Privacy Policy

Website privacy statement and information of data subjects according to Article 13 and Article 14 of the EU General Data Protection Regulation

Thank you for visiting our website. The secure handling of your data is particularly important to us. We would therefore like to inform you in detail about the use of your data when you visit our website.

 

General Information

Details of the Responsible Body
Company: Start2 Group GmbH
Legal representative: Matthias Notz
Adress: Balanstraße 73 | Haus 19 B/ EG, 81541 Munich
Phone: +49 (0)89 37 01 4362

Contact details data protection officer: datenschutz@start2.group

 

General Data Processing Information

Data Concerned

Personal data is only collected if you provide it to us of your own accord. No other personal data is collected. Any processing of your personal data that goes beyond the scope of the legal permissions is only carried out on the basis of your express consent.

 

Purpose of Processing:Contract Implementation:
Categories of Recipients:

Public bodies in the case of overriding legal provisions.

External service providers or other contractors.

Other external bodies insofar as the data subject has given his or her consent or a transfer is permissible for reasons of overriding interest.

Third-country Transfers:Processors outside the European Union may also be used within the framework of the execution of the contract.
Data Storage Duration:The duration of the data storage depends on the statutory retention obligations and is usually 10 years.

 

Specific Information About the Website

Newsletter

When signing up for our newsletter, you provide us with your email address and optionally other data. We use this information exclusively to send you the newsletter. The data you enter when signing up for the newsletter will remain stored by us until you unsubscribe from our newsletter. You can unsubscribe at any time by using the link provided in the newsletter or by sending us a message. By unsubscribing, you object to the use of your email address.

Furthermore, we use your email address, which we receive in connection with the sale of a good or service, exclusively for direct advertising in the form of our newsletter for our own similar goods or services, such as those ordered by you, unless you have objected to this use. You can object to the use of your email address at any time without incurring any costs other than the transmission costs according to the basic rates. Your objection (and thus the cancellation of our newsletter) can be exercised by sending a corresponding message to our email address (see imprint).

Data Usage

When you call up our web pages, you transmit data to our web server (out of technical necessity) via your internet browser. The following data is recorded during an ongoing connection for communication between your internet browser and our web server:

  • Date and time of the request
  • Name of the requested file
  • Page from which the file was requested
  • Access status (file transferred, file not found, etc.) Web browser and operating system used
  • Complete IP address of the requesting computer
  • Volume of data transferred.

For reasons of technical security, in particular, to defend against attempted attacks on our web server, we store this data for a short period of time. It is not possible for us to draw conclusions about individual persons on the basis of this data. After a short period of time, the data is anonymized by shortening the IP address at the domain level, so that it is no longer possible to establish a relationship with the individual user. The data is also processed in anonymized form for statistical purposes; it is not compared with other data or passed on to third parties, not even in extracts.

 

Use of “Cookies” Required for the Website Display

This website uses its own “cookies” to store settings required for the website display (“cookies” are data records that are sent from the web server to the user’s browser and stored there for later retrieval). No personal data is stored in our own “cookies”. You can generally prevent the use of “cookies” if you prohibit the storage of “cookies” in your browser.

 

Use of Google Analytics with the Consent of Website Visitors

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited (“Google”), based on the consent of website visitors. Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and internet usage to the website operator. We would like to point out that this website uses Google Analytics only after prior consent has been given and with shortened IP addresses in order to exclude a direct personal reference.

 

Google Remarketing via Double Click – With the Consent of Website Visitors

We use the remarketing function of Google Ireland Limited (“Google”). This function is used to show interest-based advertisements to website visitors as part of the Google advertising network Double Click. The browser of the website visitor stores cookies for this purpose; these cookies make it possible to recognize the visitor when he or she visits websites that belong to the Google advertising network. On these pages, the visitor can then be presented with advertisements that relate to content that the visitor has previously accessed on websites that use the Google Remarketing function. If you do not want the remarketing function, you can deactivate it by making the appropriate settings.

 

YouTube Videos With the Consent of Website Visitors

We have embedded YouTube videos on our website, which are stored on the servers of the provider YouTube and can be played from our website via an embedding. The embedding of videos takes place with the option for extended data protection settings activated. When you play these videos, YouTube cookies and DoubleClick cookies are stored on your computer and data may be transferred to Google Inc, Amphitheater Parkway, Mountain View, CA 94043, USA, as YouTube operator.

When playing videos stored on YouTube, at least the following data is transmitted to Google Inc. as YouTube operator and operator of the DoubleClick network according to the current status: IP address and cookie, the specific address of the page called up from us, system date and time of the call-up, identifier of your browser.

This data is transmitted regardless of whether you have a Google user account via which you are logged in or whether you do not have a user account. If you are logged in in this way, Google may assign this data directly to your account. If you do not wish the data to be assigned to your profile, you must log out before activating the play button for the video.

YouTube and Google Inc. store this data as user profiles and may use it for the purposes of advertising, market research and/or designing their websites to meet your needs. Such an evaluation is carried out in particular (also for non-logged-in users) for the provision of needs-based advertising and to inform other users about your activities on our website. You have the right to object to the creation of these user profiles, and to exercise this right you must contact Google as the operator of YouTube.

Further information on the purpose and scope of data collection and processing by Google can be found on this information page.

Use of HubSpot with the Consent of the Website Visitor

On this website, we use the service HubSpot for various purposes. HubSpot is a software company from the USA with a branch in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, phone: +353 1 5187500.

HubSpot is an integrated software solution that we use to cover various aspects of our online marketing. These include: Email Marketing, Social Media Publishing & Reporting, Reporting, Contact Management (e.g. user segmentation & CRM), Landing Pages and Contact Forms.

Our sign-up service allows visitors to our website to learn more about our company, download content, and provide their contact information and other demographic information. This information, as well as our website content, is stored on servers operated by our software partner HubSpot. It may be used by us to contact visitors to our website and to determine which of our company’s services are of interest to them. All information we collect is subject to this privacy policy. We use all collected information exclusively to optimize our marketing measures.
More information about HubSpot’s privacy policy 
More information from HubSpot regarding EU data protection regulations 

As part of the optimization of our marketing measures, the following data may be collected and processed via HubSpot:

  • Geographic position
  • Browser type
  • Navigation information
  • Referral URL
  • Performance data
  • Information about how often the application is used- files viewed on site
  • Domain names
  • Pages viewed
  • Aggregated usage
  • Operating system version
  • Internet service provider
  • IP address
  • Device identifier
  • Duration of visit
  • Where the application was downloaded from
  • Operating system
  • Events that occur within the application
  • Access times
  • Device model and version

The legal basis of the processing is your consent pursuant to Art. 6 (1) lit. a DSGVO. If you do not want Hubspot to collect and process the aforementioned data, you can refuse your consent or revoke it at any time with effect for the future.

The personal data will be kept for as long as it is necessary to fulfill the purpose of processing. The data will be deleted as soon as they are no longer required to achieve the purpose.

In the context of processing via HubSpot, data may be transferred to the USA. The security of the transfer is secured via so-called standard contractual clauses.

 

Social Media

LinkedIn Insight Tag with Consent of Website Visitors

Our website uses the conversion tool “LinkedIn Insight Tag” from LinkedIn Ireland Unlimited Company. This tool creates a cookie in your web browser which enables the collection of the following data, among others: IP address, device and browser properties and page events (e.g. page views). This data is encrypted, anonymised within seven days and the anonymised data is deleted within 90 days. LinkedIn does not share any personal data with us, but offers anonymised reports on website audience and display performance. In addition, LinkedIn offers the possibility of retargeting via the Insight Tag. We can use this data to display targeted advertising outside the website without identifying you as a website visitor. You can find more information on data protection at LinkedIn in the LinkedIn data protection information.

LinkedIn members can control the use of their personal data for advertising purposes in their account settings. To disable the Insight tag on our website (“opt-out”) click here.

 

Information on Further Data Processing Procedures

Specific Information on the Application Procedure

Data Concerned:Application details.
Purpose of Processing:Implementation of the application procedure.
Categories of Recipients:

Public bodies in the case of overriding legal provisions.

External service providers or other contractors, e.g. for data processing and hosting. Other external bodies insofar as the data subject has given his/her consent or a transfer is permissible for reasons of overriding interest.

Third-country Transfers:In the context of the execution of the contract, processors outside the European Union may also be used, including email providers.
Data Storage Duration:Application data will generally be deleted within four months of notification of the decision, unless consent to longer data storage has been given in the context of inclusion in the applicant pool.

 

Specific Information on the Processing of Customer Data/Prospect Data

 

Data Concerned:Data provided for the performance of the contract; if applicable, any additional data for processing on the basis of your express consent.
Purpose of Processing:Contract implementation, including quotations, orders, sales and invoicing, quality assurance.
Categories of Recipients:

Public bodies in the case of overriding legal provisions

External service providers or other contractors, including for data processing and hosting, for dispatch, transport and logistics, service providers for printing and dispatch of information.

Other external bodies insofar as the data subject has given his/her consent or a transfer is permissible for predominant interest.

Third-country Transfers:In the context of the execution of the contract, processors outside the European Union may also be used, including email providers.
Data Storage Duration:The duration of the data storage depends on the statutory retention obligations and is usually 10 years.

 

Specific Information on the Processing of Employee Data

 

Data Concerned:Data provided for the performance of the contract; if applicable, any additional data for processing on the basis of your express consent.
Purpose of Processing:Contractual performance within the scope of the employment relationship.
Categories of Recipients:

Public authorities in the case of overriding legal provisions, e.g. tax office, social insurance agency, employers’ liability insurance association.

External service providers or other contractors, e.g. for data processing and hosting, payroll accounting, travel expense accounting, insurance services.

Other external bodies insofar as the data subject has given his or her consent or a transfer is permissible for reasons of overriding interest, e.g. for order acquisition, insurance services.

Third-country Transfers:In the context of the execution of the contract, processors outside the European Union may also be used, including email providers.
Data Storage Duration:The duration of the data storage depends on the statutory retention obligations and is usually 10 years.

 

Specific Information on the Processing of Supplier Data

 

Data Concerned:Data provided for the performance of the contract; if applicable, any additional data for processing on the basis of your express consent.
Purpose of Processing:Contract implementation, including enquiries, purchasing, quality assurance.
Categories of Recipients:

Public authorities in the case of overriding legal provisions, e.g. tax office, customs.

External service providers or other contractors, e.g. for data processing and hosting, accounting, payment processing.

Other external bodies insofar as the data subject has given his or her consent or a transfer is permissible due to overriding interest.

Third-country Transfers:In the context of the execution of the contract, processors outside the European Union may also be used, including email providers.
Data Storage Duration:The duration of the data storage depends on the statutory retention obligations and is usually 10 years.

 

Specific Information on the Use of Video Conferencing/Webinar Software

 

Data Concerned:Data provided for the use of the video conferencing software or the webinar software (esp. first name, surname, e-mail address; optional: sound transmission; optional: image transmission; optional: questions when using chat functions); to the extent technically necessary, processing of data from your system to establish the connection with the provider of the conferencing software.
Purpose of Processing:Conducting video conferences or webinars.
Categories of Recipients:Public bodies in the case of overriding legal provisions. External service providers or other contractors, e.g. for data processing and hosting. Other external bodies insofar as the data subject has given his/her consent or a transfer is permissible for overriding interest.
Third-country Transfers:Processors outside the European Union are used (here: United States of America); standard contractual clauses have been concluded with the service provider accordingly.
Data Storage Duration:Video conferences are only recorded with the previously documented consent of the participants. The technical data is deleted if it is no longer required. The duration of data storage otherwise depends on the statutory retention obligations and is usually 10 years.

 

Further Information and Contacts

In addition, you can assert your rights to information, correction or deletion or to restriction of processing or the exercise of your right to object to the processing as well as the right to data portability at any time. Here you will find the possibility to contact us via email. You also have the right to contact the data protection supervisory authority in the event of complaints.

 

Your Data Privacy Contact Person

If you have any questions about the collection, processing or use of your personal data, information, correction, blocking or deletion of data and revocation of consent or objection to a specific use of data, please contact:

Dr. Sebastian Kraska
External Data Protection Officer
IITR Datenschutz GmbH
Marienplatz
280331 Munich
email@iitr.de