Privacy Policy.

Thank you for visiting the website of Polyteia GmbH. In the following, we explain how we collect and use your personal information, the purposes and legal bases involved, as well as your rights and claims in this regard.

I. Collection and processing of your personal data
1. Responsible person

Polyteia GmbH is responsible for the data processing described below in accordance with data protection regulations. You can contact us via email to info@polyteia.de.

2. Data protection officer

Our external data protection officer is available to provide information on data protection at the following contact details: 

Ali Tschakari,
LL.M.Bitkom Servicegesellschaft mbH
Albrechtstraße 10
10117 Berlin 

Email: datenschutz@bitkom-consult.de

When contacting our data protection officer, please specify the responsible entity mentioned in the imprint.

3. Website hosting

For the operation of our website, we use the hosting service Webflow. Webflow is a service provided by Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA. 

For the purpose of providing and delivering the website, connection data (IP address of the requesting computer; date and time of the request; name and URL of the accessed file; amount of data transferred; indication of whether the request was successful; identification data of the browser and operating system used) are processed. The data is not stored beyond the mere purpose of delivering and providing the website. 

The legal basis for data processing is legitimate interest (unconditional technical necessity to provide and deliver the service "website" expressly desired by you through your request) in accordance with Art. 6 para. 1 lit. f GDPR.

4. Processing of log files

When you visit our website, our web server stores standardized information about your end device and the browser used in a log file. We process this data to analyze server errors and attempted abuses. This data consists of:

  • the name of the accessed webpage,
  • the date and time of the request,
  • the amount of data transferred,
  • the message about the successful retrieval,
  • the IP address of the requesting computer,
  • the specific address of the page accessed on our site,
  • the page from which you accessed us,
  • the transmitted identifier of the browser.

You are not identifiable to us from this data, and the log data is pseudonymized/anonymized for evaluation. Log data is regularly deleted promptly, but no later than after 7 days. The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR.

5. SSL or TLS encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., inquiries to the controller). You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser bar.

6. Contact
↳ 6.1. Contact form

Our website has a contact form that can be used for electronic communication. When you contact us via our contact form or personal messages, the data entered in the input mask is transmitted to us and stored.

Fields marked with * are mandatory fields. To transmit this data, it must be confirmed that the privacy policy has been acknowledged. We use this data on the basis of Art. 6 para. 1 lit. f GDPR to respond to your inquiry.

In addition, Art. 6 para. 1 lit. b GDPR may also serve as a legal basis if your inquiry is related to the performance of pre-contractual measures.

Fields not marked with "*" are purely voluntary information. The processing of data that you enter voluntarily into the form is based on Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time for the future by informal notification, e.g., by email to info@polyteia.de.

↳ 6.2. Contact via email

When you contact us by email, your inquiry, including all resulting personal data (name, first name, inquiry, etc.), is stored and processed for the purpose of processing your request.

The processing of this data is based on Art. 6 para. 1 lit. b GDPR, provided your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures.

In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries directed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art.6 para. 1 lit. a GDPR) if requested.

The data sent to us via contact inquiries will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after completion of your request). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

7. Online-meeting / Meeting scheduling

To allow you to schedule an appointment for an online meeting, we collect certain personal data from you. This includes your name, email address, and any other contact details you provide when scheduling the appointment. This data is used exclusively for the purpose of scheduling the appointment and communicating with you.

We use this data on the basis of Art. 6 para. 1 lit. b GDPR (performance of a contract or pre-contractual measures) to schedule an appointment with you and respond to your inquiries.

8. Registration (Account)

As part of a long-term business relationship, it is necessary for an employee of your administration to receive administrative rights to create an account for other employees. Certain data is required for the registration and use of these accounts, which is stored on our server for the duration of the business relationship and used for your login and email addressing. This data includes:

  • First name
  • Last name
  • Institution
  • Email address

We only collect the data necessary for registration. The processing of this information is carried out in accordance with Article 6 (1)(b) GDPR or Article 6 (1)(f) GDPR to provide you with access and information to the protected area.

If additional data is collected, it is marked as voluntary and subject to your consent in accordance with Article 6(1)(a) GDPR.

If you wish to permanently unsubscribe from the protected area, please send us an email to support@polyteia.de.

9. Registration (Trial Account)

To provide you with access to our trial access and offer you an optimal user experience, we require certain data that is stored on our server for the duration of the trial access and used for your login and email addressing. This data includes:

  • First name
  • Last name
  • Institution
  • Email address

We only collect the data necessary for registration. The processing of this information is carried out in accordance with Article 6(1)(b) GDPR or Article 6(1)(f) GDPR in order to provide you with access to and information about the protected area.

If additional data is collected, it is marked as voluntary and is subject to your consent in accordance with Article 6(1)(a)GDPR.

If no permanent business relationship with Polyteia GmbH has been established after the 14-day trial access period, your data, including all data created by you during the trial access, will be deleted from the Polyteia database.

10. Registration (Data Academy)

In order to grant you access to our Data Academy, we require certain data that will be stored on our server for the duration of the business relationship and used for your login as well as addressing in emails. This data includes:

  • First name
  • Last name
  • Institution
  • Email address

We only collect the data necessary for registration. The processing of this information is carried out in accordance with Article 6(1)(b) GDPR or Article 6(1)(f) GDPR in order to provide you with access to and information about the protected area.

If additional data is collected, it is marked as voluntary and is subject to your consent in accordance with Article 6(1)(a)GDPR.

If you wish to permanently unsubscribe from the protected area, please send us an email to support@polyteia.de.

11. Sending surveys and personalized information (Newsletter)
↳ 11.1. Newsletter and analysis of recipient profiles

On our website, you have the opportunity to subscribe to newsletters on various topics. For this purpose, the following data for the purpose of advertising delivery will be processed within the scope of your consent: email address.

Polyteia GmbH uses the so-called double opt-in procedure to confirm your request and email address. An email will be sent to the email address you provided asking for confirmation of your consent. In connection with the double opt-in procedure, we document the IP address, date and time of sending the web form, as well as the IP address, date and time of confirming the double opt-in email.

If you have given your consent to advertising and marketing communication, we conduct analyses, individual measurements, storage, and evaluation of open rates and click-through rates in recipient profiles. Based on our analyses, we create corresponding recipient profiles in order to better understand the interests of our recipients and to be able to design the following communications in line with their interests.

Please note that the sending of marketing content, such as newsletters, is always associated with the analysis of your recipient profile. Sending marketing content without analyzing your recipient behavior is not possible.

Our basis for analyzing your recipient profile is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with § 25(1)TTDSG. You can unsubscribe from receiving our newsletter at any time via the unsubscribe link in each newsletter or by informal notification to marketing@polyteia.de.

At the same time, your consents to its dispatch by the shipping service provider and the statistical analyses expire. Unfortunately, a separate revocation of the dispatch by the shipping service provider or the statistical evaluation is not possible.

↳ 11.2. Newsletter service provider | HubSpot

Our newsletters are sent via "HubSpot," a newsletter delivery platform provided by HubSpot LTD, European Headquarters, Ground Floor, Two Dockland Central, Guild Street, Dublin1, Ireland.

Your personal data is stored on HubSpot's servers. HubSpot uses this information to send and evaluate newsletters on our behalf. Furthermore, according to its own information, HubSpot may use this data to optimize or improve its own services, for example, for the technical optimization of newsletter delivery and display, or for economic purposes, to determine from which countries the recipients come.

However, HubSpot does not use the data of our newsletter recipients to write to them or to pass them on to third parties. HubSpot attaches great importance to the security of your data and compliance with data protection regulations. Further information can be found in HubSpot's privacy policy: https://legal.hubspot.com/de/privacy-policy

12. Customer retention / Advertising for similar goods and services

We also use your contact details for advertising purposes, provided we do not need your consent for this (e.g., for postal advertising, direct advertising for our own similar goods or services within existing customer relationships).

The legal basis for this is our legitimate interest pursuant to § 7(3) UWG in conjunction with Article 6(1)(f) GDPR. Our legitimate interest lies in customer care and providing information about our products.

You can object to the processing of your personal data for the purpose of direct advertising at any time, as described here, by informal notification to info@polyteia.de. Please also note the section "Right to Object (Article 21 GDPR)" in particular.

13. Online application

As part of your online application electronically, i.e., by email, we collect and process personal data for the purpose of handling the application process and conducting pre-contractual measures. By submitting an application, the following data is transmitted:

  • First name
  • Last name
  • Address
  • Phone number
  • Email
  • Application documents (cover letter, CV, certificates, etc.)

Your data will initially only be processed for the purpose of conducting and reviewing the application process. The legal basis for this is Article 6(1)(b) GDPR. We generally do not require special categories of personal data (e.g., information about a severe disability) within the meaning of Article 9 GDPR for the application process. However, if you voluntarily provide us with such data, the processing will be based on Article 9(2)(b) GDPR.

If an employment relationship is established between you and us, we will process your data in accordance with Article 88 GDPR in conjunction with § 26 BDSG for the purpose of performing the employment relationship with you.

↳ 13.1. Data deletion

We store your personal data for as long as it is necessary to make a decision about your application. If no employment is offered, your personal data or application documents will be deleted 90 days after the end of the application process, unless a longer storage is legally required or permissible (e.g., for asserting, exercising, or defending legal claims for the duration of legal proceedings, travel expense accounting, etc.). Afterward, the data is only available to us as so-called metadata without direct personal reference for statistical evaluations (e.g., the proportion of women to men in applications, the number of applications per period, etc.).

If an employment relationship ensues after the application process, we will store your data for the duration of the employment relationship with you. However, you will receive further information about the processing of your data in the employment relationship as soon as the employment relationship begins with us.

↳ 13.2. Data disclosure to third parties - Personio

The data transmitted as part of your application is encrypted via TLS and stored in a database. This database is operated by Personio GmbH, which provides personnel administration and applicant management software. Personio is our data processor in this context under Article 28 GDPR. The basis for processing is a data processing agreement between us as the responsible entity and Personio.

II. Use of cookies and tracking tools

To provide our services, we rely on the services of various third-party providers, through which personal data may also be processed. We use tracking technologies such as cookies to measure and evaluate our website and continuously improve our content.

1. Cookie classification

Cookies are small text files used by websites to simplify and accelerate the control of your visit to our website or are necessary to allow you to use and access secure areas of the website.

Depending on the source of a cookie, first-party cookies and third-party cookies can be distinguished:

  • First-Party Cookies: Cookies generated and stored locally by the website operator. Only the operator has access to these cookies.
  • Third-Party Cookies: Cookies generated, set, and accessed by third-party providers who are not acting as data processors on behalf of the website operator.

Depending on their validity period, transient and persistent cookies can also be distinguished:

  • Transient Cookies: Cookies that are automatically deleted when you close the browser. This includes session cookies in particular.
  • Persistent Cookies: Cookies that remain stored on your device for a specified period after the browser is closed.

Depending on their nature and purpose, the use of certain cookies may require the user's consent. Accordingly, cookies can be classified based on whether their use requires user consent:

  • Consent-Free Cookies: Strictly necessary cookies (First Party Cookies) ensure the proper functioning of a website on the Internet. They are used exclusively by the respective website operator. We use strictly necessary cookies based on§ 25(2) No. 2 TTDSG, Article 6(1)(f) GDPR in the legitimate interest of ensuring the functionality of our website. These cookies cannot be deactivated via the cookie banner on this website. However, you can manage and disable these cookies in your browser settings at any time.
  • Consent-Required Cookies: Consent-required and thus not technically necessarycookies are cookies intended to evaluate specific user behavior of websitevisitors for market research or analysis purposes. The legal basis forprocessing personal data is usually § 25(1) TTDSG, Article 6(1)(a) GDPR. Youcan object to data processing at any time with effect for the future.
2. Consent management platform for managing cookies

To manage consent (obtaining consent to use cookies and/or tracking technologies), we use the Cookiebot Consent Management Platform (CMP) on our website. The service provider is Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark. The platform processes the following data using cookies:

  • Your IP address (the last three digits are set to '0')
  • Date and time of consent
  • Browser information URL from which the consent was sent
  • Your consent status as proof of consent

The purpose of data processing is to analyze and manage the consents given to comply with our obligation of GDPR-compliant consent management. Processing is necessary tof ulfill a legal obligation (Article 7(1) GDPR) to which we are subject (Article6 (1) sentence 1 lit. c GDPR).

For further information on how to object to or delete cookies via Cookiebot, please visit Cookiebot's Privacy Policy.

Manage My Cookie Preferences:

3. Service providers for usage analysis and online advertising

For the analysis of usage and online advertising, we use service providers to help optimize the performance of our website and display relevant advertisements. These service providers may use cookies and similar technologies to collect information about user behavior and provide evaluations to improve our online presence and advertising campaigns. We work closely with these service providers to ensure that your privacy and data are protected and used only for the purposes mentioned above.

↳ 3.1. HubSpot

We use the services of the software provider HubSpot. HubSpot is a software company based in the USA with an office in Ireland (HubSpot European Headquarters, Ground Floor, Two Dockland Central, Guild Street, Dublin 1, Ireland).

HubSpot is a service platform. The service used is an integrated software solution that allows us to manage customer data and cover various aspects of our online marketing. This includes analyzing landing pages and reporting. So-called "web beacons" are used, and cookies are stored on the end user's device.

The following personal data may be collected:

  • IP address
  • Geographical location
  • Type of browser
  • Duration of visit
  • Pages visited

The information collected and the contents of our website are stored on servers of our software partner HubSpot Ireland. We use HubSpot to analyze the use of our website. This allows us to continuously optimize and make our website more user-friendly. We also use the information to determine which services of our company are of interest to customers and newsletter subscribers and to contact them for advertising purposes. Furthermore, we optimize our web offering for you through the evaluation.

However, we only use your IP address in truncated form. This means that the IP address of the users is truncated by HubSpot within member states of the European Union or in other contract states of the European Economic Area.

The cookies have different lifetimes. For more information, please visit: https://knowledge.hubspot.com/privacy-and-consent/what-cookies-does-hubspot-set-in-a-visitor-s-browser. In addition, we delete the personal data collected via HubSpot as soon as the purpose for which it was collected has been achieved, unless statutory retention periods prevent deletion.

Your tracking data may also be transferred to HubSpot Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA. Data processing may therefore take place outside the EU or the EEA. HubSpot Inc. is certified under the EU-US Data Privacy Framework. Therefore, there is an adequate level of data protection for data processing by HubSpot Inc. in the USA in accordance with Article 45(1) GDPR.

Data processing is based on your consent pursuant to § 25(1) TTDSG, Article 6(1)(a) GDPR. You can revoke your consent at any time. To do so, please open point "2. Consent management platform for managing cookies".

Please note that we have no influence on whether and to what extent HubSpot processes your data for its own purposes, e.g., by linking them to your search queries or other user profiles. Please consider this when deciding to consent to our use of HubSpot.

↳ 3.2. Hotjar

We use Hotjar on our website, a service provided by Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe.

Hotjar is a tool for analyzing user behavior on our website. With Hotjar, we can record your mouse movements, scroll actions, and clicks, among other things. Hotjar can also determine how long you've stayed with the mouse pointer at a specific location. Based on this information, Hotjar generates heatmaps to identify which areas of the website are preferred by visitors. Furthermore, we can determine how long you've stayed on a page and when you left it. We can also identify at which point you abandoned your input in a contact form (so-called conversion funnels). Additionally, Hotjar allows us to collect direct feedback from website visitors. This function is aimed at improving the web offerings of the website operator.

The use of Hotjar and the storage of Hotjar cookies are based on Art. 6 para. 1 lit. a) GDPR.

For more information about Hotjar and the data collected, please refer to Hotjar's privacy policy at the following link: https://www.hotjar.com/privacy

↳ 3.3. Google Analytics

On our website, we use "Google Analytics 4," a service provided by Google Ireland Ltd (hereinafter referred to as "Google") with headquarters at Gordon House, Barrow Street, Dublin 4, Ireland.

Through the Google Signals feature, Google Analytics 4 enables tracking of user interactions across various platforms, including websites, mobile apps, and other digital platforms. This helps to better understand user behavior across different channels and devices.

GoogleAnalytics 4 uses cookies and similar technologies to collect information about user interactions with the website and generate reports on activities. This information is used for analyzing trends, tracking user movements on the website, and improving the user experience.

Your tracking data may also be transferred to Google Ireland Limited and Google LLC (USA) in this context. Data processing may therefore take place outside the EU or EEA. Google LLC is certified under the EU-US Privacy Shield Framework, ensuring an adequate level of data protection pursuant to Art. 45 para. 1 GDPR.

Data processing is based on your consent pursuant to § 25 para. 1 TTDSG, Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time. To do so, please open point "2. Consent management platform for managing cookies".

We would like to point out that we have no influence on whether and to what extent Google processes your data for its own purposes, such as associating it with your search queries or other user profiles. Please consider this when deciding to give your consent to our use of Google Analytics.

↳ 3.4 Google Tag Manager and Google Site Tag

On our website, we use the "Google Tag Manager" and the "Google SiteTag" services provided by Google Ireland Ltd, Gordon House, BarrowStreet, Dublin 4, Ireland.

The Google Tag Manager is a solution that allows us to manage and implement various tracking codes and tags on our website. This enables efficient management of analysis tools, ad pixels, and other scripts used on a website. The Google Tag Manager provides a central interface through which these codes and tags can be integrated and updated without the need to make changes to the website's source code.

We use Google Tag Manager to analyze the performance of our website, track user behavior, measure conversions, and optimize marketing campaigns. Various tracking tools and tags from Google and third parties may be integrated, such as Google Analytics, Google Ads, or others.

The Google Site Tag is a tracking code installed in the header section of our website. The Google Tag uses the gtag.js JavaScript library to track information on our website and transmit this data to Google Analytics 4 or other tools associated with Google.

Your tracking data may also be transferred to Google Ireland Limited and Google LLC (USA) in this context. Data processing may therefore take place outside the EU or EEA. Google LLC is certified under the EU-US Privacy Shield Framework, ensuring an adequate level of data protection pursuant to Art. 45 para. 1 GDPR.

Data processing is based on your consent pursuant to § 25 para. 1 TTDSG, Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time. To do so, please open point "2. Consent management platform for managing cookies".

For more information on the Google Tag Manager, please visit Google's Privacy Policy and Google's Tag Manager Use Policy.

↳ 3.5 Google Ads - Remarketing

On our website, we use DoubleClick, a service provided by Google Ireland Ltd, GordonHouse, Barrow Street, Dublin 4, Ireland.

DoubleClick uses cookies to present relevant ads to website visitors. A cookie ID is assigned to your browser to record which ads have already been sent to this browser. The DoubleClick cookie enables Google and its partner websites to display ads based on previous visits to this or other websites. Similarly, the cookie ID allows the DoubleClick cookie to record conversions associated with ad clicks, such as when a user views a DoubleClick ad and later uses the same browser to visit the advertiser's website.

In the context of DoubleClick, your data may be transferred to Google LLC (USA). Data processing may therefore take place outside the EU or EEA. Google LLC is certified under the EU-US Privacy Shield Framework, ensuring an adequate level of data protection pursuant to Art. 45 para. 1 GDPR.

Data processing is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR or §25 para. 1 TTDSG. You can revoke your consent at any time. To do so, please open point "2. Consent management platform for managing cookies".

↳ 3.6 Google Ads - Conversion tracking

On our website, we use Google Ads, a service provided by Google Ireland Ltd, GordonHouse, Barrow Street, Dublin 4, Ireland.

Within Google Ads, we utilize conversion tracking. When you click on an ad served by Google, a conversion tracking cookie is set. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page.

Each Google Ads customer receives a different cookie. The cookies cannot be tracked across the websites of Google Ads customers. The information obtained through the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that allows them to personally identify users.

In the context of Google Ads, your data may be transferred to Google LLC (USA). Data processing may therefore take place outside the EU or EEA. Google LLC is certified under the EU-US Privacy Shield Framework, ensuring an adequate level of data protection pursuant to Art. 45 para. 1 GDPR.

Data processing is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR or §25 para. 1 TTDSG. You can revoke your consent at any time. To do so, please open point "2. Consent management platform for managing cookies".

↳ 3.7 Google reCAPTCHA

We use "Google reCAPTCHA" on our website, a service provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA allows us to verify whether data entry on this website (e.g., in a contact form) is done by a human or an automated program. For this purpose, Google reCAPTCHA analyzes the behavior of the website visitor based on various information (e.g., IP address, device and application data, duration of the website visitor's stay on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Google and may also be shared with other third parties. The Google reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place.

In the context of reCAPTCHA, your data may be transferred to Google LLC (USA). Data processing may therefore take place outside the EU or EEA. Google LLC is certified under the EU-US Privacy Shield Framework, ensuring an adequate level of data protection pursuant to Art. 45 para. 1 GDPR.

Data processing is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR or §25 para. 1 TTDSG. You can revoke your consent at any time. To do so, please open point "2. Consent management platform for managing cookies".

↳ 3.8 YouTube - Embedded videos

On our website, we use "YouTube videos", a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, or Google LLC1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

Accessing our page with embedded video content triggers the loading of content from the provider. As a result, YouTube receives information that you have visited our site, along with the usage data technically required in this context.

In the context of YouTube, your data may be transferred to Google LLC (USA). Data processing may therefore take place outside the EU or the EEA. Google LLC is certified under the EU-US Privacy Shield Framework, providing an adequate level of data protection pursuant to Art. 45 para. 1 GDPR.

Data processing is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR or §25 para. 1 TTDSG. By clicking on a video, you consent to us loading content from Google. You can revoke your consent at any time. To do so, please open point "2. Consent management platform for managing cookies".

4. Browser extension

You can configure your browser to:

a) be informed about the setting of cookies,

b) allow cookies only in individual cases,

c) exclude the acceptance of cookies for certain cases or in general,

d) activate the automatic deletion of cookies when closing the browser.

You can manage the cookie settings for the respective browsers using the following links:

Additionally, most browsers offer a "Do Not Track" function, allowing you to indicate that you do not want to be "tracked" by websites. When this function is enabled, the respective browser informs advertising networks, websites, and applications that you do not want to be tracked for behavioral advertising and similar purposes. You can find information and instructions on how to edit this function depending on your browser provider at the following links:

Additionally, you can prevent the default loading of so-called scripts. NoScript allows the execution of JavaScript, Java, and other plugins only on trusted domains of your choice. Information and instructions on how to edit this function can be obtained from your browser provider.

We would like to point out that deactivating cookies may restrict the functionality of this website.

5. Data Transmission to third countries

As outlined in II.3, we use services whose providers are partly located in third countries (such as the USA), i.e., countries whose level of data protection does not correspond to that of the European Union. Where this is the case and the European Commission has issued an adequacy decision (Art. 45 GDPR) for these countries, the data transfers to these third countries are legally secure. An adequacy decision means that the European Commission has determined that the level of data protection in the respective third country is adequate and ensures a comparable protection of personal data as in the European Union.

If there is no adequacy decision for certain third countries, we have taken appropriate measures to ensure an adequate level of data protection for data transfers.These measures include, among others, the use of standard contractual clauses of the European Union or binding corporate rules. If these options are not possible, we base the data transfer on exceptions under Article 49 of the General Data Protection Regulation (GDPR), in particular on your explicit consent or the necessity of the data transfer to fulfil a contract.

6. Social media channels

We also promote presences on the following social networks on our website.

Integration is done via a linked graphic of the respective network. By using this linked graphic, automatic connection to the respective server of the social network is prevented when the website is accessed.

This means that clicking on the corresponding graphic will redirect you to the service of the respective social network. After redirection, information about you is collected by the respective network. These include data such as IP address, date, time, and visited page. It cannot be ruled out that processing of the data collected in this way takes place in the USA.

If you are logged into your user account of the respective network during this process, the network operator may possibly assign the collected information to your personal account. If, for example, you interact via a "share" button of the respective network, this information may also be stored in your personal user account and possibly published.

If you wish to prevent the collected information from being directly assigned to your user account, you must log out before clicking on the graphic or configure the respective user account accordingly. For further information on the processing of your data, please refer to our social media data privacy statement.

III. Your rights as a data subject

Regarding the data processing listed here, you have various rights as a data subject, which are regulated in the GDPR.

1. Right to information

According to Art. 15 of the EU GDPR, you have the right to request confirmation from us whether personal data concerning you are being processed. If this is the case, you have the right to information about this personal data and the information mentioned in Art. 15 para. 1 cl. 2 of the EU GDPR. This includes, in particular, the purpose of processing, the categories of processed data, the recipients to whom data has been or will be disclosed, if possible, the planned duration of storage or the criteria for determining the duration of storage.

2. Right to rectification

According to Art. 16 of the EU GDPR, you have the right to immediately request the correction of incorrect personal data concerning you. Taking into account the purposes of processing, you have the right to request the completion of incomplete personal data, also by means of a supplementary statement.

3. Right to erasure

According to Art. 17 of the EU GDPR, you have the right to demand that personal data concerning you be deleted without delay. We are obliged to delete personal data immediately if one of the reasons listed in Art. 17 para. 1 of the EU GDPR applies. These reasons include, for example, that the data is no longer necessary for the purposes for which it was collected or otherwise processed.

4. Right to restriction of processing

According to Art. 18 of the EU GDPR, you have the right to demand from us the restriction of processing if one of the conditions mentioned in Art. 18 of the EU GDPR applies. This includes, for example, that you dispute the accuracy of the personal data. Then we may only process the data to a limited extent until the accuracy of the personal data has been verified.

5. Right to data portability

According to Art. 20 of the EU GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format. You have the right to transmit this data to another controller, i.e., another entity processing data, without hindrance, provided that the original processing was based on consent or necessary for the performance of a contract.

6. Right to object

According to Art. 21 of the EU GDPR, you have the right to object at any time to the processing of personal data concerning you if such data is processed based on Art. 6 para. 1 lit. e) or f) of the EU GDPR and there are reasons arising from your particular situation. You can object to the processing of data for the purpose of direct marketing at any time. Personal data will then no longer be processed for this purpose. The right to object can be exercised by means of an informal declaration. A written statement or alternatively an email to the contact address mentioned above is sufficient.

7. Right to withdraw consent

According to Art. 7 para. 3 of the EU GDPR, you have the right to withdraw your consent to the processing at any time. The lawfulness of processing based on consent until its withdrawal is not affected. The right of withdrawal can be exercised by means of an informal declaration. A written statement or alternatively an email to the contact address mentioned above is sufficient. You can withdraw your consent to the use of cookies via our banner, which is displayed to you when you access our privacy policy.

8. Right to lodge a complaint with a supervisory authority

According to Art. 77 of the EU GDPR, without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data concerning you violates this regulation. In the present case, the responsible supervisory authority is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit

Alt-Moabit 59-61

10555 Berlin

Entrance: Alt-Moabit 60

Tel.: +49 (0)30 13889-0

Email: mailbox@datenschutz-berlin.de

IV. Final provisions

Polyteia GmbH reserves the right to adapt this privacy policy at any time to ensure that it always complies with the current legal requirements or to implement changes to the services in the privacy policy, e.g., when introducing new services or making changes to the website. The new privacy policy will apply when this website is accessed again.

Date: April 2024