Data Privacy Statement

We are pleased to welcome you to our website and with your interest in passbrains ag. Not only is offering our customers end-to-end support very important to us, but so is ensuring that your personal information is protected.

The following explains the actions we take when you visit our website – naturally in compliance with applicable data security regulations, which information we collect and how we process it.

Should our data privacy statement change, it will be updated on this page in order to keep you informed as to which data passbrains ag stores and uses.

In addition to the mandatory information, we give you the greatest possible transparency. Via our Consent Management Usercentrics, you have the option of viewing a list with the descriptions of all the services you have permitted. You must deactivate your pop-up blocker to view this extended and comprehensive privacy policy.

The most important data privacy information can be found below. We have organized the information by topic.

I. Name and address of the responsible party

Responsible for the collection, processing and use of your personal data pursuant to the EU General Data Protection Regulation is:

passbrains ag
Thurgauerstrasse 39
CH-8050 Zürich
Switzerland
UID-Nr: CHE-113.983.299

Phone: +49 176 1200 9787
Email: info@passbrains.com

Should you wish to object to the collection, processing or use of your data by passbrains ag as set forth in these data privacy policies as a whole or in regard to specific measures, please e-mail, fax or mail your objection to the aforementioned address.

II. Name and address of the data protection officer

The data protection officer of the controller is:

Christian Schmoll
passbrains ag
Thurgauerstrasse 39
CH-8050 Zürich
Switzerland

Phone: +49 176 1200 9787
Email: datenschutz-team@passbrains.com

III. General information on data processing

1. Why we use data

We wish to constantly improve our offers and make them more attractive. The only way for us to optimize the contents of the passbrains/msg Internet sites to better meet your demands is to identify which sections of our Internet sites are most commonly visited and on which the most time is spent. Should you entrust us with your personal information, passbrains ag shall use such for the technical administration of the websites, customer management, product surveys and marketing; however, we shall only do so to the extent that is necessary. The more we understand what you want, the faster you will be able to find the information you are looking for on our Internet sites.

2. Information on the collection of personal information

Visiting websites of the msg group is possible in principle without the transfer of personal data. This, however, requires that only the minimum setting be selected in the cookie window upon your first visit.

Data approved by you for our analysis is generally only recorded anonymously and passed on to analysis services. You can also define the selection of service providers yourself.

In the following, we inform you about the collection of personal data when using our forms on the websites. Personal data is all data that can be related to you personally, e.g., name, address, e-mail addresses, user behavior.

If you request information on our pages, which we only provide to customers and interested parties, or if you wish to take advantage of a personalized consulting service, you will be asked to provide personal information such as name, address or telephone number. This data is subject to special provisions, which you are expressly advised of before submitting your data/request to us and which you confirm by submitting it to us:

“I hereby consent to my personal information (including my telephone number and/or e-mail address) being collected, processed and used for the purpose of contract processing and/or potential customer opportunities, surveys and information. Any forwarding to third-parties, with the exception of the companies of the msg group, is excluded. I have the right to revokethis consent from passbrains ag,at any time.”

In addition to the information you share with us, we also analyze how you use our services and offers in order to lead you to the information that might interest you more quickly and in order to constantly optimize our service.

3. Legal basis for processing personal information

Numeral 6, Para. 1, Item a of the General Data Protection Regulation (GDPR) forms the legal basis for any consent we obtain from relevant persons for the operations involved in processing personal information.

Numeral 6, Para. 1, Item b of the General Data Protection Regulation (GDPR) forms the legal basis for the processing of personal information in order to fulfill a contract when the relevant person is one of the contract parties. This includes processing operations necessary to complete measures that precede the contract.

Numeral 6, Para. 1, Item c of the General Data Protection Regulation (GDPR) forms the legal basis for the processing of personal information to the extent such is necessary in order to comply with legal obligations to which our company is subject.

Numeral 6, Para. 1, Item f of the General Data Protection Regulation (GDPR) forms the legal basis for any processing necessary to ensure a legitimate interest of our company or a third party, as long as such do not outweigh the interests, fundamental rights and fundamental freedoms of the person in question.

4. Data deletion and retention period

The personal information of the relevant person shall be deleted or locked as soon as the purpose for which such was stored is no longer applicable. Storage beyond such is possible if provided by European or national lawmakers in laws or other regulations to which the responsible party is subject under Union law. Data shall also be locked or deleted once the retention period prescribed in the given norms expires, unless storage of the data is still required in order to conclude or fulfill a contract.

IV. Use of cookies and third-party services

1. Description and scope of data collection

Consent to the use of services is given through Usercentrics Consent Management. A visit to the msg websites is not possible without prior selection and confirmation of the services used. The settings selected by the user can be extended and/or revoked at any time.

2. Usercentrics Consent Management Platform

To view the full privacy policy, you must deactivate your pop-up blocker.

2.1 data.msg.group

2.2 hCaptcha

Description of Service

This is a service used by website owners to protect their sites from bots, spam and abuse.

Processing Company
Intuition Machines Inc
2211 Selig Dr, Los Angeles, CA 90026, United States

Data Protection Officer of Processing Company

Below you can find the email address of the data protection officer of the processing company.
support@hcaptcha.com

Data Purposes

This list represents the purposes of the data collection and processing.

Fraud prevention
Providing Service
Responding requests and inquiries from customers
Browser support
Customer Support
Technical Support
Checking and making a payment
Improvement of service
Development
Customization
Apply market research to generate audience insights
Data modeling
Ensure security, prevent fraud, and debug

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

Cookies
Web beacons

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

E-mail address
Country
IP address
Browser type
Internet service provider
Platform type
Device type
First name
Last name
Timestamp
Analytical data
Mouse movements
Scrolling activity

Legal Basis
In the following the required legal basis for the processing of data is listed.

Art. 6 para. 1 s. 1 lit. f GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
United States of America

Data Recipients
In the following the recipients of the data collected are listed.

Intuition Machines Inc

Click here to read the privacy policy of the data processor.
https://www.hcaptcha.com/privacy

2.3 msg.group

2.4 Usercentrics Consent Management Platform

Description of Service
This is a consent management service. Usercentrics GmbH is used on websites and apps as a processor for the purpose of consent management.

Processing Company
Usercentrics GmbH
Sendlinger Str. 7, 80331 Munich, Germany

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
datenschutz@usercentrics.com

Data Purposes
This list represents the purposes of the data collection and processing.

Compliance with legal obligations
Consent storage

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

Local Storage
Pixel

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

Opt-in and opt-out data
Referrer URL
User agent
User settings
Consent ID
Time of consent
Consent type
Template version
Banner language
IP address
Geographic location

Legal Basis
In the following the required legal basis for the processing of data is listed.

Art. 6 para. 1 s. 1 lit. c GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union

Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The consent data (given consent and revocation of consent) are stored for one year. The data will then be deleted immediately.

Data Recipients
In the following the recipients of the data collected are listed.

Usercentrics GmbH

Click here to read the privacy policy of the data processor.
https://usercentrics.com/privacy-policy/

Stored Information

Name: uc_settings and/or ucString; This holds the ControllerID and SettingsID, the language, settings version and services with their consent history.; Type: web; Domain: usercentrics.com;
Name: uc_user_interaction; This is used to signal whether a user has already given consent.; Type: web;
Name: ucData (optional); This holds information about the Google Consent Mode.; Type: web;
Name: uc_ui_version; This key states the UI version used by the clients; Type: web;
Name: uc_user_country; This is used to recognize the location of the user and show the correct version of the CMP.; Type: web;

2.5 Amazon Web Services

Description of Service
This is a cloud computing service.

Processing Company
Amazon Web Services EMEA SARL
38 Avenue John F. Kennedy, L-1855, Luxembourg

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
eu-privacy@amazon.co.uk

Data Purposes
This list represents the purposes of the data collection and processing.

Cloud Computing

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

Accessed applications
Authentication and security credential information
Browser plug-ins
Browser type
Browser version
Click path
Content interaction information
Cookie ID
Cookie information
Device information
Device type
Download errors
Downloaded content from AWS
Duration and number of simultaneous streams and downloads
E-mail address
Full URL clickstream to, through, and from AWS website (including date and time)
Geographic location
Interactions or communications with AWS
Internet service provider
IP address
Mouse movements
Network connection type
Opened emails or clicks on links in emails from AWS
Operating system information
Page interaction information
Page response times
Playback details
Streams
Telephone number
Time zone
Usage data
Views and interactions with content and ads
Visits to, interactions with, and use of AWS offerings

Legal Basis
In the following the required legal basis for the processing of data is listed.

Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union

Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.

United States of America

Data Recipients
In the following the recipients of the data collected are listed.

Amazon Web Services Inc.
Amazon Web Services EMEA SARL

Click here to read the privacy policy of the data processor.
https://aws.amazon.com/privacy/?nc1=f_pr
Click here to read the cookie policy of the data processor
https://aws.amazon.com/legal/cookies/

Stored Information

Name: AWSALB; This cookie is used to keep the user on the same server for each subsequent request on which they have landed with their first request. It is used for load balancing.
; Type: cookie; Duration: 7 days;
Name: AWSALBCORS; This cookie is managed by AWS and is used for load balancing.; Type: cookie; Duration: 7 days;

2.6 BootstrapCDN

Description of Service
This is a public content delivery network.

Processing Company
StackPath, LLC
2021 McKinney Avenue, Suite 1100, Dallas, TX 75201, United States of America

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.

privacy@stackpath.com

Data Purposes
This list represents the purposes of the data collection and processing.

Analytics
Displaying content
Advertisement

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

Usage data
IP address
Browser information
Domain name
URL
Time of access or retrieval
Device operating system

Legal Basis
In the following the required legal basis for the processing of data is listed.

Art. 6 para. 1 s. 1 lit. a GDPR

United States of America

Data Recipients
In the following the recipients of the data collected are listed.

StackPath, LLC
Google Ireland Limited

Click here to read the privacy policy of the data processor.
https://www.bootstrapcdn.com/privacy-policy/

2.7 Cloudflare

Description of Service
This is a service providing increased security and performance for websites. Cloudflare offers for example a content delivery network („CDN“) to improve the loading times of the website. The use of a CDN enables the user to make content available for retrieval more quickly with the help of regionally or internationally distributed servers.

Processing Company
Cloudflare Inc.
101 Townsend St., San Francisco, CA 94107, United States of America

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
privacyquestions@cloudflare.com, legal@cloudflare.com

Data Purposes
This list represents the purposes of the data collection and processing.

Optimization
Website security
Improvement of service
Reducing bandwidth usage

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

IP address
System configuration information
Name of website
Date and time of request
Name and URL of the accessed file
Amount of data transferred
Status Information
Device operating system
Referrer URL
Requesting provider
Device type
Time of the server request

Legal Basis
In the following the required legal basis for the processing of data is listed.

Art. 6 para. 1 s. 1 lit. f GDPR

United States of America
Singapore
Australia
United Arab Emirates

Data Recipients
In the following the recipients of the data collected are listed.

Cloudflare Group

Click here to read the privacy policy of the data processor.
https://www.cloudflare.com/privacypolicy/
Click here to read the cookie policy of the data processor
https://www.cloudflare.com/cookie-policy/

Stored Information

Name: __cf_bm; This is used for the bot protection solution provided by Cloudflare.; Type: cookie; Duration: 30 minutes;
Name: cf_clearance; This cookie is used to store the proof of challenge passed. It is used to no longer issue a challenge if present. It is required to reach an origin server.; Type: cookie; Duration: 30 minutes;
Name: _cfuvid; This cookie is used for rate limiting rules.; Type: cookie; Duration: 7 days;
Name: cf_chl_cc_XXX, cf_chl_rc_i, cf_chl_rc_ni; The cookie is used by Cloudflare for the execution of challenges. It is not used for tracking or beyond the scope of the challenge.; Type: cookie; Duration: Session;
Name: __cflb; This is used to return an end user to the same customer origin for a specific period of time configured by the customer. ; Type: cookie; Duration: 1 day;

2.8 cloudfront.net

Description of Service
This is a content delivery network provided by Amazon. The use of a CDN enables the user to make content available to you for retrieval more quickly with the help of regionally or internationally distributed servers. When you access this content, a connection is established between you and the respective servers of the CDN, whereby personal data may be transmitted.

Processing Company
Amazon Web Services EMEA SARL
38 Avenue John F. Kennedy, L-1855 Luxemburg

Data Purposes
This list represents the purposes of the data collection and processing.

Content Delivery

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

Scripts

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

User agent data
Usage data
Device operating system
Device information
IP address
Browser information

Legal Basis
In the following the required legal basis for the processing of data is listed.

Art. 6 para. 1 s. 1 lit. f GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
Worldwide

Worldwide

Data Recipients
In the following the recipients of the data collected are listed.

Amazon Web Services EMEA SARL

Click here to read the privacy policy of the data processor.
https://aws.amazon.com/privacy/
Click here to read the cookie policy of the data processor
https://aws.amazon.com/privacy/

2.9 curator-io

Description of Service
Service that displays selected, publicly accessible posts from social media on the page.

2.10 DoubleClick Ad

Description of Service
This is an advertising service. With this service it is possible to provide relevant ads to users and get campaign reports.

Processing Company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://support.google.com/policies/troubleshooter/7575787?hl=en

Data Purposes
This list represents the purposes of the data collection and processing.

Advertisement
Analytics
Optimization

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

Browser information
Click path
Cookie information
Date and time of visit
Demographic data
Device identifiers
Location information
Hardware/software type
Internet service provider
IP address
Number of times ads are seen
Serving domains
Interaction data
Page views
Search history

Legal Basis
In the following the required legal basis for the processing of data is listed.

Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union

Retention Period

The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.

United States of America

Data Recipients
In the following the recipients of the data collected are listed.

Google Ireland Limited
Google LLC
Alphabet Inc.

Storage Information

Maximum age of cookie storage: 1 year

Stored Information

Name: test_cookie; Test for cookie setting permissions in user's browser; Type: cookie; Duration: 1 day; Domain: doubleclick.net;
Name: IDE; Contains a randomly generated user ID. Using this ID, Google can recognize the user across different websites across domains and display personalized advertising.; Type: cookie; Duration: 1 year; Domain: doubleclick.net;

2.11 Facebook Social Plugins

Description of Service
This is a social plug-in from Facebook, which allows the user to connect their website with the social network Facebook.

Processing Company
Meta Platforms Ireland Ltd.
4 Grand Canal Square, Grand Canal Harbour, Dublin, D02, Ireland

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://www.facebook.com/help/contact/540977946302970

Data Purposes
This list represents the purposes of the data collection and processing.

Integration of Facebook functions
Optimization
Marketing

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

Browser information
Date and time of visit
Facebook user ID
Websites visited
HTTP-header
Interaction data
Browser type
IP address

Legal Basis
In the following the required legal basis for the processing of data is listed.

Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union

United States of America
Singapore

Data Recipients
In the following the recipients of the data collected are listed.

Meta Platforms Ireland Ltd., Meta Platforms Inc.

Click here to read the privacy policy of the data processor.
https://www.facebook.com/privacy/explanation
Click here to read the cookie policy of the data processor
https://www.facebook.com/policies/cookies/
Click here to opt out from this processor across all domains
https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

2.12 Fontawesome

Description of Service
This is a font and icon toolkit service.

Processing Company
Fonticons. Inc.
6 Porter Road, Apartment 3R, Cambridge, MA 02140, United States of America

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
privacy@fontawesome.com

Data Purposes
This list represents the purposes of the data collection and processing.

Providing fonts

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

IP address
Referrer URL

Legal Basis
In the following the required legal basis for the processing of data is listed.

Art. 6 para. 1 s. 1 lit. a GDPR

United States of America

Data Recipients
In the following the recipients of the data collected are listed.

Fonticons. Inc.

Click here to read the privacy policy of the data processor.
https://fontawesome.com/privacy

Storage Information

Maximum age of cookie storage: 2 years

2.13 Google Ads

Description of Service
This is an advertising service. This service can be used to show personalised or non-personalised advertisement to users.

Processing Company
Google Ireland Limited
Google Building Gordon House, 4 Barrow Street, Dublin D04 E5W5, Ireland

Data Purposes
This list represents the purposes of the data collection and processing.

Advertisement
Analytics
Providing Service
Statistics

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

Cookies
Tracking Pixel

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

Ads viewed
Cookie ID
Date and time of visit
Device information
Geographic location
IP address
Search terms
Ads shown
Client ID
Impressions
Online identifiers
Browser information

Legal Basis
In the following the required legal basis for the processing of data is listed.

Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union

Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes. Log data is anonymized after 9 months and cookie information is anonymized after 18 months.

Chile
Singapore
Taiwan
United States of America

Data Recipients
In the following the recipients of the data collected are listed.

Alphabet Inc., Google LLC, Google Ireland Limited

Click here to read the privacy policy of the data processor.
https://business.safety.google/privacy/?hl=de
Click here to read the cookie policy of the data processor
https://policies.google.com/technologies/cookies?hl=de
Click here to opt out from this processor across all domains
https://safety.google/privacy/privacy-controls/

Storage Information

Maximum age of cookie storage: 1 year

Stored Information

Name: NID; This is used to provide advertisements or retargeting.; Type: cookie; Duration: 6 months;
Name: __gads; This is used to provide advertisements or retargeting.; Type: cookie; Duration: 1 year, 1 month;
Name: pm_sess; This is used to make sure that requests come from a user.; Type: cookie; Duration: 30 minutes;
Name: ANID; This is used to show advertisements on websites outside of Google.; Type: cookie; Duration: 1 year, 1 month;
Name: _gcl_au; This is used to store and track conversions.; Type: cookie; Duration: 2 months, 29 days;
Name: FPGCLAW; This cookie is used to track campaign related information on the user.; Type: cookie; Duration: 2 months, 29 days;
Name: FPGCLGB; This cookie is used to track campaign related information on the user.; Type: cookie; Duration: 2 months, 29 days;
Name: _gcl_gb; This cookie is used to track campaign related information on the user.; Type: cookie; Duration: 2 months, 29 days;
Name: _gac_gb_; This cookie is used to track campaign related information on the user.; Type: cookie; Duration: 2 months, 29 days;
Name: _gcl_aw; This cookie is set when a user arrives at the website via a click on a Google ad.; Type: cookie; Duration: 2 months, 29 days;
Name: YSC; This is used to store and track interaction.; Type: cookie; Duration: Session;
Name: 1P_JAR; This is used to collect information about how the end user uses the website and any advertising that the end user may have seen before visiting the said website.; Type: cookie; Duration: 30 days;
Name: AID; This is used to link activities on other devices the user has previously logged into with a Google account. ; Type: cookie; Duration: 1 year, 1 month;
Name: FPAU; This is used to collect information about the users and their activity on the website through embedded elements with the purpose of analytics and reporting.; Type: cookie; Duration: 2 months, 29 days;

2.14 Google AdServices

Description of Service
This is an advertising service.

Processing Company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data Purposes
This list represents the purposes of the data collection and processing.

Advertisement
Targeting

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

Click path
Events
IP address
Referrer URL
Touch point to advertising medium
Transactions
User agent
Pages viewed

Legal Basis
In the following the required legal basis for the processing of data is listed.

Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union

United States of America
Singapore
Chile
Taiwan

Data Recipients
In the following the recipients of the data collected are listed.

Google LLC
Google Ireland Limited
Alphabet Inc

Click here to read the privacy policy of the data processor.
https://business.safety.google/privacy/?hl=en
Click here to read the cookie policy of the data processor
https://policies.google.com/technologies/cookies?hl=en
Click here to opt out from this processor across all domains
https://safety.google/privacy/privacy-controls/

Storage Information

Maximum age of cookie storage: 1 year

Stored Information

Name: test_cookie; Set as a test to check whether the browser allows cookies to be set. Does not contain any identification features.; Type: cookie; Duration: 15 minutes; Domain: doubleclick.net;
Name: IDE; Contains a randomly generated user ID. Using this ID, Google can recognize the user across different websites across domains and display personalized advertising.; Type: cookie; Duration: 1 year; Domain: doubleclick.net;
Name: __Secure-3PSIDCC, __Secure-3PSID, __Secure-1PSID; Contains a randomly generated user ID. Using this ID, Google can recognize the user across different websites across domains and display personalized advertising.; Type: cookie; Duration: 2 years;
Name: 1P_JAR; This is used to collect information about how the end user uses the website and any advertising that the end user may have seen before visiting the said website.; Type: cookie; Duration: Session;
Name: SEARCH_SAMESITE; This cookie is used to prevent the browser from sending this cookie along with cross-site requests.; Type: cookie; Duration: 2 years;
Name: SOCS; This is used to store the consent decision of the user.; Type: cookie; Duration: 1 year, 1 month;
Name: AEC; This is used to ensure that the request is made by an user and not another website.; Type: cookie; Duration: 6 months;
Name: APISID, SSID, SAPISID, HSID, SIDCC, SID; This is used to personalise ads on websites based on the recent searches and interactions. ; Type: cookie; Duration: 2 years;

2.15 Google AJAX

Description of Service
This is a stable, reliable, high-speed, globally available content delivery network (“CDN”) for the most popular, open-source JavaScript libraries

Processing Company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data Purposes
This list represents the purposes of the data collection and processing.

Content Delivery

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

JavaScript

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

IP address
Browser information
Geographic location
Websites visited

Legal Basis
In the following the required legal basis for the processing of data is listed.

Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union

United States of America
Taiwan
Singapore
Chile

Data Recipients
In the following the recipients of the data collected are listed.

Google LLC
Google Ireland Limited
Alphabet Inc

2.16 Google Analytics 4

Description of Service
This is service enables the user to measure traffic and engagement across their websites and mobile apps using customizable reports.

Processing Company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data Purposes
This list represents the purposes of the data collection and processing.

Marketing
Analytics

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

Tracking code
Cookies

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

Device information
Geographic location
Browser information
Device operating system
Screen resolution
Referrer URL
Interaction data
Date and time of visit
User behaviour
Pages visited
Online identifiers
Shortened IP Address
User ID
Advertising identifier

Legal Basis
In the following the required legal basis for the processing of data is listed.

Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union

Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The client can choose how long Google Analytics retains data. The maximum amount of retention period is 14 months.

United States of America
Singapore
Taiwan
Chile

Data Recipients
In the following the recipients of the data collected are listed.

Alphabet Inc., Google LLC, Google Ireland Limited

Storage Information

Maximum age of cookie storage: 2 years

Stored Information

Name: Google; Used to distinguish users.; Type: cookie; Duration: 2 years;
Name: Google; Used to persist session state.; Type: cookie; Duration: 2 years;

2.17 Google APIs Tracker

Description of Service
Tracking of the API used.

Processing Company
Google Ireland Limited
Gordon House, 4 Barrow St, Dublin 4, Ireland

Data Purposes
This list represents the purposes of the data collection and processing.

Provision of links to the required libraries for the Google services used

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

Legal Basis
In the following the required legal basis for the processing of data is listed.

Art. 6 paragraph 1 sentence 1 lit. a GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately. European Union

United States of America
Singapore
Taiwan
Chile

Data Recipients
In the following the recipients of the data collected are listed.

Google Ireland Limited, Google LLC, Alphabet Inc

Click here to read the privacy policy of the data processor.
http://www.google.com/intl/de/policies/privacy/
Click here to read the cookie policy of the data processor
https://policies.google.com/technologies/cookies?hl=en
Click here to opt out from this processor across all domains
https://safety.google/privacy/privacy-controls/

2.18 Google Datastudio

Description of Service
Dashboard für die Auswertung von Log Daten

2.19 Google Fonts

Description of Service
This is a collection of fonts for commercial and personal use.

Processing Company
Google Ireland Limited
Gordon House, 4 Barrow St, Dublin 4, Ireland

Data Purposes
This list represents the purposes of the data collection and processing.

Providing fonts
Improvement of service

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

IP address
Aggregated usage numbers
Font file requests
Referrer URL
CSS requests
User agent
Browser information

Legal Basis
In the following the required legal basis for the processing of data is listed.

Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately. European Union

United States of America
Singapore
Taiwan
Chile

Data Recipients
In the following the recipients of the data collected are listed.

Alphabet Inc., Google LLC, Google Ireland Limited

2.20 Google JavaScript Client Library (v2.0)

Description of Service
Service used to provide external libraries (v.2.0)

Processing Company
Google Inc.
1600 Amphitheatre Parkway, Mountain View, CA 94043, United States

Data Purposes
This list represents the purposes of the data collection and processing.

Provision of external libraries

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

Legal Basis
In the following the required legal basis for the processing of data is listed.

Art. 6 paragraph 1 sentence 1 lit. a GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately. European Union

Data transfer by Google only with the consent of the user
in the case of domain administrators
for processing by other bodies or for legal reasons.

Data Recipients
In the following the recipients of the data collected are listed.

Google Inc.

2.21 Google Maps

Description of Service
This is an integrated map service.

Processing Company
Google LLC
1600 Amphitheatre Parkway Mountain View, CA 94043, United States of America

Data Purposes
This list represents the purposes of the data collection and processing.

Displaying Maps

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

Date and time of visit
Location information
IP address
URL
Usage data
Search terms
Geographic location

Legal Basis
In the following the required legal basis for the processing of data is listed.

Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately. European Union

United States of America
Singapore
Taiwan
Chile

Data Recipients
In the following the recipients of the data collected are listed.

Google Ireland Limited, Google LLC, Alphabet Inc

Stored Information

Name: NID; This cookie is used to store the users preferences.; Type: cookie; Duration: 6 months;

2.22 Google Syndication

Description of Service
This is a domain owned by Google that is used for storing and loading ad content and other resources relating to ads for Google AdSense and DoubleClick from the Google CDN.

Processing Company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data Purposes
This list represents the purposes of the data collection and processing.

Storing and loading ad content

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

Web beacons

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

Category of ads
Clicked advertisements
Interaction with advertisement

Legal Basis
In the following the required legal basis for the processing of data is listed.

Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union

United States of America
Singapore
Taiwan
Chile

Data Recipients
In the following the recipients of the data collected are listed.

Google LLC
Google Ireland Limited
Alphabet Inc

2.23 Google Tag Manager

Description of Service
This is a tag management system. Via Google Tag Manager, tags can be integrated centrally via a user interface. Tags are small sections of code that can track activities. Script codes of other tools are integrated via the Google Tag Manager. The Tag Manager allows to control when a particular tag is triggered.

Processing Company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data Purposes
This list represents the purposes of the data collection and processing.

Tag Management

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

Website tags

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

Aggregated data about tag firing

Legal Basis
In the following the required legal basis for the processing of data is listed.

Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately. European Union

Singapore
Taiwan
Chile
United States of America

Data Recipients
In the following the recipients of the data collected are listed.

Alphabet Inc., Google LLC, Google Ireland Limited

2.24 Google Translate

Description of Service
This is a translation service.

Processing Company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data Purposes
This list represents the purposes of the data collection and processing.

Providing Service

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

IP address

Legal Basis
In the following the required legal basis for the processing of data is listed.

Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately. European Union

Taiwan
Chile
Singapore
United States of America

Data Recipients
In the following the recipients of the data collected are listed.

Google Ireland Limited

Click here to read the privacy policy of the data processor.
https://business.safety.google/privacy/?fg=1&hl=en

Storage Information

Maximum age of cookie storage: 2 years

Stored Information

Name: googtrans; Used to store language settings.; Type: cookie; Duration: Session;
Name: PREF; This cookie remembers basic preferences, such as choice of language, format of search
results and how to display information: so the visitor doesn’t need to set preferences each time he uses the site.; Type: cookie; Duration: 2 years;

2.25 Googleapis

Description of Service
Service um unterschiedliche Googleservices zu intergireren

2.26 gstatic.com

Description of Service
This is a domain used by Google to off-load static content to a different domain name in an effort to reduce bandwidth usage and increase network performance for the end user.

Processing Company
Alphabet Inc.
1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, United States of America

Data Purposes
This list represents the purposes of the data collection and processing.

Increasing network performance
Reducing bandwidth usage

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

JavaScript

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

Images
CSS

Legal Basis
In the following the required legal basis for the processing of data is listed.

Art. 6 para. 1 s. 1 lit. f GDPR

Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes. Requests for CSS assets are cached for 1 day, font files are cached for one year. Some information retained until removed by the user, some expires after a specific period of time, some is retained until the user's Google Account is deleted.

United States of America
China
Taiwan
Singapore

Data Recipients
In the following the recipients of the data collected are listed.

Alphabet Inc., Google LLC, Google Ireland Limited

2.27 ipmeta.io

Description of Service
Analysis of the server IP of the visitor.

Processing Company
ipmeta.io

Data Purposes
This list represents the purposes of the data collection and processing.

The server IP address is used to determine the name of the server and, if applicable, the location of the server.

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

Transmission of the IPMeta data.

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

Server IP

Legal Basis
In the following the required legal basis for the processing of data is listed.

GDPR and user consent.

Transfer to Third Countries

This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.

IpMeta makes no use of third parties.

Data Recipients
In the following the recipients of the data collected are listed.

ipmeta.io

Click here to read the privacy policy of the data processor.
ipmeta.io
Click here to read the cookie policy of the data processor
ipmeta.io

Storage Information

Non-cookie storage: yes

2.28 jQuery

Description of Service
This is a JavaScript library service.

Processing Company
OpenJS Foundation
1 Letterman Drive, Building D, Suite D4700, San Francisco, CA 94129, United States of America

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
privacy@openjsf.org

Data Purposes
This list represents the purposes of the data collection and processing.

Providing content

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

Log file data
IP address

Legal Basis
In the following the required legal basis for the processing of data is listed.

Art. 6 para. 1 s. 1 lit. a GDPR

United States of America

Data Recipients
In the following the recipients of the data collected are listed.

OpenJS Foundation

Click here to read the privacy policy of the data processor.
https://images.prismic.io/openjsf/ba00b254-685f-4e54-b1ca-17984b0f3e55_OpenJS-Foundation-Privacy-Policy-2019-11-15.pdf

2.29 JSDelivr

Description of Service
This is a CDN for open-source projects.

Processing Company
Prospect One sp.z o.o.
Królewska 65A/1, 30-081 Kraków, Poland

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
dak@prospectone.io

Data Purposes
This list represents the purposes of the data collection and processing.

Functionality
Optimization
Customer Support
Analytics

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

Usage data
IP address
Browser type
Browser version
Pages visited
Date and time of visit
Amount of time spent on a page
Unique device identifier
Diagnostic data

Legal Basis
In the following the required legal basis for the processing of data is listed.

Art. 6 para. 1 s. 1 lit. f GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately. European Union

Data Recipients
In the following the recipients of the data collected are listed.

Prospect One sp. z o.o., Third-party Service Providers

Click here to read the privacy policy of the data processor.
https://www.jsdelivr.com/terms/privacy-policy-jsdelivr-net

2.30 LinkedIn Plugin

Description of Service
This tool adds Follow and Share buttons for the social media service LinkedIn to the website. LinkedIn is a social network that focuses on professional networking and career development.

Processing Company
LinkedIn Ireland Unlimited Company
Wilton Place, Dublin 2, Ireland

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://www.linkedin.com/help/linkedin/ask/TSO-DPO

Data Purposes
This list represents the purposes of the data collection and processing.

Social Media

Technologies Used

This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

IP address
Referrer URL
User account information

Legal Basis
In the following the required legal basis for the processing of data is listed.

Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately. European Union

Singapore
United States of America

Data Recipients
In the following the recipients of the data collected are listed.

LinkedIn Ireland Unlimited Company
LinkedIn Inc.

Click here to read the privacy policy of the data processor.
https://www.linkedin.com/legal/privacy-policy
Click here to read the cookie policy of the data processor
https://www.linkedin.com/legal/cookie_policy
Click here to opt out from this processor across all domains
https://www.linkedin.com/help/linkedin/answer/62931/manage-advertising-preferences?lang=en

Stored Information

Name: Linkedin_oauth_; This cookie is set to provide functions across pages.; Type: cookie; Duration: Session;

2.31 Podigee

Description of Service
This is a podcast hosting provider.

Processing Company
Podigee GmbH
Schlesische Straße 20, 10997 Berlin, Germany

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
datenschutz@podigee.com

Data Purposes
This list represents the purposes of the data collection and processing.

Enabling downloads
Analytics

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

Device information
IP address

Legal Basis
In the following the required legal basis for the processing of data is listed.

Art. 6 para. 1 s. 1 lit. f GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately. European Union

Data Recipients
In the following the recipients of the data collected are listed.

Podigee GmbH

Click here to read the privacy policy of the data processor.
https://www.podigee.com/en/about/privacy/

2.32 RUM

Description of Service
Service to provide libraries for pages where the Chatbot Module is used.

Processing Company
msg systems ag
Robert-Bürkle-Straße 1, 85737 Ismaning, Deutschland

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
Datenschutz@msg.group

Data Purposes
This list represents the purposes of the data collection and processing.

chatbot

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

Cloud, NEAP

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

IP address, browser, session ID, timestamp, location

Legal Basis
In the following the required legal basis for the processing of data is listed.

GDPR and user consent

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes. The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected.

Disclosure to third parties
with the exception of companies in the msg group
is excluded.

Data Recipients
In the following the recipients of the data collected are listed.

msg systems ag

Click here to read the privacy policy of the data processor.
https://www.msg.group/datenschutz
Click here to read the cookie policy of the data processor
https://www.msg.group/datenschutz

2.33 web.facebook

Description of Service
Sevice für Facebookanbindung. Bei der msg im passwortgeschütztem Bereich Userforum.

2.34 YouTube Video

Description of Service
This is a video player service. It can be used by user to watch, like, share, comment and upload videos.

Processing Company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data Purposes
This list represents the purposes of the data collection and processing.

Displaying Videos

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

Cookies (if Privacy-Enhanced Mode is not activated)

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

Device information
IP address
Referrer URL
Videos viewed

Legal Basis
In the following the required legal basis for the processing of data is listed.

Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately. European Union

Chile
United States of America
Taiwan
Singapore

Data Recipients
In the following the recipients of the data collected are listed.

Alphabet Inc.
Google LLC
Google Ireland Limited

Storage Information

Maximum age of cookie storage: 8 months

Stored Information

Name: __sak; This is used to store information about the visitor's video preferences.; Type: web;
Name: LAST_RESULT_ENTRY_KEY; This is used to save the user settings when retrieving a Youtube video integrated on other web pages.; Type: web;
Name: yt-player-bandaid-host, yt-player-bandwidth, yt-player-headers-readable; This is used to determine the optimal video quality based on the visitor's device and network settings.; Type: web;
Name: yt-remote-cast-installed, yt-remote-connected-devices, yt-remote-device-id, yt-remote-fast-check-period, yt-remote-session-app, yt-remote-session-name; This is used to store the user's video player preferences using embedded YouTube video.; Type: web;
Name: YEC; This is used to store the user's video player preferences using embedded YouTube video.; Type: cookie; Duration: 1 year, 1 month;
Name: CONSENT; This is used to detect if the visitor has accepted the marketing category in the cookie banner. ; Type: cookie; Duration: 2 years;
Name: DEVICE_INFO; This is used to track user’s interaction with embedded content.; Type: cookie; Duration: 5 months, 26 days;
Name: remote_sid; This is used for the implementation and functionality of YouTube video content on the website.; Type: cookie; Duration: Session;
Name: test_cookie; This is a test for cookie setting permissions in user's browser.; Type: cookie; Duration: 1 day;
Name: VISITOR_INFO1_LIVE; This is used to measure the users bandwidth to determine whether they get the new or old player interface.; Type: cookie; Duration: 6 months;
Name: YSC; This is set by the YouTube video service on pages with embedded YouTube videos.; Type: cookie; Duration: Session;
Name: PREF; This is used to store information such as your preferred page configuration and playback settings such as explicit autoplay options, random mix, and player size.; Type: cookie; Duration: 8 months;
Name: pm_sess; This is used to maintain your browsing session.; Type: cookie; Duration: 30 minutes;
Name: CGIC; This is used to provide search results by auto-completing search queries based on a user's initial input.; Type: cookie; Duration: 6 months;
Name: UULE; This is used to determine the users geographic location. ; Type: cookie; Duration: 6 hours;

2.35 yumpu

Description of Service
This Service offers a digital publishing solution. With this service the user can create readable print publications and convert PDF files to flipbooks.

Processing Company
i-magazine AG
Gewerbestrasse 5, 9444 Diepoldsau, Switzerland

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
privacy@yumpu.com

Data Purposes
This list represents the purposes of the data collection and processing.

Functionality
Optimization

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

Cookies
Log file

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

Browser information
Date and time of visit
Operating system information
Usage data
Contact information
Payment information
Geographic location
Date of birth
Browser language
Postal address
User ID
Host name of accessing computer
IP address
Referrer URL

Legal Basis
In the following the required legal basis for the processing of data is listed.

Art. 6 para. 1 s. 1 lit. f GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately. Switzerland

Data Recipients
In the following the recipients of the data collected are listed.

I-magazine AG

Click here to read the privacy policy of the data processor.
https://www.yumpu.com/en/info/privacy_policy
Click here to read the cookie policy of the data processor
https://www.yumpu.com/en/info/cookie_policy

3. Online applications

Any information you provide when applying for a position using our online application form will be stored in our applicant management system. passbrains ag does not share said data with third parties outside the group of companies. https://karriere.msg.group/en/privacy-applicants.

V. User registration

1. Description and scope of data collection

Our Internet site offers users the option to register by providing personal information (e.g., in order to register for events or career events). During that process, information is entered on an input screen and transmitted to us in encrypted form and stored. The information is not shared with third parties outside the group of companies. The following information is collected during the registration process:

Form of address (required field)
First name (required field)
Last name (required field)
Email (required field)

Further personal information may be requested depending on the event.

The user’s consent to having this information processed is obtained during the registration process.

2. Legal basis for the data processing

Legal basis for processing information once the user’s consent has been obtained is Numeral 6, Para. 1, Item a of the General Data Protection Regulation (GDPR).

3. Purpose of the data processing

User registration is required for the provision of certain content and services on our website, such as:

Registering for events or career events (e.g., university fairs)
Publication requests (e.g., customer magazines, studies or whitepapers)
Feedback on the “Public Sector” customer magazine

VI. Rights held by the affected person

Anytime your personal information is processed you are considered an affected person pursuant to the GDPR and you have the following rights in connection with the responsible party:

1. Right to disclosure

You have the right to request information on the scope, origin and recipient of stored information, as well as the purpose of the storage, at no charge to you.

2. Right to correction

You have the right to demand a correction and/or completion from the responsible party should the processed personal information related to you be incorrect or incomplete. The responsible party must make the corrections without delay.

3. Right to deletion

You have the right to request that the responsible party immediately delete any personal information related to you and the responsible party is required to delete said data without delay should any of the following reasons apply:

(1) The personal information related to you is no longer required for the purpose it was collected or processed in any other manner.

(2) You revoke the consent on which the processing was based pursuant to Numeral 6, Para. 1, Item a or Numeral 9, Para. 2, Item a of the General Data Protection Regulation (GDPR) and there is no other legal basis for the processing.

(3) You submit an objection to the processing pursuant to Numeral 21, Para. 1 of the General Data Protection Regulation (GDPR) and no legitimate reasons for the processing that have precedence over your objection exist, or you submit an objection to the processing pursuant to Numeral 21, Para. 2 of the General Data Protection Regulation (GDPR).

(4) The personal information related to you was processed unlawfully.

(5) The deletion of the personal information related to you is necessary in order to meet a legal obligation under Union law or the law of the member states to which the responsible party is subject.

(6) The personal information related to you was collected in relation to services offered by the information company pursuant to Numeral 8, Para. 1 of the General Data Protection Regulation (GDPR).

4. Right to data portability

You have the right to obtain the personal information related to you and which you shared with the responsible party in a structured, commonly used and machine-readable format.

5. Right of objection

You have the right, for reasons arising from your particular situation, to object to the processing of personal information related to you, which was being processed pursuant to Numeral 6, Para. 1, Item e or f of the General Data Protection Regulation (GDPR), at any time; this includes any profiling based on these policies.

The responsible party will cease processing any personal information related to you unless they can provide proof urgent, protection-worthy reasons for the processing that outweigh your interests, rights and freedoms or unless the processing serves the enforcement, exercising or defense of legitimate claims.

You have the right to revoke your privacy consent statement at any time. Revoking your consent shall not affect the legitimacy of the processing that was performed with your consent up to the time your consent was revoked.

6. Right to submit complaint to supervisory body

Notwithstanding other administrative or legal remedy, you will generally have the right to submit a complaint to a supervisory body, specifically in the member state of your place of residence, your place of employment or the location of the alleged breach, if you are of the opinion that the processing of the personal information related to you violates the GDPR.

The supervisory body to which the complaint is submitted shall inform the complainant of the status and results of the complaint, including the option of legal remedy pursuant to Numeral 78 of the GDPR.

Version 01.05.2024