HeartPiece - Privacy Policy

Name and Address of Controller

The controller within the meaning of the EU General Data Protection Regulation and other national data protection laws of EU member states and other data protection provisions is:

heartpiece GmbH

Mörikestrasse 14

04129 Leipzig

Deutschland

Tel.: +49 341 22 34 46 66

E-Mail: info (ad) heartpiece.eu

Webseite: www.heartpiece.eu

Name and Address of Data Protection Officer

The controller’s data protection officer is:

anywhere digital GmbH

- Konstantin Pflüger -

Hoheluftchaussee 40a

20253 Hamburg

Deutschland

Tel.: 040 / 38 99 50-0

Email: dsk@mspag.com

Website: www.mspag.com

Right to Lodge a Complaint with a Competent Data Protection Supervisory Authority

In case of infringements on data protection law, the data subject has the right to lodge a complaint with a supervisory authority. Our competent data protection supervisory authority is:

Der Leipziger Beauftragte für Datenschutz und Informationsfreiheit

Friedrich-Ebert-Straße 19A

04109 Leipzig

Tel.: 0341 123-2247

E-Mail: datenschutzbeauftragter@leipzig.de

1 DATA PROCESSING

1.1 Scope of Personal Data Processing

We only process personal data of our users insofar as necessary for providing a functional website and our content and services. We only process personal data of our users with their consent. Exceptions only apply where prior consent cannot be obtained for objective reasons and data processing is permitted by law.

1.2 Legal Basis for Personal Data Processing

If we obtain the data subject’s consent to processing his or her personal data, Art. 6(1)(a) of the General Data Protection Regulation (GDPR) will serve as the legal basis for processing personal data.

When processing personal data necessary for performance of a contract to which the data subject is party, Art. 6(1)(b) of the GDPR will serve as the legal basis. This also applies to processing necessary for steps prior to entering into a contract.

Where processing personal data is necessary for compliance with a legal obligation to which we are subject, Art. 6(1)(c) of the GDPR will serve as the legal basis.

If processing personal data is necessary to protect the vital interests of the data subject or of another natural person, Art. 6(1)(d) of the GDPR will serve as the legal basis.

If processing is necessary for the purposes of legitimate interests of ours or of a third party and these interests are not overridden by the interests, fundamental rights or freedoms of the data subject, Art. 6(1)(f) of the GDPR will serve as the legal basis for processing.

1.3 Data Erasure and Storage Period

The data subject’s personal data will be erased or blocked when the purpose for its storage no longer applies. Furthermore, personal data may be stored if required by European or national legislature in EU regulations, laws or other provisions to which the controller is subject. Personal data will also be blocked or erased if a storage period required by one of the specified provisions expires, unless the data must continue to be stored for contract conclusion or performance.

2 WEBSITE ACCESS AND LOG FILE CREATION

2.1 Description and Scope of Data Processing

Whenever our website is accessed, our system automatically collects data and information from the system of the accessing computer.

The following data is collected thereby:

Time and date of access
Browser used
Operating system and device used
Country code from which our website is accessed
Average period of time spent on our website
Name and URL of retrieved files
Website from which our website is accessed (referrer URL)
Browser and, if applicable, operating system of your computer and name of your access provider

This data will also be saved in our system’s log files. However, this does not apply to the user’s IP addresses or other data that enables a user to be identified. This data is never stored with other personal user data.

2.2 Legal Basis for Data Processing

The legal basis for temporary storage of data is Art. 6(1)(f) of the GDPR.

2.3 Purpose of Data Processing

Our system must temporarily store IP addresses to make our website accessible to the user’s computer. This requires the user’s IP address to be stored for the length of the session.

Data is stored in log files to ensure our website’s functionality. This data is also used to optimize our website and ensure the security of our IT systems. Data is not processed for marketing purposes thereby.

These purposes also represent our legitimate interest in data processing under Art. 6(1)(f) of the GDPR.

2.4 Storage Period

This data will be erased when it is no longer necessary for the purposes for which it was collected. If collected for access to our website, this will apply when the session ends.

For data stored in log files, this will apply, at the latest, after seven (7) days. However, further storage is possible. In this case, user IP addresses will be erased or masked to prevent the accessing client from being identified.

2.5 Objection and Erasure

This data must be collected to provide access to our website and stored in log files to navigate our website. The user therefore cannot object to this.

3 COOKIES

3.1 Description and Scope of Data Processing

Our website uses cookies. Cookies are text files placed on or by the browser on the user’s computer system. If a user accesses a website, a cookie may be placed on the user’s operating system. This cookie will include an individual character string that enables the user’s browser to be identified when accessing our website again.

We use cookies to make our website more user-friendly. Certain elements of our website require the accessing browser to be identified after navigating to another page.

The following data is thereby saved on and transmitted by these cookies:

Language settings

Furthermore, our website uses cookies that enable users’ surfing behavior to be analyzed.

The following data may be transmitted thereby:

Entered search terms
Frequency of page views

The user data collected thereby is pseudonymized by our technical systems. This data therefore cannot be used to identify accessing users and is not stored with other personal user data.

We use a consent tool (HubSpot Cookie Banner) to manage the cookies used and the related consents, which appears when you call up our website. Details on the cookies used, such as purpose, storage period, external service, etc., and the consent tool can be found in the following passages and the consent tool we use.

You can prevent the storage of cookies by setting your browser accordingly. Furthermore, you can activate the "Do-Not-Track" function in your browser to indicate that you do not wish to be tracked. You can find further objection options under the following links:

https://www.youronlinechoices.com/uk/your-ad-choices

https://optout.aboutads.info/?c=2&lang=EN

If you delete all cookies, the above settings will also be lost and must be made again.

You can also revoke or manage your consent with regard to the cookies used in the Consent Tool we use.

3.2 Legal Basis for Data Processing

The legal basis for processing personal data when using cookies is Art. 6(1)(f) of the GDPR (legitimate interest) for necessary cookies and Art. 6(1)(a) of the GDPR (consent) for cookies used for the purpose of analysis, marketing and personalization.

3.3 Purpose of Data Processing

Technically necessary cookies are used to make our website easier to use for users. Certain functions of our website cannot be provided without cookies. These functions require your browser to be recognized after navigating to another page.

Cookies are necessary for the following functions:

Saving language settings
Remembering search terms

User data collected by technically necessary cookies is not used to create user profiles.

Analysis cookies are used to improve our website’s quality and content. Analysis cookies inform us how our website is used and help us continuously optimize our offer.

These purposes also represent our legitimate interest in data processing under Art. 6(1)(f) of the GDPR.

3.4 Storage Period, Objection and Erasure

Cookies are saved on the user’s computer which transmits them to our website. As the user, you therefore have full control over the use of cookies. You may disable or limit cookie transmissions by changing your browser settings. Saved cookies may be deleted at any time. This may also be done automatically. However, disabling cookies for our website may prevent full use of certain functions. Cookies will be automatically deleted after one (1) year.

4 HUBSPOT COOKIE BANNER

4.1 Description and Scope of Data Processing

We have integrated the HubSpot Cookie Banner on our website. HubSpot Cookie Banner is a consent solution from HubSpot, Inc., Cambridge, Massachusetts, US, which can be used to obtain and document consent to store cookies. HubSpot Cookie Banner uses cookies or other web technologies to recognize users and store the consent given or revoked.

4.2 Legal Basis for Data Processing

The use of the service is based on obtaining the legally required consent to the use of cookies pursuant to Art. (6)(1)(c) GDPR.

Technically necessary cookies are required to store the operation of the website and its current selection in the cookie consent:

_hs_opt_out (technically required, optout privacy policy)
_hs_initial_opt_in (technically required, optin privacy policy)

4.3 Storage Period

The specific storage period of the processed data cannot be influenced by us, but is determined by HubSpot, Inc. Further information can be found in the privacy policy for HubSpot Cookie Banner: https://legal.hubspot.com/privacy-policy.

5 CONTACT FORM AND EMAIL

5.1 Description and Scope of Data Processing

Our website includes a contact form which may be used to contact us electronically. If a user does so, entered data will be transmitted to and stored by us. This data includes:

First name
Last name
Email address
Company
Subject
Message

When sending your message, the following data will also be saved:

Time and date of sending

When sending messages, users’ consent to the processing of this data will be obtained and this Privacy Policy will be noted.

Alternatively, users may contact us at the provided email address. In this case, the user’s personal data transmitted with the email will be stored. For such communication, our website uses HubSpot, a service of HubSpot Inc.

HubSpot is used to monitor communication on our website. Our website also uses HubSpot, Inc. technologies to manage user data. If you enter the data specified above into our contact form when contacting us, the content of your communication will be saved to better process it and future inquiries. If you do not enter an email address, no user content will be saved and your communication will not be saved.

5.2 Legal Basis for Data Processing

If we obtained the user’s consent, the legal basis for processing the user’s data is Art. 6(1)(a) of the GDPR.

The legal basis for processing data that is transmitted when sending us an email is Art. 6(1)(c) of the GDPR.

If we are sent an email to conclude a contract, the legal basis for processing data will also be Art. 6(1)(b) of the GDPR.

5.3 Purpose of Data Processing

The processing of personal data from the input mask serves us solely to process the contact.

Other personal data is processed to prevent misuse of our contact form and ensure the security of our IT systems.

5.4 Storage Period

Data will be erased when it is no longer necessary for the purposes for which it was collected. For personal data transmitted by email or from our contact form, this applies when the conversation with the user ends. A conversation ends when it may be derived from the circumstances that the matter has been settled.

The additional personal data collected during the sending process will be deleted after a period of one (1) year at the latest. Inquiries that serve the preparation, execution or conclusion of a commercial transaction must be kept for six (6) years.

5.5 Objection and Erasure

Users may withdraw their consent to the processing of their personal data at any time. When contacting us by email, users may object to the storage of their personal data at any time. However, in such cases, conversations cannot be continued.

An explanation of how users may object to the storage of their data is provided hereafter.
Any personal data collected when contacting us will be erased in this case.

6 DOWNLOADS & NEWSLETTER

6.1 Description and Scope of Data Processing

Our newsletter is sent because the user subscribed to it on our website.

Our website offers free newsletter subscriptions. When subscribing to our newsletter, the following data will be transmitted to us from the form:

First name of the user
Last name of the user
Email address of the user

When subscribing to our newsletter, users’ consent to the processing of this data will be obtained and this Privacy Policy will be noted.

We will send you our newsletter based on your subscription:

Our website offers a newsletter and downloads.

To subscribe to our newsletter, we require your name and email address. By subscribing, you also consent to us collecting personal data when you visit our website to provide you with information based on your personal interests (see Section 7.3 “Purpose of Data Processing”). You may withdraw your consent at any time via the link at the end of each newsletter.

6.2 Legal Basis for Data Processing

Our newsletter is sent because the user subscribed to it on our website:
If we obtained the user’s consent, the legal basis for processing the user’s data after the user subscribed to our newsletter is Art. 6(1)(a) of the GDPR.

6.3 Purpose of Data Processing

We collect the user’s email address to send our newsletter. When subscribing, other personal data is collected to prevent misuse of our services and of the email address.

6.4 Storage Period

Data will be erased when it is no longer necessary for the purposes for which it was collected. The user’s email address will be stored for as long as the newsletter subscription is active.

Other personal data collected when subscribing will normally be erased after one (1) year.

6.5 Objection and Erasure

Users may cancel their newsletter subscriptions at any time. A link for this is provided with every newsletter.

Consent to the storage of personal data collected when subscribing may also be withdrawn thereby.

7 USE OF COLLABOARD APP

7.1 Description and Scope of Data Processing

We use the Collaboard software solution to offer our customers the possibility of remote collaboration on a whiteboard. Thus, projects can be worked on in real time, ideas can be shared or workshops can be held.

For this purpose, we work together with the company IBV Informatik Beratung und Vertriebs AG and have concluded the necessary order processing contract.

In particular, the following categories of personal data are processed:

Contact data of users (profile picture, surname, first name, e-mail address and similar);
Contractual data of users (subscription information, date of conclusion of the contract, etc.);
Payment data;
Usage behavior data (history of changes to projects, time of use, etc.);
Identification data (cookies, login data, IP address and similar);
Data stored in users' digital projects on the Collaboard platform.

7.2 Legal Basis for Data Processing

Access to the whiteboard is granted by registration of the user on the Collaboard.app website. The legal basis for this is the existence of the user's consent pursuant to Art. 6 (1)(a) GDPR.

7.3 Purpose of Data Processing

The purpose of data processing is to make the Collaboard service available to our customers through registration, login and use. Subsequently, the content can be used through an invitation on our part.

7.4 Storage Period

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected or the contract processing with IBV Informatik Beratung und Vertriebs AG has ended.

7.5 Objection and Erasure

The user has the option to deregister the account at any time. Subsequently, all data that is not subject to retention periods or other legal obligations for retention will be deleted.
For use of the app, see also: https://www.collaboard.app/privacy

8 | heartpiece USE OF MICROSOFT TEAMS

8.1 Description and Scope of Data Processing

We invite prospective buyers, customers and users to communicate with us online via Microsoft Teams.

Microsoft Teams is used as a platform for direct communication with invited users through online video conferences and telephone conferences and/or for online training and presentations. Microsoft Teams may be used via a browser or software installed on the user’s device.

When using this program, the following data will be transferred to Microsoft Inc., Ireland:

First name of the user
Last name of the user
Display name of the user
Email address of the user
If applicable, profile picture of the user
Meeting metadata (e.g., time, date, meeting ID, telephone numbers, location)
Text, audio and video data
If applicable, chat input

When conducting video conferences, data from the device’s microphone and camera will be processed. However, this processing may be stopped at any time by closing the Microsoft Teams software or muting the device’s camera or microphone.

8.2 Legal Basis for Data Processing

If we obtained the user’s consent, the legal basis for processing the user’s data is Art. 6(1)(a) of the GDPR.

If registration is necessary for presentations or training or for the performance of a contract to which the user is party or for steps prior to entering into a contract, Art. 6(1)(b) of the GDPR will serve as an additional legal basis for data processing.

8.3 Purpose of Data Processing

Users must register for the performance of a contract to which they are party and for steps prior to entering into a contract. heartpiece GmbH only provides Microsoft Teams to its prospective buyers, contractual customers and partners for support and assistance.

8.4 Storage Period

Data stored during the registration process for the fulfillment of a contract or for the implementation of pre-contractual measures will be deleted as soon as they are no longer required to achieve the purpose for which they were collected.

When registering for performance of a contract or for steps prior to entering into a contract, this applies when the data is no longer necessary for contract performance. Personal data of the other contract party may also have to be stored for compliance with contractual or legal obligations.

Continuous obligations require personal data to be stored during the term of the contract. In addition, guarantee periods must be observed and data may have to be stored for tax purposes. Which storage periods apply must be determined for each concluded contract and contract party.

9 | YOUTUBE VIDEO

We have integrated YouTube Video on our website and is a component of the video platform of YouTube, LLC, where users can upload content, share it over the Internet and receive detailed statistics.

YouTube Video allows us to integrate content from the platform into our website.
In addition YouTube Video uses cookies and other browser technologies to evaluate user behavior, recognize users and create user profiles. This information is used, among other things, to analyze the activity of the content listened to and to generate reports. If a user is registered with YouTube, LLC, YouTube Video can associate the videos played with the profile.

When you access this content, you connect to servers of YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street Dublin 4 Ireland, where your IP address and possibly browser data such as your user agent are transmitted.

9.1 Description and Scope of Data Processing

The use of the service is based on your consent pursuant to Art. 6 (1)(a) of the GDPR and § 25 (1) TTDPA.

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where no adequacy decision of the European Commission exists (e.g. in the USA), we have agreed with the recipients of the data on other appropriate safeguards within the meaning of Art. 44 et seq. of the GDPR. Unless otherwise stated, these are standard contractual clauses of the EU Commission pursuant to Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en.

In addition, before such a third country transfer, we obtain your consent pursuant to Art. 49 sentence 1 (a) of the GDPR which you provide via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of third country transfers there may be unknown risks in detail (e.g. data processing by security authorities of the third country, the exact scope and consequences of which for you we do not know, over which we have no influence and of which you may not become aware).

9.2 Storage Period

The concrete storage period of the processed data cannot be influenced by us, but is determined by YouTube, LLC. Further information can be found in the privacy policy for YouTube Video: https://policies.google.com/privacy?hl=en-US..

10 heartpiece GmbH QUICK SUPPORT

10.1 Description and Scope of Data Processing

Our website allows users to use the support program Team Viewer. With your consent, Team Viewer will be loaded onto your device. When opening Team Viewer, you will receive your ID and password. Please transmit these by telephone to our employees who will save them. This data will not be transferred to third parties. The following data will be collected during registration:

Your ID and your personal one-time password displayed by Team Viewer.

The user’s consent to process this data will be obtained during registration.

10.2 Legal Basis for Data Processing

If we obtained the user’s consent, the legal basis for processing the user’s data is Art. 6(1)(a) of the GDPR.

If the user registers to perform a contract to which the user is party or for steps prior to entering into a contract, Art. 6(1)(b) of the GDPR will serve as an additional legal basis for data processing.

10.3 Purpose of Data Processing

Users must register for performance of a contract to which they are party and for steps prior to entering into a contract. heartpiece GmbH only provides Team Viewer to its contractual customers and partners for support and assistance.

10.4 Storage Period

This data will be erased when it is no longer necessary for the purposes for which it was collected.

11 | ANALYSIS TOOLS

The tracking measures listed below and used by us are carried out on the basis of Art. 6 (1)(f) of the GDPR. With the tracking measures used, we want to ensure a needs-based design and continuous optimization of our website. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you. These interests are to be regarded as legitimate within the meaning of the aforementioned regulation.

The respective data processing purposes and data categories can be found in the corresponding tracking tools.

11.1 Google Analytics

11.1.1 Description and Scope of Data Processing

We use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our online offer. This includes, for example, the number of views of our online offer, visited subpages and the length of stay of visitors.

Google Analytics uses cookies and other browser technologies to evaluate user behavior and recognize users. This information is used, among other things, to compile reports on website activity.

The following data is transferred to a Google server in the USA and stored there such as:

Date and time of access
Display of the browser used
Display of the operating system used and type of terminal device
Display of the country code from which the access is made
Average time spent on the website
Referrer URL (the previously visited page)
Time of the server request

11.1.2 Purpose and legal basis

The use of the service is based on your consent pursuant to Art. 6 (1)(a) of the GDPR and § 25 (1) TTDPA.

11.1.3 Storage Period

The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Analytics: https://policies.google.com/privacy?hl=en-US.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

11.2 Google Conversion Tracking

In order to statistically record the use of our website and to evaluate it for the purpose of optimizing our website for you, we also use Google Conversion Tracking. In this process, Google Adwords sets a cookie (see section 3) on your computer if you have accessed our website via a Google ad.

These cookies lose their validity after thirty (30) days and are not used for personal identification. If the user visits certain pages of the Adwords customer's website and the cookie has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page.

Each Adwords customer receives a different cookie. Cookies can therefore not be tracked across Adwords customers' websites. The information obtained using the conversion cookie is used to create conversion statistics for Adwords customers who have opted in to conversion tracking. Adwords customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

If you do not wish to participate in the tracking process, you can also refuse the setting of a cookie required for this - for example via a browser setting that generally disables the automatic setting of cookies. You can also disable cookies for conversion tracking by setting your browser to block cookies from the "www.googleadservices.com" domain. Google's privacy policy on conversion tracking can be found here: https://services.google.com/sitestats/en.html.

11.3 Google Web Fonts

Our website uses Google Webfonts for the uniform display of fonts. Google Webfonts is a service of Google Inc. The web fonts are transferred to the browser's cache when the page is called up so that they can be used for display. For this purpose, the browser you are using connects to Google's servers. Google is informed that our website has been accessed via your IP address. If your browser does not support the web fonts or the use is prevented, you will get the text displayed in a standard font.

The legal basis is Art. 6 (1)(f) of the GDPR and is in the interest of visitors to provide a consistent and appealing presentation and ease of use of the website. You can find more information about Google Web Fonts at the following link: https://developers.google.com/fonts/faq?hl=en

You can access and read Google's privacy policy using the following link: https://policies.google.com/privacy?hl=en-US

11.4 Google Tag Manager

Our website uses the Google Tag Manager. Through this service, website tags can be managed via an interface. The Google Tag Manager only implements tags. This means that no cookies are used and no personal data is collected. The Google Tag Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it remains in place for all tracking tags, insofar as these are implemented with the Google Tag Manager.

11.5 HubSpot Ireland ltd.

This website uses HubSpot, a service provided by HubSpot Inc, a software provider based in the USA with a branch office in Ireland (HubSpot Inc, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Phone: +353 1 5187500), which we use to cover various aspects of our online marketing. These include:

Content management (e.g. website content)
Email marketing (newsletters as well as automated mailings, e.g. to inform about updates)
Social media publishing & reporting (e.g. LinkedIn)
Reporting (e.g. traffic sources, hits, etc. ...)
Contact management (e.g. user segmentation & CRM)
Provision of landing pages and contact forms

HubSpot uses so-called "web beacons" and also "cookies", which are stored on your computer and which enable an analysis of your use of the website by us. HubSpot evaluates the collected information (e.g. IP address, geographical location, type of browser, duration of the visit and pages viewed) on our behalf to generate reports about the visit and the pages you visited. If you generally do not want cookies to be collected, you can prevent cookies from being stored at any time by changing your browser settings accordingly.

The data we collect using HubSpot is used by us exclusively to provide and optimize our marketing. Your data can then be used by us to contact you as a visitor to our website and to determine which of our company's services are of interest to you. If you subscribe to our newsletter and download studies and other documents, we can also use HubSpot to record your visits on a personal basis via your additional details (especially name/email address) and, if necessary, provide you with targeted information on topics you prefer.

With the help of HubSpot, we also provide our sign-up service. The login service allows you, as a visitor to our website, to learn more about our company, download content, and provide us with your contact information and other information about yourself and your company. Where required by law, we will ask you beforehand and separately for your consent to the collection, storage and processing of your data.

11.6 LinkedIn Insight Tag

Our website uses LinkedIn Insight Tag of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. When you call up our websites that contain LinkedIn functions, a connection is established to LinkedIn servers. LinkedIn is notified that you have visited our website with your IP address. The IP address is encrypted and anonymized within seven (7) days and the anonymized data is deleted within ninety (90) days. LinkedIn Insight Tag enables us to present information to you on other websites as well. In addition, LinkedIn Insight Tag allows us to analyze the success of campaigns on LinkedIn or determine target groups for them based on the interaction of users with our online offering. If you are registered with LinkedIn, it is possible for LinkedIn to associate your use of our website with your user account. You can find the privacy policy of LinkedIn here: https://www.linkedin.com/legal/privacy-policy.

Under the following link you will find the possibility to opt-out:
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

The legal basis is Art. 6 (1)(f) GDPR to evaluate the use of the website and display personalized advertising.

11.7 Objection and Erasure

As a user, you have the option to cancel the registration at any time. At any time, the data stored about you can be changed. If the data is required for the fulfillment of a contract or for the implementation of pre-contractual measures, early deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion.

12 | EXTERNAL LINKS TO WEBSITES OF OTHER PROVIDERS/SOCIAL PLUGINS

Our websites contain external links to other sites that link to the respective website. The external links are highlighted in color and marked accordingly with the following symbol:

If you click on external links or social plugins, we point out that this is outside our responsibility and that these sites follow their own privacy policies. We assume no responsibility or liability for this. Therefore, please check whether you agree to this privacy policy before voluntarily providing your data to external websites.

Your data will only be transferred to the link destination when you click on the external link.
The following data, among others, will then be transferred for technically necessary reasons:

IP-Adress
Time of the click on the link
the page of the clicked link and others

Please also note that the data may be transferred to third countries, i.e. a transfer to another service provider and in this case to a company in the USA, for example. According to a recent ruling of the European Court of Justice (ECJ), there is no adequate level of data protection in insecure third countries and thus a risk to the protection of your data. Here, the data may possibly be used for control and monitoring purposes.

If you do not want this, do not click on the link. If you still want to use the link destination, click on the external link and your data will be transferred to the link destination accordingly.

13 | SOCIAL PLUGINS

We also use so-called social plugins (buttons) that link to the respective social media platform (Facebook, LinkedIn, Xing, Instagram, YouTube). The social plugins are marked as follows:

Social plugins remain active after clicking on them until you deactivate them again and/or delete associated cookies (see section "Cookies and IP addresses" above). As soon as you have activated a button, a direct connection to the server of the social network is established and content is exchanged between the button and the social network. We have no influence on the type and amount of data that is transmitted to the social networks after activation of the buttons.

Please read the data protection and privacy policies of the respective social network. If you are registered and logged in to a social network, your visit to our website may be linked to your user account on the social network as soon as you click the button. If you do not want this information to be linked to your user account with the social network, first log out of the network before using the button on our website.

If you click on social plugins, we point out that this is outside our responsibility and that these sites follow their own privacy policies. We assume no responsibility or liability for this. So please check whether you agree to these privacy policies before voluntarily sharing your data with external websites.

If you do not want this, do not click on the link. If you still want to use the link destination, click on the external link and your data will be transferred to the link destination accordingly.

14 | GOOGLE MAPS

We use Google Maps on our website to display interactive maps for the purpose of showing location and assisting with route planning.

The widget will be activated only after your consent.

Google Maps is a mapping service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). The interactive map of Google Maps is only activated and the cookies set when you click directly on the map and have accepted the privacy policy. Among other things, the following data is transmitted:

Date and time of the visit to the webpage in question,
Internet address or URL of the website called up,
IP address, address entered as part of route planning (start).

The transmission of the data takes place regardless of whether you are logged in via a Google user account or not. If you are logged in to Google as a user, your data will be directly assigned to your account. If this is not desired, you must log out before activating the card.

Google stores your data as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the provision of tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

For more information on the purpose and scope of data collection and processing, please refer to Google's privacy policy. There you will also find further information about your rights in this regard and setting options for protecting your privacy: https://policies.google.com/privacy?hl=en-US.

Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

15 | DATA TRANSFERS

Your data will not be transferred to third parties for purposes other than the following.

We will only transfer your data to third parties if:

You grant your explicit consent in accordance with Art. 6(1)(a) of the GDPR;
Your data must be transferred in accordance with Art. 6(1)(f) of the GDPR to establish, exercise or defend legal claims and there is no reason to believe that you have overriding interests in not transferring your data;
Your data must be transferred by law under Art. 6(1)(c) of the GDPR;
Transferring your data is permitted by law and necessary under Art. 6(1)(b) of the GDPR for the performance of a contractual relationship with you.

16 | DATA SUBJECT RIGHTS

You have the right:

Under Art. 15 of the GDPR, to access personal data processed by us concerning you. You may especially obtain information about the purposes of the processing, categories of personal data concerned, categories of recipients to whom personal data has been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to rectification, erasure, restriction of processing or to object, the right to lodge a complaint, the source of your data if not collected by us and about automated decision-making, including profiling, and, if applicable, meaningful information about the logic involved;
Under Art. 16 of the GDPR, to obtain without undue delay rectification of inaccurate and completion of incomplete data stored by us concerning you;
Under Art. 17 of the GDPR, to obtain erasure of personal data stored by us concerning you, except where processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of claims;
Under Art. 18 of the GDPR, to obtain restriction of processing of your personal data if you contest the accuracy of the data or if the processing is unlawful, but you oppose erasure and the data is no longer needed by us, but by you for the establishment, exercise or defense of claims or if you object to the processing in accordance with Art. 21 of the GDPR;
Under Art. 20 of the GDPR, to receive in a structured, commonly used and machine-readable format the personal data you provided to us or to transmit this data to another controller;
Under Art. 7(3) of the GDPR, to withdraw your consent from us at any time. We may then no longer process data based on this consent; and
Under Art. 77 of the GDPR, to lodge a complaint with a supervisory authority. You may normally contact the supervisory authority of your habitual residence or place of work or of our registered office.

17 | RIGHT TO OBJECT

If your personal data is processed on the basis of legitimate interests under Art. 6(1)(f) of the GDPR, you have the right, under Art. 21 of the GDPR, to object to the processing of your personal data on grounds related to your particular situation or if you object to direct marketing. In the latter case, you have a general right to object which we will implement without requiring a particular situation.

To exercise your right to object or withdraw consent, please send us an email at DSK@mspag.com.

18 | DATA SECURITY

When you visit our website, we apply the common SSL (Secure Socket Layer) process with the highest encryption level supported by your browser. This is normally a 256-bit encryption. If your browser does not support 256-bit encryption, we will use 128-bit v3 technology. Whether a page of our website is encrypted is displayed by the key or lock symbol on the lower status bar of your browser.

We only implement appropriate technical and organizational security measures to protect your data against random or intentional manipulation, partial or complete loss, destruction and unauthorized access. Our security measures are regularly improved based on the state of the art.

19 | PRIVACY POLICY VALIDITY AND UPDATES

This Privacy Policy is currently valid as of May 2023.

Further development of our website and of offers for it, changes to the law and regulations of authorities may require updates to this Privacy Policy. The respectively valid version of this Privacy Policy may be found on or printed from our website at any time.

Privacy Policy

Name and Address of Controller

Name and Address of Data Protection Officer

Right to Lodge a Complaint with a Competent Data Protection Supervisory Authority

1 DATA PROCESSING

2 WEBSITE ACCESS AND LOG FILE CREATION

3 COOKIES

4 HUBSPOT COOKIE BANNER

5 CONTACT FORM AND EMAIL

6 DOWNLOADS & NEWSLETTER

7 USE OF COLLABOARD APP

8 | heartpiece USE OF MICROSOFT TEAMS

9 | YOUTUBE VIDEO

10 heartpiece GmbH QUICK SUPPORT

11 | ANALYSIS TOOLS

12 | EXTERNAL LINKS TO WEBSITES OF OTHER PROVIDERS/SOCIAL PLUGINS

13 | SOCIAL PLUGINS

14 | GOOGLE MAPS

15 | DATA TRANSFERS

16 | DATA SUBJECT RIGHTS

17 | RIGHT TO OBJECT

18 | DATA SECURITY

19 | PRIVACY POLICY VALIDITY AND UPDATES

Do you have any further questions?