM system).
• Categories of data processed: Depending on the specific context, contact details and the content of business correspondence or documents processed within our internal systems.
• Legal Basis: Legitimate interest under Article 6(1)(f) GDPR.
• Recipients: The responsible employees of PTM EDV Systeme GmbH, as well as Microsoft (as provider of the underlying Dynamics 365 environment) and Anthropic, acting as processors pursuant to Art. 28 GDPR. Data may be processed on servers located in the European Union (Microsoft) and the United States (Anthropic), the latter subject to appropriate safeguards (Standard Contractual Clauses).
• Automated support: AI tools may automatically analyze content to assist with tasks such as suggesting categorization or drafting support. No automated decision-making within the meaning of Art. 22 GDPR takes place. All resulting actions remain subject to review and are finalized exclusively by our employees.
• Retention period: Data is retained according to the retention period of the underlying business process in which it is processed; no separate retention applies to the AI-assisted processing itself.

Legal Obligations for Data Disclosure

• Websites: All three websites
• Purpose of Processing: PTM may be legally required to disclose data (e.g., for law enforcement). This obligation is governed by applicable EU regulations.
• Legal Basis: Legal obligation under Article 6(1)(c) GDPR.
• Data Recipients: National and international authorities as part of legal inquiries and only within the legally defined scope.

 

Data Collection on Our Websites

 

When visiting our websites (ptm-edv.at, mscrm-addons.com, and poweraddons.com), we collect and process personal data to ensure a smooth and functional browsing experience.

Data Collected:

• Automatically Collected Data: IP addresses, browser type and version, operating system, referrer URL, and time of access.
• Data Provided by Users: Information provided through forms (e.g., contact forms), newsletters, and registration processes.

Purpose of Processing: To improve website functionality, ensure security, and analyze user behavior for service optimization.

Legal Basis: Legitimate interest (Article 6(1)(f) GDPR) for basic website functionality; consent (Article 6(1)(a) GDPR) for analytics and marketing purposes where required.

 

Introduction to Cookies and Tracking Tools

 

Our websites use cookies and tracking tools to provide a customized and optimized user experience. Cookies are small text files stored on your device, and tracking tools allow us to gather information about your interaction with our site. These technologies help us understand user preferences, improve website functionality, and deliver tailored content and advertising.

We categorize our cookies and tracking tools into essential, analytics, and marketing cookies:

• Essential Cookies: These cookies are necessary for the website to function properly, ensuring features like page navigation and access to secure areas.
• Analytics Cookies: These cookies help us understand how visitors interact with the website by collecting and reporting information anonymously. This data allows us to improve our services and site usability.
• Marketing Cookies: These cookies are used to track visitors across websites to deliver relevant and engaging advertising based on your interests.

You can manage your cookie preferences at any time through our website’s cookie settings. Below is a detailed list of the cookies and tracking tools we use on our websites, along with their purposes and expiration times.

 

Data Privacy Information regarding Payment Processing (PayPal and Stripe)

 

As part of your order, we offer various payment methods. To process these payments, we use the services of external payment service providers.

Purpose and Legal Basis of Data Processing

Detail

Description

Purpose of Processing

Execution of the payment for your order, processing of credit card payments, as well as fraud prevention and risk management.

Legal Basis

Art. 6 (1) lit. b GDPR

: The processing is necessary for the performance of the purchase contract concluded with you.

Legal Basis (Fraud Prevention)

Art. 6 (1) lit. f GDPR

: Our legitimate interest in protecting ourselves against payment defaults and misuse.

Categories of Data

Order details, first and last name, address, email address, telephone number, IP address, and transaction-related payment information (e.g., credit card number, PayPal ID).

Necessity

The provision of this data is a

contractual requirement

. Without providing the necessary payment data, the purchase contract cannot be concluded, or the payment cannot be processed.

Recipients of the Data and Transfer to Third Countries

For the purpose of payment processing, we forward the payment data you provide to the following service providers, depending on the payment method you choose:

a) PayPal

• Service: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
• Data Transferred: Payment data, address data, order data.
• Third-Country Transfer: PayPal may transfer personal data to the USA for processing. The transfer is based on the Standard Contractual Clauses (SCCs) issued by the EU Commission and/or participation in the EU-US Data Privacy Framework (DPF).

b) Stripe (Credit Card Billing)

• Service: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.
• Data Transferred: Credit card information, address data, order data.
• Third-Country Transfer: Stripe is a global company that transfers data to the USA for processing. The transfer relies on the Standard Contractual Clauses (SCCs) issued by the EU Commission and/or participation in the EU-US Data Privacy Framework (DPF).

 

Server Side Tracking smarketer.de

 

Type and purpose of processing: We use cookies, web storage (e.g., localStorage, sessionStorage), and similar tracking technologies on smarketer.de to analyze user behavior, tailor content and advertisements, ensure error-free operation of the website, and to measure and enhance our site’s performance. These technologies allow us to recognize returning visitors, remember preferences, detect usage patterns, generate statistical information, and serve personalized marketing content. Certain functions (such as form entries or login sessions) require the use of essential cookies or local storage items.

Legal basis for processing: The legal basis for the utilization of cookies, web storage, and tracking technologies is your explicit consent in accordance with Art. 6(1)(a) GDPR. Where strictly necessary for technical operation, processing may be based on our legitimate interest pursuant to Art. 6(1)(f) GDPR.

Categories of data: Processed data may include the following categories: unique cookie or device identifiers, IP address (truncated or full), browser and device information, website navigation and usage data, settings and preferences, session duration, visited pages, referral URL, and, if applicable, entered form data.

Recipients: Access to data may be granted to our IT and marketing teams, technical service providers to the extent necessary for the operation and analysis of the service, hosting providers, and—if third-party cookies or pixels are used, e.g., for analytics or advertising—relevant third party providers such as analytics and advertising networks.

Retention periods: The retention duration depends on the type of technology: session cookies are deleted once you leave the website; persistent cookies and local storage items remain stored on your device until their defined expiry period lapses or until you delete them manually via your browser settings. Typically, persistent cookies on smarketer.de may be stored from several days up to two years, depending on their function.

Legal/contractual requirement: The provisioning and use of cookies and tracking technologies are not required by law or contract. You are not obliged to provide this data. However, some functionalities of the website may be limited if you decline or remove essential cookies or storage entries.

Third-country transfers: Where we use third-party providers headquartered outside the European Union or the European Economic Area, your data may be transferred to and processed in countries without an equivalent level of data protection. We ensure that suitable safeguards (such as EU standard contractual clauses) are in place, or we only transfer data based on your prior consent.

Withdrawal of consent: You can withdraw your consent to the use of cookies, web storage, and tracking technologies at any time with effect for the future by adjusting your preferences in our cookie settings or by deleting cookies and storage entries in your browser. This does not affect the lawfulness of processing based on consent before its withdrawal.

Automated decision-making and profiling: The above technologies may be used to build behavioral profiles and segment visitors for tailored advertising or content (profiling). No automated decision-making with legal or similarly significant effects on you takes place solely based on the data collected by cookies and tracking technologies.

 

Google LLC

 

Type and purpose of processing: Google sets cookies, uses web storage, and deploys tracking technologies to deliver advertising, measure ad effectiveness, provide content delivery through its CDN (Content Delivery Network), and support online payment functionalities. These technologies enable Google to track user interactions across web pages, personalize ads, detect fraudulent activities during payments, optimize website performance, and aggregate analytical data about user behavior for marketing and service improvement.

Legal basis for processing: The deployment and use of these cookies and technologies is based on your explicit consent, as required under Article 6 (1) (a) GDPR.

Categories of data: The data processed may include device identifiers, IP addresses, cookie IDs, browsing and search history, interaction data with ads and websites, information about purchased products or transactions, location data (if available), and user preferences collected and stored through browser cookies or local storage objects.

Recipients: The collected data is primarily received by Google LLC and its subsidiaries. In certain circumstances, the data may also be made available to Google’s advertising partners, analytics services, payment processing agents, and CDN service entities, as well as to other service providers under contract with Google.

Retention periods: Cookies and similar technologies may remain stored on your device for periods ranging from a few minutes to up to two years, depending on the specific technology and its purpose. Some information may be stored for a shorter or longer duration as required for technical functioning, fraud prevention, or regulatory compliance.

Legal/contractual requirement: The use of cookies and similar tracking technologies by Google is not required by law or contract, nor is it necessary for the conclusion of a contract. You are not required to provide consent, and refusal will not affect the core functionality of the website but may limit certain personalized or optimized service features.

Third-country transfers: Data collected via cookies and tracking technologies may be transferred to or processed in the United States and other countries outside the European Economic Area. Google implements appropriate safeguards for these third-country transfers, most notably by employing standard contractual clauses as approved by the European Commission.

Withdrawal of consent: You may withdraw your consent for the use of cookies and tracking technologies at any time by adjusting your cookie preferences on this website or through browser settings designed to block or delete cookies and local storage entries. This withdrawal will take effect for all future processing but will not affect data processed before withdrawal.

Automated decision-making and profiling: Through the use of cookies and tracking, Google may carry out profiling for advertising and analytics purposes. Automated decision-making may occur, particularly in the context of personalized advertising placement, ad bidding processes, fraud detection, and dynamic content delivery based on user profiles and behavior patterns.

 

Google Tag Manager

 

Type and purpose of processing: Google Tag Manager is used to manage website tags, including those for analytics and advertising, by dynamically loading scripts and cookies related to audience measurement and marketing. Google Tag Manager itself does not process personal data from cookies directly but enables and controls the deployment of tracking technologies for analytics, advertising, and user behavior analysis. Through the tags activated by Google Tag Manager, cookies and web storage elements may be set to collect data on website usage, performance metrics, and advertising-related interactions.

Legal basis for processing: The deployment of Google Tag Manager and any associated cookies, web storage, or tracking technologies occurs exclusively based on your explicit consent in accordance with Art. 6(1)(a) GDPR.

Categories of data: Data categories collected through tags managed by Google Tag Manager may include online identifiers (such as cookies and IP addresses), device information, browser type and version, operating system, user interaction data, visit duration, page views, and advertising identifiers. Depending on tag configuration, this can cover behavioral and technical data for analytics and marketing purposes.

Recipients: Data collected through tracking technologies may be transmitted to Google LLC and its affiliates, who may process this data for audience measurement, analytics, and advertising services. Additional third-party providers may receive data through integrated tags as configured by the website operator.

Retention periods: The storage period of cookies and data in web storage varies by tag and purpose. Individual cookies may be stored from a few minutes up to two years or until user consent is withdrawn. Detailed retention durations are defined by the individual technologies deployed via Google Tag Manager.

Legal/contractual requirement: The use of Google Tag Manager and associated data processing through cookies is not required by law or contract and is not necessary for website usage. Providing consent is voluntary and not a condition for accessing core website functions.

Third-country transfers: Data processed through Google Tag Manager may be transferred to Google LLC in the United States. This transfer occurs based on the adequacy decision for the US or standard contractual clauses as appropriate safeguards in line with Art. 46 GDPR.

Withdrawal of consent: You can withdraw your consent at any time with effect for the future by adjusting your cookie settings on this website or, where applicable, by deleting stored cookies and disabling tracking technologies in your browser.

Automated decision-making and profiling: Google Tag Manager itself does not implement automated decision-making or profiling. However, tags managed through the service may enable analytics and advertising technologies that include profiling to deliver personalized content or advertising, depending on activated services.

 

b2clogin.com

 

Type and purpose of processing: The website uses cookies, web storage (such as localStorage and sessionStorage), and tracking technologies to facilitate authentication, manage security tokens, detect fraudulent activity, maintain user session integrity, record login history, and optimize the functionality and performance of authentication flows. These technologies are essential for the secure and efficient operation of identity management and user authentication services.

Legal basis for processing: Processing of data via cookies and tracking technologies on b2clogin.com is based on legitimate interests as per Art. 6(1)(f) GDPR, specifically the interest in ensuring secure, reliable, and streamlined authentication services and threat prevention.

Categories of data: The following data may be processed through cookies and related technologies: unique identifiers (e.g., session IDs), authentication tokens, device information (browser type, IP address, operating system), timestamped login events, and basic telemetry on authentication success or failure. Generally, personal identifiers are processed only to the extent strictly required for authentication and session management.

Recipients: Data derived from cookies and web storage may be accessible to b2clogin.com personnel managing authentication frameworks, affiliated service operators (such as Microsoft Azure), IT security contractors, and, where applicable, regulatory bodies if required by law.

Retention periods: Session cookies and storage are generally retained only for the duration of the active browser session or authentication process. Persistent cookies, if set, are retained according to their designated lifespan (commonly from minutes up to a year) and are subject to periodic review. Data may also be logged for auditing and security purposes as required.

Legal/contractual requirement: The use of cookies, web storage, and tracking technologies is not a statutory or contractual requirement, but it is necessary for the lawful and secure operation of the authentication system provided to users. Without this processing, authentication and related security services cannot be provided.

Third-country transfers: As b2clogin.com is based in the United States, data processed via cookies and related technologies may be transferred to and stored in the U.S. or other jurisdictions outside the European Economic Area. Appropriate safeguards such as standard contractual clauses or other applicable transfer mechanisms are implemented where required to protect your data.

Withdrawal of consent: Since the use of these technologies is based on legitimate interest and is essential for service delivery, the option to withdraw consent does not apply. Users can, however, configure their browsers to block cookies, but this may result in loss of access to authentication services and functionalities dependent on these technologies.

Automated decision-making and profiling: Automated profiling and decision-making may occur strictly for security and fraud detection purposes, such as risk scoring logins to prevent unauthorized access. No further profiling unrelated to authentication is conducted.

 

cloudflare.com

 

Cloudflare uses cookies and similar tracking technologies as part of its content delivery network (CDN), embedded content provision, and analytics services. These technologies are deployed to:

The processing is based on Cloudflare's legitimate interests as per Article 6(1)(f) GDPR, specifically in securing the website, guaranteeing network integrity, and delivering fast, stable services.

The categories of data processed include, but may not be limited to: IP address, device and browser details, unique cookie identifiers, website usage statistics, and certain network activity metadata. These data help to maintain service integrity, security, and performance.

Cloudflare and authorized sub-processors acting on its behalf may be recipients of data gathered through these technologies. In rare instances, this data may be disclosed to authorities to comply with legal obligations.

Retention of cookies varies depending on type and function: cookies for security and load balancing are typically retained for up to 1 month, whereas some diagnostic or analytics cookies may be stored for shorter periods, such as during an active browser session. Cloudflare regularly reviews and updates retention periods to ensure compliance and necessity.

The provision of these tracking technologies is not legally or contractually required for mere website access; however, disabling essential cookies may cause substantial degradation of site performance or deny basic functionality such as protection against attacks and efficient loading.

As Cloudflare is headquartered in the United States, data collected through its services may be transferred to or processed in countries outside the European Economic Area. Such transfers are conducted under appropriate safeguards, such as standard contractual clauses, to ensure an adequate level of data protection.

Cloudflare’s processing for legitimate interests does not require consent. Visitors wishing to limit Cloudflare cookies may adjust browser settings to block or delete them, but this may impact the functioning and security of the website. There is no mechanism for consent withdrawal regarding cookies set on the legitimate interest basis, except as technically implemented by the user.

Cloudflare does not use cookies or similar technologies for automated decision-making or profiling which would produce legal effects or similarly significant impact on individuals.

 

doubleclick.net

 

Type and Purpose of Processing: Doubleclick.net employs cookies and similar tracking technologies for advertising and ad-motivated tracking purposes. The primary objective is to display personalized advertisements, measure ad performance, limit ad frequency, detect and prevent fraudulent activities, and aggregate insights about user behavior across different websites. Cookies, pixel tags, and web storage mechanisms are used to correlate users' browsing behaviors, build anonymous user profiles, and enable real-time ad auctions.

Legal Basis for Processing: Processing is based solely on your consent as required under Article 6(1)(a) GDPR.

Categories of Data: Data processed includes unique cookie identifiers, IP addresses, device information, browser type and version, timestamp, information about website visits and actions taken (such as clicks), preferences, approximate geolocation data, and online identifiers. No direct identifiers (such as names or email addresses) are collected via these technologies.

Recipients: Data may be accessed by Google LLC and its affiliates as well as authorized third-party advertisers and partners participating in Google’s advertising network.

Retention Periods: Cookies and stored data may be retained for a period ranging from a few days to up to 2 years, depending on the specific cookie or technology. Some cookies are session-based, while others persist to support long-term advertising activities.

Legal/Contractual Requirement: There is no statutory or contractual obligation for users to provide data via doubleclick.net technologies; participation is voluntary and subject to user consent.

Third-country Transfers: Data collected by doubleclick.net may be transferred to and processed in the United States and other countries outside the European Economic Area. Google implements suitable safeguards such as Standard Contractual Clauses to ensure adequate levels of data protection.

Withdrawal of Consent: Consent to the use of doubleclick.net cookies and tracking can be withdrawn at any time by adjusting your cookie settings on this site or through your browser’s privacy options. The withdrawal does not affect data processing that has occurred prior to the revocation.

Automated Decision-Making and Profiling: Automated profiling is performed to segment users for targeted advertising. This may impact the types of advertisements presented but does not produce legal or similarly significant effects on individuals.

 

fonts.googleapis.com

 

Type and purpose of processing: When this website embeds fonts from fonts.googleapis.com, your browser automatically contacts Google's servers to request the necessary font files. In the process, Google may use cookies or similar technologies (such as browser caching or resource tagging) for the technical delivery and efficient rendering of web fonts. The use of fonts.googleapis.com by this website ensures consistent font appearance across devices, improved website performance, and reduced server load. No active user tracking or cross-site profiling is intended, but standard logging and network request data may be processed.

Legal basis for processing: The use of fonts.googleapis.com is based on legitimate interests, as permitted by Article 6(1)(f) GDPR. The legitimate interest encompasses technical optimization, a uniform web presence, and efficient content delivery.

Categories of data: Fonts.googleapis.com may process your IP address, browser and device information (such as user agent), requested resource URLs, timestamps, and technical data relating to the request (such as HTTP headers). These are standard data points required for web content delivery over the Internet.

Recipients: The recipient of the data is Google LLC, based in the United States. Data is processed by Google on their content delivery infrastructure.

Retention periods: Google states that it does not log IP addresses for font delivery in connection with fonts.googleapis.com. Temporary technical logs for operational and security purposes may nevertheless be kept for a short and defined period, typically only long enough to ensure delivery and network security.

Legal/contractual requirement: The use of fonts.googleapis.com is not legally or contractually required, nor is it necessary to enter into a contract. However, fonts may not be displayed correctly without this service due to technical dependencies.

Third-country transfers: The data is transmitted to and processed by Google servers in the United States. As the US is not considered to provide an adequate level of data protection under the GDPR, appropriate safeguards are required. Google relies on standard contractual clauses and other safeguards to ensure an adequate data protection level.

Withdrawal of consent: Processing is not based on consent but on legitimate interests. Therefore, withdrawal of consent is not applicable for the use of fonts.googleapis.com.

Automated decision-making and profiling: No automated decision-making or profiling based on cookies, local storage, or tracking technologies is performed by this service for users visiting this website.

 

geojs.io

 

geojs.io processes data via cookies, web storage, and similar tracking technologies to determine your geographic location based on your IP address whenever you access websites that use this service. This processing enables the website to localize content, optimize user experience based on location, provide security checks, and perform analytics on visitor origin. Cookies or local storage data may be set or read for the purposes of storing session state or previously determined location details to improve lookup efficiency or to reduce repetitive queries.

The legal basis for this data processing is our legitimate interest in providing geolocation services to website operators and optimizing web offerings as per Art. 6(1)(f) GDPR.

The categories of data processed are: IP address, information about browser and device type, approximate geographic location (country, region, city), and website request metadata (e.g., timestamp, referring website).

Recipients of the data include geojs.io (as the direct service provider), and potentially web hosting providers or infrastructure partners engaged for service operation. Data may also be made available to the website operator integrating geojs.io.

Retention of data stored via cookies or web storage is typically session-based, but may persist up to several months in your browser cache for efficiency and analytic purposes as determined by geojs.io’s technology configuration. Backend logs may be retained according to geojs.io’s internal policies, typically for periods necessary for operational analysis and troubleshooting.

There is no legal or contractual obligation for users to provide data via these tracking technologies; however, refusal may impact the site’s location-dependent functions.

Data processed by geojs.io via cookies or web storage may be transferred to third countries outside the European Economic Area. As the provider’s base is unknown, precise safeguards cannot be guaranteed, but transfers are likely for service provision. Data transfers may occur to jurisdictions without a level of data protection adequate to EU standards.

As the legal basis for processing is legitimate interest, there is no mechanism to withdraw consent; tracking technologies are applied as part of core service design and can only be limited by blocking scripts and cookies in your browser settings.

geojs.io does not engage in automated decision-making or profiling of individuals beyond technical processing for geolocation.

 

google-analytics.com

 

Type and purpose of processing: This service uses cookies and similar tracking technologies (such as web storage and tracking pixels) to analyze the behavior and interaction of website visitors. The primary purposes are audience measurement, monitoring website performance, optimizing content, and supporting advertising and marketing strategies through user analytics. User interaction data is combined to create reports and statistical analyses of website usage, as well as to facilitate targeted marketing campaigns.

Legal basis for processing: Processing is carried out exclusively based on your consent in accordance with Article 6(1)(a) GDPR.

Categories of data: Data collected may include IP address (possibly in pseudonymized form), device identifiers, browser information, screen resolution, location data (approximate), referring URL, visited pages, time spent, interaction events, technical diagnostics, and cookie identifiers.

Recipients: The collected data are transmitted to Google LLC and its affiliated companies. Google may utilize this information in accordance with its own privacy policies and for its analytics and advertising purposes. Subcontractors and IT service providers working on behalf of Google may also receive access under strict contractual terms.

Retention periods: Cookies set by this service are typically kept from 1 day up to 24 months unless deleted earlier. Data linked to specific identifiers may be stored by Google for up to 26 months. Technical logs may persist for shorter and longer periods as required for service integrity and error diagnosis.

Legal/contractual requirement: The use of this service is neither legally nor contractually required and does not form part of any contractual obligation. Providing data is entirely voluntary and based on your consent.

Third-country transfers: Information will be transmitted to, and processed by, Google in the United States and potentially other non-EU countries. The United States does not currently offer a level of data protection comparable to the EU. Transfers are conducted on the basis of the EU Standard Contractual Clauses or other appropriate safeguards.

Withdrawal of consent: You may withdraw your consent for the use of cookies and tracking technologies for this service at any time via the cookies settings on this website. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

Automated decision-making and profiling: This service is used to create usage profiles based on user behavior for the purposes of audience measurement and marketing. However, fully automated decision-making with legal or similarly significant effects does not occur.

 

google.de

 

Type and purpose of processing: Google.de uses cookies, web storage, and similar tracking technologies to collect and store information about your device, browser, and interactions with the website. This includes personalizing content and ads, providing social media features, measuring and analyzing website traffic, facilitating user authentication, and safeguarding the website against misuse and fraud. These technologies enable the identification of user sessions, tracking browsing patterns, audience measurement, and optimization of advertising campaigns.

Legal basis for processing: The processing of personal data via cookies and tracking technologies on google.de is based on your prior consent pursuant to Art. 6(1)(a) GDPR. Consent is requested via an explicit mechanism (e.g., consent banner) prior to the activation of non-essential cookies or trackers.

Categories of data: Data processed may include unique online identifiers (such as cookie ID, device ID, IP address), browser information, language preference, device information, website usage data (including timestamps, navigation paths, click data, viewed pages), approximate geolocation, and (if authenticated) account information or inferred interests.

Recipients: Collected data may be disclosed within Google and affiliated entities, and service providers acting on Google's behalf, including advertising partners, analytics service providers, and technical service providers. These recipients may process data for analytics, personalized advertising, and fraud prevention.

Retention periods: Data retention in cookies and web storage generally ranges from session duration (deleted upon closing the browser) to up to 24 months, depending on the type of cookie or storage and selected consent preferences. Exact retention times for each cookie or technology are detailed in Google's cookie documentation.

Legal/contractual requirement: The use of cookies and tracking technologies for purposes not strictly necessary for website operation is neither legally nor contractually required. Non-consent may affect your experience by disabling certain website features or personalized services.

Third-country transfers: Data collected via cookies and similar technologies may be transferred to Google LLC and affiliated entities in the United States or other third countries where Google operates. Transfers are subject to appropriate safeguards such as Standard Contractual Clauses under Art. 46 GDPR to ensure data protection equivalency.

Withdrawal of consent: You can withdraw your consent for processing via cookies or web storage at any time by adjusting your preferences in the cookie settings on google.de or by deleting cookies from your browser. Withdrawal does not affect the lawfulness of processing before consent withdrawal.

Automated decision-making and profiling: Google.de may use profiling technologies to deliver personalized advertising and content based on your behavior and preferences. Automated decision-making may occur in the context of ad selection or content recommendations, but does not involve legal or similarly significant effects on users.

 

googleoptimize.com

 

Google Optimize uses cookies and similar tracking technologies to evaluate Visitor behavior, test different versions of website content, and measure the effectiveness of web interfaces. These technologies serve to analyze user engagement and support ongoing improvements to the user experience by recording data on page interactions and variant selection.

 

googlesyndication.com

 

Type and Purpose of Processing: Googlesyndication.com, provided by Google, employs cookies, web storage, and similar tracking technologies to store and retrieve information on your device. These technologies are used to deliver personalized advertising, measure ad performance, detect and combat fraud and abuse, track user interaction with ad inventory, and perform ad-motivated web analytics. The processing involves analyzing user behavior, preferences, and browsing activities across websites that display Google ads.

Legal Basis for Processing: Processing activities via cookies and tracking technologies are based solely on your consent, which you may provide or withhold via the website’s consent mechanisms.

Categories of Data: Data collected may include unique device identifiers, IP addresses, browser and device information, information about your browsing activities and interactions with ads (such as impressions, clicks), location data inferred from IP address, preferences, and other data points relevant to ad targeting and performance assessment.

Recipients: Data may be shared internally within the Google group of companies and with authorized third-party partners involved in ad delivery, measurement and fraud prevention. This may include advertisers, publishers, and analytics providers.

Retention Periods: The retention of data stored via cookies and similar technologies varies: some cookies and identifiers persist for up to 24 months, while others may expire after each session, depending on their specific function (e.g., frequency capping, ad delivery, analytics).

Legal/Contractual Requirement: The use of cookies and similar tracking tools for advertising and tracking purposes is not legally or contractually required. Provision of consent is voluntary, and refusal will not affect the core website functionality outside of advertising and related tracking.

Third-Country Transfers: Data processed by googlesyndication.com may be transferred to Google servers located in the United States and other countries outside the European Economic Area. Such transfers are based on standard contractual clauses or other approved safeguards to ensure an adequate level of protection.

Withdrawal of Consent: You may withdraw your consent to the use of googlesyndication.com cookies and related tracking technologies at any time by utilizing the website’s consent management platform or browser controls. Withdrawal does not affect processing carried out prior to withdrawal.

Automated Decision-Making and Profiling: Automated algorithms are employed to deliver, select, and personalize advertisements based on collected data. Profiling occurs to create targeted advertising segments and determine which ads are shown. Such decisions can affect the types of advertisements you see, but do not directly produce legal or similarly significant effects.

 

gstatic.com

 

Type and purpose of processing: gstatic.com, operated by Google, is used as a Content Delivery Network (CDN) to efficiently deliver static assets (such as JavaScript libraries, fonts, stylesheets, and embedded content) on our website. gstatic.com employs cookies, web storage, and similar tracking technologies to ensure rapid content delivery, cache frequently requested assets, optimize website performance, and safeguard against security threats such as fraud or abuse. These technologies may also facilitate measuring technical reliability and aggregate usage, but do not serve for advertising or cross-site user profiling.

Legal basis for processing: The use of cookies and tracking technologies via gstatic.com is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR to provide a secure, efficient, and technically robust website.

Categories of data: The data processed may include browser type and version, device identifiers, IP address, operating system, language settings, time and date of access, requested URL, referrer URL and technical identifiers (e.g., cookie IDs, cache keys). These are largely pseudonymous or technical in nature.

Recipients: The primary recipient is Google LLC, based in the United States, including its affiliates and authorized sub-processors involved in operating gstatic.com infrastructure.

Retention periods: Storage and retention depend on the specific cookie or caching mechanism, generally ranging from session-based deletion (browser closure) up to several months. Technical logs may be stored according to Google's internal policies for troubleshooting and security monitoring.

Legal/contractual requirement: There is no legal or contractual obligation to permit processing by gstatic.com. However, restricting such access may significantly impair website functionality, performance, or security.

Third-country transfers: Data collected by gstatic.com may be processed on servers located in the United States or other non-EU/EEA jurisdictions. Such transfers are secured by appropriate safeguards, such as Standard Contractual Clauses, as implemented by Google.

Withdrawal of consent: gstatic.com operates based on legitimate interest. You may restrict the use of cookies and web storage through browser settings or by using browser extensions. Doing so may impact website performance or availability of certain features.

Automated decision-making and profiling: gstatic.com does not perform automated decision-making or user profiling based on cookie or tracking technology data for the purposes of this website.

 

hs-analytics.net

 

hs-analytics.net sets cookies and utilizes web storage and various tracking technologies to analyze user interactions and measure website audience. These technologies collect data on user visits, navigation, session durations, conversion events, and engagement with marketing campaigns. The data is used to create aggregated reports and actionable insights for optimizing website performance and marketing effectiveness.

The legal basis for processing your data in this context is your explicit consent, provided via the cookie banner or similar consent request mechanism.

The categories of data processed may include device and browser information, IP address (shortened or anonymized where possible), referral URLs, usage behavior (pages visited, actions taken), timestamp information, and unique identifiers assigned by tracking cookies.

Your data may be received by HubSpot, the provider of hs-analytics.net, as well as technology partners facilitating analytics and audience measurement. Access is limited to parties involved in providing and maintaining analytics services for the website operator.

Data retention is determined by HubSpot’s configuration but typically ranges from a session duration up to 13 months, after which cookies and tracking identifiers are deleted or anonymized unless renewed by a new visit and consent.

The use of these tracking technologies is neither legally nor contractually required for website use; providing consent is voluntary. However, refusal or withdrawal of consent may affect access to certain analytics-dependent features or functions.

Personal data processed via hs-analytics.net may be transferred to and stored in the United States. Such transfers are subject to appropriate safeguards as required by the GDPR, including standard contractual clauses.

You may withdraw or adjust your consent to tracking and cookies at any time using the website’s cookie management interface. Withdrawal does not affect the lawfulness of processing based on consent prior to its withdrawal.

No decisions based solely on automated processing, including profiling, are made in connection with data collected through hs-analytics.net for audience measurement and analytics purposes.

 

hs-banner.com

 

hs-banner.com uses cookies and similar tracking technologies implemented by HubSpot to collect information about website visits and user interaction. These technologies enable the delivery and display of cookie consent banners, the recording of consent statuses, and tracking of your preferences across browsing sessions. Data processing involves dropping cookies or web storage objects in your browser and recording interactions with the banner.

 

hs-scripts.com

 

Type and purpose of processing: hs-scripts.com uses cookies, web storage, and tracking technologies for audience measurement, advertising display and optimization, content delivery (CDN), tracking user interactions with advertising, collecting audience analytics, and providing marketing analytics. These tracking technologies record details about user visits, clicking behavior, device information, page interactions, and the effectiveness of advertisements and website functionality.

Legal basis for processing: Data collection via cookies, web storage, and tracking on this service is based exclusively on your consent.

Categories of data: The technologies may process information such as your IP address, device identifiers, browser type and version, usage data (pages viewed, links clicked, session duration), cookie identifiers, referral URLs, location data (approximate), and advertising identifiers.

Recipients: Data derived from these tracking technologies is shared with HubSpot and its integrated third-party service providers that participate in analytics, advertising, and content delivery for marketing optimization and performance measurement.

Retention periods: Cookies and tracking elements set by hs-scripts.com may persist for periods ranging from a browser session up to 13 months, depending on the purpose (analytics, advertising optimization, or content delivery requirements). For details on individual cookie durations, refer to your browser settings or the cookie consent configuration.

Legal/contractual requirement: Provision of your data via tracking technologies is not a legal or contractual requirement; you are not obliged to permit this data collection and use.

Third-country transfers: Your information is transferred to HubSpot in the United States. HubSpot processes this data in accordance with applicable data protection law, typically by using Standard Contractual Clauses as safeguards.

Withdrawal of consent: You can withdraw your consent to tracking and cookie storage at any time by adjusting your cookie settings on the website or deleting stored cookies in your browser. Such withdrawal does not affect the lawfulness of processing prior to withdrawal.

Automated decision-making and profiling: Automated decision-making based solely on tracking data does not occur. However, profiling for advertising and analytics purposes is conducted to tailor advertising and measure website performance.

 

hscollectedforms.net

 

Type and purpose of processing: hscollectedforms.net uses cookies, web storage, and similar tracking technologies to identify and authenticate website visitors, record user preferences, enable form submissions, analyze usage patterns, measure site performance, prevent spam or abuse, and optimize the user experience. These tools may collect data during your visit to monitor interactions, provide personalized content, and enable the technical functionality of form collection and management services provided by HubSpot.

Legal basis for processing: The legal basis for processing your data through cookies and tracking technologies is your explicit consent, requested when you first visit the site and can withdraw at any time.

Categories of data: Data collected may include unique identifiers (such as cookie IDs), IP address, browser and device information, reference URLs, page views, usage timestamps, language settings, submitted form content, and technical logs related to form usage and cookie preferences.

Recipients: Data collected by hscollectedforms.net may be accessed by HubSpot (United States) as the service provider, as well as authorized parties involved in the provision, maintenance, and analysis of the site, including technical support and contracted subprocessors under HubSpot.

Retention periods: Cookies and web storage objects set by hscollectedforms.net are retained based on their type and purpose. Session cookies expire when you leave or close your browser. Persistent cookies and local storage may be retained for periods up to two years unless you revoke your consent or manually clear your browser data. Analytical cookie data are anonymized and aggregated as soon as possible.

Legal/contractual requirement: The use of cookies and tracking technologies is not a legal or contractual requirement. You are not obligated to accept them; however, refusal or withdrawal of consent may limit access to certain functionalities, particularly form submissions and personalized preferences.

Third-country transfers: Data processed via cookies and tracking technologies is transferred to HubSpot in the United States. Such transfers are conducted under relevant data protection mechanisms as required by the GDPR, such as Standard Contractual Clauses.

Withdrawal of consent: You may withdraw your consent to the use of cookies and tracking technologies at any time via the website’s cookie settings or by clearing cookies and storage from your browser. Withdrawal does not affect processing carried out prior to withdrawal.

Automated decision-making and profiling: Automated profiling may occur through the analysis of your browsing activity and engagement with forms to offer personalized content or streamline repeated form entries. However, no automated decisions producing legal or similarly significant effects are made solely based on cookie or web storage data.

 

hsforms.com

 

Type and purpose of processing: Cookies, web storage, and embedded tracking technologies from hsforms.com, provided by HubSpot, are integrated into our website to enable the embedding of interactive forms, analytic measurement of form usage, user interaction tracking, and optimization of our online forms and user experience. These technologies collect information when you interact with embedded forms and record usage statistics for analytics and service improvement.

Legal basis for processing: The use of cookies and tracking technologies from hsforms.com is based exclusively on your consent as required under Article 6(1)(a) GDPR.

Categories of data: Processed data may include unique identifiers, IP addresses, device information, browser type, referral URLs, time of use, user input (when forms are filled), form interaction data (such as button clicks and field focus), and analytics data regarding the performance and submission rates of forms.

Recipients: The primary recipient of the data is HubSpot, based in the United States. Service providers acting on behalf of HubSpot may also have access for purposes of hosting, analytics, maintenance, or support.

Retention periods: Data via cookies and web storage may be stored for periods ranging from session duration up to two years, depending on the cookie or storage type set by HubSpot. Analytics and form submission data may be retained by HubSpot according to their retention policies or until you withdraw your consent.

Legal/contractual requirement: There is no legal or contractual obligation to use or permit these cookies, web storage, or tracking technologies. Usage is entirely voluntary and subject to your explicit consent.

Third-country transfers: Data processed by hsforms.com is transferred to and stored in the United States. The United States is not considered to provide an adequate level of data protection under the GDPR. Appropriate safeguards such as Standard Contractual Clauses are applied where necessary to protect your data.

Withdrawal of consent: You may withdraw your consent to the use of hsforms.com cookies, web storage, and tracking technologies at any time, with future effect, by adjusting your cookie preferences on our website. This does not affect the lawfulness of processing carried out before withdrawal.

Automated decision-making and profiling: hsforms.com does not use cookies or tracking technologies for automated individual decision-making or profiling beyond analytics of user interactions and form usage.

 

hubspot.com

 

Type and purpose of processing: HubSpot uses cookies, web storage, and tracking technologies on hubspot.com to enable and optimize analytics and advertising activities, track user behavior across websites, personalize content and advertising based on individual usage, and provide embedded content such as forms, social plugins, or videos. These technologies allow HubSpot to deliver targeted advertising, measure the effectiveness of marketing campaigns, and generate aggregated statistics about website usage.

Legal basis for processing: The use of these tracking technologies is based exclusively on your consent in line with Art. 6(1)(a) GDPR, which you grant via the cookie consent banner or similar mechanisms.

Categories of data: Categories processed include unique online identifiers (e.g., cookies, device IDs), IP addresses, browser and device information, pages visited, time and duration of visits, referral URLs, interaction data (such as clicks, scrolls, form entries), and inferred user categories for marketing personalization.

Recipients: Data collected via these technologies is transmitted to and processed by HubSpot, Inc. (United States) and may be shared with authorized partners or processors involved with marketing, analytics, or ad network services.

Retention periods: The storage duration of cookies and web storage items varies: session cookies last until browser closure, while persistent cookies may remain stored for up to two years, depending on their intended purpose and your consent preferences.

Legal/contractual requirement: Provision of personal data via cookies and tracking is not legally or contractually required. However, refusal of consent may impact the availability and functionality of certain website features or personalization options.

Third-country transfers: Data collected through HubSpot’s cookies and tracking technologies is transferred to the United States. HubSpot implements appropriate safeguards, such as standard contractual clauses, to protect your data in accordance with GDPR requirements.

Withdrawal of consent: You can withdraw your consent for HubSpot cookies and tracking at any time with effect for the future by adjusting your preferences in the cookie consent management tool provided on the website or through your browser settings. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

Automated decision-making and profiling: HubSpot’s tracking technologies may be used to build user profiles for targeted marketing. This involves automated analysis of your behavior and interests but does not result in decisions producing legal effects or similarly significant impacts as described by Art. 22 GDPR.

 

licdn.com

 

Type and purpose of processing: licdn.com, operated by Microsoft, utilizes cookies, web storage, and similar tracking technologies on this website for various purposes:

Legal basis for processing: The use of these tracking technologies is based solely on your consent in accordance with Art. 6(1)(a) GDPR. Tracking will only be activated after you have expressly given your consent.

Categories of data: The processing may involve:

Recipients: Processed data is received by Microsoft, operators of licdn.com, and may also be processed by their authorized analytics and CDN partners as part of the audience measurement and site optimization tasks.

Retention periods: Cookies and tracking data are stored for varying durations depending on their purpose: necessary session cookies are deleted when you close your browser, while analytics and measurement cookies can persist for up to 24 months unless you delete or revoke them earlier.

Legal/contractual requirement: The use of licdn.com tracking technologies is not legally or contractually required. Your consent is completely voluntary and not necessary for the basic use of the website. Refusing consent will not affect your legal rights or the site’s core functionality.

Third-country transfers: Data processed through licdn.com may be transferred to Microsoft in the United States and potentially to other countries outside the European Economic Area. These transfers occur in accordance with the requirements of Chapter V of the GDPR, including the use of Standard Contractual Clauses as appropriate safeguards.

Withdrawal of consent: You may withdraw your consent to the use of licdn.com cookies and tracking technologies at any time via the cookie settings provided on this website. Withdrawing consent does not affect the lawfulness of processing before its withdrawal.

Automated decision-making and profiling: licdn.com’s cookies and tracking technologies do not result in automated decisions with legal or similarly significant effects. However, profiling may occur to analyze usage patterns and audience segments for analytics and website optimization purposes.

 

linkedin.com

 

Type and purpose of processing: linkedin.com uses cookies, web storage, tracking pixels, and similar technologies to enable social features, facilitate content sharing, display personalized advertising, optimize user engagement, and analyze site usage patterns. These technologies allow linkedin.com to recognize users across sessions and devices, track interactions with embedded content, measure advertising effectiveness, and collect data for analytics and advertising personalization. Action pixels and tracking mechanisms are also used to link user actions with advertising campaigns and social sharing activities.

Legal basis for processing: The use of cookies, trackers, and web storage by linkedin.com is based on your consent in accordance with GDPR Article 6(1)(a).

Categories of data: linkedin.com processes data comprising unique identifiers, IP addresses, device and browser information, user agent details, web page interactions, referral URLs, social sharing events, advertising clicks and impressions, profile information (if logged in), and online behavioral data generated from interaction with linkedin.com widgets or embedded content.

Recipients: Recipients of the information collected via tracking technologies include Microsoft (provider of linkedin.com), its group companies, authorized technical partners for analytics and ad services, integrated third-party advertisers, and technology providers managing embedded and social sharing functionalities.

Retention periods: Some cookies and local storage objects are retained for the browser session only, while others may persist from several months to up to two years, depending on their purpose (e.g., analytics or advertising). Specific retention depends on the cookie and the configuration set by linkedin.com and its partners.

Legal/contractual requirement: Providing data through cookies and web storage is not a legal or contractual requirement, nor is it necessary for the conclusion of a contract. Non-consent or withdrawal of consent may impact personalized content and site experience.

Third-country transfers: Data collected through tracking technologies on linkedin.com may be transmitted to Microsoft and its processors in the United States and other non-EU/EEA jurisdictions. These transfers rely on adequacy decisions or appropriate safeguards in accordance with GDPR requirements.

Withdrawal of consent: You can withdraw your consent for non-essential cookies and tracking technologies at any time via the linkedin.com cookie settings or through your browser settings. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

Automated decision-making and profiling: linkedin.com’s tracking technologies are used for profiling, including for targeted advertising and content personalization. This involves algorithmic evaluation of your online behavior to tailor ads and social features; no decisions with legal or similarly significant effects are made solely based on these automated processes.

 

maps.googleapis.com

 

Type and purpose of processing: When maps.googleapis.com is integrated into the website, cookies and similar tracking technologies (such as local storage or browser fingerprinting) are used to load and display interactive map content, optimize content delivery via its content delivery network (CDN), enable dynamic loading of map resources, and measure and ensure the operational reliability of the map features. These technologies identify your browser and device, store your map settings and preferences, capture your interactions with embedded maps (such as zoom and pan actions), and may be used to collect diagnostic information to prevent fraud and abuse.

Legal basis for processing: Data processing is based on your explicit consent as per Art. 6(1)(a) GDPR. Without your prior consent, no cookies or similar tracking technologies are set by maps.googleapis.com for non-essential purposes.

Categories of data: Processed categories of data may include IP address, device and browser information, geographic location data derived from IP, technical usage data (e.g., access times, page URLs, map interactions), cookie identifiers, and unique user/device identifiers.

Recipients: Data is received by Google LLC, based in the United States, and may be shared within the Google group of companies or with authorized service providers engaged to maintain or operate technical infrastructure.

Retention periods: Cookies, local storage data, and identifiers set via maps.googleapis.com can be retained from a few minutes (session) up to several months or years, depending on the specific cookie or tracking element. See Google's policies for precise durations.

Legal/contractual requirement: There is no legal or contractual obligation to provide data via cookies or similar technologies for the use of website map features. Use is entirely voluntary based on your consent; access to embedded map features may require your consent.

Third-country transfers: Data is transferred to Google in the United States, a country without an adequacy decision from the European Commission. Google relies on Standard Contractual Clauses or other safeguards approved under GDPR for such transfers.

Withdrawal of consent: You can withdraw your consent for the use of cookies and tracking technologies implemented by maps.googleapis.com at any time, e.g., by changing your cookie preferences on this website or deleting cookies from your browser. The withdrawal does not affect processing carried out before your withdrawal.

Automated decision-making and profiling: No automated decision-making or profiling within the meaning of Art. 22 GDPR is carried out based solely on information collected via cookies or similar tracking technologies on maps.googleapis.com.

 

polyfill.io

 

polyfill.io uses cookies and similar technologies (such as web storage and scripts) to provide polyfills for missing JavaScript features in your browser. When you visit a website that integrates polyfill.io resources, your browser requests specific polyfills based on its user agent string and supported features, enabling the display and functionality intended by the website owner. This process collects technical information about the browser and device capabilities, primarily to determine the appropriate polyfills needed for your session. Cookies and web storage mechanisms may also be used for error tracking, load balancing, and preventing abuse.

The processing of data for these purposes is based exclusively on your consent in accordance with Article 6(1)(a) GDPR, which is collected by the website embedding polyfill.io resources.

Categories of data processed include your browser’s user agent string, IP address, requested resources, technical identifiers (such as cookies if present), polyfill configuration options, and information about browser capabilities.

The recipients of this data are the operating company of polyfill.io, its hosting providers, and, where applicable, technical maintenance partners engaged for upkeep and security of the service. Data may be accessible to authorized staff involved in service delivery and protection.

Technical data such as logs and identifiers related to cookie use or web storage are retained only as long as necessary to fulfill polyfilling requests, maintain service reliability, and detect misuse—typically erased or anonymized automatically after a short period unless further retention is legally required for security or troubleshooting purposes.

There is no legal or contractual obligation for you to allow cookies or similar technologies from polyfill.io. Access to polyfill.io services is not contingent upon consent to such processing, though refusal may impact the functionality of websites relying on polyfill.io for browser compatibility features.

Data collected by polyfill.io processing cookies and tracking technologies may be transferred to and processed in countries outside the European Economic Area, including the United Kingdom. Where such transfers occur, they are subject to appropriate safeguards to ensure an adequate level of data protection as required by the GDPR.

You can withdraw your consent to the usage of cookies, web storage, and other tracking technologies by adjusting your preferences through the consent management tools provided by the website using polyfill.io, or via your browser settings to block or remove cookies at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

polyfill.io does not engage in automated decision-making or profiling based on cookies or tracking technologies beyond technical analysis required to serve relevant polyfills to end-user browsers.

 

providesupport.com

 

Type and purpose of processing: providesupport.com uses cookies, web storage, and similar tracking technologies to enable real-time chat functionality, tailor chat interactions, record session activity, recognize returning users, store chat history temporarily, and collect diagnostics on service performance and technical errors. These technologies help ensure service continuity and improve support conversations by identifying website usage patterns and basic interaction details.

Legal basis for processing: The processing of personal data through cookies and related technologies by providesupport.com is carried out exclusively on the basis of your consent as required by Article 6(1)(a) GDPR. No cookies or storage-based tracking will be activated without your expressed consent.

Categories of data: Data categories processed by these technologies include: unique identifiers (such as cookie IDs or local/session storage keys), IP address, chat session transcripts, browser type and settings, device information, timestamps, interaction metadata (such as chat start and end times), and navigation path prior to, during, and after chat sessions.

Recipients: Data collected via cookies, web storage, and tracking technologies is accessible only to providesupport.com and, where necessary for the operation, hosting, maintenance, or debugging of the service, to their selected service providers (subprocessors) with whom data processing agreements exist.

Retention periods: Session cookies and storage data are retained for the duration of your browser session and are deleted when the session ends. Persistent cookies for remembering user preferences or consent may remain stored for up to 12 months, unless you delete them earlier. Diagnostic and service logs relating to tracking technologies may be retained for up to 18 months for audit and troubleshooting purposes.

Legal/contractual requirement: The use of cookies, web storage, and tracking technologies on providesupport.com is not legally or contractually required to use the website in general. However, chat functionality cannot be provided without the activation of certain necessary (essential) cookies and storage mechanisms, and other cookies (such as those for analytics) are strictly optional.

Third-country transfers: As providesupport.com is based in the United States, the data captured through these technologies may be transferred to and processed in the United States. Such transfers occur only based on your explicit consent and may not be subject to an adequacy decision by the European Commission. Appropriate safeguards are implemented to protect your data in accordance with GDPR requirements.

Withdrawal of consent: You may withdraw your consent for the use of cookies, web storage, or tracking at any time by using the consent management function or cookie banner on the website, or by adjusting your browser settings to delete or block cookies and web storage. Revocation does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

Automated decision-making and profiling: No automated decision-making or profiling in the sense of Article 22 GDPR is carried out by providesupport.com in connection with cookies, web storage, or tracking technologies.

 

smarketer.de

 

Type and Purpose of Processing: We employ cookies, web storage (including local and session storage), and tracking technologies on smarketer.de to gather, store, and process data. This processing allows us to analyze website usage, measure performance, provide personalized content, and optimize user experience. Functional cookies ensure proper operation of the website. Analytical and marketing technologies evaluate user activity to improve our services and provide targeted advertisements.

Legal Basis for Processing: The processing of data through these technologies is based exclusively on your consent pursuant to Art. 6(1)(a) GDPR. You can provide or withhold consent via our cookie consent tool.

Categories of Data: Data processed may include unique user identifiers, IP addresses, usage data (such as pages viewed, interactions, session duration), device and browser type, referrer URL, and user preferences.

Recipients: Depending on the technologies used, recipients may include external service providers (e.g., web analytics, advertising partners, hosting providers) who process data on our behalf and under strict contractual agreements. A list of third-party providers is available in our cookie policy.

Retention Periods: Cookies and related storage technologies are retained for periods defined per their function: Session cookies are deleted when you close your browser, while persistent cookies and local storage may be stored for up to 24 months unless you withdraw your consent or delete them via your browser settings.

Legal/Contractual Requirement: There is no legal or contractual obligation to provide information via cookies or similar technologies. You are not required to provide consent, though certain functionalities may depend on your preferences.

Third-Country Transfers: Data may be transferred to recipients in third countries (especially the USA) if you give consent. In this case, there could be a risk that authorities access your data for control and monitoring purposes, without effective legal remedies. Transfers rely on Art. 49(1)(a) GDPR (explicit consent) if no adequate data protection level exists in the recipient country.

Withdrawal of Consent: You can modify or withdraw your consent for cookies and similar technologies at any time via our website’s cookie preferences tool. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

Automated Decision-Making and Profiling: We use automated methods (profiling) via tracking technologies to analyze your interests and show you tailored content or advertising. However, automated decision-making with legal or similarly significant effects does not occur.

 

youtube-nocookie.com

 

Type and purpose of processing: When content from youtube-nocookie.com is embedded, cookies, HTML5 local storage, and similar web tracking technologies are deployed by Google to optimize video playback, implement content delivery via a content delivery network (CDN), monitor and analyze viewer engagement, prevent fraud, and display advertisements or personalize content where applicable. Tracking also includes the collection of data for advertising-motivated purposes, measuring effectiveness, and limiting ad frequency.

Legal basis for processing: Processing is based solely on your explicit consent in accordance with Article 6(1)(a) GDPR.

Categories of data: The following categories may be processed: IP addresses, unique device identifiers, browser type and version, operating system, user agent, visited URLs, referrer URL, interaction data (such as play, pause, seek events), cookie identifiers, local storage tokens, session duration, and in some cases, inferred user interests for advertising and analytics.

Recipients: The primary recipient is Google LLC and its subsidiaries. Data may also be shared with affiliated advertising networks, analytics partners, and service providers operating on behalf of Google, as well as other third-party partners engaged in ad delivery and measurement.

Retention periods: Storage duration varies according to the type of cookie and purpose: session cookies are deleted when the session ends, while persistent cookies and local storage items can remain for up to 24 months or as defined by Google’s cookie policy unless manually deleted.

Legal/contractual requirement: The use of cookies and web tracking from youtube-nocookie.com is neither legally nor contractually required and is conditional upon your consent. There is no obligation to consent, and refusal has no effect other than the absence of video playback and related personalization/analytics functionality.

Third-country transfers: Data may be transferred to and processed in the United States or other third countries where Google operates. Google implements Standard Contractual Clauses (SCCs) and, where applicable, additional measures to ensure GDPR-compliant data transfers.

Withdrawal of consent: You may withdraw your consent for processing at any time by adjusting your privacy settings or cookie preferences on this site. Revocation does not affect prior processing but prevents future tracking and storage activities by youtube-nocookie.com.

Automated decision-making and profiling: Tracking by youtube-nocookie.com may be used for automated profiling and targeting for advertising purposes. No fully automated individual decision-making with legal or similarly significant effects on you is carried out exclusively via these tracking technologies.

 

International Cooperation and Partner Companies

 

PTM collaborates with partners who order licenses on behalf of their customers. In such cases, customer data may initially be unknown. Should customers later require support, PTM may access third-party data if necessary, in the customer’s presence, to resolve the support request. This is always conducted in accordance with GDPR requirements.

 

Data Security

 

PTM has achieved ISO 27001 certification, implementing an Information Security Management System (ISMS) that meets the highest standards for data protection and confidentiality.

 

Data Recipients

 

Depending on the service or inquiry, we may share data with the following categories of recipients:

• Internal departments such as IT, customer support, and marketing.
• External service providers, such as newsletter providers, analytics services, or external IT support, bound by data processing agreements.
• Authorities and regulatory bodies when required by law.

 

Data Retention

 

We retain personal data only as long as necessary for the purposes outlined in this privacy statement or as required by legal retention obligations. Once data is no longer needed, it is securely deleted or anonymized.

 

Your Rights as a Data Subject

 

As a data subject, you have the following rights under the GDPR:

• Right to Access: Obtain information on the data we process about you.
• Right to Rectification: Request corrections to inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data under certain conditions.
• Right to Restriction of Processing: Limit data processing in specific cases.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to data processing based on legitimate interest.
• Right to Withdraw Consent: Withdraw consent at any time for future processing.

To exercise any of these rights, please contact our Data Protection Officer.

 

Provide Support

 

a. Type and Purpose of Processing

Provide Support uses cookies, web storage, and tracking technologies to facilitate customer interactions on the platform. These technologies help Provide Support to enhance user engagement by maintaining chat histories, providing personalized experiences, and optimizing the functionality and performance of the service. Such processing includes collecting information about user preferences, session durations, and navigation paths within our website to improve service delivery and customer support efficiency.

b. Legal Basis for Processing

The processing of personal data through cookies and other tracking technologies by Provide Support is based on our legitimate interest. This means that we have assessed our need to use these technologies for improving our service against any potential risks to your privacy.

c. Categories of Data

Provide Support processes a range of data categories through cookies and tracking technologies, including IP addresses, device identifiers, browsing data such as pages viewed and interactions with site elements, session activity logs, and preferences settings.

d. Recipients

Processed data may be shared with third-party service providers who assist in hosting and analyzing user interactions on the platform. These providers are contractually obligated to maintain confidentiality and the security of personal data processed on our behalf.

e. Retention Periods

Data collected through cookies and web storage technologies will be retained for as long as necessary to fulfill the purposes outlined above. Session cookies are generally retained only while your browser session is active. Persistent cookies and other stored data may be retained for longer periods as required to maintain and improve our service.

f. Legal/Contractual Requirement

The use of cookies and tracking technologies on our platform is not mandated by any legal or contractual requirement. They are utilized to enhance service quality and user experience based on business operational needs and customer interaction optimization strategies.

g. Third-Country Transfers

As Provide Support is based in the US, data processing involves the transfer of data to a third country which may not provide the same level of data protection as the European Economic Area (EEA). We implement suitable safeguards to protect your personal data in such transfers.

h. Withdrawal of Consent

Since our processing is based on legitimate interest, not consent, you have limited options regarding withdrawal. However, you can adjust your browser settings to manage cookie preferences or utilize tools to block tracking technologies.

i. Automated Decision-Making and Profiling

Provide Support does not engage in automated decision-making or profiling that significantly affects your rights with the data processed through cookies and web storage technologies.

 

Updates to This Privacy Policy

Version 14.10.2026