Privacy policy
We operate our websites in accordance with the principles set out below:
We are committed to complying with the statutory provisions on data protection and strive to always observe the principles of data avoidance and data minimization.
1. name and address of the controller and the data protection officer
a) The person responsible
The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states of the European Union as well as other data protection regulations is
Ainovate GmbH
Große Seestraße 44
60486 Frankfurt a. Main
Germany
Phone: +49 (0)69 977 84 80 0
E-Mail: info@ainovate.com
www.ainovate.com
2. definitions
We have designed our privacy policy in accordance with the principles of clarity and transparency. However, if there are any uncertainties regarding the use of various terms, the corresponding definitions can be found
here
can be viewed here.
3. legal basis for the processing of data
a) Processing of personal data in accordance with the GDPR
We process your personal data such as, for example Your surname and first name, your e-mail address and IP address etc. only if there is a legal basis for this. According to the General Data Protection Regulation, the following regulations in particular come into consideration here:
- Art. 6 para. 1 p. 1 lit. a GDPR: The data subject has given consent to the processing of their personal data for one or more specific purposes.
- Art. 6 para. 1 p. 1 lit. b GDPR: Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
- Art. 6 para. 1 p. 1 lit. c GDPR: Processing is necessary for compliance with a legal obligation to which the controller is subject
- Art. 6 para. 1 p. 1 lit. d GDPR: Processing is necessary in order to protect the vital interests of the data subject or of another natural person
- Art. 6 para. 1 p. 1 lit. e GDPR: processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
- Art. 6 para. 1 p. 1 lit. f GDPR: processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child
However, we will always point out the legal basis on which your personal data is processed at the relevant points in this privacy policy.
b) Consent of the legal guardians in accordance with Art. 8 Para. 1 S.2 Alt.2 GDPR
A legal guardian must consent to all data processing on this website for which the consent of a minor who has not yet reached the age of 16 is required.
Information on the individual data processing operations, their purposes and the categories of data concerned, for which the consent of the data subject is required, can be found in the privacy policy.
You can revoke your consent at any time by sending a declaration of revocation in text form to the contact details of the controller. The processing remains lawful until revocation.
c) Processing of information pursuant to § 25 para. 1 TTDSG
We also process information in accordance with. § 25 para.1 TTDSG by storing information on your terminal equipment or accessing information already stored on your terminal equipment. This may involve both personal information and non-personal data, e.g. cookies, browser fingerprints, advertising IDs, MAC addresses and IMEI numbers. Terminal equipment is any equipment connected directly or indirectly to the interface of a public telecommunications network for sending, processing or receiving messages, § 2 para. 2 No.6 TTDSG.
As a rule, we process this information on the basis of your consent, § 25 para. 1 TTDSG.
Insofar as an exception pursuant to § 25 para. 2 No. 1 and No.2 TTDSG is given, we do not require consent. Such an exception is given if we only access or store the information in order to transmit a message via a public telecommunications network or if this is absolutely necessary so that we can provide a telemedia service expressly requested by you. You can revoke your consent at any time.
We inform you that the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
4. disclosure of personal data
The disclosure of personal data also constitutes processing within the meaning of the previous section 3. However, we would like to inform you separately about the issue of disclosure to third parties. The protection of your personal data is very important to us. For this reason, we are particularly careful when it comes to passing on your data to third parties.
Data will therefore only be passed on to third parties if there is a legal basis for the processing. For example, we pass on personal data to persons or companies who work for us as processors in accordance with Art. 28 GDPR. Processor is anyone who processes personal data on our behalf – i.e. in particular in a relationship of instruction and control with us
In accordance with the requirements of the GDPR, we conclude a contract with each of our processors in order to oblige them to comply with data protection regulations and thus ensure comprehensive protection of your data.
5. storage period and deletion
Your personal data will be deleted by us if they are no longer necessary for the purposes for which they were collected or otherwise processed, if the processing is not necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
6. SSL or TLS encryption
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as the requests you send to us as the website operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “//” to “//” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
7. cookies
We use cookies on our website. Cookies are small data packets that your browser automatically creates and that are stored on your end device when you visit our website. These cookies are used to store information in connection with the terminal device used.
When cookies are used, a distinction is made between technically necessary cookies and “other” cookies. Technically necessary cookies are those that are absolutely necessary in order to provide an information society service that you have expressly requested.
a) Technically necessary cookies
In order to make your use of our website more pleasant, we use technically necessary cookies, which may be so-called session cookies (e.g. language and font selection, shopping cart, etc.), consent cookies, cookies to ensure server stability and security, or similar. The legal basis for the cookies results from Art. 6 para. 1 p. 1 lit. f) GDPR, our legitimate interest in the error-free operation of the website and the interest in providing you with our services in an optimized manner.
b) Other cookies
Other cookies include cookies for statistical, analytical, marketing and retargeting purposes.
We set these cookies on the basis of your consent in accordance with. Art. 6 para. 1 p. 1 lit. a) GDPR for you.
You can revoke your consent to the use of cookies at any time.
We inform you that the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
To do this, you can either edit your cookie settings on our website, deactivate the use of cookies in your browser settings (whereby this may also restrict the functionality of the online offer) or set an opt-out for the corresponding service in individual cases.
We will inform you of the legal basis on which this data is processed for the respective services within the privacy policy.
8. cookie banner
We use the “Real Cookie Banner” consent tool to manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents. You can find details on how “Real Cookie Banner” works at
//devowl.io/de/rcb/datenverarbeitung/
.
The legal basis for the processing of personal data in this context is Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.
The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consents.
9. collection and storage of personal data and the nature and purpose of its use
a) External hosting
Our website is hosted by hosting.de GmbH, Franzstr. 51, 52064 Aachen, Germany. For this reason, all personal data collected on our website is stored on the servers of our hoster, unless an external service of a third party is integrated. This may be the IP address, your e-mail address, communication data or similar. You can find out which specific personal data is involved in the individual functions and services explained by us below. If we use an external service from a third party, this will be made clear in the description of the respective service or tool.
The hoster processes your data only on our instructions and insofar as this is necessary to fulfill the services on the website. The hoster does not process the data for its own purposes. We have concluded an order processing contract with this company.
b) When visiting the website
When you visit our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted:
– IP address of the requesting computer
– Date and time of access
– Name and URL of the retrieved file
– Website from which the access is made (referrer URL)
– the browser used and, if applicable, the operating system of your computer and the name of your access provider
We process the aforementioned data for the following purposes:
– Ensuring a smooth connection to the website
– Ensuring a comfortable use of our website
– Evaluation of system security and stability
– Error analysis
– for further administrative purposes
Data that allows conclusions to be drawn about your person, such as the IP address, are deleted after 7 days at the latest. If we store the data beyond this period, this data will be pseudonymized so that it can no longer be assigned to you.
The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person.
c) Making an appointment
We offer you the opportunity to make an appointment for a consultation or a webinar with us directly on our website. A calendar with possible free dates will be displayed. After choosing an appointment that suits you, you will be asked to enter your first and last name, e-mail address and telephone number in order to reserve the appointment for you and send you an appointment confirmation. In addition, the data is processed for the purpose of conducting the consultation.
For this service, we use the calendly tool from Calendly LLC, 271, 17th St NW, 10th Floor, Atlanta, Georgia 30363, USA, with whom we have concluded a data processing agreement.
We process your personal data in accordance with. Art. 6 para. 1 p. 1 lit. b GDPR for the implementation of pre-contractual measures taken at your request.
d) Google Fonts
We use Google Fonts on our website. This enables the display of fonts. Google Fonts is a service provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). These web fonts are integrated via a server call, usually a Google server in the USA. This may result in the following being transmitted to the server and stored by Google:
- Name and version of the browser used
- Website from which the request was triggered (referrer URL)
- Operating system of your computer
- Screen resolution of your computer
- IP address of the requesting computer
- Language settings of the browser or operating system used by the user
You can find more information in Google’s privacy policy, which you can access here:
www.google.com/fonts#AboutPlace:about
www.google.com/policies/privacy/
The use of Google Fonts serves to make it easier for you to read our website and to make it more graphically appealing and is therefore based on our legitimate interests in accordance with. Art. 6 para. 1 p. 1 lit. f GDPR.
e) Use of Google Maps
Our website uses the Google Maps API. By using Google Maps, information about your use of this website (including your IP address) may be transferred to a Google server (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) in the USA and stored there.
Google may transfer the information obtained through Maps to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. However, under no circumstances will your IP address be associated with other Google data. Nevertheless, we must point out that it would be technically possible for Google to identify individual users on the basis of the data received.
We have no control over whether your personal data and personality profiles are processed by Google for other purposes. If you want to avoid this at all costs, you can deactivate the Google Maps service and thus prevent the transfer of data to Google. All you have to do is deactivate JavaScript in your browser. In this case, no data will be transmitted, but you will no longer be able to use the map display on our website.
You can find the Google privacy policy
here
. [
//www.google.com/policies/privacy/?hl=de
]
By integrating Google Maps, Google Fonts are also dynamically reloaded by Google without the website operator or visitor actively determining this. These web fonts are integrated via a server call, usually a Google server in the USA. This may result in the following being transmitted to the server and stored by Google:
- Name and version of the browser used
- Website from which the request was triggered (referrer URL)
- Operating system of your computer
- Screen resolution of your computer
- IP address of the requesting computer
- Language settings of the browser or operating system used by the user
You can find more information in Google’s privacy policy, which you can access here:
www.google.com/fonts#AboutPlace:about
www.google.com/policies/privacy/
The use of Google Maps is a service for you so that you can precisely recognize our location and, if necessary, use it. better plan your visit with us. The use of Google Maps is based on your consent in accordance with. Art. 6 para. 1 p. 1 lit. a GDPR.
f) Google Tag Manager
We use the Google Tag Manager from Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) on our website. Google Tag Manager is an administration and management tool in which other tracking and/or statistics tools can be centrally managed and played out.
When you visit our website and give your consent in accordance with Art. 6 para. 1 S.1 lit. a) GDPR, Google Tag Manager collects and processes your IP address, which may also be transmitted to the USA. However, Google Tag Manager itself does not create any user profiles or analyses.
You can find the Google privacy policy
here
. [
//www.google.com/policies/privacy/?hl=de
]
g) Cloudflare
With the help of Cloudflare, our content is made available to our visitors with lower latency and high data transfer rates. For this purpose, data from our website is duplicated on various Cloudflare servers distributed around the world and made available on these servers. When accessing our content, you will be redirected to the location with the shortest delay so that our content is delivered to you in the best possible way.
By accessing a Cloudflare server, data about your use of our website (e.g. IP address, browser information, etc.) may be transmitted to Cloudflare.
Further information on data protection when using Amazon CloudFront can be found at:
//www.cloudflare.com/de-de/trust-hub/gdpr/
10. analysis and tracking tools
We use the analysis and tracking tools listed below on our website. These serve to ensure the continuous optimization of our website and to design it in line with requirements.
We use these tools on the basis of the consent you have given us in accordance with. Art. 6 para. 1 p. 1 lit. a GDPR. You can revoke your consent at any time by changing the cookie settings. The processing remains lawful until revocation.
The respective data processing purposes and data categories can be found in the corresponding tools. We would like to point out that we have no influence on whether and to what extent the service providers carry out further data processing.
a) Google Analytics
We use Google Analytics on our website, a web analysis service from Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”).
Google Analytics uses cookies in this context (see section 7). The information generated by the cookie about your use of this website such as
- Name and version of the browser used
- Operating system of your computer
- Website from which the access is made (referrer URL)
- IP address of the requesting computer
- Time of the server request
are usually transferred to a Google server in the USA and stored there.
Your IP address is automatically stored by Google anonymized before it is recorded via EU domains and servers. There is therefore no logging or storage of your IP address.
Google will use this information on our behalf for the purpose of evaluating your use of our website, compiling reports on website activity and providing us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
We have concluded an order processing contract with Google.
Please click here for an overview of data protection at Google. [
//support.google.com/analytics/answer/6004245
]
b) Google Ads conversion tracking
We use Google Ads, an online advertising program from Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) on our website. Conversion tracking is also used. With this tool, Google Ads sets a cookie on your device when you come to our website via a Google ad.
The cookie is not used for personal traceability. If you visit our website as a user and the cookie is still working, we and Google will recognize that you have clicked on the corresponding ad and have been redirected to our site. A different cookie is assigned to each Google Ads customer. Cookies cannot be tracked via the websites of Ads customers.
The data collected by conversion cookies is used to generate conversion statistics for Ads customers. As a Google Adss customer, we learn the total number of users who responded to our ad and were then redirected to a website that was provided with a conversion tracking tag. This enables us to recognize the success of individual advertising measures. During this process, we do not receive any information with which we could personally identify you as a user.
When using Google Ads, your browser automatically establishes a direct connection with the Google server and, if you have a Google account and are logged into it, can assign the visit to your account. If you do not have a Google account, Google will assign you your own identifier. We have no influence on what other data Google collects and stores.
You can find out more about Google’s privacy policy at
//www.google.de/policies/privacy/
.
c) Use of Google reCAPTCHA
We use the reCAPTCHA service of the company Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) on our websites for our contact form in order to be able to distinguish between input by a human being and automated, abusive, machine processing. We have a legitimate interest in protecting our website from abusive automated spying and SPAM.
When queried by the reCAPTCHA service, both your IP address and any other data required by Google for the reCAPTCHA service are forwarded to Google and processed there.
You must accept Google’s terms of use when using reCAPTCHA. There is a separate field for this. We have activated IP anonymization on this website so that your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
Google will use this information on our behalf to evaluate your use of this service. The IP address transmitted by your browser as part of reCaptcha will not be merged with other Google data. The deviating data protection provisions of Google apply to this data.
Further information on Google’s privacy policy can be found at
//www.google.com/intl/de/policies/privacy/
.
By integrating reCAPTCHA, Google Fonts are also dynamically loaded by Google without the website operator or visitor actively determining this. These web fonts are integrated via a server call, usually a Google server in the USA. This may result in the following being transmitted to the server and stored by Google:
- Name and version of the browser used
- Website from which the request was triggered (referrer URL)
- Operating system of your computer
- Screen resolution of your computer
- IP address of the requesting computer
- Language settings of the browser or operating system used by the user
You can find more information in Google’s privacy policy, which you can access here:
www.google.com/fonts#AboutPlace:about
www.google.com/policies/privacy/
d) Microsoft Clarity
We use Microsoft Clarity on our website, a service offered by Microsoft Corporation. Clarity analyzes the performance of our website anonymously. For example, we receive heatmaps that show us which parts of our website are particularly popular and help us to better adapt our website to the needs of our users. This is also the purpose of the processing.
Microsoft Claritiy will only be used if you have given your consent (Art. 6 para. 1 sentence 1 lit. a GDPR). The storage period for the collected data is one year.
Microsoft processes the data in accordance with our instructions and on our behalf. We have concluded a corresponding order processing agreement with Microsoft.
e.) LinkedIn Pixel
Personal data is processed when you visit this website. Categories of data processed: Data on the use of the website and the logging of clicks on individual elements. Purpose of processing: Investigation of user behavior, analysis of the effect of online marketing measures and selection of online advertising on other platforms, which are automatically selected by means of real-time bidding based on user behavior. The legal basis for processing: your consent in accordance with Art. 6 (1) a GDPR. Data is transferred: to the independent controller LinkedIn Ireland Unlimited Company, Wilton Place, Dublin, D02 X527, Ireland. The legal basis for the transfer of data to LinkedIn Ireland Unlimited Company is your consent in accordance with Art. 6 (1) a GDPR. This may also involve the transfer of personal data to a country outside the European Union. The transfer of data to the USA is based on Art. 45 GDPR in conjunction with the European Commission’s adequacy decision C(2023) 4745, as the data recipient has undertaken to comply with the data processing principles of the Data Pricacy Framework (DPF).
f.) Facebook Pixel
Personal data is processed when you visit this website. Categories of data processed: Data on the use of the website and the logging of clicks on individual elements. Purpose of processing: Investigation of user behavior, analysis of the effect of online marketing measures and selection of online advertising on other platforms, which are automatically selected by means of real-time bidding based on user behavior. The legal basis for processing: your consent in accordance with Art. 6 (1) a GDPR. Data is transferred: to the independent controller Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The legal basis for the transfer of data to Meta Platforms Ireland Ltd. is your consent in accordance with Art. 6 (1) a GDPR. This may also involve the transfer of personal data to a country outside the European Union. The transfer of data to the USA is based on Art. 45 GDPR in conjunction with the European Commission’s adequacy decision C(2023) 4745, as the data recipient has undertaken to comply with the data processing principles of the Data Pricacy Framework (DPF).
11. Rights of the data subject
You have the following rights:
a) Information
In accordance with Art. 15 GDPR, you have the right to request information about your personal data processed by us. This right to information includes information about
- the purposes of processing
- the categories of personal data
- the recipients or categories of recipients to whom your data has been or will be disclosed
- the planned storage period or at least the criteria for determining the storage period
- the existence of a right to rectification, erasure, restriction of processing or objection
- the existence of a right to lodge a complaint with a supervisory authority
- the origin of your personal data if it was not collected by us
- the existence of automated decision-making, including profiling and, where applicable, meaningful information about its details
b) Correction
According to Art. 16 GDPR, you have the right to immediate correction of incorrect or incomplete personal data stored by us.
c) Deletion
In accordance with Art. 17 GDPR, you have the right to demand that we erase your personal data without undue delay, unless further processing is necessary for one of the following reasons:
- the personal data are still necessary for the purposes for which they were collected or otherwise processed
- to exercise the right to freedom of expression and information
- for compliance with a legal obligation which requires processing by European Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
- for reasons of public interest in the area of public health pursuant to Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR
- for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Art. 6 para. 1 lit. a GDPR. Art. 89 para. 1 GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing
- for the assertion, exercise or defense of legal claims
d) Restriction of processing
In accordance with Art. 18 GDPR, you can request the restriction of the processing of your personal data for one of the following reasons:
- You dispute the accuracy of your personal data.
- The processing is unlawful and you oppose the erasure of the personal data.
- We no longer need the personal data for the purposes of processing, but you need it for the establishment, exercise or defense of legal claims.
- You object to the processing pursuant to Art. 21 para. 1 GDPR.
e) Information
If you request the rectification or erasure of your personal data or restriction of processing in accordance with Art. 16, Art. 17 or Art. 18 GDPR, we will inform all recipients to whom your personal data has been disclosed, unless this proves impossible or involves a disproportionate effort. You can request that we inform you of these recipients.
f) Transmission
You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format.
You also have the right to request the transfer of this data to a third party, provided that the processing is carried out using automated procedures and is based on consent pursuant to Art. 6 para. 1 lit. a GDPR. 1 p. 1 lit. a or Art. 9 para. 2 lit. a or on a contract pursuant to Art. 6 para. 1 p. 1 lit. b GDPR is based.
g) Revocation
Pursuant to Art. 7 para. 3 GDPR, you have the right to revoke your consent to us at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. In the future, we may no longer continue the data processing that was based on your revoked consent.
h) Complaint
In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR.
i) Objection
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 p. 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR on grounds relating to your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right to object, which will be implemented by us without specifying the particular situation. If you wish to exercise your right of revocation or objection, simply send an e-mail to info@ainovate.com
j) Automated decision in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision
- is necessary for the conclusion or performance of a contract between you and us
- is authorized by European Union or Member State law to which we are subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests
- with your express consent
However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.
In the cases referred to in i) and iii), we will take reasonable steps to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain human intervention on our part, to express your point of view and to contest the decision.
12. amendment of the privacy policy
If we change the privacy policy, this will be indicated on the website.
Status: 01.07.2024
