Data Protection

Responsible Party pursuant to Data Protection Laws

equipme GmbH
Otto-Volger-Straße 5 a/b
65843 Sulzbach Ts
Phone: +496196 5826 000
Email: team@equipme.io
Managing Directors: Paul Martin, Alexandre Seifert
Registered Office: Sulzbach i.Ts.

VAT Identification Number pursuant to § 27 a of the German VAT Act (Umsatzsteuergesetz): DE347444321
Commercial Register Entry: Frankfurt District Court (Amtsgericht Frankfurt) HRB 124435

Data Protection Notice

We would like to inform you about the processing of personal data in connection with your use of our website.

Responsible Party

equipme GmbH is responsible for these websites. Further information about our company and authorized representatives can be found in our Imprint.

What data is processed?

Legal Basis for Data Processing

To be able to provide you with our website and associated services, we process personal data based on the following legal bases:

• Consent (Art. 6 (1) lit. a GDPR)
• Fulfillment of contracts (Art. 6 (1) lit. b GDPR)
• Based on a balancing of interests (Art. 6 (1) lit. f GDPR)
• Fulfillment of a legal obligation (Art. 6 (1) lit. c GDPR)

We will reference the corresponding legal bases in connection with each processing activity, so you can understand the basis on which we process personal data.

If personal data is processed on the basis of your consent, you have the right to withdraw your consent at any time with effect for the future.

If we process data based on a balancing of interests, you have the right to object to the processing of personal data in accordance with the provisions of Art. 21 GDPR.

Access Data

When you visit our website, personal data is processed to display the content of the website on your device.

For the pages to be displayed in your browser, the IP address of the device you are using must be processed. In addition, we receive further information about your browser.

We are legally obligated to ensure the confidentiality and integrity of personal data processed with our IT systems.

For this purpose and based on this interest, the following data is logged on the basis of a balancing of interests:

• IP address in case of faulty website calls "Error Log" (for a maximum of 7 days)
• Operating system of the requesting computer
• Browser version of the requesting computer
• Name of the requested file
• Date and time of the request
• Data transferred
• Referring URL

The IP address is deleted from all systems used in connection with the operation of these websites after a maximum of 7 days. We can then no longer establish a personal reference from the remaining data.

The data is also used to identify and correct errors on the website.

Contact Form

We offer a contact form on our website through which you can request information about our products or services or contact us generally. We have marked the data that is required from you to answer your inquiry as mandatory fields. Information about any additional data fields is voluntary.

We need these details to process your inquiry, address you correctly, and send you a response. For specific inquiries, data processing takes place to fulfill a contract or contract initiation. For general inquiries, processing takes place based on a balancing of interests.

Inquiries received through the contact form on our website are processed electronically to answer your inquiry. In this context, other persons or departments and possibly third parties may become aware of the form contents you have submitted.

The transmission of form data over the Internet takes place via encrypted connections.

Newsletter

You can also subscribe to an email newsletter on our website. In addition to voluntary information in the respective form, we only process your email address. However, this is also required to send you the newsletter.

You can unsubscribe from the newsletter at any time. Alternatively, you will find an unsubscribe link in each newsletter email.

To be able to analyze the popularity of our newsletter mailings and optimize them, we log when emails are opened and links are clicked. This usage analysis is based on a balancing of interests. You can object to this processing by unsubscribing from the newsletter.

When sending the newsletter, our service provider ("Chimpify") may use service providers outside the European Union. In this case, the service provider ensures that the requirements for an appropriate level of data protection pursuant to Art. 44 et seq. GDPR are met.

Cookies

Cookies are used on our website. Cookies are small text information that is stored on your device through your browser. Cookies are required to enable certain functions of our website.

We use both session cookies, which are automatically deleted by your browser immediately after you finish visiting the website.

In the area of web analytics, we also use so-called persistent cookies, which are not automatically deleted after you finish visiting our website.

You have the option to prevent cookies from being set by appropriate settings in your browser. However, we point out that the use of our website may then be limited. Cookies do not install or start any programs or other applications on your computer.

The use of cookies is based on a balancing of interests. Our interest is to provide a user-friendly visit to our website.

Use of Third-Party Tools

Stetic

The web analytics tool "Stetic" is used on this website. The purpose of this use is the "needs-based design" of this website, which is carried out based on a balancing of interests. Web analytics also enables us to identify and correct errors on the website, such as broken links. Stetic uses so-called "cookies." These are text files stored on your computer that enable analysis of your use of the website.

You can prevent the collection of data generated by the cookie and related to your use of the website by opting out on this page.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. (hereinafter "Google"). Google Analytics uses so-called "cookies," which are text files stored on your computer that enable analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Due to the activation of IP anonymization on this website, your IP address is shortened by Google within member states of the European Union or in other parties to the Agreement on the European Economic Area before transmission. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities, and to provide other services associated with website use and internet use to the website operator. The IP address transmitted by your browser in the context of Google Analytics will not be merged with other Google data.

You can prevent cookies from being stored by making appropriate settings in your browser software; however, please note that if you do this, you may not be able to use all features of this website in full. Additionally, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and prevent Google from processing this data by downloading and installing the browser plugin available at the following link: Browser Add-on to Disable Google Analytics.

As an addition or alternative to the browser add-on, you can disable tracking by Google Analytics on our pages by clicking this link. This will install an opt-out cookie on your device. This will prevent Google Analytics from collecting data for this website and this browser in the future, as long as the cookie remains installed in your browser.

Google Webfonts

We use so-called Google Webfonts on our website. Font files are loaded from Google servers to provide better design of the website. Data processing is based on a balancing of interests, with our interest being in an attractive design of the website.

The respective fonts are loaded from Google servers, which are usually located in the USA. Google guarantees an appropriate level of data protection (Privacy Shield entry).

Google Tag Manager

This website uses the "Google Tag Manager" service. Tag Manager is a tool for managing so-called tags, which are used for tracking in online marketing. Tag Manager itself does not process personal data, as it is purely for the management of other services – such as Google Analytics, etc.

Further information on Tag Manager can be found at: https://www.google.com/intl/de/tagmanager/use-policy.html

Google Analytics (Additional Information)

This website uses the "Google Analytics" service. The operator of this service is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Google Analytics is a web analytics service that allows us, through the use of cookies and the information obtained, to draw conclusions about user behavior on our website. The information generated by the cookies is sent to a Google server in the USA and stored there. On our website, Google Analytics is used exclusively on a pseudonymous basis. Your IP address is only recorded in shortened form and thus anonymized.

The following data is collected and processed using Google Analytics:

• IP address (anonymized)
• Usage data
• Click path
• App updates
• Browser information
• Device information
• JavaScript support
• Pages visited
• Referrer URL
• Downloads
• Flash version
• Location information
• Purchase activity
• Widget interactions
• Date and time of visit

The legal basis for processing is your consent pursuant to Art. 6 (1) lit. a GDPR. If you do not want Google Analytics to collect and process the aforementioned data, you can refuse consent or withdraw it at any time with effect for the future.

Personal data is retained for as long as it is required to fulfill the processing purpose. Data is deleted once it is no longer required to achieve the processing purpose.

In the context of processing, data may be transmitted to the following recipients in addition to Google Ireland Limited:

– Google LLC.
– Alphabet Inc.

Data can be transmitted to the USA as part of Google Analytics processing. The security of transmission is ensured through so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a level of security that corresponds to the GDPR. To the extent that standard contractual clauses are insufficient to establish an adequate level of security, consent will be obtained from you in advance pursuant to Art. 49 (1) lit. a GDPR through the Usercentrics consent management system.

Google Audiences / Remarketing

This website uses the "Google Audiences/Remarketing" service. The operator of this service is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

The purpose of this service is the interest-based display of advertisements to users. To do this, an analysis of website usage is required, which is done through cookies. The cookies store anonymized or pseudonymized data regarding website usage. If you visit other websites that also use these services, you will be shown advertisements that correspond to your previous interests.

The following data is collected and processed:

• Pages visited
• IP address
• Time on site
• Other information about website usage
• Content the user is interested in

The legal basis for processing is your consent pursuant to Art. 6 (1) lit. a GDPR. If you do not want Google Audiences/Google Remarketing to collect and process the aforementioned data, you can refuse consent or withdraw it at any time with effect for the future.

Personal data is retained for as long as it is required to fulfill the processing purpose. Data is deleted once it is no longer required to achieve the processing purpose.

In the context of processing, data may be transmitted to the following recipients in addition to Google Ireland Limited:

– Google LLC.
– Alphabet Inc.

Data can be transmitted to the USA as part of Google Audiences/Remarketing processing. The security of transmission is ensured through so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a level of security that corresponds to the GDPR. To the extent that standard contractual clauses are insufficient to establish an adequate level of security, consent will be obtained from you in advance pursuant to Art. 49 (1) lit. a GDPR through the Usercentrics consent management system.

Google Ads (formerly Google AdWords) and Google Ads Conversion Tracking

This website uses the "Google Ads" service. The operator of this service is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. The service is used for so-called "conversion tracking," which means we can see what happened after you clicked on one of our ads. Cookies are set for this purpose, which have a limited validity.

The following data is collected and processed using Google Ads:

• Cookie ID
• Pages visited
• IP address
• Duration of website visit
• Website usage data
• Content the user is interested in
• Clicked advertisements
• Web searches
• Cookie information
• Referrer URL
• Browser language
• Browser type

The legal basis for processing is your consent pursuant to Art. 6 (1) lit. a GDPR. If you do not want Google Ads to collect and process the aforementioned data, you can refuse consent or withdraw it at any time with effect for the future.

Personal data is retained for as long as it is required to fulfill the processing purpose. Data is deleted once it is no longer required to achieve the processing purpose.

In the context of processing, data may be transmitted to the following recipients in addition to Google Ireland Limited:

– Google LLC.
– Alphabet Inc.

Data can be transmitted to the USA as part of Google Ads processing. The security of transmission is ensured through so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a level of security that corresponds to the GDPR. To the extent that standard contractual clauses are insufficient to establish an adequate level of security, consent will be obtained from you in advance pursuant to Art. 49 (1) lit. a GDPR through the Usercentrics consent management system.

YouTube

We embed YouTube videos on some of our web pages. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page with the YouTube plugin, a connection to YouTube servers is established. YouTube is informed of which pages you visit. If you are logged into your YouTube account, YouTube can attribute your browsing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand.

When a YouTube video is started, the provider uses cookies that collect information about user behavior.

If you have deactivated storing cookies for the Google Ad program, you should not expect such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you must block the storage of cookies in your browser.

Further information on data protection at "YouTube" can be found in the provider's data protection statement at: https://www.google.de/intl/de/policies/privacy/

Facebook Custom Audiences and Facebook Pixel

This website uses the "Facebook Custom Audiences" service. For this service, Facebook Pixel is used. These services are operated by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin, D02, Ireland. Facebook Custom Audiences enables us to address users with interest-based advertising in the social network – Facebook. To enable this, we have implemented the Facebook Remarketing Tag on our website. This tag establishes a direct connection with Facebook servers when you visit the website. Facebook receives information about the pages you have visited on our site. Facebook then compares this with your Facebook user account. On your next visit to Facebook, you will be shown personalized, interest-based advertisements (Facebook Ads). Additionally, Custom Audiences is used to personalize and optimize the website.

The following data is collected and processed using Facebook Custom Audiences:

• Facebook user ID
• IP address
• Browser information
• Non-sensitive custom data
• Facebook cookie information
• Referrer URL
• Pixel-specific data
• Pixel ID
• Social media friend network
• Usage data/user behavior
• Views and interactions with content and advertisements and services
• Content viewed
• Device information
• Marketing campaign success
• Transaction information
• Hardware/software type
• Browser type
• Device operating system
• Geographic location
• Cookie ID
• Information from third-party sources
• User agent
• Conversions

The legal basis for processing is your consent pursuant to Art. 6 (1) lit. a GDPR. If you do not want data to be collected and processed via Facebook Custom Audiences, you can refuse consent or withdraw it at any time with effect for the future.

Personal data is retained for as long as it is required to fulfill the processing purpose. Data is deleted once it is no longer required to achieve the processing purpose.

In the context of processing, data may be transmitted to the following recipients in addition to Facebook Ireland Limited:

Facebook Inc.

Data can be transmitted to the USA as part of YouTube processing. The security of transmission is ensured through so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a level of security that corresponds to the GDPR. To the extent that standard contractual clauses are insufficient to establish an adequate level of security, consent will be obtained from you in advance pursuant to Art. 49 (1) lit. a GDPR through the Usercentrics consent management system.

BingAds

This website uses the "BingAds" service. The service is operated by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

BingAds is a conversion and tracking service. Microsoft sets cookies on user devices that analyze user behavior on our website. This requires that the user reached our website through a BingAds advertisement. As a result, we only receive information about the total number of users who have clicked on such an advertisement. No IP addresses are stored, and no personal information about the identity of our users is shared.

The following data is collected and processed as part of BingAds use:

• Employment metrics
• Number of visits
• Bounce rates
• Microsoft Click ID
• Digital signature
• UET ID tag
• URLs
• Referrer URL
• Page title
• Conversions
• Screen height
• Screen width
• Browser language setting
• Visit duration
• Screen color depth
• Page response times
• Clicked advertisements

The legal basis for processing is your consent pursuant to Art. 6 (1) lit. a GDPR. If you do not want data to be collected and processed via BingAds, you can refuse consent or withdraw it at any time with effect for the future.

Personal data is retained for as long as it is required to fulfill the processing purpose. Data is deleted once it is no longer required to achieve the processing purpose.

Data can be transmitted to the USA as part of BingAds processing. The security of transmission is ensured through so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a level of security that corresponds to the GDPR. To the extent that standard contractual clauses are insufficient to establish an adequate level of security, consent will be obtained from you in advance pursuant to Art. 49 (1) lit. a GDPR through the Usercentrics consent management system.

Capterra

On this website we use Capterra for our online marketing activities. Capterra is operated by Capterra Inc., a software company headquartered at 901 North Glebe Road, Suite 1010, Arlington, VA 22203, USA.

If you trigger a so-called conversion event on one of the Personio websites (e.g., registration of a user account or request for a product demo), Capterra sets cookies that are required for marketing and analysis purposes and sends information that a conversion event has occurred to the Capterra Inc. servers. Further information about Capterra's data processing can be found here.

The following data is collected and processed in this context:

• IP address
• Data about the conversion event

The legal basis for processing is your consent pursuant to Art. 6 (1) lit. a GDPR. If you do not want data to be collected and processed via Capterra, you can refuse consent or withdraw it at any time with effect for the future.

Personal data is retained for as long as it is required to fulfill the processing purpose. Data is deleted once it is no longer required to achieve the processing purpose.

Data can be transmitted to the USA as part of Capterra processing. The security of transmission is ensured through so-called standard contractual clauses and Binding Corporate Rules, which guarantee that the processing of personal data is subject to a level of security that corresponds to the GDPR.

HubSpot

On this website we use the HubSpot service for various purposes. HubSpot is a software company from the USA with an office in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Phone: +353 1 5187500.

HubSpot is an integrated software solution with which we cover various aspects of our online marketing. These include:

Email marketing, Social Media Publishing & Reporting, Reporting, Contact Management (e.g., user segmentation & CRM), landing pages, and contact forms.

Our sign-up service enables visitors to our website to learn more about our company, download content, and provide their contact information and additional demographic information. This information, as well as the content of our website, is stored on the servers of our software partner HubSpot. It can be used by us to contact visitors to our website and to determine which of our company's services are of interest to them. All information we collect is subject to this data protection statement. We use all collected information exclusively to optimize our marketing measures.

More information on HubSpot's data protection terms »

More information from HubSpot regarding EU data protection requirements »

More information on cookies used by HubSpot can be found here & here »

The following data can be collected and processed as part of the optimization of our marketing measures via HubSpot:

• Geographic location
• Browser type
• Navigation information
• Referrer URL
• Performance data
• Information about how often the application is used
• Mobile apps data
• HubSpot subscription service login information
• Files displayed on site
• Domain names
• Pages viewed
• Aggregated usage
• Operating system version
• Internet service provider
• IP address
• Device identifier
• Duration of visit
• Where the application was downloaded from
• Operating system
• Events occurring within the application
• Access times
• Clickstream data
• Device model and version

We also use HubSpot to provide contact forms. Further information on this can be found in subsection 7 of this data protection statement.

The legal basis for processing is your consent pursuant to Art. 6 (1) lit. a GDPR. If you do not want data to be collected and processed via HubSpot, you can refuse consent or withdraw it at any time with effect for the future.

Personal data is retained for as long as it is required to fulfill the processing purpose. Data is deleted once it is no longer required to achieve the processing purpose.

Data can be transmitted to the USA as part of HubSpot processing. The security of transmission is ensured through so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a level of security that corresponds to the GDPR. To the extent that standard contractual clauses are insufficient to establish an adequate level of security, your consent pursuant to Art. 49 (1) lit. a GDPR can serve as the legal basis for data transmission to third countries. Please refer to subsection "7. Forms" for more information.

LinkedIn

We use LinkedIn's retargeting tool and conversion tracking of LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland ("LinkedIn"). For this purpose, the LinkedIn Insight Tag is integrated on our website, which allows LinkedIn to collect statistical data about your visit and use of our website and provide us with appropriate aggregated statistics based on this. The service also serves to be able to show you interest-specific and relevant offers and recommendations after you have informed yourself about certain services, information, and offers on the website. The relevant information is stored in a cookie. Further information on data processing can be found in LinkedIn's data protection statement.

The following data is generally collected and processed:

• IP address
• Device information
• Browser information
• Referrer URL
• Timestamp

The legal basis for processing is your consent pursuant to Art. 6 (1) lit. a GDPR. If you do not want data to be collected and processed via LinkedIn, you can refuse consent or withdraw it at any time with effect for the future.

Personal data is retained for as long as it is required to fulfill the processing purpose. Data is deleted once it is no longer required to achieve the processing purpose.

Data can be transmitted to the USA and Singapore as part of LinkedIn processing. The security of transmission is regularly ensured through so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a level of security that corresponds to the GDPR. To the extent that standard contractual clauses are insufficient to establish an adequate level of security, consent will be obtained from you in advance pursuant to Art. 49 (1) lit. a GDPR through the Usercentrics consent management system.

Purposes of Processing Personal Data

We process the aforementioned data for the operation of our website and for the fulfillment of contractual obligations to our customers or for the protection of our legitimate interests.

For inquiries from you outside of an active customer relationship, we process the data for sales and marketing purposes. You can object to the use of your personal data for marketing purposes at any time.

Voluntary Information

To the extent you provide us with data voluntarily, for example in forms, and such data is not required for the fulfillment of our contractual obligations, we process such data on the justified assumption that processing and use of this data is in your interest.

Recipients / Data Sharing

Data you provide to us is generally not shared with third parties. In particular, your data will not be shared with third parties for their marketing purposes.

However, we may use service providers for the operation of this website or for other products or services. In such cases, a service provider may become aware of personal data. We select our service providers carefully – particularly with regard to data protection and data security – and take all measures required by data protection law to ensure lawful data processing.

Data Processing Outside the European Union

To the extent personal data is processed outside the European Union, you can find information about this in the previous explanations.

Data processing outside the EU takes place with regard to the sending of emails. Our service provider "Chimpify" uses the provider "Sendgrid" for this purpose. The required measures to ensure an appropriate level of data protection have been taken. For this purpose, the so-called EU Standard Contractual Clauses are used, which can be accessed on the websites of the EU Commission.

Data Protection Officer

We are not legally required to appoint a data protection officer.

Your Rights as a Data Subject

You have the right to obtain information about personal data relating to you. You can contact us at any time for information.

If an information request is not made in writing, we ask for your understanding that we may require proof from you that you are the person you claim to be.

Furthermore, you have the right to correction, deletion, or restriction of processing, to the extent this is permitted by law.

Finally, you have a right to object to processing in accordance with legal provisions. The same applies to a right to data portability.

Deletion of Data

We delete personal data when there is no longer a need to retain it. A need may exist, in particular, if the data is still needed to fulfill contractual services, to examine and grant or refuse warranty and possible guarantee claims. In the case of statutory retention obligations, deletion can only be considered after the respective retention period has expired.

Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of personal data by us.

Changes to This Data Protection Notice

We review this data protection notice when there are changes to this website or other circumstances that make this necessary. You will always find the current version on this website.

Questions About Data Protection

If you have any questions about data protection, please send us an email or contact our data protection officer directly:

equipme GmbH
Phone: +496196 5826 000
Email: team@equipme.io