Data Protection Declaration

Data Protection Declaration

About the data processing

This Data Protection Declaration informs you about the scope of the processing of your personal data (“data”).

1. Party responsible for the data processing (“controller”)

The party responsible for the data processing (“controller”) in accordance with the provisions of the General Data Protection Regulation (GDPR) is:

valantic GmbH
Ainmillerstraße 22
80801 München
Germany
Tel.: +49 89 2000 85 91 0
Fax: +49 89 2000 85 93 1
Email: info@muc.valantic.com

2. Contact details of our Data Protection Officer

Matthias Rosa
RMPrivacy GmbH
Große Langgasse 1A
55116 Mainz
www.rmprivacy.de
Email: info@muc.valantic.com

3. General information about the data processing and about joint processing

We process data in the course of our business and website operations.

This also includes disclosure through the transmission of data to third parties and, where applicable, to so-called third countries outside the European Union (“EU”) and the European Economic Area (“EEA”). Where we transmit data to countries outside the EU or the EEA, we have indicated this accordingly below.

We process personal data jointly within the valantic group of companies to allow effective internal management of personal data and group systems. For this, we transmit your data to our affiliated companies (“Affiliates”), or process the data in systems that are operated jointly with our Affiliates.
Our Affiliates can be found at:

The legal basis for the joint data processing is point (f) of Article 6 (1) GDPR, namely our overriding legitimate interest in effective administration and IT infrastructure.

For processes that are subject to joint data processing, we are jointly responsible with our Affiliates for the processing, in accordance with Article 26 GDPR (“joint controllers”). Accordingly, we have entered into an agreement in which the internal accountabilities and responsibilities are bindingly specified.

The obligation to provide information relating to the data processing is fulfilled by the company which you initially contacted.
Internally, we have designated the fulfillment of data subjects’ rights to valantic GmbH. You can also contact us at any time with inquiries or for the purpose of exercising your data subjects’ rights by using the contact information set out in Section 1 above. We will then forward your inquiry internally for handling.

4. Data processing

The individually involved data, processing purposes, legal bases, recipients and, where applicable, transmissions to third countries are listed below:

a) Contacting us

If you contact us, the following data that you provide us will be processed for the purpose of dealing with and handling your inquiry: name, contact details and – if provided by you – your message.

The legal bases for the data processing are point (b) of Article 6 (1) GDPR, namely our obligation to perform a contract and/or to fulfill our pre-contractual obligations, and/or point (f) of Article 6 (1) GDPR, namely our overriding legitimate interest in processing your inquiry.

b) Contacting us in relation to job applications

If you contact us to send us a job application, e.g. by email or via a contact form, the data you provide (e.g. name, email address, desired location, etc.), your message and the submitted job application documents will be processed exclusively for the purpose of handling and dealing with your application inquiry.

The legal basis for data processing is primarily Section 26 of the German Data Protection Act (Bundesdatenschutzgesetz, BDSG). In accordance with this, it is permissible to process data in connection with making a decision on the establishment of an employment relationship.

Should the data possibly be needed for legal prosecution after completion of the application process, the legal basis for further processing is point (f) of Article 6 (1) GDPR, namely the safeguarding of our legitimate interest in the exercise and/or defense of legal claims.

c) Performance of a contract, data management within the context of providing a service

We process various data in the course of providing our services and for initiating and performing the contractual relationship that exists between you and us.

Where you have tasked us with providing a service, your data (if specified: your name, contact details and address) as well as all the information needed to fulfill the order are processed exclusively for the purpose of performing and handling the contractual relationship.

This includes, in particular, our adequate consulting and support, correspondence with you, invoicing, and fulfillment of our accounting and statutory tax obligations.

The legal bases for the processing are point (b) of Article 6 (1) GDPR and, for fulfilling our legal obligations, point (c) of Article 6 (1) GDPR.
Your data will be forwarded to third parties where this is necessary for processing your order.

This includes, in particular, the disclosure to supervisory authorities for the purpose of correspondence as well as for the exercise and defense of your rights.

In addition, the Affiliates cooperate with one another in order to provide diverse services. In such cases, the data are shared among the Affiliates where they are processed under commission.

d) Services and processes used in the valantic group of companies

Within the valantic group of companies, we jointly use the following services on the websites of our group of companies:

(1) Logfile of website visit

We log your visit to our website. In doing so, we process:

  • Name(s) of our called website(s)
  • Date and time of call
  • Volume of data transferred
  • Browser type, including version
  • Your used operating system
  • Referrer URL (the website visited beforehand)
  • Your IP address
  • The requesting provider

The legal basis for data processing is point (f) of Article 6 (1) GDPR, namely our overriding legitimate interest in the ongoing provision and security of our website.

The logfile will be erased after seven days, unless it is required to demonstrate or investigate specific legal violations that have become known within the retention period.

(2) Hosting via AWS

We use the services of web hosting providers in order to provide our online presence; these web hosting providers process the above-mentioned data, as well as all data that need to be processed in connection with the operation of this website (logfile of the website visit), under commission by us.

The legal basis for data processing is point (f) of Article 6 (1) GDPR, namely our overriding legitimate interest in the provision of our website.
For our hosting, we use Amazon Web Services (AWS) of Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855, Luxembourg (“Amazon”). A transmission of data to Amazon Web Services Inc. in the USA cannot be ruled out.

An adequacy decision of the EU Commission does not exist for data transmissions to the USA. Amazon ensures an adequate level of data protection through its observance of EU standard contractual clauses. We can provide you with a copy of the EU standard contractual clauses upon request. For this, please contact info@muc.valantic.com.

(3) Newsletter

In order to provide you with regular information about our company and offers, we offer the dispatch of an email newsletter. When you register for the newsletter, we process the data you entered during the registration (email address and other freely provided information). To prevent misuse, we send you an email after your registration in which you are requested to confirm your registration (double opt-in procedure). To be able to demonstrate the legal compliance of the registration process, your registration is logged. Involved here are the time of registration and confirmation as well as your IP address.

The legal basis for sending the newsletter is point (a) of Article 6 (1) GDPR, namely your prior consent. The legal basis for the data processing in connection with the sending of the confirmation email for your registration and the associated data logging is point (f) of Article 6 (1) GDPR, namely our legitimate interest in being able to demonstrate your legally compliant registration.

If you give us your consent, we also evaluate in the newsletters whether you have opened the newsletter as well as the scrolling and clicking behavior within the newsletter. We do this to tailor our newsletter optimally to your interests and to improve our newsletter content. The legal basis for the analysis of the newsletter is point (a) of Article 6 (1) GDPR, namely your prior given consent.

For the dispatch of the newsletter, we engage service providers to whom we transmit the stated data.

The data collected in this process are transmitted to the servers of the following service providers in the USA who processing the data under commission by valantic GmbH: HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA.

The European branch office of HubSpot, Inc. is located in Ireland: 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, phone: +353 1 5187500.

HubSpot ist im Rahmen des EU-US Data Privacy Framework zertifiziert und fällt insoweit unter den Angemessenheitsbeschluss der EU für die USA.

(4) HubSpot chat tool

Our website uses the chat tool of HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA (“HubSpot”) to enable you to contact us via live chat. HubSpot is integrated into our website by means of an appropriate JavaScript. HubSpot uses cookies for this purpose. Further information about the cookies used can be found in our consent management platform which can be called up by clicking the fingerprint icon at the lower left of the website.

When using the HubSpot chat tool, the following data are processed: content of the chat, date and time of the call, browser type/version, operating system used, URL of the previously visited website, individual User_ID, number of visits and the volume of data sent.

The legal basis for the data processing is point (a) of Article 6 (1) GDPR, namely your prior given consent.

In doing so, the data are transmitted to the servers of the following service providers in the USA who process the data under commission by valantic GmbH: HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA.

The European branch office of HubSpot Inc. is located in Ireland: 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, telephone: +353 1 5187500.

HubSpot is certified in the context of the EU-US Data Privacy Framework and is thus covered by the adequacy decision of the EU for the USA.

  • Further information about the cookies used by HubSpot can be found in our consent management platform which can be called up by clicking the fingerprint icon at the lower left of the website.

(5) Cognigy chat tool

Our website uses the chat tool of Cognigy GmbH, Speditionstrasse 1, 40221 Düsseldorf, Germany (“Cognigy”) to enable contact by means of conversational AI automation. Cognigy uses cookies for this purpose. Further information about the cookies used can be found in our consent management platform which can be called up by clicking the fingerprint icon at the lower left of the website.

When using the Cognigy chat tool, the following data are processed: content of the chat, date and time of the call, IP address, possibly your telephone number, possibly your user name, browser type/version, operating system used, URL of the previously visited website, individual User_ID, number of visits and the volume of data sent, and possible your first and last names.

The legal basis for the data processing is point (a) of Article 6 (1) GDPR, namely your prior given consent. A transmission of data to non-EU and non-EEA states does not occur.

(6) Use of cookies

Our website uses so-called cookies. Cookies are small text files that are stored on your end device (PC, smartphone, tablet, etc.) and saved by your browser.

Further information about the specific cookies we use, their providers and purposes can be found in our consent management platform (which can be called up by clicking the fingerprint icon at the lower left of the website). There you can give your consent pursuant to Section 25 (1) of the German Telecommunications-Telemedia Data Protection Act (TTDSG) to the services concerned, and later withdraw this or adjust your consent settings.

(7) Our consent banner

We use a consent banner (consent management platform) to document your selection of certain data processing processes and to fulfill our statutory data protection obligations. When you visit our website, your cookie preferences are requested via a consent banner. We then set a cookie in which data on your given consents and withdrawn consents are stored. The legal basis for the data processing is point (c) of Article 6 (1) GDPR, namely fulfillment of our legal obligations.

(8) Consent management platform “Usercentrics”

In order to fulfill our statutory data protection obligations, we use the Usercentrics consent management platform of Usercentrics GmbH, Sendlinger Strasse 7, 80331 Munich, Germany (“Usercentrics”).

As a result of using the consent management platform, data are processed in relation to consents given and withdrawn by website visitors (opt-in and opt-out data, consent ID, consent number, date and time of consent, implicit or explicit consent, banner language, customer preference, template version) and in relation to device data (device information, browser information (http agent, http referrer), anonymized IP address). These data are transmitted to Usercentrics.

The legal basis for the data processing is point (c) of Article 6 (1) GDPR, namely fulfillment of our legal obligations.

(9) Analytics / marketing

aa) Google services

Our website uses various services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). In doing so, data may possibly also be transmitted to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 in the USA.

Google is certified in the context of the EU-US Data Privacy Framework and is thus covered by the adequacy decision of the EU for the USA.

Google Analytics

Our website uses the Google Analytics tracking tool of Google. We use Google Analytics to evaluate your use of the website, to compile reports on website activities and to provide other services associated with the use of the website, and thereby improve user friendliness.

When Google Analytics is used, interactions of website visitors are primarily recorded and systematically evaluated with the help of cookies.

We use Google Analytics with the extension “anonymizeIp()”. This truncates IP addresses within the member states of the EU or EEA. If data are transmitted to Google’s servers in the USA, the full IP address is only transmitted in exceptional cases and truncated there. A direct reference to a person can therefore generally be ruled out. In particular, an assignment to the called computer or to the end device of the website visitor is no longer possible.

The following data are processed through the use of Google Analytics:

  • Three bytes of the IP address of the called system of the website visitor (anonymized IP address)
  • the called website called
  • the website from which the user reached the accessed page of our website (referrer)
  • the subpages accessed from the website
  • the time spent on the website
  • the frequency with which the website is accessed

Google declares that it will not under any circumstances combine your IP address with any other data held by Google.

Google Tags / Remarketing/Retargeting

Our website uses so-called tracking cookies from Google. When you visit our website, permanent cookies are used to store information about the products you viewed on our website, as well as the third-party ads and web pages through which users reach our website. If you subsequently visit a partner website, we can display customized advertising for you based on the items you viewed on our website.

Google Ads

Our website uses Google Ads, an online advertising program of Google. This employs so-called conversion tracking. If you click on an ad placed by Google, a cookie is set. This cookie loses its validity after 30 days and is not used to personally identify the user. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page.

The data collected using the conversion cookie are used to compile statistics for Ads customers who have opted in to conversion tracking.

Legal basis and withdrawal

The legal basis for the data processing is point (a) of Article 6 (1) GDPR, namely your prior given consent.

You can withdraw your consent at any time with effect for the future by adjusting your preferences in our consent management platform (which can be called up by clicking the fingerprint icon at the lower left of the website).

bb) Facebook Custom Audiences (Pixel/Cookies)

Our website uses a so-called tracking pixel of Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of Facebook Inc., 1601, Willow Road Menlo Park, CA 94025, USA. We use Facebook Pixel to track the success of our own Facebook advertising campaigns and to optimize the relaying of Facebook advertising campaigns to interested target groups.

When you click on a Facebook ad or visit our website, the Facebook Pixel on our website is used to store a cookie on your end device. The cookie processes data about whether you reached our website via a Facebook ad, and allows us to analyze the user’s behavior until the purchase is completed. This allows us to track the success rate of our Facebook advertising campaigns. In addition, the Facebook Pixel processes data about the fact that you have visited our website, and allows the ads that are relayed on Facebook to be customized to your interests.

The Facebook Pixel integrated into our website establishes a direct connection to Facebook’s servers when you visit our website. The information that the cookie generates about your use of this website (including your IP address) is transmitted to Facebook in the USA.

Meta is certified in the context of the EU-US Data Privacy Framework and is thus covered by the adequacy decision of the EU for the USA.

The collected data are anonymous for us and do not allow us to draw any conclusions about the user. If you are registered with Facebook, Facebook can assign the collected information to your account. Even if you do not have a Facebook account or are not logged in when you visit our website, it is possible for Facebook to process and store your IP address and other identification data.

You can withdraw your consent to data processing by Facebook Pixel for our web domain at any time with future effect by adjusting your preferences in our consent management platform (which can be called up by clicking the fingerprint icon at the lower left of the website).

The legal basis for the data processing is point (a) of Article 6 (1) GDPR, namely your prior given consent.

cc) Hotjar

We use the web analytics service Hotjar, of Hotjar Ltd, 3 Lyons Range, 20 Bisazza Street, Silema SLM 1640, Malta, EU (“Hotjar”) in order to optimize the functionality and user-friendliness of our website. Hotjar works with cookies and other technologies to collect statistical information about the behavior of our users and about their end devices. In doing so, Hotjar processes the following data: user behavior (clicks, mouse movements, scroll heights, etc.), IP address of your device (collected and stored in an anonymized format), name and email address (if provided), device screen size, device type and browser functions, and geographic location (country) to determine the preferred language for displaying the website. These data are transmitted to Hotjar’s servers. Hotjar stores this information in a pseudonymized user profile. The information is used neither by Hotjar nor by us to identify individual users, nor is it combined with other data about individual users.

The legal basis for the data processing is point (a) of Article 6 (1) GDPR, namely your prior given consent.

You can withdraw your consent at any time with effect for the future by adjusting your preferences in our consent management platform (which can be called up by clicking the fingerprint icon at the lower left of the website).

Alternatively, you can withdraw your consent to the data collection at any time with effect for the future by clicking the following link and pressing the “deactivate Hotjar” button there: https://www.hotjar.com/opt-out.

Further information on data protection at Hotjar can be found at: https://www.hotjar.com/legal/policies/privacy

dd) Hubspot

Our website uses tracking tools from HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA (“HubSpot”). We use HubSpot to evaluate your use of the website, to compile reports on the activities within this web offering and to provide other services related to the use of the website and thereby improve user friendliness. When using HubSpot, website visitors’ interactions are primarily recorded and systematically evaluated with the help of cookies.

The legal basis for the data processing is point (a) of Article 6 (1) GDPR, namely your prior given consent.

You can withdraw your consent at any time with effect for the future by adjusting your preferences in our consent management platform which can be called up by clicking on fingerprint icon at the lower left of the website.

The data collected in this process are transmitted to the servers of the following service providers in the USA who process the data under commission by valantic GmbH: HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA.

The European branch office of HubSpot, Inc. is located in Ireland: 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, phone: +353 1 5187500.

HubSpot is certified in the context of the EU-US Data Privacy Framework and is thus covered by the adequacy decision of the EU for the USA. Further information about the cookies used by HubSpot can be found in our consent management platform which can be called up by clicking the fingerprint icon at the lower left of the website.

ee) Albacross – Lead Contact Acquisition

Our website uses the service Albacross, of Albacross Nordic AB, Kungsgatan 26, 111 35 Stockholm, Sweden (“Albacross”) to acquire new business leads.

In doing so, the following data may be collected and processed:

  • IP address – IP v4 or v6
  • Location based on IP address
  • URL – including “query string”
  • Referrer/original website for the visitor
  • UserAgent – including, among others, operating system, browser and screen resolution
  • Domain from form input fields (e.g. albacross.com)
  • Fingerprint hash
  • Cookies (nQ_cookieId and nQ_visitId)
  • Employer

On this basis, Albacross uses data matching with publicly available sources (e.g. LinkedIn) to collect additional business-related data:

  • Name
  • Title/position
  • Link to LinkedIn profile
  • Email address and telephone number

The legal basis for the data processing is point (a) of Article 6 (1) GDPR, namely your prior given consent.

Any subsequent contact with you will be established if your company is presumed to have an interest in our services.

The legal basis for data processing is point (f) of Article 6 (1) GDPR, namely our legitimate interest in marketing our services and acquiring new customers.

Albacross sometimes uses subcontractors that are located in the United Kingdom (UK) and thus process data outside the EU. An appropriate level of data protection is guaranteed. An adequacy decision of the EU Commission within the meaning of Article 45 GDPR exists for data processing in the UK.

ff) Taboola Pixel

Our website uses the service Taboola Content Discovery, a service of Taboola Germany GmbH located in Alt Moabit 2, 10557 Berlin, Germany, for recommending individual online content to you. For this purpose, Taboola uses cookies that process the following data relating to you: number of visits, time spent on the website, session and scroll depth, conversion data, the user ID read from the cookie, hashed e-mail addresses (where provided by the user), gender (where provided by the user), browser type and version, the operating system you are using, the referrer URL (i.e. the previously visited website) and your anonymized IP address.

The raw data obtained from this are stored in the USA, the processed data in Israel. An adequacy decision of the EU Commission does not exist for data transmissions to the USA. Taboola GmbH ensures an adequate level of data protection by means of EU standard contractual clauses. A copy of the EU standard contractual clauses concerned can be provided upon request. Please contact datenschutz@muc.valantic.com for this purpose.

An adequacy decision of the EU Commission exists for Israel for the transmission of personal data.

Data may possibly also be transmitted to the United Kingdom. An adequacy decision of the EU Commission also exists for the United Kingdom.

The legal basis for the data processing is point (a) of Article 6 (1) GDPR, namely your prior given consent.

You can revoke your consent at any time with effect for the future by adjusting your preferences in our consent management platform (which can be called up by clicking the fingerprint icon at the lower left of the website)

gg) Pardot

We use the web analytics service Pardot, of Salesforce.com, Inc., Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, United States of America (“Pardot”) in order to optimize the functionality and user-friendliness of our website. Pardot works with cookies and other technologies to collect statistical information about the behavior of our users and about their end devices. In doing so, Pardot processes the following data: user behavior (clicks, mouse movements, scroll heights, etc.), IP address of your device, device type and browser functions and geographical location (country). These data are transmitted to Pardot’s servers. Pardot stores this information in a pseudonymized user profile. The information is used neither by Pardot nor by us to identify individual users, nor is it combined with other data about individual users.

The legal basis for the data processing is point (a) of Article 6 (1) GDPR, namely your prior given consent.

You can withdraw your consent at any time with effect for the future by adjusting your preferences in our consent management platform (which can be called up by clicking the fingerprint icon at the lower left of the website).

Salesforce is certified in the context of the EU-US Data Privacy Framework and is thus covered by the adequacy decision of the EU for the USA.

hh) ipdata

We use the web analytics service ipdata, of ipdata, llc, 182-21 150th Avenue Springfield Gardens, NY 11413 USA (“ipdata”) in order to optimize the functionality and user-friendliness of our website. For this, ipdata processes the IP address with which you access our website. This datum is transmitted to ipdata’s servers in the USA (which are hosted by AWS). The information is used neither by ipdata nor by us to identify individual users, nor is it combined with other data about individual users.

The legal basis for the data processing is point (a) of Article 6 (1) GDPR, namely your prior given consent.

You can withdraw your consent at any time with effect for the future by adjusting your preferences in our consent management platform (which can be called up by clicking the fingerprint icon at the lower left of the website).

An adequacy decision of the EU Commission does not exist for data transmissions to the USA. ipdata ensures an adequate level of data protection through its observance of EU standard contractual clauses. We can provide you with a copy of the EU standard contractual clauses upon request. For this, please contact info@muc.valantic.com.

(9) External contents

We use dynamic content (“Content”) from third parties to optimize our website presentation and offering. When you visit the website, a request is automatically sent over an interface to the server of the respective content provider, during which certain log data (e.g. the user’s IP address) are transmitted. The dynamic Content is then transmitted to our website and displayed there.

We use external Content in connection with the following functionalities:

LinkedIn plugin

Our website uses the LinkedIn plugin which is provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. This enables direct access to the LinkedIn website when the corresponding icon is clicked on our website. LinkedIn processes the data generated by the use of the plugin.

Data collected when using the plugin may possibly be forwarded to the LinkedIn Corporation based in the USA and processed there. For data transmissions to the USA, LinkedIn ensures an adequate level of data protection through its observance of EU standard contractual clauses. We can provide you with a copy of the EU standard contractual clauses upon request. For this, please contact info@muc.valantic.com

Further information about the LinkedIn plugin can be found at: https://legal.linkedin.com/plugin-terms-of-use

Google reCaptcha

Our website uses the “Google reCaptcha” captcha service from Google to protect our website from interactions with bots. When you visit the website, data, including your IP address, the referrer URL, information about the operating system, information about cookies, mouse movements and keyboard strokes as well as the length of stay and the settings of your end device are transmitted to Google. The legal basis for the processing is our legitimate interest pursuant to point (f) of Article 6 (1) GDPR, namely the security of our website.

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) is responsible for data processing. It cannot be ruled out that data will be transmitted to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google is certified in the context of the EU-US Data Privacy Framework and is thus covered by the adequacy decision of the EU for the USA.

(10) Webinars

We process your data in connection with your participation in webinars. We process the following personal data for the purposes of registering and running a webinar

  • Communication data (e.g. your email address, if you provide it).
  • Personal master data (if you provide it)
  • Company data
  • Log files, log data
  • Meta data (e.g. IP address, time of participation, etc.).

Unless otherwise stated, for example in the invitation, we will not allow audio or video recording of participants to maintain anonymity.

Additional information may be required depending on the webinar tool used to conduct the webinar (e.g. MS Teams, Zoom, etc.). In this case, we will provide additional information as part of the registration process. We will also inform you about possible recipients and any transfers to third parties.

The data will only be used to administer your registration and participation in the webinar and to send you information, notifications and documents in connection with the webinar.

The legal basis for data processing is Art. 6 (1) b) GDPR (fulfillment of a contractual relationship) and, if applicable, point (f) of Article 6 (1) GDPR (legitimate interest). Our legitimate interest is the smooth running of the webinar.

b) Services used exclusively by valantic GmbH

The following services are used exclusively by valantic GmbH and not by other companies in the valantic group of companies.

External content

We use dynamic content (“content”) from third parties to optimize our website presentation and website offering. When you visit the website, a request is automatically sent via an interface to the server of the content provider concerned, during which certain log data (e.g. the users’ IP address) are transmitted. The dynamic content is then transmitted to our website and displayed there.

We use external content in connection with the following functionalities:

(1) Integration of YouTube videos

Our website includes videos from the YouTube portal of YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (“YouTube”). Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”) is responsible for data processing at YouTube. When the videos are played, however, log data are transferred to YouTube’s servers in the USA.

The legal basis for the data processing is point (f) of Article 6 (1) GDPR, namely our overriding legitimate interest in the optimal marketing of our online offering.

Google is certified in the context of the EU-US Data Privacy Framework and is thus covered by the adequacy decision of the EU for the USA.

(2) Google Maps

Our website uses the map service “Google Maps” from Google to provide you with an interactive map. When displaying the map, data including your IP address and location are transmitted to Google servers and stored there.

The legal basis for the data processing is point (a) of Article 6 (1) GDPR, namely your prior given consent.

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) is responsible for the data processing for Maps. A transmission of data to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA cannot be ruled out.

Google is certified in the context of the EU-US Data Privacy Framework and is thus covered by the adequacy decision of the EU for the USA.

(3) Spotify

We use external content from Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Sweden (“Spotify”) to make visiting our website attractive. In doing so, the following data are processed: IP address, date and time of the call, browser information, usage data, retrieved content. A transmission of data to the USA cannot be ruled out.

For data transmissions to countries without an adequacy decision of the EU Commission, Spotify ensures an adequate level of data protection through its observance of EU standard contractual clauses. We can provide you with a copy of the EU standard contractual clauses upon request. For this, please contact info@muc.valantic.com.

The legal basis for the data processing is point (a) of Article 6 (1) GDPR, namely your prior given consent.

You can withdraw your consent at any time with effect for the future by adjusting your preferences in our consent management platform (which can be called up by clicking the fingerprint icon at the lower left of the website).

(4) podigee

We use external content from podigee GmbH, Schlesische Strasse 20, 10997 Berlin, Germany (“podigee”) to make visiting our website attractive. In doing so, the following data are processed: IP address, date and time of the call, browser and device information, usage data, retrieved content. A transmission of data to countries outside the EU cannot be ruled out.

For data transmissions to countries without an adequacy decision of the EU Commission, podigee ensures an adequate level of data protection through its observance of EU standard contractual clauses. We can provide you with a copy of the EU standard contractual clauses upon request. For this, please contact info@muc.valantic.com.

The legal basis for the data processing is point (a) of Article 6 (1) GDPR, namely your prior given consent.

You can withdraw your consent at any time with effect for the future by adjusting your preferences in our consent management platform which can be called up by clicking the fingerprint icon at the lower left of the website.

5. Duration of data storage

We store personal data only as long as is necessary for the designated processing purposes or until you withdraw your given consent. Where statutory retention obligations must be observed, the storage period for certain data can be up to 10 years, regardless of the designated processing purposes.

6. Your rights as a data subject

a) Right to information

Upon request, we will provide you at any time and at no charge with information about all the personal data that we have stored about you.

b) Right to rectification, erasure, restriction of processing (blocking), right to object

If you no longer consent to the storage of your personal data or if these data have become inaccurate, we will arrange for your data to be erased or blocked, or to be rectified as necessary (provided that this is possible under applicable law), as per your instructions. The same applies if we are to process data only in a restrictive manner in the future. You have a right to object, in particular, in cases where your data are required due to the performance of a task that is in the public interest or the data processing is based on our legitimate interest, as well as in the event of profiling based on this.

You also have such a right to object if your data are processed for the purpose of direct marketing.

c) Right to withdraw consents with effect for the future

You may withdraw given consents at any time with effect for the future. Your withdrawal does not affect the lawfulness of the processing up until the time of the withdrawal.

d) Right to data portability

Where data are processed on the basis of a contract, pre-contractual negotiations, consent or with the help of automated processes, you have the right to data portability. Upon request, we will provide you with your data in a common, structured and machine-readable format to enable you to transmit the data to another controller if so desired.

e) Right to restrict processing

Data for which we are unable to identify the data subject, e.g. if they have been anonymized for analysis purposes, are not covered by the above rights. The right to information, erasure, blocking, rectification and transmission to another company may be possible for these data if you provide us with additional information that allows us to associate them with to you.

f) Exercising your data subjects’ rights, right to lodge a complaint

If you have any questions regarding the processing of your personal data, or wish to obtain information, or rectify, block, object to or erase data, or if you wish to have your data transmitted to another company, please contact info@muc.valantic.com.

You also have the option of lodging a complaint with a supervisory authority in regard to your data subject’s rights.