Privacy Policy

General information

We appreciate your interest in our website and take the protection of your personal data very seriously. Protecting your privacy is our top priority, and we treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

In this privacy policy, we provide you with comprehensive information about the nature, scope, and purpose of the collection, processing, and use of your personal data. In addition, we provide you with the legally required information to ensure a high level of transparency and security.

Please read this policy carefully to understand how we handle your data and what rights you have with regard to data protection. If you have any questions or concerns on this topic, please do not hesitate to contact us.

Data collection and responsible party

Your data is collected when you provide it to us, for example by filling out a contact form. Other data is collected automatically or with your consent when you visit the website by our IT systems, such as technical data (e.g., Internet browser, operating system, or time of page view).

The data collected is used to ensure the error-free provision of the website and to optimize its functionality and security. In addition, your data may be used to process your inquiries, provided you submit them to us.

The website operator is responsible for data collection on this website. The contact details of the responsible party can be found in the legal notice of this website.

Storage period

We only store your personal data for as long as is necessary to fulfill the respective processing purposes or as required by the statutory retention periods. Once the processing purpose no longer applies or the retention periods have expired, the data will be deleted in accordance with the statutory requirements.

Recipients of personal data

Recipients of your personal data may be external service providers whom we commission with the technical provision or analysis of our website, such as hosting providers or analysis tools. Beyond this, we only pass on your data to third parties if this is required by law or if you have expressly consented to this.

Objection to advertising mailings

We hereby expressly object to the use of the contact data published in accordance with the legal notice requirement for the purpose of sending unsolicited advertising and information materials. We expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, for example via spam emails.

Right to change the privacy policy

We reserve the right to change this privacy policy at any time to adapt it to current legal requirements or changes to our services. This may be necessary, for example, when introducing new services or tools. In the event that such changes are made, we will publish the updated privacy policy in the same place on our website.

Please note that the current version of the privacy policy applies. We therefore recommend that you review the privacy policy regularly to stay informed of any changes. If your consent is required or if parts of the privacy policy concern provisions of a contractual relationship with you, we will inform you of the changes.

Responsible body

asvin GmbH
Managing Directors: Sven Rahlfs, Mirko Ross
Eichwiesenring 1/1
70567 Stuttgart
Germany

Phone: +49 711 220409380
Email: info@asvin.io

Data Protection Officer

You can contact our data protection officer at:

SIDAPRON GmbH
Dietmar Faude
Nordstr. 10
Rimsting
Germany

Phone: +49 8031 8871621
Email: datenschutz@sidapron.de

Hosting and server log files

The servers for our website https://asvin.io are operated by the provider Host Europe GmbH at a server location in France. We have concluded a data processing agreement with the provider in accordance with Art. 28 GDPR. The legal basis for the use of external hosting is the fulfillment of a contract with our potential and existing customers in accordance with Art. 6 (1) lit. b GDPR and our legitimate interest in the secure and high-performance provision of our website in accordance with Art. 6 (1) lit. f GDPR.

Each time our website is accessed, our system’s web server collects information about the device used. We collect the following data:

  • Information about the browser type
  • Operating system of the user’s device
  • Date and time of access
  • The previous website from which the user accessed our websites (referrer)

We only collect IP addresses anonymously, so we do not store any personal data in our log files within the meaning of the GDPR.

Rights of data subjects

As a data subject, you have the following rights under the EU General Data Protection Regulation (GDPR):

Right of access (Art. 15 GDPR)

You have the right to request information about what personal data is stored about you, for what purpose it is processed, from which recipients it was received or to whom it is passed on, and how long it is stored.

Right to rectification (Art. 16 GDPR)

You can request the immediate correction of inaccurate personal data or the completion of incomplete personal data.

Right to erasure (‘right to be forgotten’) (Art. 17 GDPR)

Under certain conditions, you can request the erasure of your personal data, e.g. if it is no longer necessary for the purposes for which it was collected or if you have withdrawn your consent.

Right to restriction of processing (Art. 18 GDPR)

You have the right to request the restriction of the processing of your personal data, for example if you dispute the accuracy of the data or if the processing is unlawful but you wish to restrict it instead of erasing it.

Right to data portability (Art. 20 GDPR)

You may request that the personal data concerning you that you have provided to us be transmitted to you in a structured, commonly used, and machine-readable format—or that we transfer this data directly to another controller.

Right to object (Art. 21 GDPR)

You have the right to object to the processing of your personal data at any time, provided that the processing is based on the legitimate interests of our company or on a task carried out in the public interest. In the event of a justified objection, we will cease processing unless there are compelling legitimate grounds for the processing.

Withdrawal of consent (Art. 7 GDPR)

If you have given us your consent, you can revoke it at any time for the future without giving reasons.

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Without prejudice to other administrative or judicial remedies, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement.

Use of the WordPress content management system and cookies

Our website is based on the WordPress content management system (CMS) provided by the WordPress Foundation. WordPress enables us to create, manage, and display our website content. Cookies are used in connection with WordPress to ensure the functionality of the website and to improve user-friendliness.

Purpose of data processing

WordPress and the associated cookies are used to:

  • provide the basic functions of the website (e.g., navigation and display of content),
  • ensure the security of the website,
  • improve the user experience (e.g., by storing settings or preferences),
  • monitor and optimize the performance of the website.

Processed data

The following data may be processed through the use of WordPress and the cookies employed:

  • IP address,
  • browser type and version,
  • Device type and operating system,
  • Referrer URL (the previously visited page),
  • Date and time of access,
  • User preferences (e.g., language settings).

This data is processed anonymously or pseudonymously and is used exclusively for the purposes mentioned above.

Use of cookies by WordPress

WordPress uses various types of cookies, including:

  1. Essential cookies: These cookies are necessary to ensure the basic functions of the website. These include, for example, session cookies, which are stored temporarily.
    • Example: wordpress_[hash] (session cookie to identify the user session).
  2. Functional cookies: These cookies store your settings and preferences, such as language or login details.
    • Example: wp-settings-[user_id] and wp-settings-time-[user_id] (for personalized settings).
  3. Analytical cookies (if enabled): These cookies are used to collect statistics on website usage in order to improve content and functionality.
  4. Cookies for logged-in users (if applicable): When you log in to the website, additional cookies are set to manage your session and allow access to protected areas.

Storage and deletion of cookies

The storage period for cookies varies depending on the type:

  • Session cookies are automatically deleted at the end of your session.
  • Persistent cookies remain stored on your device until you manually delete them or they expire.

You can prevent cookies from being stored at any time via your browser settings or delete cookies that have already been stored. Please note, however, that disabling cookies may impair the functionality of the website.

Legal basis

The processing of your data by WordPress and the use of cookies is based on Art. 6 (1) lit. f GDPR (legitimate interest), as we have a legitimate interest in providing a functioning and secure website. If you have consented to the use of certain cookies (e.g., analytical cookies), processing is also based on Art. 6 (1) (a) GDPR (consent).

Third-party providers and plugins

WordPress can be extended by third-party plugins that provide additional functions. These plugins may also use cookies. Information about the plugins used and their privacy policies can be found further down in our privacy policy.

Real Cookie Banner

We use the ‘Real Cookie Banner’ service on our website to manage and document user consent for cookies and similar technologies. Real Cookie Banner is hosted on our own servers, so no data is passed on to third parties.

The legal basis for the use of Real Cookie Banner is the fulfillment of a legal obligation pursuant to Art. 6 (1) (c) GDPR.

The data processed by Real Cookie Banner includes your IP address, consent status, time of consent, and information about cookies set on your device.

The purpose of data processing is to manage user consent for cookies and other tracking technologies in order to comply with data protection regulations.

For more information about Real Cookie Banner’s privacy policy, please visit:

Contact

You have the option of contacting us by email, telephone, contact form, or letter, which may involve the processing of personal data. We process your data for the purpose of handling and processing your request. We will not pass on your data to third parties without your consent.

The legal basis for processing is our legitimate interest in the effective processing of your request in accordance with Art. 6 (1) lit. f GDPR.

When you contact us by email, we store your email address and the information contained in the email. If you use the contact form, your IP address will be pseudonymized in addition to the information provided in the contact form. If you contact us by letter, your return address and the content of the letter will be stored. When you contact us by telephone, we collect personal data depending on the individual case.

We store your data until you request us to delete it or until the purpose of processing (handling your request) has been fulfilled.

Social media profiles

We maintain online profiles on the following social networks (hereinafter referred to as “social media”) in order to communicate with customers, interested parties, and the public and to draw attention to our services:

  • Instagram (Meta Platforms, Inc.)
  • Facebook (Meta Platforms, Inc.)
  • X (formerly Twitter; X Corp.)
  • LinkedIn (LinkedIn Ireland Unlimited Company)
  • Xing (New Work SE)

For information on the scope and purpose of data processing, please refer to the applicable data protection regulations of the respective networks:

Processing is carried out on the basis of Art. 6 (1) lit. f GDPR, as we have a legitimate interest in contemporary public relations work. If consent is required, processing is carried out on the basis of Art. 6 (1) lit. a GDPR.

If you transmit additional data (e.g., personal messages) to the services, your consent is generally required for this. Please note that we have no influence on data processing by social media providers. If you have any questions or wish to assert your rights as a data subject (e.g., information, deletion), please contact the respective platform operator directly.

You can subscribe to or unsubscribe from our social media profiles at any time. If you do not want social media service providers to collect data about your visit to our profiles, please use the deactivation options (e.g., log out, ad tracker blocking) in your user account or install appropriate browser add-ons.

Adobe Fonts

We use the “Adobe Fonts” service on our website to display fonts in a uniform and appealing manner. The provider is Adobe Systems Software Ireland Limited (“Adobe”), 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland.

The legal basis for the use of Adobe Fonts is our legitimate interest pursuant to Art. 6 (1) (f) GDPR in ensuring a uniform and visually appealing presentation of the content of our website.

The data processed by Adobe Fonts includes your IP address, the time of the font request, and information about the fonts provided.

The purpose of data processing is to provide a uniform font display and to ensure the correct functioning of fonts on the website.

It cannot be ruled out that personal data may be transferred to unsafe third countries (USA) where the level of data protection is lower than in the EU. Adobe is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens’ data in the USA. We have entered into a data processing agreement (DPA) with Adobe, which ensures that personal data is only processed in accordance with our instructions and in compliance with the GDPR.

For more information on Adobe Fonts’ privacy policy, please visit: https://www.adobe.com/privacy/policies/adobe-fonts.html

Use of Google services

Our website uses various services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”). Google services help us to provide and improve our website, analyze user behavior, display content, and optimize our offerings.

The following data may be processed when using Google services:

  • personal data, such as IP address, location information (if enabled),
  • technical information such as browser type and version, operating system, and device settings,
  • usage data, such as pages visited, click behavior, or interactions with functions.

This data is processed on the basis of our legitimate interest pursuant to Art. 6 (1) lit. f GDPR in optimizing our website and services, as well as on the basis of your consent pursuant to Art. 6 (1) lit. a GDPR, if such consent is required (e.g., when using cookies or tracking technologies).

Google may transfer data to countries outside the European Union, in particular to the USA. Google ensures that an adequate level of data protection is guaranteed, including by concluding EU standard contractual clauses.

For more information about data processing by Google, your rights, and your settings options, please refer to Google’s privacy policy at https://policies.google.com/privacy.

Google Tag Manager

We use the “Google Tag Manager” service on our website to efficiently manage website tags. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The legal basis for the use of Google Tag Manager is your consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future.

The data processed by Google Tag Manager includes your IP address, browser and device information, and information about your interaction with the website; Google Tag Manager itself does not set any cookies, but it may trigger other services that do.

The purpose of data processing is to simplify the integration and management of website tags and tracking codes for analyzing user interactions.

For more information about Google Tag Manager’s privacy policy, please visit: https://policies.google.com/privacy

Information about the cookies set can be found at: https://policies.google.com/technologies/cookies

You can prevent the processing of your data by clicking on this link:

Google Ads

We use the “Google Ads” service on our website to advertise our products and services online. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The legal basis for the use of Google Ads is your consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future.

The data processed by Google Ads includes your IP address, browser and device information, location data, search queries, interactions with ads and websites, and cookies are set.

If you are logged into a Google account, Google Ads may link collected data to your user profile in order to display personalized advertising.

The purpose of data processing is to display personalized advertising and measure advertising effectiveness.

It cannot be ruled out that personal data may be transferred to unsafe third countries (USA) where the level of data protection is lower than in the EU. We have entered into a data processing agreement (DPA) with Google, which ensures that personal data is only processed in accordance with our instructions and in compliance with the GDPR. Google is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens’ data in the USA.

For more information on Google Ads’ privacy policy, please visit: https://business.safety.google/adsprocessorterms/

Google Analytics

We use the “Google Analytics” service on our website to evaluate user behavior. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The legal basis for the use of Google Analytics is your consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future.

The data processed by Google Analytics includes your IP address, browser and device information, location data, time of visit, information about interaction with the website, and cookies are set.

If you are logged into a Google account, this data may be linked to a user profile.

The purpose of data processing is to analyze and evaluate user behavior in order to optimize the website and marketing measures.

The standard data retention period for Google Analytics is 14 months.

It cannot be ruled out that personal data may be transferred to unsafe third countries (USA) where the level of data protection is lower than in the EU. Google is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens’ data in the USA. We have concluded a data processing agreement (DPA) with Google, which ensures that personal data is only processed in accordance with our instructions and in compliance with the GDPR.

Information about the cookies set can be found at: https://policies.google.com/technologies/cookies

You can prevent your data from being processed by clicking on this link: https://tools.google.com/dlpage/gaoptout

Google Ads Remarketing

We use the “Google Analytics Remarketing” service on our website to display targeted advertisements to users based on their previous interactions with our website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The legal basis for the use of Google Analytics Remarketing is your consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future.

The data processed by Google Analytics Remarketing includes your IP address, device information, browser details, pages visited, time and duration of the visit, and cookies are set to track interaction with the website for remarketing purposes.

Google Analytics Remarketing collects data to create user profiles for targeted advertising purposes.

The purpose of data processing is to analyze user behavior and provide personalized advertising based on previous website interactions.

It cannot be ruled out that personal data may be transferred to unsafe third countries (USA) where the level of data protection is lower than in the EU. We have entered into a data processing agreement (DPA) with Google, which ensures that personal data is only processed in accordance with our instructions and in compliance with the GDPR. Google is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens’ data in the USA.

For more information on the privacy policy of Google Analytics Remarketing, please visit:https://business.safety.google/adsprocessorterms/

Google Photos

We use Google Photos, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”), to store and manage images. We use Google Photos to store images securely and, if necessary, to display them on our website or for internal purposes.

The following data is processed when using Google Photos:

  • Image files that are uploaded and stored
  • Image metadata (e.g., date, time, location information, if enabled),
  • Technical information such as IP address, browser type and version, and operating system of your device when using the service.

The data is processed on the basis of our legitimate interest pursuant to Art. 6 (1) lit. f GDPR in storing and managing images efficiently. If Google Photos is used within the framework of a contractual relationship, the legal basis is Art. 6 (1) lit. b GDPR.

Google processes the data on our behalf and is contractually obliged to comply with the data protection provisions in accordance with Art. 28 GDPR. It is possible that Google may transfer data to countries outside the European Union, in particular to the USA. Google ensures that an adequate level of data protection is guaranteed, among other things by concluding EU standard contractual clauses.

For more information about data processing by Google Photos, please refer to Google’s privacy policy athttps://policies.google.com/privacy.

Google Fonts

We use the “Google Fonts” service on our website to integrate external fonts for improved visual presentation. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The legal basis for the use of Google Fonts is your consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future.

The data processed by Google Fonts includes your IP address, browser and device information, and the time of the request.

The purpose of data processing is to optimize and standardize the display of fonts on the website.

It cannot be ruled out that personal data may be transferred to unsafe third countries (USA) where the level of data protection is lower than in the EU. Google is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens’ data in the USA.

Further information on the privacy policy of Google Fonts can be found at: https://policies.google.com/privacy

Information about the cookies set can be found at: https://policies.google.com/technologies/cookies

You can prevent the processing of your data by clicking on this link: https://policies.google.com/privacy#infochoices

YouTube

We use the video service “YouTube” on our website. The provider of the service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The legal basis for the use of YouTube is your consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future.

Google collects and processes your IP address, browser and operating system information, and location data, and also processes actions such as watching videos or creating playlists. Additional cookies are set in the process. YouTube integrates other Google services, such as Google Fonts, Google Photos, and Google Ads (formerly Doubleclick).

If you are logged into a Google account, this data can be linked to a user profile. Your user behavior is recorded and analyzed for advertising purposes.

The purpose of data processing is to provide video content and integrate it into our website.

According to Google’s privacy policy, the storage period for data processed by YouTube varies depending on the type of data and user settings. By default, activity data (such as videos viewed, search history, etc.) is automatically deleted after 36 months (3 years) for new accounts or users who have not previously set a storage period. Users can manually set this storage period to 3 months, 18 months, or have the data stored permanently. Detailed information can be found at: https://policies.google.com/privacy?hl=de#inforetaining

It cannot be ruled out that personal data may be transferred to unsafe third countries (USA) where the level of data protection is lower than in the EU. Google is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens’ data in the USA. We have concluded a data processing agreement (DPA) with Google, which ensures that personal data is only processed in accordance with our instructions and in compliance with the GDPR.

Further information on YouTube’s privacy policy can be found at: https://policies.google.com/privacy

Information about the cookies set can be found at: https://policies.google.com/technologies/cookies

You can prevent the processing of your data by clicking on this link: https://myaccount.google.com/data-and-privacy

YouTube NoCookie

We use the YouTube NoCookie service (also known as “YouTube in extended data protection mode”) on our website to embed videos without using cookies that track user behavior. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The legal basis for the use of YouTube NoCookie is your consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with future effect.

The data processed by YouTube NoCookie includes your IP address, device information, and information about video interaction. Data is stored in the browser’s web storage.

The purpose of data processing is to embed videos while minimizing the use of cookies and improving user privacy.

It cannot be ruled out that personal data may be transferred to unsafe third countries (USA) where the level of data protection is lower than in the EU. We have entered into a data processing agreement (DPA) with Google, which ensures that personal data is only processed in accordance with our instructions and in compliance with the GDPR. Google is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens’ data in the USA.

Further information on YouTube NoCookie’s privacy policy is available at:https://policies.google.com/privacy#infocollect

Information about the cookies set can be found at: https://policies.google.com/technologies/cookies

You can prevent your data from being processed by clicking on this link: https://policies.google.com/privacy#infochoices

hCaptcha

We use the “hCaptcha” service on our website to ensure that interactions are carried out by humans and to prevent spam and abuse. The provider is Intuition Machines, Inc. (“Intuition Machines”), 350 Alabama St, San Francisco, CA 94110, USA.

The legal basis for the use of hCaptcha is our legitimate interest pursuant to Art. 6 (1) lit. f GDPR to protect our website from spam and abuse and to ensure its security and functionality.

The data processed by hCaptcha includes your IP address, browser type, operating system, device information, interaction data, and the service sets cookies.

The purpose of data processing is to verify that interactions originate from humans and to prevent automated abuse and spam.

It cannot be ruled out that personal data may be transferred to unsafe third countries (USA) where the level of data protection is lower than in the EU. Intuition Machines is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens’ data in the US. Intuition Machines uses standard contractual clauses to ensure that your data complies with European data protection standards even when it is transferred to and stored in third countries.

For more information on hCaptcha’s privacy policy, please visit: https://www.hcaptcha.com/privacy

LinkedIn Insight Tag

We use the “LinkedIn Insight Tag” service on our website to analyze user behavior and measure the effectiveness of our advertising measures. The provider is LinkedIn Ireland Unlimited Company (“LinkedIn”), Wilton Plaza, Wilton Place, Dublin 2, Ireland.

The legal basis for the use of LinkedIn Insight Tag is your consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future.

The data processed by LinkedIn Insight Tag includes your IP address, device and browser information, page events, and information about your interaction with the website; the service also uses cookies.

LinkedIn Insight Tag collects data that can be used to create user profiles for targeted advertising purposes.

The purpose of data processing is to analyze advertising effectiveness, track conversions, and create anonymous user profiles for targeted marketing.

The data from the LinkedIn Insight Tag is stored by LinkedIn for 180 days by default.

It cannot be ruled out that personal data may be transferred to unsafe third countries (USA) where the level of data protection is lower than in the EU. LinkedIn is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens’ data in the USA. We have concluded a data processing agreement (DPA) with LinkedIn, which ensures that personal data is only processed in accordance with our instructions and in compliance with the GDPR.

For more information on LinkedIn Insight Tag’s privacy policy, please visit: https://www.linkedin.com/legal/privacy-policy

Information about the cookies set can be found at: https://www.linkedin.com/legal/cookie-policy

Use of Microsoft Services

We use various services and products from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (“Microsoft”) to support our work processes, improve communication, and provide certain functions. This includes, in particular, the use of Microsoft 365 (including Outlook, Teams, SharePoint, and OneDrive) as well as other cloud services and software solutions from Microsoft.

Purpose of data processing

Microsoft services are used to:

  • enable internal and external communication (e.g., email services and online meetings),
  • facilitate the joint editing and storage of documents,
  • support the organization and management of projects,
  • ensure IT security and reliable data processing.

Processed data

When using Microsoft Services, the following personal data may be processed:

  • Name, contact details (e.g., email address, telephone number),
  • Contents of emails, documents, and chats,
  • Data in the context of online meetings (e.g., audio and video streams, chat messages),
  • Usage data (e.g., IP address, device type, operating system, timestamp).

Microsoft processes this data as a processor in accordance with the contractual agreements and applicable data protection laws.

Cookies and tracking technologies

When using Microsoft Services, cookies and similar technologies may be used to ensure the functionality of the services and to improve the user experience. These technologies collect, among other things:

  • Information about your use of the services,
  • settings and preferences,
  • technical data such as IP address and browser information.

You can disable the storage of cookies via your browser settings or by using an opt-out tool from Microsoft.

Legal basis

The processing of your personal data is based on Art. 6 (1) lit. b GDPR (performance of a contract, if the use is within the scope of a contract) and Art. 6 (1) lit. f GDPR (legitimate interest), as we have a legitimate interest in efficient communication and data processing. If you have consented to the use of certain services, processing is also carried out on the basis of Art. 6 (1) (a) GDPR (consent).

Storage and deletion of data

The data processed by Microsoft is stored in accordance with the guidelines set by Microsoft. Microsoft undertakes to store the data only for as long as is necessary to provide the service. For more information, please refer to Microsoft’s privacy policy.

Third-party providers and data transfer

Microsoft processes data in compliance with the EU Standard Contractual Clauses to ensure an adequate level of data protection. In some cases, data may also be transferred to the United States. Microsoft undertakes to comply with the data protection requirements of the GDPR. Further information on data processing by Microsoft can be found here: Microsoft Privacy Statement.

Microsoft Teams

We use Microsoft Teams, a communication and collaboration platform provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (hereinafter referred to as “Microsoft”), to conduct online meetings, video conferences, and collaborate within our team.

Various data is processed when using Microsoft Teams. This includes in particular:

  • User information (e.g., name, email address, profile picture),
  • Communication content (e.g., chat messages, audio, video, and file content),
  • Technical data (e.g., IP address, device information, operating system, version of the program used).

This data is processed for the purpose of conducting and organizing online meetings and for internal and external collaboration. The legal basis for data processing is our legitimate interest pursuant to Art. 6 (1) lit. f GDPR in enabling effective communication and collaboration. Insofar as Microsoft Teams is used within the framework of a contractual relationship, the legal basis is Art. 6 (1) lit. b GDPR.

Microsoft processes the data on our behalf and is contractually obliged to comply with the data protection provisions of Art. 28 GDPR. Microsoft may also transfer data to countries outside the European Union, in particular to the USA. In doing so, Microsoft ensures that an adequate level of data protection is guaranteed, including by concluding EU standard contractual clauses.

The data is generally only stored for as long as is necessary for the purposes of processing. For more information on data processing by Microsoft Teams, please refer to Microsoft’s privacy policy at https://privacy.microsoft.com/de-de/privacystatement.

Version of the privacy policy

Status of the DSE: January 23, 2026