Privacy Statement (Version: July 2025)

We take data protection seriously

Protecting your privacy when processing personal data is important to us. We would therefore like to provide you with the following information on data protection.

Responsible in Austria:

ACP Holding Österreich GmbH
Wagenseilgasse 3
A-1120 Vienna

Telephone: +43 1 89193 0
Email: datenschutz@acp.at

Responsible in Germany:

ACP Holding Deutschland GmbH
Willy-Brandt-Platz 6
D-81829 Munich

Telephone: +49 89 547274100
Email: gruppe@acp.de

Data protection information

Data Protection Officer:

Projekt 29 GmbH Co.KG
Mr Christian Volkmer
Ostengasse 14
93047 Regensburg

Tel.: 0049 941 2986930
Fax: 0049 941 29869316
Email: anfragen@projekt29.de
Website: www.projekt29.de

The responsible entities operate this website for all companies in the ACP Group. An overview of the companies can be found here. Where necessary, data is exchanged within the ACP Group, for example to forward your enquiry to the appropriate employee.

Personal data

Personal data is data relating to you as an individual. This includes your name, address and email address. You do not need to disclose any personal data in order to visit our website. In some cases, we require your name and address as well as further information in order to provide you with the service you have requested.

The same applies if we provide you with information material at your request or respond to your enquiries. In such cases, we will always inform you accordingly. We also only store data that you have transmitted to us automatically or voluntarily.

When you use one of our services, we generally collect only the data that is necessary in order to provide that service. We may ask you for additional information, but this will be voluntary. Whenever we process personal data, we do so in order to provide you with our service or to pursue our commercial objectives.

Contact form

If you send us data via the contact form, this data will be stored on our servers as part of our data backup processes. We use your data exclusively to process your enquiry and, where necessary, forward it within the ACP Group for this purpose. Your data will be treated as strictly confidential. It will not be disclosed to third parties.

ACP GATE customer portal (meine.acp-gruppe.com)

In the GATE customer portal, we combine many of the points of contact you have with us. Registration is required to use the customer portal. In doing so, we process the personal data you provide (in particular your name, email address and customer number) in order to enable you to access and use the portal (Art. 6 para. 1 lit. b GDPR). When registering or logging in to the portal, the IP address assigned by the Internet Service Provider (ISP), as well as the date and time, are also stored. This processing is carried out to prevent misuse and ensure IT security (Art. 6 para. 1 lit. f GDPR). As a rule, this data is not disclosed to third parties unless there is a legal obligation to disclose it or disclosure is required for law enforcement purposes.

You undertake to keep your personal access data confidential and not to make it accessible to unauthorised third parties.

Our GATE customer portal has an AI-supported search function. This enables simplified searches for documents and information in the portal. An isolated AI instance is used. Data is neither disclosed to third parties nor used to train the AI. Processing therefore takes place entirely within a secure environment (Art. 6 para. 1 lit. f GDPR – legitimate interest in improving the user experience). If you do not wish to use AI support for searches, you can have this function deactivated at any time (opt-out).

Further information on this, or general information on the GATE customer portal, can be found in the Terms of Use.

Newsletter

We use HubSpot software to send our newsletter. In this context, we use the so-called double opt-in procedure, i.e. we will only send you a newsletter by email after you have expressly confirmed that we should activate the newsletter service. We will then send you a notification email and ask you to confirm that you wish to receive our newsletter by clicking on a link contained in that email. When you register for our newsletter, we store your IP address and the date of registration. This storage serves solely as proof in the event that a third party misuses your email address to register you for the newsletter without your knowledge or authorisation. The legal basis is therefore your consent within the meaning of Art. 6 para. 1 lit. a GDPR. If you unsubscribe from the newsletter and there is no business relationship with us, your data will be deleted immediately.

If you later no longer wish to receive newsletters from us, you can object to this at any time without incurring any costs other than transmission costs at the basic rate, for example via the unsubscribe link included in every email.

ACP Group application process

The following data protection provisions apply to applications to all Austrian ACP companies except ACP doIT GmbH. Applications to ACP doIT GmbH are subject to the Data Protection Information for Applicants of ACP doIT GmbH “ACP DOIT” via the Otys Recruiting Tool.

Online applications (for a vacancy or unsolicited application)

On our website, we offer applicants the opportunity to apply online for advertised vacancies or to submit an unsolicited application. The data is entered or uploaded either by applying directly for the vacancy or by first creating a user account and is then transmitted to and stored in our systems.

After submitting an application, you will automatically receive an email at the email address you provided.

We process your application data for the purpose of processing your application, contacting you and providing the user account (if applicable).

When you apply for a specific vacancy, your data is transmitted to the entity responsible for that vacancy. When looking for the best applicants and the most suitable place of work, we consider your applicant data for our vacancies in your region. For this reason, we may pass your applicant data on to companies within the ACP Group.

In the case of unsolicited applications, the data is made available to all members of the ACP Group.

The legal basis for processing your application data is the initiation of a contract (Art. 6 para. 1 lit. b GDPR, where applicable in conjunction with Art. 9 para. 2 lit. a GDPR if your application contains special categories of personal data). The legal basis for processing the data in order to provide the user account is your consent pursuant to Art. 6 para. 1 lit. a GDPR.

As a rule, your applicant data is not passed on to third parties outside the ACP Group. Exceptions may be required in cases prescribed by law, for example for law enforcement purposes or to enforce intellectual property rights. In such cases, the legal basis is Art. 6 para. 1 lit. c GDPR.

We delete the applicant data you have provided from our systems if you expressly withdraw your application. As a rule, your applicant data is also deleted six months after the end of the application process. Thereafter, the results are only stored in the form of residual data for further statistical evaluation. This statistical data set does not allow any conclusions to be drawn about the natural person and is used solely as a basis for statistical analysis.

Deletion cannot take place if the data is required to fulfil a contract or to carry out pre-contractual measures. Early deletion of the data is only possible insofar as contractual or statutory obligations do not prevent deletion. Otherwise, we process your data until any legal disputes for which the data is required as evidence have been concluded.

You can correct your stored data at any time by replying to the acknowledgement of receipt of your application or any subsequent communication and informing us of the data to be corrected.

If you have registered and applied via a user account, you can also correct or delete your data yourself after logging in.

If you subscribe to the job alert on our careers page, you will receive an email asking you to confirm your registration via a link. You will subsequently receive an email notification for each new vacancy that matches the criteria specified in the job alert. You can unsubscribe from each job alert email.

Webshop

We provide each customer with password-protected direct access to the master data we have stored about them (customer account). Here you can view data relating to completed orders and you undertake to keep your personal access data confidential and not to make it accessible to unauthorised third parties. We cannot accept liability for misuse of passwords unless we are responsible for the misuse.

We collect, store and process your data for the entire handling of your purchase. Your personal data will only be passed on or otherwise transferred to third parties where this is necessary for the purpose of processing the contract or billing. For example, as part of order processing, the service providers we use (such as carriers and logistics providers) receive the data required to process the order. The data disclosed in this way may only be used by our service providers to carry out their respective tasks. The information is not used for any other purpose by any of the service providers we commission.

For your order, we require your correct and complete company name, address and VAT identification number for invoicing purposes. We require your email address so that we can assign your order in our ERP system and communicate with you. We also use it for your identification (customer login).

Your personal data will be deleted unless statutory retention obligations prevent this and if you have asserted a right to deletion, if the data is no longer required for the purpose for which it was stored, or if its storage is unlawful for other legal reasons.

Automatically stored data

When you visit our website, our web servers automatically store the IP address of your Internet service provider, the website from which you visit us, the pages you visit on our website, as well as the date and duration of your visit. This information is essential for the technical transmission of the website and secure server operation. This data is not analysed on a personalised basis.

Server log files

The provider of the website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• date and time of the request
• name of the requested file
• page from which the file was requested
• access status (file transferred, file not found, etc.)
• web browser and operating system used
• full IP address of the requesting computer
• amount of data transferred

This data is not merged with other data sources. Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

For reasons of technical security, in particular to prevent attempted attacks on our web server, this data is stored by us for a short period. We are not able to identify individual persons on the basis of this data. After no more than seven days, the data is anonymised by shortening the IP address to domain level so that it is no longer possible to relate it to an individual user. The data is also processed in anonymised form for statistical purposes; it is not compared with other data sets or disclosed to third parties, even in extracts.

Security

We have implemented technical and administrative security measures to protect your personal data against loss, destruction, manipulation and unauthorised access. All our employees and service providers working for us are obliged to comply with the applicable data protection laws.

Whenever we collect and process personal data, it is encrypted before transmission. This means that your data cannot be misused by third parties. Our security measures are subject to continuous improvement and our privacy statements are continuously revised. Please ensure that you have the latest version.

Cookies

When you visit our websites, we store information on your computer in the form of cookies. Cookies are small files transmitted from an Internet server to your browser and stored on your hard drive. Without consent, we only use technically necessary cookies on the legal basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.

In addition, when you first visit our website, we ask for your consent to use cookies to improve our website or for marketing purposes. Only if you consent will these cookies be stored; the legal basis is then your consent pursuant to Art. 6 para. 1 lit. a GDPR.

You can change your cookie settings here at any time:

Your Cookie Settings

Tawk

This website uses Tawk.to for the live chat service offered. This site provides the consultants of thomashutter.com and hutter-consult.com with an external platform for managing chats. The chat is integrated into the source code of thomashutter.com and hutter-consult.com via a script. By using the chat, you automatically use the services of Tawk.to. Data is transferred there for the security and documentation purposes of thomashutter.com and hutter-consult.com. The data collected includes chat history, the name provided, the IP address at the time of the chat and country of origin. This data is not passed on to third parties and is used only for protection and internal statistics. By using the chat, you agree to this. Further information from Tawk.to can be found here. Please read it carefully. Please note that the page is only available in English: https://www.tawk.to/privacy-policy/

HOTJAR

For the purpose of website analysis, technologies provided by Hotjar https://www.hotjar.com Ltd., Level 2, St Julians Business Centre, 3 Elia Zammit Street, St Julians STJ 3155, Malta (“Hotjar”), automatically collect and store data (IP address, time of visit, device and browser information, as well as information about your use of our website) from which pseudonymous usage profiles are created. Cookies may be used for this purpose. The pseudonymised usage profiles are not combined with personal data relating to the person behind the pseudonym without separate, express consent. Hotjar acts on our behalf.

CLARITY

This website uses Clarity. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Dublin D18 P521, Ireland (hereinafter “Clarity”).

Clarity is a tool for analysing user behaviour on this website. In particular, Clarity records mouse movements and creates graphical representations of which parts of the website users scroll through most frequently (heatmaps). Clarity can also record sessions so that we can view website usage in the form of videos. We also receive information about general user behaviour on our website.

Clarity uses technologies that enable users to be recognised for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). Your personal data is stored on Microsoft servers (Microsoft Azure Cloud Service) in the USA.

Clarity is used on the basis of Art. 6 para. 1 lit. a GDPR and, under German law, on the basis of Section 25 para. 1 TDDDG and, under Austrian law, on the basis of Section 96 para. 3 TKG 2003, insofar as consent covers the storage of cookies or access to information on the user’s device (e.g. device fingerprinting). Consent can be withdrawn at any time.

Further details on Clarity data protection can be found here: https://docs.microsoft.com/en-us/clarity/faq.

We have concluded a data processing agreement (DPA) pursuant to Art. 28 GDPR with the provider named above. This is a legally required data protection agreement which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

HubSpot

We use HubSpot, software provided by HubSpot Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA, to create our website. The use of this software includes so-called inbound marketing. Among other things, the software helps us to optimise our marketing strategy through statistical analyses and evaluation of recorded user behaviour. HubSpot uses cookies for this purpose. You can, of course, prevent cookies from being stored by adjusting the relevant settings in your browser or delete cookies that have already been stored. Please note that in this case you may not be able to use all services provided on our website to their full extent. Further information on HubSpot can be found in the HubSpot Inc. Terms of Service and Privacy Policy at http://www.hubspot.com/terms-of-service and http://www.hubspot.com/privacy-policy.

Lead scoring in HubSpot

Lead scoring is a process in which a contact is qualitatively assessed on the basis of a predefined points system in order to identify contacts who have an actual interest in a topic, service or product or who may have an actual intention to purchase.

Both explicit and implicit data are used as assessment criteria.

Explicit contact data, i.e. data that a contact provides themselves, may be collected, for example, by completing a form on our website. Examples of such explicit, i.e. provided, data may include:

• country
• company
• company size
• job titles
• industry
• interests
• etc.

Implicit data may also be taken into account. This mainly consists of information that can be assigned to the contact in HubSpot through use of our website, emails and other channels. Examples of such data collected through implicit interactions may include:

• number of website sessions
• form submissions (type, such as newsletter or contact enquiry, and number)
• number of email “opens” and “clicks”
• interactions on social media
• etc.

This assessment helps us to determine your interests more precisely, provide you with more targeted information and further optimise our offering for you.

UNITED NEWS NETWORK GmbH

Our website uses pixel tracking technology provided by unn | UNITED NEWS NETWORK GmbH (https://www.unn-online.de) to identify business-relevant website visitors.

Only a website visitor’s IP address is processed. Processing is carried out exclusively for the purpose of collecting business-relevant information such as the company name. IP addresses of natural persons are excluded from further use (whitelist procedure).

The IP address is never stored in WebLeads. When processing the data, it is our particular interest to safeguard the data protection rights of natural persons. Our interest is based on Art. 6 para. 1 lit. f GDPR. The data we collect does not at any time allow conclusions to be drawn about an identifiable person. At no time is data read from or stored on the end user’s device (no use of cookies).

SOCIAL PLUGINS FROM FACEBOOK, TWITTER, INSTAGRAM, PINTEREST, XING, ADDTHIS, WHATSAPP

Our website uses social buttons from social networks. These are integrated into the site merely as HTML links, so no connection to the servers of the respective provider is established when our website is accessed. If you click one of the buttons, the website of the respective social network opens in a new browser window. There, for example, you can use the Like or Share button.

ONLINE PRESENCE ON FACEBOOK, TWITTER, INSTAGRAM, LINKEDIN, XING

Where you have given your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR to the respective social media operator, when you visit our online presence on the social media platforms listed above, your data is automatically collected and stored for market research and advertising purposes, and pseudonymous usage profiles are created from it. These may be used, for example, to display advertisements both within and outside the platforms that are likely to correspond to your interests. Cookies are generally used for this purpose. Detailed information on the processing and use of data by the respective social media operator, as well as contact options, your rights and settings options for protecting your privacy, can be found in the providers’ privacy notices linked below. If you nevertheless require assistance in this regard, you can contact us.

Facebook Pixel

This website uses Facebook’s visitor action pixel for conversion measurement. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, the data collected is also transferred to the USA and other third countries. This allows the behaviour of website visitors to be tracked after they have been redirected to the provider’s website by clicking on a Facebook advertisement. This enables the effectiveness of Facebook advertisements to be evaluated for statistical and market research purposes and future advertising measures to be optimised. The data collected is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of users. However, the data is stored and processed by Facebook, making it possible to link it to the relevant user profile and for Facebook to use the data for its own advertising purposes in accordance with Facebook’s Data Use Policy. This allows Facebook to display advertisements on Facebook pages and elsewhere. As the website operator, we have no influence over this use of the data.

This service is used on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR and, under German law, on the basis of Section 25 para. 1 TDDDG and, under Austrian law, on the basis of Section 96 para. 3 TKG 2003. Consent can be withdrawn at any time. Data transfers to the USA are based on the European Commission’s Standard Contractual Clauses.

Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

Insofar as personal data is collected on our website and forwarded to Facebook using the tool described here, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR).

Joint responsibility is limited exclusively to the collection of the data and its transmission to Facebook. Processing carried out by Facebook after transmission is not part of the joint responsibility. The obligations incumbent on us jointly have been set out in a joint processing agreement.

The wording of the agreement can be found at: https://www.facebook.com/legal/controller_addendum.

According to this agreement, we are responsible for providing data protection information when using the Facebook tool and for implementing the tool on our website in compliance with data protection law. Facebook is responsible for the data security of Facebook products. You can exercise data subject rights (e.g. requests for information) relating to data processed by Facebook directly with Facebook. If you exercise your data subject rights with us, we are obliged to forward them to Facebook.

Further information on protecting your privacy can be found in Facebook’s privacy notices: https://de-de.facebook.com/about/privacy/. You can also deactivate the “Custom Audiences” remarketing function in the advertising settings at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do so, you must be logged in to Facebook. If you do not have a Facebook account, you can deactivate Facebook’s interest-based advertising on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.

Facebook Custom Audiences

We use Facebook Custom Audiences. The provider of this service is:

Meta Platforms Ireland Limited
4 Grand Canal Square
Dublin 2
Ireland

When you visit or use our websites and apps, use our free or paid offers, submit data to us or interact with our company’s Facebook content, we collect personal data relating to you. If you consent to our use of Facebook Custom Audiences, we will transmit this data to Facebook, which Facebook can use to show you relevant advertising. Your data may also be used to define target groups (lookalike audiences). Facebook processes this data as our processor. Details can be found in Facebook’s terms of use: https://www.facebook.com/legal/terms/customaudience.

This service is used on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR and, under German law, on the basis of Section 25 para. 1 TDDDG and, under Austrian law, on the basis of Section 96 para. 3 TKG 2003. Consent can be withdrawn at any time. Data transfers to the USA are based on the European Commission’s Standard Contractual Clauses.

Details can be found here: https://www.facebook.com/legal/terms/customaudience and https://www.facebook.com/legal/terms/dataprocessing.

USE OF GOOGLE SERVICES

We use the technologies described below from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Information automatically collected by Google technologies about your use of our website is generally transferred to and stored on a server operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. There is no adequacy decision by the European Commission for the USA. Our cooperation is based on the European Commission’s Standard Contractual Clauses.

If your IP address is collected via Google technologies, it is shortened before being stored on Google’s servers by activating IP anonymisation. Only in exceptional cases is the full IP address transferred to a Google server and shortened there. Unless otherwise stated for the individual technologies, data processing is carried out on the basis of an agreement concluded for the respective technology between joint controllers pursuant to Art. 26 GDPR. Further information on data processing by Google can be found in Google’s privacy information: https://policies.google.com/privacy?hl=de.

Google Tag Manager

This website uses Google Tag Manager. Tag Manager does not collect any personal data. The tool triggers other tags, which may themselves collect data. Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in effect for all tracking tags implemented with Google Tag Manager. Google’s privacy information for this tool can be found here: https://www.google.com/analytics/terms/tag-manager/

Google Analytics

For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information, as well as information about your use of our website), from which pseudonymous usage profiles are created. Cookies may be used for this purpose. As a rule, your IP address is not merged with other Google data. Data processing is carried out on the basis of a data processing agreement with Google.

For the purpose of optimising the marketing of our website, we have activated the data sharing settings for “Google products and services”. This allows Google to access the data collected and processed by Google Analytics and subsequently use it to improve Google services. Data sharing with Google under these settings takes place on the basis of an additional agreement between controllers. We have no influence over subsequent data processing by Google.

We also use the Google Analytics extension Google Optimize to create and run tests.

For web analysis, the Google Analytics extension Google Signals enables so-called “cross-device tracking”. Where your internet-enabled devices are linked to your Google Account and you have activated the “personalised advertising” setting in your Google Account, Google can create reports on your usage behaviour (in particular cross-device user numbers), even if you change devices. In this respect, we do not process personal data; we only receive statistics created on the basis of Google Signals.

For web analysis and advertising purposes, the Google Analytics extension enables the so-called DoubleClick cookie to recognise your browser when you visit other websites. Google will use this information to compile reports on website activity and to provide other services relating to website use.

Google AdSense

Our website markets advertising space for third-party advertisements via Google AdSense. These advertisements are displayed to you at various locations on this website. The so-called DoubleClick cookie enables interest-based advertising to be displayed by collecting and processing data (IP address, time of visit, device and browser information, as well as information about your use of our website) and automatically assigning a pseudonymous user ID, which is used to determine interests based on visits to this and other websites.

Google DoubleClick

DoubleClick by Google uses cookies to present you with advertisements that are relevant to you. A pseudonymous identification number (ID) is assigned to your browser in order to check which advertisements have been displayed in your browser and which have been accessed. The cookies do not contain any personal information. The use of DoubleClick cookies only enables Google and its partner websites to display advertisements based on previous visits to our website or other websites on the Internet. The information generated by the cookies is transferred by Google to a server in the USA for analysis and stored there.

Google Maps

For the visual display of geographical information, Google Maps collects data about your use of Maps functions, in particular your IP address and location data, transmits it to Google and subsequently processes it. We have no influence over this subsequent data processing.

Adform

To improve the convenience and quality of our service, we use conversion tracking and retargeting technology, both web services provided by Adform ApS, Wildersgade 10B, 1, 1408 Copenhagen K, Denmark.

Conversion tracking:
This website uses Adform conversion tracking. The temporary conversion tracking cookie is set when a user interacts with an advertisement placed by Adform.

Users who do not wish to participate in tracking can disable the Adform or Google cookie via their Internet browser or object to data collection and storage at any time for the future here. Cookies already stored on your computer can be deleted in your browser or by deleting temporary website data.

Retargeting:
This website uses Adform retargeting technology. This makes it possible to target Internet users with advertising on our partners’ websites if they have previously shown an interest in our website and our products. Retargeting advertisements are displayed on the basis of a cookie-based analysis of previous user behaviour. This is a temporary cookie that expires after 60 days. If you do not wish to see interest-based advertising from Adform, you can object to data collection and storage at any time for the future here. Further information on Adform’s data protection provisions can be found at http://site.adform.com/privacy-policy/de/.

AddThis

We use the addthis.com bookmarking service on our website. AddThis is a service provided by Clearspring Technologies Inc., 8000 Westpark Drive, Suite 625, McLean, VA 2210, USA. Each time you access one of our web pages containing an “AddThis” component, this component causes the browser you are using to download the corresponding representation of the component from addthis.com. This process informs addthis.com which specific page of our website you are currently visiting. addthis.com also receives information about your IP address, browser type, browser language, the previously visited website, and the date and time of your visit in order to create anonymised user profiles from this data. This data allows AddThis and its partner companies to target visitors to our website with personalised, interest-based advertising. Advertising is displayed on the basis of the browser cookie set by addthis.com, which analyses the website visitor’s usage behaviour. You can permanently object to the setting of the addthis.com cookie by downloading and installing the opt-out cookie available at: http://www.addthis.com/privacy/opt-out.

Please note, however, that in this case you may not be able to use all functions of our website to their full extent. AddThis’s privacy information on the collection and use of data can be found at: http://www.addthis.com/privacy/privacy-policy.

Bitly

We use the “Bitly” tool provided by bitly.inc (39 5th Avenue, New York, NY 10010, USA) to generate short URLs. Privacy Policy and opt-out: https://bitly.com/pages/privacy?lang=de

Moat

We use the Moat tool to deliver advertisements that are relevant to you.
Moat is provided by Moat Inc., 228 Park Ave South #17953, New York NY 10003, United States.
Privacy information
Opt-out link

Microsoft Bookings

Our website uses Microsoft Bookings, an online appointment scheduling service (part of Microsoft 365) provided by Microsoft Ireland Operations Limited (hereinafter “Microsoft”).

The software enables the booking of a consultation or event appointment. A connection to the service is only established if you access the online booking function via a link or button on our website.

For appointment scheduling, the information you enter in the appointment form is transmitted to Microsoft. Any transfer of data to the USA is safeguarded through the use of the EU Standard Contractual Clauses and additional safeguards. Further information on how Microsoft handles your data can be found in Microsoft’s Privacy Statement at https://privacy.microsoft.com/de-de/privacystatement.

The legal basis for providing the “Microsoft Bookings” service is Art. 6 para. 1 lit. f GDPR (legitimate interest in data processing). The legitimate interest arises from our aim to provide you with a user-friendly website and to give you the opportunity to arrange an appointment with us quickly and easily whenever required.

Please note that you are not obliged to use Microsoft Bookings to arrange an appointment. If you do not wish to use the service, please use one of the other contact options offered to arrange an appointment. The legal basis for processing your data when you submit the form is Art. 6 para. 1 lit. a GDPR (consent).

GoTo Webinar

As a global “work-from-anywhere” company, GoTo offers products designed to simplify the way people connect with each other and with the world around them. With users in almost every country worldwide, we maintain a global privacy programme designed to secure and protect the data entrusted to us by our customers, users and their end users. https://www.goto.com/de/company/trust/privacy

Use of Microsoft Teams for online meetings

We use Microsoft Teams, a service provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (hereinafter “Microsoft”), to conduct online meetings, video conferences and webinars. A data processing agreement pursuant to Art. 28 GDPR has been concluded with Microsoft.

Personal data is processed on the basis of Art. 6 para. 1 lit. b GDPR (performance of a contract or steps taken prior to entering into a contract) and, where necessary, on the basis of our legitimate interest in efficient and secure communication pursuant to Art. 6 para. 1 lit. f GDPR.

Various types of data are processed when Microsoft Teams is used. These include in particular:

• user information (e.g. name, email address, IP address)
• meeting metadata (e.g. date, time, duration, meeting ID)
• communication content (e.g. chat messages, audio, video and, where applicable, screen sharing)

Meetings are only recorded if participants have given their express prior consent.

Recordings are used exclusively for the purpose communicated in advance (e.g. storing the meeting for training purposes, automatic creation of transcripts using AI) and are stored or deleted in accordance with statutory requirements.

As a general rule, we delete personal data when there is no longer any need for further storage.

Further information on data processing by Microsoft can be found at: https://learn.microsoft.com/de-de/microsoftteams/teams-privacy

Data subject rights

You have the right at any time to access, rectification, erasure or restriction of processing of your stored data, the right to object to processing, as well as the right to data portability and to lodge a complaint in accordance with the requirements of data protection law.

Right of access

You may ask us whether and to what extent we process your data.

Right to rectification

If we process data relating to you that is incomplete or inaccurate, you may request its correction or completion at any time.

Right to erasure

You may request that we erase your data if we process it unlawfully or if the processing disproportionately interferes with your legitimate interests requiring protection. Please note that there may be reasons preventing immediate erasure, for example statutory retention obligations.

Irrespective of whether you exercise your right to erasure, we will delete your data promptly and completely unless contractual or statutory retention obligations prevent this.

Right to restriction of processing

You may ask us to restrict the processing of your data if:

• you contest the accuracy of the data, for a period enabling us to verify its accuracy;
• the processing of the data is unlawful, but you oppose erasure and request restriction of use instead;
• we no longer need the data for the intended purpose, but you still need it to establish or defend legal claims; or
• you have objected to the processing of the data.

Right to data portability

You may request that we provide you with the data you have supplied to us in a structured, commonly used and machine-readable format and that you are able to transmit this data to another controller without hindrance from us, provided that:

• we process this data on the basis of consent you have given and can withdraw, or in order to perform a contract between us; and
• the processing is carried out by automated means.

Where technically feasible, you may request that we transmit your data directly to another controller.

Right to object

Where we process your data on the basis of legitimate interests, you may object to this processing at any time; this also applies to profiling based on these provisions. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims. You may object to the processing of your data for direct marketing purposes at any time without giving reasons.

Right to lodge a complaint

If you believe that we are processing your data in breach of German or European data protection law, please contact us so that we can clarify any questions. You also have the right to contact the supervisory authority responsible for you, i.e. the relevant state data protection authority.

If you wish to exercise any of the rights listed above against us, please contact our Data Protection Officer. In case of doubt, we may request additional information to confirm your identity.

Changes to this Privacy Statement

We reserve the right to amend our privacy statements if this becomes necessary due to new technologies. Please ensure that you have the latest version. If fundamental changes are made to this Privacy Statement, we will announce them on our website.

All interested parties and visitors to our website can contact us with data protection enquiries at:

Mr Christian Volkmer

Projekt 29 GmbH & Co. KG
Ostengasse 14
93047 Regensburg

Tel.: 0049 941 2986930
Fax: 0049 941 29869316
Email: anfragen@projekt29.de
Website: www.projekt29.de