Privacy Policy

- user data (e.g., person master data, company name, company data, name or address).
- contact information (e.g., e-mail, phone numbers).
- content data (e.g., text input, photographs, videos).
- usage data (e.g., websites visited, interest in content, access times).
- meta / communication data (e.g., device information, IP addresses).

Visitors and users of the online offer (hereinafter we refer to the affected persons as "users").

- Provision of the online offer, its functions and contents.
- Answering contact requests and communicating with users.
- Safety measures.
- Reach measurement / marketing

"Personal data" means any information relating to an identified or identifiable natural person (hereinafter the "data subject"); a natural person is considered as identifiable, which can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, to an identification number, to location data, to an online identifier (eg cookie) or to one or more special features, are the expression of the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.

"Processing" means any process performed with or without the aid of automated procedures, or any such process associated with personal data. The term goes far and includes virtually every handling of data.

"Pseudonymisation" means the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without additional information being provided, provided that such additional information is kept separate and subject to technical and organizational measures to ensure that the personal data not assigned to an identified or identifiable natural person.

"Profiling" means any kind of automated processing of personal data that involves the use of such personal information to evaluate certain personal aspects pertaining to a natural person, in particular aspects relating to job performance, economic situation, health, personal To analyze or predict preferences, interests, reliability, behavior, whereabouts, or relocation of that natural person.

"Responsible person" means the natural or legal person, public authority, body or body which, alone or in concert with others, decides on the purposes and means of processing personal data."Processor" means a natural or legal person, public authority, body or body that processes personal data on behalf of the controller.

In accordance with Art. 13 GDPR, we inform you about the legal basis of our data processing. For users within the scope of the General Data Protection Regulation (GDPR), i. the EU and the EEC, unless the legal basis in the data protection declaration is mentioned, the following applies:
The legal basis for obtaining consent is Article 6 (1) lit. a and Art. 7 GDPR;
The legal basis for the processing for the performance of our services and the execution of contractual measures as well as the response to inquiries is Art. 6 para. 1 lit. b GDPR;
The legal basis for processing to fulfill our legal obligations is Art. 6 para. 1 lit. c GDPR;
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR as legal basis.
The legal basis for the processing required to carry out a task in the public interest or in the exercise of official authority which has been delegated to the controller is Article 6 (1) lit. e GDPR.
The legal basis for processing in order to safeguard our legitimate interests is Article 6 (1) lit. f GDPR.
The processing of data for purposes other than those for which they were collected is governed by the provisions of Article 6 (4) GDPR.
The processing of special categories of data (pursuant to Art. 9 (1) GDPR) is governed by the provisions of Art. 9 (2) GDPR.

SECURITY MEASURES

In accordance with legal requirements, and taking into account the state of the art, implementation costs, the nature, scope, circumstances and purposes of processing, and the varying likelihood and severity of risks to the rights and freedoms of natural persons, we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk.

These measures include, in particular, safeguarding the confidentiality, integrity, and availability of data through controls on physical access, access to data, data entry and disclosure, data availability, and separation of data. We have also established procedures to enable data subjects to exercise their rights, to delete data, and to respond to threats to data security. We furthermore consider the protection of personal data when developing or selecting hardware, software, and procedures, in accordance with the principles of data protection by design and by default.

If, in the context of our processing, we disclose data to other persons and companies (contract processors, joint controllers or third parties), transmit them to them or otherwise grant them access to the data, this will only be done on the basis of a legal permission (eg if the data is transmitted to third parties, such as payment service providers, to fulfill the contract), users have consented to a legal obligation to do so or on the basis of our legitimate interests (eg the use of agents, webhosters, etc.).

Insofar as we disclose data to other companies in our group of companies, or otherwise grant access to them, this is done in particular for administrative purposes as a legitimate interest and, in addition, based on a legal basis.

If we transfer personal data to recipients outside the European Union (EU) or the European Economic Area (EEA), or have such data processed by service providers based there, we do so in compliance with Articles 44 to 49 GDPR. Such transfers may, in particular, be based on an adequacy decision of the European Commission under Article 45 GDPR, for example in relation to Switzerland. Transfers to appropriately certified companies in the United States may rely on the European Commission’s adequacy decision concerning the EU–US Data Privacy Framework, provided that the relevant certification is valid and covers the processing concerned. Where no applicable adequacy decision exists, transfers take place only subject to appropriate safeguards, in particular the European Commission’s Standard Contractual Clauses under Article 46 GDPR, or another exception provided by law. Information about the service providers we use and any international data transfers can be found in the relevant sections of this Privacy Policy.

Subject to the applicable legal requirements, you have the right to obtain information about the personal data we process concerning you (Article 15 GDPR), to have inaccurate data rectified (Article 16 GDPR), to request erasure (Article 17 GDPR), to restrict processing (Article 18 GDPR), and to data portability (Article 20 GDPR).

Right to object
Where processing is based on a legitimate interest, you may object to such processing under the conditions set out in Article 21 GDPR.

Withdrawal of consent
You may withdraw any consent you have given at any time with effect for the future.

Contact
To exercise your rights, please contact us at office@motivabranding.io. We respond to requests within the statutory deadlines.

Right to lodge a complaint
You also have the right to lodge a complaint with a data protection supervisory authority. In Austria, this is the Austrian Data Protection Authority (https://www.dsb.gv.at).

You have the right to revoke granted consent with effect for the future.

You have the right at any time, for reasons that arise from your particular situation, against the processing of personal data relating to you which, on the basis of Art. 6 para. 1 lit. e or f GDPR takes an objection; this also applies to profiling based on these provisions. If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail.

Our website uses cookies and similar technologies. These are small files or technical mechanisms through which information may be stored on, or read from, your device.

We distinguish between technically necessary cookies and cookies used, for example, for statistical analysis, improving our online services, or marketing.

Technically necessary cookies are used to the extent required to provide our website and ensure its proper functioning.

Where legally required, we obtain your consent before using non-essential cookies or similar technologies, in accordance with Article 6(1)(a) GDPR in conjunction with Section 165 of the Austrian Telecommunications Act 2021 (TKG 2021).

You can change or withdraw your consent at any time with effect for the future through our website’s cookie settings. Further information about the technologies used, their providers, and their purposes can be found in the cookie settings and the relevant sections of this Privacy Policy.

The data processed by us will be deleted or restricted in accordance with legal requirements. Unless explicitly stated in this privacy statement, the data stored by us will be deleted as soon as they are no longer necessary for their intended purpose and the deletion does not conflict with any statutory storage requirements.

Unless the data is deleted because it is required for other and legally permitted purposes, its processing will be restricted. That the data is blocked and not processed for other purposes. This applies, for example for data that must be kept for commercial or tax reasons.

We ask you to inform yourself regularly about the content of our privacy policy. We will adjust the Privacy Policy as soon as the changes to the data processing we make require it. We will notify you as soon as the changes require your participation (eg consent) or other individual notification.

In addition, we process
- Contract and order data (e.g., subject, term, customer category, offers, invoices).
- Payment data (e.g., bank details, payment history) from our customers, prospects and business partners for the purpose of providing contractual services, service and customer care, marketing, advertising and market research.

We process personal data relating to our clients and business partners in the course of providing our services. These include, in particular, strategic consulting, brand development, conceptual work, design, communication, and related creative and organizational services. We primarily process master data and contact details, communications, project-related information, contractual and order details, and payment and billing information.

Processing is carried out to initiate, perform, and settle contractual relationships under Article 6(1)(b) GDPR, to comply with legal obligations under Article 6(1)(c) GDPR, and to pursue our legitimate interests in efficient business administration, client relations, and the protection of legal claims under Article 6(1)(f) GDPR. Where we process personal data on behalf of our clients, we do so in accordance with the statutory requirements for processing on behalf of a controller under Article 28 GDPR and solely for the agreed purposes.

We retain personal data only for as long as necessary for the relevant processing purposes or as required by statutory retention obligations. Documents relevant to taxation and corporate law are subject, in particular, to Austrian retention requirements under Section 132 of the Federal Fiscal Code (BAO) and Section 212 of the Austrian Business Code (UGB), which generally provide for seven years of retention. Data is retained beyond this period only where required by specific legal obligations or to establish, exercise, or defend legal claims.

We process personal data to organize our business operations, carry out financial accounting, manage client and business relationships, and comply with legal obligations. This primarily includes master data and contact details, communications, contractual information, and billing and payment data.

Processing is based on Article 6(1)(b) GDPR for the performance of contractual relationships, Article 6(1)(c) GDPR for compliance with legal obligations, and Article 6(1)(f) GDPR for our legitimate interests in efficient business administration and maintaining existing business relationships.

Where necessary, data may be disclosed to tax advisers, auditors, banks, payment service providers, or competent authorities. Data is retained for the duration of the relevant business relationship and beyond that only where statutory retention requirements or other legitimate purposes justify further storage. The need for continued retention is reviewed regularly.

In order to operate our business economically, to be able to recognize market tendencies, wishes of the contractors and users, we analyze the data available to us for business transactions, contracts, inquiries, etc. We process stock data, communication data, contract data, payment data, usage data, metadata on the basis of Art 6 para. 1 lit. f. GDPR, whereby the data subjects include contractual partners, interested parties, customers, visitors and users of our online offer.

The analyzes are carried out for the purpose of business analysis, marketing and market research. In doing so, we can provide the profiles of the registered users with information, e.g. take into account their services. The analyzes serve us to increase the user-friendliness, the optimization of our offer and the business economy. The analyzes are for us alone and will not be disclosed externally unless they are anonymous, aggregated value analyzes.

If these analyzes or profiles are personal, they will be deleted or anonymised upon termination of the users, otherwise after two years from the conclusion of the contract. Incidentally, the overall business analyzes and general trend provisions are created anonymously if possible.

We use the agency software Moco provided by hundertzehn GmbH, Aeschstrasse 131F, 8123 Ebmatingen, Switzerland, to organize and adminstrate our business and to store and manage data. This may include client data and contact details of customers and suppliers, data on transactions, orders, contracts, processes and their contents. This data is stored on a server administrated by hundertzehn GmbH in Switzerland. It is only accessible to us and will not be disclosed by Moco to third parties. We use Moco on the basis of Art. 6 para. 1 lit. f GDPR based on our legitimate interests and efficient and secure administrative and cooperation processes. We have entered into a contract data processing contract with hundertzehn GmbH in which hundertzehn GmbH is obligated to process user data only in accordance with our instructions and to comply with the EU data protection standard. (https://www.mocoapp.com/unternehmen/datenschutz).

We use Google services, particularly Google Workspace, for business communications, email administration, document storage and editing, calendar management, collaboration, and information exchange.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The use of these services may involve the processing of personal data, particularly names, contact details, communications, documents, and project-related information.



Depending on the purpose, processing is based on Article 6(1)(b) GDPR for the performance of contractual relationships, Article 6(1)(c) GDPR for compliance with legal obligations, or Article 6(1)(f) GDPR for our legitimate interests in efficient and secure business administration.

Where Google acts as a processor, processing is governed by the corresponding contractual agreements under Article 28 GDPR. The use of these services may involve transfers of personal data to third countries.

Such transfers are subject to the conditions described in the section “Transfers to Third Countries.” Retention periods depend on the respective processing purpose and applicable statutory retention requirements.

Further information is available in Google’s Privacy Policy (https://policies.google.com/privacy) and the Google Cloud Data Processing Terms (https://cloud.google.com/terms/data-processing-terms).

We use Dropbox, a cloud storage service, to store documents and other personal content files (collectively referred to as "files") and share them with other people as part of so-called sharing. Here, the personal data of the user are processed, as far as these are part of the files stored within the Dropbox. For this, e.g. Master data and contact data of users, data on transactions, contracts, other processes and their contents belong.When users access the files through the Shares, Dropbox also processes the usage data and metadata (such as IP addresses, access times and browser information, and users' operating systems) for security and service optimization purposes. Dropbox may also store cookies on users 'computers for the purposes of web analytics or to remember users' preferences.

We use the Dropbox gem. Art. 6 para. 1 lit. f GDPR based on our legitimate interests in efficient and secure administrative and cooperation processes.

Further information can be found in the privacy policy of Dropbox (https://www.dropbox.com/privacy). You may object to the processing of your data in the Dropbox us according to the legal requirements. Moreover, the deletion of the data within the Dropbox is determined by the remainder of the processing in which the data is processed (e.g., deletion for non-contractual purposes or storage required for purposes of taxation).

The Dropbox is offered by Dropbox, Inc., 333 Brannan Street, San Francisco, California 94107, USA. As far as processing of data to the US is concerned, we refer to the certification of the Dropbox under the Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt0000000GnCLAA0&status=Active).

ACCEPTANCE AND PROCESSING OF APPLICATIONS

Whether and which applications we accept is determined by the information published on our Careers page at the time we receive the application. This applies both to applications for specifically advertised positions and to unsolicited applications and internship applications. We process applications only if we expressly invite or permit the relevant type of application on our Careers page. In such a recruitment process, we process, in particular, contact information, details of education, qualifications and professional experience, and application documents for the purposes of conducting the recruitment process and deciding whether to establish an employment relationship, on the basis of Article 6(1)(b) GDPR. If an employment relationship is established, the data required for that relationship may continue to be processed for employment purposes. If no employment relationship is established, we generally delete application data no later than seven months after the end of the recruitment process or notification of rejection. This temporary retention is based on our legitimate interest under Article 6(1)(f) GDPR, in particular to establish, exercise, or defend potential legal claims under the Austrian Equal Treatment Act. Data is retained longer only where legally necessary in an individual case or where separate consent has been given.

UNSOLICITED APPLICATIONS OUTSIDE ACTIVE RECRUITMENT PERIODS

Applications received when our Careers page expressly states that we are not accepting the relevant type of application are considered unsolicited applications. They are not reviewed on their merits, considered for recruitment, or included in a Talent Pool. The personal data transmitted is processed solely for technical receipt, any automated response, and subsequent deletion. Application documents, including attachments, are generally deleted without undue delay and in any event within 30 days of receipt. Data is retained for longer only where specifically required by legal obligations or to establish, exercise, or defend legal claims in an individual case.

If our Careers page expressly states that we accept applications for advertised vacancies or unsolicited applications, we may also offer applicants the opportunity to join our Talent Pool. Inclusion is based exclusively on separate, voluntary consent under Articles 6(1)(a) and 7 GDPR. Simply submitting an application does not constitute consent to inclusion in the Talent Pool. Personal data and application documents stored in the Talent Pool are used solely to contact applicants again about suitable future vacancies.

We retain Talent Pool data for a maximum of two years from the date consent is given. After that period, the data is deleted unless renewed express consent has been provided or another lawful basis for retention applies. Consent is voluntary, has no bearing on any ongoing recruitment process, and may be withdrawn at any time, without giving reasons, with effect for the future by emailing careers@motivabranding.io. Inclusion in the Talent Pool is possible only when we expressly offer this option. There is no entitlement to inclusion.

When contacting us (for example, by contact form, e-mail, telephone or via social media), the information of the user to process the contact request and their processing acc. Art. 6 para. 1 lit. b. (in the context of contractual / pre-contractual relationships), Art. 6 para. 1 lit. f. (other inquiries) GDPR processed .. The information of the users can be stored in our agency software (see point "Agency software Moco") or comparable request organization.

We delete the requests, if they are no longer required. We check the requirement every two years; Furthermore, the legal archiving obligations apply.

If we offer a newsletter or comparable regular email updates, these are sent only where a corresponding legal basis exists, in particular your consent under Article 6(1)(a) GDPR.

Subscription to any newsletter we may offer is voluntary. Where required, we use a confirmation procedure (double opt-in) to ensure that the person entitled to subscribe has done so.

This may involve processing the email address, the time of subscription and confirmation, and, where applicable, technical verification data.

Subscription is used solely for the informational offering described at the time. We may use specialized service providers to send and manage such email communications.

Any consent given may be withdrawn at any time with effect for the future, in particular through the unsubscribe link in the relevant emails.

Where email marketing without consent is legally permitted, we comply with the applicable requirements and rights to object.

Newsletter subscription data is deleted once it is no longer required for the relevant purposes and no statutory retention grounds apply.

To send and manage any newsletter we may offer, we may use Mailchimp, a service provided by The Rocket Science Group LLC, USA. When this service is used, email addresses, names, subscription and confirmation data, and information about delivery and use may be processed on Motiva’s behalf.

Where Mailchimp acts as a processor, the processing is governed by appropriate data processing agreements under Article 28 GDPR. Possible transfers to third countries are subject to the conditions described in “Transfers to Third Countries.” Newsletter consent may be withdrawn at any time. Further information: https://mailchimp.com/legal/privacy/.

If we use statistical performance measurement for a newsletter we offer, this may involve processing information about delivery, opening of messages, and use of links contained in them.

Such measurement may use tracking pixels or individually assigned links. These analyses help us improve and tailor our email communications and are conducted only where an appropriate legal basis exists and any required consents have been obtained.

We provide information about the performance measurement used as part of the newsletter subscription process or the associated privacy notices. Any consent given for this purpose may be withdrawn with effect for the future.

The hosting services we use are designed to provide the following services: infrastructure and platform services, computing capacity, storage and database services, e-mailing, security, and technical maintenance services we use to operate this online service.

Here we, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer acc. Art. 6 para. 1 lit. f GDPR i.V.m. Art. 28 GDPR (conclusion of contract processing contract).

We, or our hosting provider, collects on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. GDPR Data on every access to the server on which this service is located (so-called server log files). The access data includes the name of the retrieved web page, file, date and time of retrieval, amount of data transferred, notification of successful retrieval, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.

Logfile information is stored for security reasons (for example, to investigate abusive or fraudulent activities) for a maximum of 7 days and then deleted. Data whose further retention is required for evidential purposes are excluded from the erasure until the final clarification of the incident.

We use Google Tag Manager, a service provided by Google Ireland Limited, to manage and integrate various website technologies. Tag Manager may be used to deploy services for statistical analysis, marketing, and conversion measurement. The data processed depends on the services integrated at any given time and their configuration. Where consent is required for such technologies, their use is governed by your choices in our cookie settings. Further information: https://policies.google.com/privacy.

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to analyze the use of our online services statistically.

This may involve processing information about pages viewed, usage events, technical device information, online identifiers, and interactions with our website.

Processing serves to analyze user behavior, improve our website, and measure the effectiveness of our online communications.

Where corresponding functions are used, this information may also be used to measure and optimize marketing activities. Google Analytics may use cookies or similar technologies.

Where consent is required, processing is based on Article 6(1)(a) GDPR and is subject to your choices in our cookie settings.

You may withdraw your consent at any time with effect for the future through the cookie settings.

The retention period depends on the respective processing purpose and the retention settings configured for the Analytics features in use.

Personal data may be transferred to third countries; the conditions described in “Transfers to Third Countries” apply. Further information: https://policies.google.com/privacy.

Where we use corresponding Google Analytics or Google advertising features, statistical information may be used to create audiences and deliver interest-based advertising. This may involve processing usage events and online identifiers and linking them with other information, to the extent permitted by law. Where required, processing takes place only with your consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time through the cookie settings.

Where we use Google Ads or comparable Google advertising and conversion measurement services, we may measure the effectiveness of online advertising, optimize ads, and, where applicable, create audiences for interest-based advertising.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Information about ad interactions, visits to our website, usage events, technical device information, and online identifiers may be processed for these purposes.

Depending on the functions used, cookies or similar technologies and Google tags may be deployed. Data may be linked with other Google services as part of the particular features enabled.

Where consent is required for processing, it is based on Article 6(1)(a) GDPR and your choices in our cookie settings.

You may withdraw any consent given at any time with effect for the future.

Possible transfers of personal data to third countries are subject to the conditions described in “Transfers to Third Countries.” Further information: https://policies.google.com/technologies/ads.

Where we use the Meta Pixel or comparable Meta advertising and analytics technologies, we do so to measure the effectiveness of our advertising, statistically analyze interactions with our website, and, where applicable, create audiences for interest-based advertising.

The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. Technical device information, online identifiers, and information about the use of our website may, in particular, be processed and transmitted to Meta.

Depending on the configuration, this data may be linked with advertising interactions on Meta platforms.

Where consent is required, processing is based on Article 6(1)(a) GDPR. Any such consent may be withdrawn at any time through the cookie settings.

Possible transfers to third countries are subject to the conditions described in “Transfers to Third Countries.” Further information: https://www.facebook.com/privacy/policy/.

We use HubSpot services to manage business contacts, handle inquiries, communicate with clients, and support customer relationship management (CRM).

The providers are HubSpot Ireland Limited, Ireland, and, where applicable, HubSpot, Inc., USA.

Use of these services may involve processing names, email addresses, telephone numbers, company affiliations, professional positions, communications, and other information provided voluntarily.

Where processing serves to handle business inquiries or initiate and perform contractual relationships, it is based on Article 6(1)(b) GDPR. Other lawful business communications may, where applicable, be based on our legitimate interest under Article 6(1)(f) GDPR.

Where analytics, marketing, or tracking technologies are used through HubSpot, they are deployed in accordance with applicable data protection requirements and, where required, on the basis of your consent under Article 6(1)(a) GDPR.

Where HubSpot acts as a processor, processing is governed by an appropriate agreement under Article 28 GDPR. Personal data may be transferred to the United States; the conditions described in “Transfers to Third Countries” apply.

Data is retained only for as long as necessary for the respective processing purpose or as required by statutory retention obligations. Further information: https://legal.hubspot.com/privacy-policy.

We maintain profiles on social networks, particularly LinkedIn and Instagram, to provide information about our services, publish content, and communicate with interested parties, clients, and other users.

When visiting these platforms, personal data may be processed by the respective platform operators.

This may include usage data, communications, online identifiers, and information about interactions with our profiles.

To the extent that we are responsible for such processing, it is based on our legitimate interest in communication and public relations under Article 6(1)(f) GDPR.

Platform operators may also process personal data for their own purposes, particularly analytics, security, and advertising.

We have only limited influence over such independent processing.

Where we and a platform operator are jointly responsible for specific processing activities, the relevant joint-controller arrangements also apply.

The use of social networks may involve processing personal data outside the EU or EEA.

We recommend reviewing the privacy information and settings offered by the respective platform.

Our currently linked company profiles include LinkedIn and Instagram.

LinkedIn: https://www.linkedin.com/legal/privacy-policy.

Instagram: https://privacycenter.instagram.com/policy/.

If we also provide profiles or integrate content on other platforms, such as Facebook, YouTube, X, Pinterest, Xing, Wakelet, or SoundCloud, the relevant providers’ privacy information also applies.

A simple link to an external profile does not itself constitute the direct integration of a social media plugin into our website.

For questions about our own processing of personal data, you can contact us using the details provided under “Controller.”

We may integrate content and functions from external providers into our website, including videos, maps, fonts, or social media content. Providing such content technically may require connections to the respective providers’ servers. This may involve processing IP addresses, device and browser information, and details about the use of the integrated content. Depending on the service, cookies or similar technologies may also be used.

We use such integrations to present our online services attractively, offer additional functions, and make our services easy to explore. Where consent is required for a particular integration, we obtain it before the corresponding data processing takes place. Possible transfers to third countries are subject to the conditions described in “Transfers to Third Countries.”

We use videos hosted on Vimeo to provide audiovisual content on our website. The provider is Vimeo.com, Inc., USA. Loading or playing embedded videos may establish a connection to Vimeo’s servers. This may involve processing IP addresses, technical device information, and information about the use of the video player. Vimeo may also use cookies or similar technologies. Where consent is required for the integration, processing is based on Article 6(1)(a) GDPR. Further information is available in Vimeo’s Privacy Policy: https://vimeo.com/privacy.

If we embed videos from YouTube in our online services, loading or playing them may establish a connection to Google’s servers. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This may involve processing IP addresses, technical device information, and information about video usage. Where consent is required for the integration, processing is based on Article 6(1)(a) GDPR. Further information: https://policies.google.com/privacy.

If we integrate interactive maps or location information from Google Maps into our website, we do so to illustrate geographical information. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Loading such maps may transmit IP addresses, technical device information, and usage data to Google. Where consent is required, processing is based on Article 6(1)(a) GDPR. Further information is available in Google’s Privacy Policy: https://policies.google.com/privacy.

We use Adobe Fonts to ensure a consistent visual presentation of our website. The provider is Adobe Systems Software Ireland Limited, Ireland. When our website is accessed, the required fonts are loaded from the provider’s servers. This may involve processing IP addresses and technical information about the browser or device used. Processing is based on our legitimate interest in a technically reliable and consistent presentation of our online services under Article 6(1)(f) GDPR, insofar as this legal basis applies to the particular integration. Further information is available in Adobe’s Privacy Policy: https://www.adobe.com/privacy/policy.html.

If we use social media plugins or embedded content from social networks on our website, loading or using the respective content may transfer data to the platform operators concerned.

This may include IP addresses, technical information, and details about interactions with the embedded content.

If a person is logged into a platform, the operator may be able to associate the interaction with an existing user account.

Such integrations may include content or functions from Meta or Facebook, Instagram, LinkedIn, Pinterest, or other platforms.

Simply linking to our profiles is different from embedding platform content. Where consent is required, processing takes place only on the basis of Article 6(1)(a) GDPR.

Further information about individual platforms can be found in “Online Presence on Social Media” and the respective providers’ privacy notices.

If we embed functions or content from the X platform (formerly Twitter) on our website, loading or using them may transfer personal data, particularly IP addresses, technical device information, and usage events, to the platform operator. If a person is logged into X, the data may be associated with their account. Where consent is required, processing is based on Article 6(1)(a) GDPR. Further information: https://x.com/de/privacy.

If we embed functions or content from Instagram on our website, loading or using them may transfer personal data, particularly IP addresses, technical device information, and usage events, to Meta Platforms Ireland Limited. If a person is logged into Instagram, the data may be associated with their account. Where consent is required, processing is based on Article 6(1)(a) GDPR. Further information: https://privacycenter.instagram.com/policy/.

If we embed functions or content from Pinterest on our website, loading or using them may transfer personal data, particularly IP addresses, technical device information, and usage events, to the provider. If a person is logged into Pinterest, the data may be associated with their account. Where consent is required, processing is based on Article 6(1)(a) GDPR. Further information: https://policy.pinterest.com/de/privacy-policy.

If we embed functions or content from LinkedIn on our website, loading or using them may transfer personal data, particularly IP addresses, technical device information, and usage events, to LinkedIn Ireland Unlimited Company. If a person is logged into LinkedIn, the data may be associated with their account. Where consent is required, processing is based on Article 6(1)(a) GDPR. Further information: https://www.linkedin.com/legal/privacy-policy.