Privacy

Server log files

You can visit our web pages without giving any information about yourself.

Every time our website is accessed, usage data is transmitted by your browser to us or to our web host / IT service provider and stored in log data (server log files). This stored data includes, for example, the name of the page requested, the date and time of the request, the IP address, the amount of data transferred and the requesting provider. Processing takes place on the basis of Art. 6 (1) (f) GDPR, in our overriding legitimate interest in ensuring the trouble-free operation of our website and in improving our offering.

Contact

Controller

Get in touch whenever you like. The controller for the data processing is: 2Bros Digital Group Data protection officer Hohenzollernstraße 25 30161 Hannover Germany +49 (0) 511 165 922-0 datenschutz@2bros-group.com

Contacting us by email on your own initiative

If you contact us by email on your own initiative for business purposes, we collect your personal data (name, email address, message text) only to the extent you provide it. The processing serves to handle and answer your enquiry.

Where the contact serves to carry out pre-contractual measures (for example advice on a purchase, preparing a quotation) or concerns a contract already concluded between you and us, this processing takes place on the basis of Art. 6 (1) (b) GDPR.

Where the contact is made for other reasons, this processing takes place on the basis of Art. 6 (1) (f) GDPR, in our overriding legitimate interest in handling and answering your enquiry. In that case you have the right, on grounds relating to your particular situation, to object at any time to processing of your personal data based on Art. 6 (1) (f) GDPR.

We use your email address only to handle your enquiry. Your data is then deleted in accordance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the contact form

When you use the contact form we collect your personal data (name, email address, message text) only to the extent you provide it. The processing serves the purpose of making contact.

Where the contact serves to carry out pre-contractual measures (for example advice on a purchase, preparing a quotation) or concerns a contract already concluded between you and us, this processing takes place on the basis of Art. 6 (1) (b) GDPR. Where the contact is made for other reasons, this processing takes place on the basis of Art. 6 (1) (f) GDPR, in our overriding legitimate interest in handling and answering your enquiry. In that case you have the right, on grounds relating to your particular situation, to object at any time to processing of your personal data based on Art. 6 (1) (f) GDPR. We use your email address only to handle your enquiry. Your data is then deleted in accordance with statutory retention periods, unless you have consented to further processing and use.

Origin and handling of the enquiry

So that we can see which advertising leads to an enquiry, on the first page view of your visit – or, if it contained no campaign parameters and no click identifier, on the first later page view that does – we note the following details from the page address, where present: the campaign parameters "utm_source", "utm_medium", "utm_campaign", "utm_content" and "utm_term", and the identifier of an ad click at Google ("gclid", "gbraid", "wbraid") or Meta ("fbclid"). We add the page of that view and its language. We place these details in your browser’s session storage ("sessionStorage", entry "lead-source"); they stay there only until you close the tab or browser window. We set no cookie for this, and the details contain nothing about you as a person.

When you send an enquiry through the booking configurator or the contact form, we attach these details as the field "Quelle" (source), together with the language of the form page, to your message. They reach us with your enquiry by email; we do not pass them on to third parties. Without an enquiry we do not transmit them, except for the short reference in the prefilled WhatsApp text (see the section "WhatsApp Business"). The purpose is measuring the success of our advertising: we want to know which ads and channels lead to enquiries and bookings.

So that the confirmation page counts an enquiry only when it was actually sent, after sending we briefly keep a note in the working memory of the open page: the type of form, the language, a randomly generated identifier of the enquiry and, for a booking enquiry, the duration, studio and estimated price; only if you have consented to Google Ads, also your email address (see the section "Google Ads conversion tracking"). The note is not stored on your device: the confirmation page reads it once and deletes it immediately; if the page reloads or you close it, the note is gone.

This processing takes place on the basis of Art. 6 (1) (f) GDPR, in our legitimate interest in measuring the success of our advertising and counting enquiries reliably. Placing the details on the origin in your browser’s session storage takes place on the basis of Section 25 (2) No. 2 TDDDG. You have the right, on grounds relating to your particular situation, to object to this processing at any time.

When you send an enquiry through the booking configurator or the contact form, the form sends it to our own form service at the address of this website; no external provider is involved. The form service forwards your enquiry by email to studio@2bros-group.com, where we handle it. The field "Quelle" (source) reaches us with the enquiry (see above).

The legal basis for handling your enquiry is Art. 6 (1) (b) GDPR; for the field "Quelle" (source) it is Art. 6 (1) (f) GDPR, in our legitimate interest in measuring which advertising leads to enquiries. We delete your enquiry as soon as it is no longer required for handling it and no statutory retention obligations stand in the way, for bookings for example under the German Commercial Code (HGB) and the German Fiscal Code (AO).

WhatsApp Business

If you contact us for business purposes via WhatsApp, we use WhatsApp Business, provided by WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "WhatsApp"). If you are resident outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).

The processing serves to handle and answer your enquiry. For this purpose we collect and process the mobile number you have registered with WhatsApp, your name if provided, and further data to the extent you provide it. We use a mobile device for the service whose address book contains only data from users who have contacted us via WhatsApp. Personal data is therefore not passed to WhatsApp without you having already consented to that with WhatsApp.

If you came to our website through an advertisement or a link with campaign parameters (see the section "Origin and handling of the enquiry"), the message that opens when you click our WhatsApp button is prefilled with a short text naming the campaign or channel (for example "Ref: google"). The text contains nothing about you as a person. You can change or delete it before sending; it only reaches us via WhatsApp once you send the message.

Your data is transmitted by WhatsApp to servers of Meta Platforms Inc. in the USA.

There is no adequacy decision by the EU Commission for the USA. The transfer takes place on the basis of, among other things, standard contractual clauses as appropriate safeguards for the protection of personal data, which can be viewed at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en (https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en).

Where the contact serves to carry out pre-contractual measures (for example advice on a purchase, preparing a quotation) or concerns a contract already concluded between you and us, this processing takes place on the basis of Art. 6 (1) (b) GDPR.

Where the contact is made for other reasons, this processing takes place on the basis of Art. 6 (1) (f) GDPR, in our overriding legitimate interest in providing a quick and simple way of getting in touch and in answering your enquiry. In that case you have the right, on grounds relating to your particular situation, to object at any time to processing of your personal data based on Art. 6 (1) (f) GDPR.

We use your personal data only to handle your enquiry. Your data is then deleted in accordance with statutory retention periods, unless you have consented to further processing and use.

Further information on the terms of use and data protection when using WhatsApp can be found at https://www.whatsapp.com/legal/#terms-of-service (https://www.whatsapp.com/legal/#terms-of-service) and https://www.whatsapp.com/legal/#privacy-policy (https://www.whatsapp.com/legal/#privacy-policy).

WhatsApp ads (Click-to-WhatsApp)

On Facebook and Instagram we also run advertisements that open a WhatsApp chat with us directly when tapped. These advertisements are delivered by Meta Platforms Ireland Limited (Merrion Road, Dublin 4, D04 X2K5, Ireland; "Meta"); the chat is provided by WhatsApp. What you write to us in the chat is processed as described in the section "WhatsApp Business".

From Meta we only receive aggregated figures on these advertisements, such as how often an advertisement was shown and how many chats resulted from it. Who is behind a chat we only learn from the chat itself. What Meta and WhatsApp process about you when delivering the advertisement and opening the chat is governed by their own privacy notices: https://www.facebook.com/privacy/policy/ (https://www.facebook.com/privacy/policy/) and https://www.whatsapp.com/legal/#privacy-policy (https://www.whatsapp.com/legal/#privacy-policy).

The legal basis for handling your message is Art. 6 (1) (b) GDPR insofar as it serves pre-contractual measures or a contract with us, otherwise Art. 6 (1) (f) GDPR, in our legitimate interest in answering enquiries from our advertising quickly. The legal basis for the aggregated figures on the advertisement is Art. 6 (1) (f) GDPR, in our legitimate interest in measuring the success of our advertising.

Enquiries through forms in advertisements (Meta Lead Ads)

On Facebook and Instagram we also run advertisements with an enquiry form that opens directly in the app ("Lead Ads" by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland; "Meta"). Meta may prefill individual fields from your Facebook or Instagram profile, such as your name and email address; you see all details before sending and can change them.

When you send the form, we receive the details you entered in it — depending on the form, for example name, email address, phone number and your request — together with the time and the advertisement through which you enquired. We retrieve these details in Meta's Ads Manager, answer your enquiry by email and handle it like an enquiry through our website (see the section "Origin and handling of the enquiry"). Meta keeps the details available for us to retrieve for at most 90 days.

Meta processes the form details on our behalf under the Lead Ads Terms (https://www.facebook.com/legal/leadgen/tos (https://www.facebook.com/legal/leadgen/tos)). What Meta otherwise processes about your use of Facebook and Instagram is governed by Meta's privacy policy: https://www.facebook.com/privacy/policy/ (https://www.facebook.com/privacy/policy/). Data may also be transferred to Meta Platforms, Inc. in the USA; it is certified under the EU-US Data Privacy Framework, for which there is an adequacy decision by the EU Commission.

The legal basis is Art. 6 (1) (b) GDPR insofar as your enquiry serves pre-contractual measures or a contract with us, otherwise Art. 6 (1) (f) GDPR, in our legitimate interest in answering your enquiry. Retention is the same as for enquiries through our website (section "Origin and handling of the enquiry"): we delete your enquiry as soon as it is no longer required for handling it and no statutory retention obligations stand in the way.

Enquiries through forms in advertisements (LinkedIn Lead Gen Forms)

On LinkedIn we also run advertisements with an enquiry form that opens directly on LinkedIn ("Lead Gen Forms" by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; "LinkedIn"). LinkedIn prefills individual fields from your LinkedIn profile, such as your name, email address, company and job title; you see all details before sending and can change them.

When you send the form, we receive the details you entered in it — depending on the form, for example name, email address, phone number, company, job title and your request — together with the time and the advertisement through which you enquired. We retrieve these details in LinkedIn's Campaign Manager, answer your enquiry by email and handle it like an enquiry through our website (see the section "Origin and handling of the enquiry"). LinkedIn keeps the details available for us to retrieve for one year.

What LinkedIn otherwise processes about your use of LinkedIn is governed by LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy (https://www.linkedin.com/legal/privacy-policy). Data may also be transferred to LinkedIn Corporation in the USA; it is certified under the EU-US Data Privacy Framework, for which there is an adequacy decision by the EU Commission.

The legal basis is Art. 6 (1) (b) GDPR insofar as your enquiry serves pre-contractual measures or a contract with us, otherwise Art. 6 (1) (f) GDPR, in our legitimate interest in answering your enquiry. Retention is the same as for enquiries through our website (section "Origin and handling of the enquiry"): we delete your enquiry as soon as it is no longer required for handling it and no statutory retention obligations stand in the way.

Cookies

Our website uses cookies. Cookies are small text files stored in or by the browser on a user's computer system. When a user calls up a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be identified uniquely when the website is called up again.

Cookies are stored on your computer. You therefore have full control over their use. By selecting the appropriate technical settings in your browser you can be notified before cookies are set, decide on each one individually, and prevent cookies being stored and the data they contain being transmitted. Cookies already stored can be deleted at any time. Please note, however, that you may then not be able to use all functions of this website in full.

The links below explain how to manage (and disable) cookies in the major browsers:

• Chrome: https://support.google.com/accounts/answer/61416 (https://support.google.com/accounts/answer/61416)
• Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies (https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies)
• Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences (https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences)
• Safari: https://support.apple.com/en-gb/guide/safari/manage-cookies-and-website-data-sfri11471/mac (https://support.apple.com/en-gb/guide/safari/manage-cookies-and-website-data-sfri11471/mac)

Technically necessary cookies

Unless stated otherwise elsewhere in this privacy policy, we use only these technically necessary cookies, for the purpose of making our offering more user-friendly, more effective and more secure. Cookies also allow our systems to recognise your browser after you move between pages and to offer you services. Some functions of our website cannot be provided without cookies. For those it is necessary that the browser is recognised after a change of page.

Cookies or comparable technologies are used on the basis of § 25 (2) TDDDG. Your personal data is processed on the basis of Art. 6 (1) (f) GDPR, in our overriding legitimate interest in ensuring the website works optimally and in a user-friendly and effective design of our offering.

You have the right, on grounds relating to your particular situation, to object at any time to this processing of your personal data.

Consent management (Klaro!)

To manage your consent we use the open-source software Klaro!. It runs exclusively on our own servers; no data is transmitted to third parties.

Klaro! allows you to give consent to data processing on the website — in particular to the setting of cookies — and to withdraw it at any time. Until you consent, session recording, the Meta Pixel and the LinkedIn Insight Tag are not loaded and the Google Ads tag works without cookies and without an identifier (details in the section "Google Ads conversion tracking").

Your choice is stored in a cookie named "klaro-consent" in your browser (retention 180 days) so that the request does not appear on every page. This cookie contains only your decision per service and is not transmitted to us or to third parties.

The processing takes place to fulfil a legal obligation on the basis of Art. 6 (1) (c) GDPR.

Language selection

This website is available in German and in English. If the language set in your browser differs from the language of the page you are on, we show a one-off notice offering to switch. No automatic redirect takes place.

The only information evaluated is what your browser provides anyway: the language you have set and your device’s time zone. This evaluation happens entirely in your browser. No IP-based location lookup is carried out. The only thing transmitted is your choice in the notice (chosen and detected language), as an event to our audience measurement Umami, see the section "Use of Umami"; no data goes to third parties.

Your decision is stored in your browser’s local storage under the key "2bros:sprachwahl" so that the notice does not appear again. Only the code of the chosen language ("de" or "en") is stored. The entry remains until you clear your browser storage.

Under Section 25(2)(2) TDDDG this storage is strictly necessary in order to provide the service you have expressly requested — displaying the website in the language you chose — and therefore requires no consent.

Analytics

Use of Umami

For audience measurement we use Umami, self-hosted open-source analytics software. It runs on our own servers in Germany; no data is transmitted to third parties.

Umami sets no cookies and uses no cross-device identifier. It records information about the page view: the page called up including the parameters in its address (such as campaign tags like "utm_source" or "gclid" if you arrive through an advertisement), the referring page, approximate location (country, region, city), language, screen size, device type, browser and operating system.

We also count individual events on the site: the choices you make in the booking configurator (studio, format, duration, extras), the topic you choose in the contact form, whether a form was sent (with the type of form, language and topic or duration and studio, without the price) or which field it is stuck on, clicks on WhatsApp, email and phone, your choice in the language notice, whether you accept or decline advertising in the cookie banner and, on every page, how far you scroll down it (25, 50, 75 or 100 percent) and whether it was open in the foreground for at least five seconds. What you type into the forms — name, email address, message — is not recorded by Umami.

Your IP address is used only briefly to determine the approximate location and to count visits, and is not stored. To count visits, Umami combines IP address and browser information with a regularly changing random value into a hash; the IP address cannot be recovered from it.

We cannot tell from this information who you are. The processing takes place on the basis of our legitimate interest in a statistical evaluation of website use pursuant to Art. 6 (1) (f) GDPR. We do not ask for consent for this, as Umami stores nothing on your device and reads no identifier from it.

Heatmaps and session recording

With your consent we record how this website is used: mouse movement, clicks, scrolling and window size. From this we produce heatmaps (aggregated click and scroll distributions) and recordings of individual sessions, which we watch to find usability problems and improve the site.

The recording is done with Umami on our own servers in Germany. No data is passed to third parties, and no information is stored on or read from your device — neither cookies nor comparable technologies are used.

Anything you type into form fields is masked before the recording reaches our server. Your name, email address or message therefore never appears in a recording.

The legal basis is your consent under Art. 6(1)(a) GDPR. Without consent the recording is not loaded. You can withdraw your consent at any time with effect for the future by changing your selection in the consent dialogue.

Plug-ins and other services

Google Ads conversion tracking

We run advertisements on Google Ads and use the conversion tracking of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") to measure how many enquiries come about through those advertisements. For this we embed the Google tag (gtag.js) directly in this website.

The Google tag is loaded on every page view, even without your consent. As with any request to an external server, your IP address is technically transmitted to Google in the process. How the tag works after that depends on your choice in the consent management (Google calls this "Consent Mode"). The default setting is refusal.

Without your consent the tag neither sets nor reads cookies and uses no identifier that recognises you. When a page is viewed, and when you send an enquiry or click on our email address, phone number or WhatsApp, it only sends cookieless messages to Google. According to Google, these messages contain the time, information about your browser (user agent), the referring page, your consent status, a random number generated anew on each page view and — if you arrived through an advertisement — the identifier of that ad click from the address. Google uses these messages to estimate statistically how many enquiries come from advertisements. Nothing is stored on your device in the process.

With your consent Google additionally sets cookies (among others "_gcl_au", "_gcl_aw", "_gac_…") which allow your click on an advertisement to be attributed to the later enquiry. What is transmitted is that an enquiry or a click on the email address, phone number or WhatsApp took place — not its content. With every enquiry, with and without consent, we pass on a randomly generated identifier so that Google does not count the same enquiry twice, and for a booking enquiry the estimated net price from the configurator. Names, messages and other booking details do not reach Google.

Enhanced conversions ("Enhanced Conversions for Leads"): if you have consented and send an enquiry through one of our forms, we additionally pass the email address from the form to the Google tag. The tag converts it into a hash in your browser using SHA-256 before it is transmitted to Google; Google therefore does not receive the email address in plain text. Google matches this hash against the accounts of its users so that the enquiry can be attributed to an advertisement even where no cookie is available. So that the email address gets from the form to the confirmation page, we briefly keep it in the working memory of the open page after sending, and only if you have consented; it is not stored on your device, and the confirmation page reads it once and deletes it immediately. Without your consent we do not carry the email address along and do not pass it to the tag.

With your consent Google also uses the tag's messages to add people who have visited our website to audiences to whom we can later show our advertisements in Google Search, on YouTube and on other websites ("remarketing"). Without your consent this does not happen.

Your data may also be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which there is an adequacy decision by the EU Commission. In addition, Google bases the transfer on standard contractual clauses, which can be viewed at: https://policies.google.com/privacy/frameworks (https://policies.google.com/privacy/frameworks).

We use the cookies and enhanced conversions only with your consent. Cookies or comparable technologies are then used on the basis of § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR; your personal data is processed on the basis of Art. 6 (1) (a) GDPR. You can withdraw your consent at any time through the consent management, without affecting the lawfulness of the processing carried out until then.

Loading the tag and the cookieless messages take place on the basis of Art. 6 (1) (f) GDPR, in our legitimate interest in measuring the success of our advertising without storing information on your device for that purpose. You have the right, on grounds relating to your particular situation, to object to this processing at any time. Technically you can prevent it by blocking scripts from "googletagmanager.com" in your browser; the forms still work.

Further information on data protection at Google can be found at https://policies.google.com/privacy (https://policies.google.com/privacy).

Meta Pixel

We run advertisements on Facebook and Instagram and use the Meta Pixel of Meta Platforms Ireland Limited (Merrion Road, Dublin 4, D04 X2K5, Ireland; "Meta") to measure how many enquiries come about through those advertisements. Meta also uses these messages to show our advertisements to people who are more likely to enquire with us.

With your consent we also use the pixel's messages to show our advertisements on Facebook and Instagram later to people who have visited our website (audiences of website visitors, "retargeting"). Without your consent this does not happen.

The Meta Pixel is only loaded if you agree to the service "Meta Pixel" in the consent management. Without your consent this website makes no connection to Meta, and no data is transmitted to Meta.

With your consent your browser loads Meta's script ("connect.facebook.net"). As with any request to an external server, your IP address and information about your browser are transmitted to Meta in the process. The pixel reports to Meta which pages of our website you view (address of the page, referring page, time), that you have sent an enquiry through one of our forms — with the type of form (booking, contact or studio tour) and a randomly generated identifier so that Meta does not count the same enquiry twice — and that you have clicked on our WhatsApp button. We do not pass names, email addresses, phone numbers, messages, prices or other booking details to Meta; we do not report clicks on our email address or phone number to Meta.

For this Meta sets the cookies "_fbp" (identifier of your browser) and, if you arrived through an advertisement, "_fbc" (identifier of that ad click), each with a retention period of 90 days. If your browser is logged in to a Facebook or Instagram account, Meta can attribute the messages to that account. We ourselves only receive aggregated figures from Meta, no details on individual persons.

We are jointly responsible with Meta for collecting the data on our website and transmitting it to Meta. The details are set out in Meta's Controller Addendum (https://www.facebook.com/legal/controller_addendum (https://www.facebook.com/legal/controller_addendum)); under it Meta is your point of contact for the rights you have towards Meta. Meta alone is responsible for any further processing at Meta: https://www.facebook.com/privacy/policy/ (https://www.facebook.com/privacy/policy/).

Your data is also transferred to Meta Platforms, Inc. (1 Meta Way, Menlo Park, CA 94025, USA) in the process. Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework, for which there is an adequacy decision by the EU Commission. In addition, Meta bases the transfer on standard contractual clauses: https://www.facebook.com/privacy/policy/ (https://www.facebook.com/privacy/policy/).

We use the Meta Pixel only with your consent. Cookies or comparable technologies are used on the basis of § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR; your personal data is processed on the basis of Art. 6 (1) (a) GDPR. You can withdraw your consent at any time through the consent management, without affecting the lawfulness of the processing carried out until then. After withdrawal the pixel sends no further messages, and the cookies "_fbp" and "_fbc" are deleted.

LinkedIn Insight Tag

We run advertisements on LinkedIn and use the LinkedIn Insight Tag of LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland; "LinkedIn") to measure how many enquiries come about through those advertisements. LinkedIn also provides us with aggregated reports, for example on the industries and job titles our website visitors come from; we cannot recognise individual persons in them.

With your consent LinkedIn can also use the tag's messages to build audiences of visitors to our website, to whom we can later show advertisements on LinkedIn ("retargeting"). Without your consent this does not happen.

The LinkedIn Insight Tag is only loaded if you agree to the service "LinkedIn Insight Tag" in the consent management. Without your consent this website makes no connection to LinkedIn, and no data is transmitted to LinkedIn.

With your consent your browser loads LinkedIn's script ("snap.licdn.com"). As with any request to an external server, your IP address and information about your browser are transmitted to LinkedIn in the process. The tag reports to LinkedIn which pages of our website you view (address of the page, referring page, time, information about device and browser), even when the page does not reload. In addition, the website reports to LinkedIn when you send an enquiry through the booking configurator, the contact form or the enquiry form on the page about producing a podcast season, and when you click on our email address, phone number or WhatsApp — only the type of event, and for an enquiry a random identifier so that the same enquiry is not counted twice. We do not pass names, email addresses, phone numbers, messages, prices or booking details to LinkedIn.

For this LinkedIn sets the cookies "li_fat_id" (indirect identifier of a LinkedIn member, 30 days), "li_giant" (identifier for groups of LinkedIn members, 7 days) and "ln_or" (1 day) on our domain, and on the domain linkedin.com among others "bcookie" (identifier of your browser, 1 year), "lidc" (24 hours), "UserMatchHistory" and "AnalyticsSyncHistory" (30 days each) and "li_sugr" (90 days). If your browser is logged in to LinkedIn, LinkedIn can attribute the messages to your member account. According to LinkedIn, direct identifiers are removed within seven days and the remaining pseudonymised data is deleted within 180 days. We ourselves only receive aggregated figures from LinkedIn, no details on individual persons.

We are jointly responsible with LinkedIn for collecting the data on our website and transmitting it to LinkedIn. LinkedIn alone is responsible for any further processing at LinkedIn: https://www.linkedin.com/legal/privacy-policy (https://www.linkedin.com/legal/privacy-policy).

Your data is also transferred to LinkedIn Corporation (1000 West Maude Avenue, Sunnyvale, CA 94085, USA) in the process. LinkedIn Corporation is certified under the EU-US Data Privacy Framework, for which there is an adequacy decision by the EU Commission.

We use the LinkedIn Insight Tag only with your consent. Cookies or comparable technologies are used on the basis of § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR; your personal data is processed on the basis of Art. 6 (1) (a) GDPR. You can withdraw your consent at any time through the consent management, without affecting the lawfulness of the processing carried out until then. If you withdraw while the tag is running, the page reloads once so that LinkedIn's script is removed; after that no data is transmitted to LinkedIn, and the cookies "li_fat_id", "li_giant" and "ln_or" on our domain are deleted. We cannot delete the cookies on linkedin.com; they expire after the period stated, and you can delete them in your browser.

Data subject rights and retention

Retention period

The data is stored taking statutory retention periods into account and is then deleted once those periods expire, unless you have consented to further processing and use.

Rights of the data subject

Where the statutory conditions are met, you have the following rights under Art. 15 to 20 GDPR: the right of access, to rectification, to erasure, to restriction of processing and to data portability.

You also have a right to object under Art. 21 (1) GDPR to processing based on Art. 6 (1) (f) GDPR, and to processing for the purpose of direct marketing.

Right to lodge a complaint with a supervisory authority

Under Art. 77 GDPR you have the right to lodge a complaint with the supervisory authority if you consider that the processing of your personal data is unlawful.

You can lodge a complaint with, among others, the supervisory authority responsible for us, whose contact details are:

Landesbeauftragte für den Datenschutz Niedersachsen Prinzenstraße 5 30159 Hannover Germany Phone: +49 511 1204500 Fax: +49 511 1204599 Email: poststelle@lfd.niedersachsen.de

Right to object

Where the personal data processing described here is based on our legitimate interest under Art. 6 (1) (f) GDPR, you have the right, on grounds relating to your particular situation, to object to that processing at any time with effect for the future.

Following an objection, processing of the data concerned will stop unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves to establish, exercise or defend legal claims.