Privacy Policy

Thank you for visiting our website and for your interest in our company. The protection of your personal data is important to us. Personal data is information about the personal and material circumstances of a certain or identifiable natural person. This includes, for example, their civil name, address, telephone number and date of birth, but also all other data that can be related to an identifiable person.
Since personal data enjoys special legal protection, we only collect it to the extent necessary for the provision of our website and the performance of our services. In the following we describe what personal information we collect during your visit to our website and how we use it.
Our data protection practice is in accordance with the legal regulations, in particular those of the German Federal Data Protection Act (BDSG), the German Telemedia Act (TMG), the German Telekommunikation-Telemedien-Datenschutz-Gesetz (TTDSG) and the General Data Protection Regulation of the EU (GDPR). We will only process your personal data to the extent necessary for the functional provision of this website and of our content and services, as well as for the processing of inquiries and, where applicable, for the processing of orders/contracts as well as other purposes, but in this case only to the extent that a legitimate interest within the meaning of Article 6(1)(1)(f) GDPR or any other case of authorization exists. Your data will be used for further purposes specified in your consent (e.g. for sending promotional information by newsletter) only if you have given your prior consent separately. Details of each instance of processing can be found in the following explanations.

The controller within the meaning of the GDPR is:

MicroNova AG
Unterfeldring 6
85256 Vierkirchen
Email: info@who-needs-spam.micronova.de
Tel.: +49 8139 9300-0
Fax: +49 8139 9300-80

MKM Datenschutz GmbH
Äußere Sulzbacher Str. 118
90491 Nürnberg
Email: datenschutz@who-needs-spam.micronova.de
Tel.: +49 911 990 860 0
Website: http://www.mkm-datenschutz.de/

We may share your personal data for the purposes of conducting our business, providing, improving and adapting our solutions, sending marketing and other information about our business, and for other legitimate purposes permitted by applicable law. Data may be transferred:

• Within the MicroNova Group for the purpose of data processing or storage
• To business partners to enable them to provide a requested service or carry out a transaction.

Each time you access our website, our system automatically collects data and information from the system of the computer you are using. The following data is collected in this instance:

(1) Information about the browser type and the version used
(2) The operating system of the device used to access the website
(3) Host name of the accessing calling device
(4) The IP address of the device used to access the website
(5) Date and time of access
(6) Websites and resources (images, files, other page content) accessed on our website
(7) Websites from which the user’s system accessed our website (referrer tracking)
​​​​​​​(8) Message whether the call was successful
(9) Amount of data transferred

This data is stored in the log files of our system. This data is not stored together with the personal data of a specific user, meaning that individual site visitors are not identified.

• Legal basis for processing personal data
  Article 6(1)(f) GDPR (legitimate interest). Our legitimate interest is to ensure that the purpose described below is achieved.
• Purpose of data processing
  Logging is performed to maintain the compatibility of our website for as many visitors as possible, to combat abuse, and for troubleshooting. For this purpose, it is necessary to log the technical data of the computer accessing our website to be able to react as early as possible to display errors, attacks on our IT systems, and/or errors in the functionality of our website. The data is also used to optimize the website and generally ensure the security of our information technology systems.
• Duration of storage
  The aforementioned technical data will be deleted as soon as it is no longer required to ensure the compatibility of the website for all visitors, but no later than 3 months after our website was accessed.
• Possibility of objection and removal
  The possibilities for objection and removal are based on the general regulations described below in this Privacy Policy relating to the right of objection and erasure under data protection law.

Our website offers you various functions, the use of which involves our collecting, processing and storing personal data. Below we explain what happens to this data:

• Scope of the processing of personal data
  We process the personal data relating to your application. This may be general information about you (e.g. name, address, e-mail address), information about your professional or educational qualifications, or other information that you provide to us in connection with your application. If you take the opportunity to apply with your Xing or LinkedIn profile, the required profile data as well as the Xing/LinkedIn CV are automatically entered into the MicroNova application mask. Only empty fields are then to be filled in by you. Please note that your data will not be stored anonymously, but will be made available to our HR department and the departments relevant for the position.
• Legal basis for processing personal data
  The legal basis for the processing of your personal data is Art. 6 (1) (b) GDPR (performance of (pre)contractual measures) and, where applicable, your special consent in accordance with Art. 6 (b) GDPR (please refer to talentpool).
• Purpose of data processing
  Personal data collected during the application process will be processed exclusively for the purpose of handling your application. The use of the application portal serves to facilitate the application process.
• Obligation to provide the data
  You are not obliged to provide us with your personal data for the application process. We will be unable to carry out the application process and make a decision on whether to enter into a contract of employment unless you provide us with the data necessary to complete the application process.
• Duration of storage
  The data will be deleted as soon as the application process has been terminated and there is no longer any legal basis for storing the application data. Your application documents will therefore be deleted at the latest 6 months after the end of the application process if they do not result in a contract of employment.
• Talentpool
  We will also retain your data beyond the period of the application process if you have consented to the information you have provided us being included in our talent pool. Consent to be included in our talent pool is voluntary and does not affect the actual selection process in any way. You can withdraw your consent at any time with effect for the future without giving reasons. After revocation of consent, we will delete the data immediately, provided that the period specified under “Duration of storage” has expired.
• Possibility of objection and removal
  The possibilities for objection and removal are based on the general regulations described below in this Privacy Policy relating to the right of objection and erasure under data protection law.

• Scope of the processing of personal data
  The data you enter in our contact forms.
• Legal basis for processing personal data
  Article 6(1)(a) GDPR (consent by clear confirmatory act or conduct)
• Purpose of data processing
  The data collected via our contact form(s) is only used for processing the specific contact inquiry received via the contact form.
• Duration of storage
  The data collected from you is deleted after processing your inquiry, at the latest after 3 months, provided there are no legal retention periods.
• Possibility of objection and removal
  The possibilities for objection and removal are based on the general regulations described below in this Privacy Policy relating to the right of objection and erasure under data protection law.

On our website you will find inquiry forms, forms to download e-books and/or whitepapers, and forms to register for events.

• Scope of the processing of personal data
  The data you enter in the form fields.
• Legal basis for processing personal data
  Your data is processed on the basis of Article 6(1)(b) GDPR (implementation of (pre-)contractual measures).
• Purpose of data processing
  The data collected is only used for processing your request, download or registration, so that we can handle potential contractual relationships with you or carry out pre-contractual measures.
• Duration of storage
  We delete the data as soon as it is no longer required for processing the request and there are no longer any legal obligations to retain it. Usually, your personal data will be deleted after three months at the latest.
• Possibility of objection and removal
  The possibilities for objection and removal are based on the general regulations described below in this Privacy Policy relating to the right of objection and erasure under data protection law.

• What personal data is collected and to what extent is it processed?
  We will process the data you enter on our appointment booking form for the purpose stated below.
• Legal basis for processing personal data
  Your data is processed on the basis of Article 6(1)(b) GDPR (implementation of (pre-)contractual measures).
• Purpose of data processing
  We will only use the data recorded via our appointment booking form to process appointment requests received through the appointment booking form.
• Duration of storage
  We will delete your appointment booking immediately after 12 months from the appointment being scheduled, unless there is a legal obligation to keep records. We reserve the right to delete the data without giving reasons and without prior or subsequent information.
• Right of objection and erasure
  You can find out what rights you have and how to exercise them at the end of this privacy statement.
• Necessity of providing personal data
  The use of our appointment booking form is neither contractually nor legally required, but is necessary if you wish to book an appointment with us online. To make on online booking, you must provide certain mandatory information. Your appointment booking cannot be accepted or processed if you do not fill in the mandatory information.

• Scope of the processing of personal data
  We will process the data you enter on our registration form for webinars and online events to achieve the purpose stated below.
• Legal basis for processing personal data
  The legal basis for the transmission of personal data is your consent in accordance with Article 6 (1a) GDPR, which you have given on our website (registration).
• Service Provider
  Our website uses the GoToWebinar service provided by LogMeIn, a company headquartered in Ireland at The Reflector, 10 Hanover Quay, Dublin 2, D02R573, Ireland. GoToWebinar can be used for video and telephone conferencing, meetings and online trainings. The tool provides a solution that, in addition to offering video and telephone conferencing, also allows you to send text messages and files, as well as invite contacts to an online meeting. Likewise, GoToWebinar can be used to share your own screen content. These options can be accessed through web browsers or special applications on various devices (e.g. PC, notebook, smartphone, tablet PC, etc.). In order to participate in an online event with GoToWebinar, a link to the particular event is generated and made available to the participants. This requires a participant’s email address to be forwarded to GoToWebinar so that the invitation can be sent by email.
  We collect the following data for the processing itself: Name, email address, company/organization, dial-up data (IP address, dial-up time).
• Purpose of data processing
  We use GoToWebinar to be able to conduct web conferences and webinars.
• Duration of storage
  The data will be deleted as soon as they are no longer required for processing the event and there are no longer any legal storage obligations. Your registration will be promptly deleted by us after 12 months after the scheduled date of the event.
• Possibility of objection and removal
  You can revoke your consent at any time. You can find more information about revoking your consent either when providing your consent itself or at the end of this privacy statement.
  Please refer to the provider’s privacy policy at https://www.goto.com/de/company/legal/privacy for more information on how the transferred data will be handled.
• Necessity of providing personal data
  The use of GoToWebinar is not possible without personal data being provided. No user account is required to enter the necessary data. It is not possible to make use of the service if the data you enter are incorrect. GoToWebinar cannot be used if the data you enter are incorrect or not entered at all.

• Scope of the processing of personal data
  The registration and login data you provide us.
• Legal basis for processing personal data
  Article 6(1)(a) GDPR (consent by clear confirmatory act or conduct)
• Purpose of data processing
  It is possible to use a separate login area on our website. If you have forgotten your password or your user name for this area, you can have this data sent to you again after entering your contact data (email address). We collect, store and process the usage data arising from using the login area only for the purpose of combating misuse, eliminating faults, or maintaining functionality. We store the downloads made on the basis of the software licensing agreement entered into. The data is not used for other purposes or forwarded to third parties.
• Duration of storage
  The collected data is stored for as long as you maintain a user account with us.
  The data collected in the context of the ‘Forgotten user name or password’ function is only used to resend forgotten access data.
• Possibility of objection and removal
  The possibilities for objection and removal are based on the general regulations described below in this Privacy Policy relating to the right of objection and erasure under data protection law.

• What personal data is collected and to what extent is it processed?
  The data you enter in the form fields or which is stored in the EXAM user profile, such as address, name, first name, email address, etc., will be processed by us for the purpose stated below.
• Legal basis for processing personal data
  Article 6(1)(b) GDPR (execution of (pre)contractual measures).
• Purpose of data processing
  The data collected is only used for processing your software download or order so that we can handle potential contractual relationships with you or carry out pre-contractual measures.
• Duration of storage
  The data will be deleted as soon as it is no longer required for processing the order and there are no longer any legal retention obligations. This will usually be after 10 years (cf. “§ 147 Abs.3 UStG (Germany)” in conjunction with “§147 Abs. 1 Nr. 1, 4 and 4a AO UStG (Germany)” and “§ 14b Abs. 1 UStG (Germany)".
• Possibility of objection and removal
  You can find out what rights you have and how to exercise them in the lower section of this data protection declaration.
• Necessity of providing personal data
  The information provided in the EXAM user profile or order form is neither contractually nor legally required, but is necessary for the conclusion of a contract. If you do not fill in the required fields or do not fill them in completely, the software download or order you have requested cannot be completed.

• Scope of the processing of personal data
  The data you enter when subscribing to the newsletter or the customer magazine.
• Legal basis for processing personal data
  Article 6(1)(a) GDPR (consent by clear confirmatory act or conduct)
• Service Provider
  We use the service provider CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, to send out our newsletter / our customer magazine ebook. CleverReach is a service that can be used to organize and analyze newsletter distribution.
• Purpose of data processing
  Newsletter subscription form: The data recorded in our newsletter subscription form is used by us solely to send out our newsletter, in which we inform you about our services and our news. After subscribing, we will send you a confirmation email containing a link that you must click to complete your subscription to our newsletter (double opt-in).
  Customer magazine subscription form: The data recorded in our customer magazine subscription form is used by us solely to send out our customer magazine, in which we inform you about our services and our news. After subscribing, we will send you a confirmation email containing a link that you must click to complete your subscription to our newsletter (double opt-in).
  Sending our newsletters using CleverReach allows us to analyze the behavior of newsletter / customer magazine subscribers. For example, it allows an analysis of how many subscribers have opened the newsletter message and how often which link in the newsletter has been clicked. So-called conversion tracking can also be used to analyze whether a predefined action (e.g. purchase of a product on our website) has taken place after a link in the newsletter has been clicked. You can find more information about data analysis through CleverReach newsletters at: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/.
• Duration of storage
  You can unsubscribe from our newsletter at any time by clicking on the unsubscribe link contained in each newsletter or by filling out the appropriate form on the website, https://www.micronova.de/en/newsletter/unsubscribe.html. You can unsubscribe from our customer magazine at any time by clicking on the unsubscribe link contained in each email or by filling out the appropriate form on the website, https://www.micronova.de/en/company/news-events/customer-magazine/unsubscribe.html. Your data will be deleted by us no later than three months after you unsubscribe, unless we have a reason to continue to store the data. We also delete your data immediately if the subscription process is not completed. We reserve the right to delete the data without giving reasons and without prior or subsequent information.
• Possibility of objection and removal
  The possibilities for objection and removal are based on the general regulations described below in this Privacy Policy relating to the right of objection and erasure under data protection law.

We use an external service provider to provide our online services: Perspective Software GmbH, Mailbox 659770, D-96035 Bamberg (hereinafter “Perspective”). Perspective itself stores your data exclusively on European servers. However, there is a possibility that your data may be accessible to facilities in the United States of America, as Perspective uses sub-processors based in the USA. Since July 2023, the EU-US Data Privacy Framework (DPF) adopted by the EU Commission has been the legal basis for these potential transfers. Perspective's sub-processors are therefore committed to a high level of data protection. Nevertheless, there is still a risk that your data could be processed by US authorities for control and monitoring purposes. Therefore, Perspective offers additional measures and guarantees in accordance with the requirements of the GDPR to ensure an adequate level of protection for such data transfers to the United States. For example, by concluding standard contractual clauses between Perspective and the sub-processors.

• Description and scope of data processing
  Perspective processes your data for us so that we can provide you with our online services. For this purpose, Perspective will automatically transmit your IP address to your browser or end device in order to transmit the content and functions of our online services.
  (1) ​​Information about the browser type and version used
  (2) The operating system of the end device
  (3) The internet service provider used
  (4) The IP address of the device
  (5) The date and time of access to the funnel
  (6) Websites from which the user's system accessed our website (“referrer”)
• Legal basis for data processing
  Perspective stores the data mentioned above in so-called log files (log files). This is done to ensure
  • the smooth establishment of a connection to the website,
  • the convenient use of our website,
  • the evaluation of system security and stability, and
  • for other administrative purposes.

The temporary storage of the IP address by the system is also necessary to enable the website to be delivered to your computer. For this purpose, the IP address of the accessing terminal device must remain stored for the duration of the session. These purposes also constitute our legitimate interest in data processing. The legal basis for data processing is therefore Art. 6 para. 1 sentence 1 lit. f GDPR.

• Duration of processing
  The personal data processed by Perspective will be deleted as soon as it is no longer required to achieve the purpose for which it was collected:
  • In the case of data collected to provide the website, this is the case when the respective session is ended.
  • In the case of the IP address being stored in log files, this is the case after a maximum of 7 days.

• Rights of the data subject
  You have the right to obtain information about the origin, recipient and purpose of your stored personal data at any time and free of charge. You also have the right to request the correction, blocking or deletion of this data. You can contact us at any time at the address given in the imprint if you have any questions about data protection. Furthermore, you have the right to lodge a complaint with the competent supervisory authority in the event of a breach of the GDPR.

  Since the data processing is based on Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims (objection under Art. 21 (1) GDPR). Since the collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of our website, you should not be able to object in most cases.

  In addition, you have the right to request the restriction of the processing of your personal data under certain circumstances. The right to restriction of processing exists in the following cases:

  • If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the review, you have the right to request the restriction of the processing of your personal data.
  • If the processing of your personal data was/is unlawful, you may request the restriction of data processing instead of deletion.
  • If we no longer need your personal data, but you need it to exercise, defense or assertion of legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
  • If you have filed an objection in accordance with Art. 21 (1) GDPR, a balancing of your interests and ours must be carried out. As long as it is not yet clear whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data may – apart from its storage – only be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the European Union or a Member State.

We use an external service provider to provide contact, enquiry or application forms: Perspective Software GmbH, Mailbox 659770, D-96035 Bamberg (hereinafter “Perspective”). Perspective itself stores your data exclusively on European servers. However, there is a possibility that your data may be accessible to facilities in the United States of America, as Perspective uses sub-processors based in the USA. Since July 2023, the EU-US Data Privacy Framework (DPF) adopted by the EU Commission has been the legal basis for these potential transfers. Perspective's sub-processors are therefore committed to a high level of data protection. Nevertheless, there is still a risk that your data could be processed by US authorities for control and monitoring purposes. Therefore, Perspective offers additional measures and guarantees in accordance with the requirements of the GDPR to ensure an adequate level of protection for such data transfers to the United States. For example, by concluding standard contractual clauses between Perspective and the sub-processors.

• Description and scope of data processing
  When using the contact, enquiry or application forms provided by Perspective, the following data is transmitted to the Perspective servers:
  • Date and time of access
  • Websites from which the user's system accessed our website (“referrer”)
  • Context information (e.g. button clicks on the pages, selections on the pages)
  • Contents of all completed text fields (e.g. contact details such as name or address, or other personal data, depending on the question asked in the specific text field)
  • Files uploaded by users
• Purpose Legal basis for data processing
  The purpose of this data processing is to ensure the communication you have initiated. The processing of your data from contact, enquiry or application forms is therefore initially based on your consent. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR. If a contract is initiated via an enquiry form, the legal basis is also Art. 6 para. 1 sentence 1 lit. b GDPR. The legal basis for processing the data in an application form may be Art. 6 para. 1 sentence 1 lit. f GDPR as well as Art. 88 GDPR in conjunction with 26 BDSG.
• Duration of processing
  Your personal data will be stored for as long as it is necessary to fulfill the purpose of processing, or until you revoke your consent. Exempt from this principle is data that Perspective is required to store due to legal obligations. These include, for example, the commercial and tax law retention requirements. These retention periods are – currently – up to ten years. For application data, if no employment relationship is established, your data will be deleted no later than six months after the application process is completed, unless you have expressly consented to longer storage.
• Data subject rights

  You have the right to obtain information about the origin, recipient and purpose of your stored personal data at any time and free of charge. You also have the right to request the correction, blocking or deletion of this data. You can contact us at any time at the address given in the imprint if you have any questions about data protection. Furthermore, you have the right to lodge a complaint with the competent supervisory authority in the event of violations of the GDPR. Consent to data processing can be revoked at any time by sending us an informal message (e.g. by e-mail). The revocation does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
  In addition, you have the right to request the restriction of the processing of personal data under certain circumstances. The right to restriction of processing exists in the following cases:

  • If you dispute the accuracy of the personal data we have stored about you, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
  • If the processing of your personal data was/is unlawful, you may request the restriction of data processing instead of deletion.
  • If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
  • If you have lodged an objection in accordance with Art. 21 (1) GDPR, a balancing of your interests and ours must be carried out. As long as it is not yet clear whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data may – with the exception of its storage – only be processed with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of an important public interest of the European Union or a Member State.

We collect, process and store the following data when you access this website or individual files on the website: IP address, website from which the file was requested, name of the file, date and time of the retrieval, volume of transferred data, and notification about the success of the retrieval (known as a web log). We use this access data exclusively in non-personalized form for the continuous improvement of our Internet offering and for statistical purposes. We also use the following web trackers to analyze visits to this website:

• Scope of the processing of personal data
  On our website we use the Custom Audiences service provided by the company Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour 2, Dublin, Ireland. This may involve the use of a “pixel” to match users of our website with profiles created on Facebook. If, by means of providing consent, you enable us to use this service, we cannot rule out that your data will be transferred to the USA. Meta Platforms, Inc. as a potential data recipient is certified under the Data Privacy Framework Agreement.
• Legal basis for the processing of personal data
  The legal basis for the processing of personal data is your consent in our information banner regarding the use of cookies and web tracking (consent through clear confirming action or behavior) in accordance with Article 6(1)(a) GDPR.
• Purpose of data processing
  Using Custom Audience, allows us to carry out targeted and personalized advertising campaigns.
• Duration of storage
  META stores the data relevant for the provision of the web service as long as it is necessary. If the data is subject to statutory retention obligations, it will be deleted after such retention obligation expires.
• Possibility of objection and removal
  The possibilities for objection and removal are based on the general regulations described below in this Privacy Policy on the right of objection and erasure under data protection law.
  Meta also offers you an opt-out option at https://www.facebook.com/about/privacy.

• Scope of the processing of personal data
  On our site we use the web tracking service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Google Analytics). Google Analytics uses cookies for web tracking. These cookies are stored on your computer and enable an analysis of the use of our website and your surfing behavior (tracking). We carry out this analysis based on Google Analytics’ tracking service in order to constantly optimize our Internet presence and make it more readily available. When you use our website, data such as your IP address and your user activities are transmitted to servers operated by Google Ireland Limited. We also require web tracking for security reasons, as it enables us to monitor any attacks against our website by third parties. The information provided by the web tracker allows us to take effective counter-measures to protect the personal data we process from these cyber-attacks. Activating IP anonymization within the Google Analytics tracking code of this website means your IP address will be anonymized by Google Analytics before being transferred. This website uses a Google Analytics tracking code, to which has been added the operator gat._anonymizeIp(); to allow only an anonymized collection of IP addresses (known as IP masking). If the service is enabled on our website, our website establishes a connection to the servers of the company Google Ireland Limited and transfers the required data. As part of the order processing, personal data may also be transferred to the servers of the company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA. Google LLC as a potential data recipient is certified under the Data Privacy Framework Agreement.
• Legal basis for processing personal data
  Pursuant to Article 6(1)a GDPR, your consent in our notification banner (by means of a clear affirmative act or clear affirmative conduct) to the use of cookies and web tracking provides the legal basis for us to process your data.
• Purpose of data processing
  Google uses this information on our behalf to analyze your visit to this website, compile reports on website activity and provide us with other services relating to website activity and Internet usage. We also require web tracking for security reasons, as it enables us to monitor any attacks against our website by third parties. The information provided by the web tracker allows us to take effective counter-measures to protect the personal data we process from these cyber-attacks.
• Duration of storage
  Google stores the data relevant for the provision of web tracking for as long as is necessary to fulfill the booked web service. Data is collected and stored anonymously. If there is reference to a person, the data is deleted immediately, unless it is subject to legal storage obligations. In any case the data is deleted after the storage obligation expires.
• Possibility of objection and removal
  You can prevent the collection and forwarding of personal data to Google (in particular your IP address) and the processing of this data by Google by preventing scripts from being executed in your browser or by activating your browser’s “Do Not Track” setting. You can also prevent Google from collecting the data generated by the Google cookie and relating to your use of the website (including your IP address), and prevent Google from processing this data, by downloading and installing the browser plug-in available from the following link (http://tools.google.com/dlpage/gaoptout). Google’s security and privacy policy can be found at https://policies.google.com/privacy.

• Scope of the processing of personal data
  Our website loads a web service provided by Google Ireland Limited, Gordon House, Barrow Street 4, Dublin, Ireland (hereinafter referred to as Gstatic). We use this data to ensure the full functionality of our website. Your browser may transmit personal data to Gstatic in this respect.
  You can prevent the collection and processing of your personal data by Gstatic by preventing scripts from being executed in your browser or by installing a script blocker in your browser (for example from www.noscript.net or www.ghostery.com).
• Legal basis for the processing of personal data
  The legal basis for the processing of data is Article 6(1)(f) GDPR. The legitimate interest is an error-free function of the website.
• Purpose of data processing
  Gstatic is a background service used by Google to retrieve static content to reduce bandwidth usage and preload necessary catalog files. In particular, the service loads background data on Google Fonts and Google Maps. For more information on the processing of transferred data, please refer to Google’s Privacy Policy at policies.google.com/privacy.
• Duration of storage
  The data is deleted as soon as the purpose of its processing has been fulfilled.
• Possibility of objection and removal
  You can prevent the collection and forwarding of personal data to Google (in particular your IP address) and the processing of this data by Google by preventing scripts from being executed in your browser or by activating your browser’s “Do Not Track” setting. You can also prevent Google from collecting the data generated by the Google cookie and relating to your use of the website (including your IP address) and prevent Google from processing this data, by downloading and installing the browser plug-in available from the following link (http://tools.google.com/dlpage/gaoptout). Google’s security and privacy policy can be found at https://policies.google.com/privacy.

• Scope of Processing of Personal Data
  Our website uses tracking code from Matomo (formerly Piwik), an open source web analytics tool (https://matomo.org). Web tracking is performed entirely by us without any reference to a specific person. Matomo is hosted within our own server infrastructure for this purpose. Data are therefore not transferred to third parties.
  We collect, process and store data relating to the use of our website, such as referrer links, the length of time spent on certain URLs, the clickstream and also data about your browser settings, such as the browser vendor and also its version, the screen resolution and the operating system used.
• Legal Basis
  The legal basis is Article 6 (1f) of the GDPR (legitimate interest). Our legitimate interest is in analyzing our website.
  We may also collect and store parts of your IP address and information on the loading speed of our website. These data only allow us to create anonymous usage profiles and to extract statistical information. We also use cookies to distinguish returning site visitors from first-time visitors as part of Matomo web tracking. Cookies are small text files that are stored locally in the memory of your Internet browser and which contain a separate ID, and possibly other technical information. The data collected in this context will not be combined with any other personal data we may have without your explicit consent.
• Legal Basis for Processing Personal Data
  In many cases, there is no reference to a specific person. If a reference to a person should nevertheless come about, the legal basis for the collection is Article 6 (1f) of the GDPR, the legitimate interest in analyzing our website.
• Purpose of Data Processing
  The purpose of web tracking is to analyze user traffic in order to enable us to anonymously monitor the functionality and usability of our website, and to constantly improve our Internet presence. It is used solely to collect statistical, non-personal data.
• Duration of Storage
  We store all web tracking data collected via Matomo for an indefinite period of time, insofar as such data are only available to us in anonymized form. We will delete any data that have not been anonymized after 12 months at the latest.
• Your Right to Object and to Erase Your Data
  You can prevent the collection of the aforementioned data as well as their processing by installing a JavaScript blocker to prevent the collection of any other app analysis data. Insofar as a reference to a specific person should be established, you can revoke your consent at any time in accordance with the rules outlined in this data privacy policy.

• Scope of the processing of personal data
  On our website we use the Meta Pixel service provided by the company Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, 2 Dublin, Ireland. The service is a plugin that is used to track the activity of website visitors on a website. The browsing behavior is then analyzed and used for advertising purposes. If, by means of providing consent, you enable us to use this service, we cannot rule out that your data will be transferred to the USA. Meta Platforms, Inc. as a potential data recipient is certified under the Data Privacy Framework Agreement. For more information on the handling of transferred data, please refer to the service provider’s Privacy Policy at www.facebook.com/about/privacy.
• Legal basis
  The legal basis for the processing of personal data is your consent in our information banner regarding the use of cookies and web tracking (consent through clear confirming action or behavior) in accordance with Article 6(1)(a) GDPR.
• Purpose of data processing
  The Meta Pixel allows us to analyze activity on our website to better understand the effectiveness of our advertising efforts.
• Duration of storage
  The data is deleted as soon as the purpose of its processing has been fulfilled.
• Right of objection and erasure
  You can revoke your consent at any time. You will find more information on revoking your consent either with the consent itself or at the end of this privacy policy. For more information on handling the transferred data, please refer to the provider's privacy policy at https://www.facebook.com/about/privacy. The provider also offers an opt-out option at https://www.facebook.com/about/privacy .

• Scope of the processing of personal data
  On our website, we have integrated a social plug-in by the social network “Facebook by META”, which is operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour 2, Dublin, Ireland. When you access a page that contains such a plug-in, your browser automatically establishes a background connection to the servers of Facebook by META. The content of the plug-in is sent directly to your browser by Facebook by META and only incorporated into our page. Through this integration, Facebook by META receives the information that your browser has loaded a specific page of our website. This also applies if you do not have a Facebook by META profile or are not currently logged into Facebook by META. This information (including your IP address) is sent from your browser directly to a Facebook by META server in Ireland and stored there. If you are logged in to Facebook by META, Facebook by META can directly assign your visit to our website to your Facebook by META profile. If you interact with the plug-ins, for example by clicking the “Like” button or posting a comment, this information is also transmitted directly to a Facebook by META server and stored there. The information is also published on your Facebook by META profile and displayed to your Facebook by META contacts that you have enabled for this purpose.
• Legal basis for the processing of personal data
  The legal basis in the event that you have registered with “Facebook by META” is your consent pursuant to Article 6 (1)(a) GDPR. In the event that you are not registered with “Facebook by META”, the legal basis is our legitimate interest pursuant to Article 6(1)(f) GDPR. Our legitimate interest is to enable user interaction with the content of the site operator on Facebook by META.
• Purpose of data processing
  The primary purpose of data collection is to offer you a possibility of social interaction linked to Facebook by META and thus to make our Internet presence interactive. The scope of data collection and the further processing and use of the data you leave behind by Facebook by META, as well as your rights in this regard and setting options for protecting your privacy, can be found in the privacy policy of Facebook by META: www.facebook.com/about/privacy.
• Duration of storage
  Facebook by META stores the data relevant for the provision of the web service as long as it is necessary. If the data is subject to statutory retention obligations, it will be deleted after such retention obligation expires.
• Right of objection and erasure
  If you do not want the Facebook by META social plug-in to run, you can also prevent it from running by installing an appropriate add-on or script blocker. If you do not want Facebook by META to assign the data collected via our website to your Facebook by META profile, you must log out of Facebook by META before visiting our website. The possibilities for objection and removal are otherwise based on the general regulations described below in this Privacy Policy on the right of objection and erasure under data protection law.

• Scope of the processing of personal data
  On our website we use the Youtube service provided by Google Ireland Limited, Gordon House, Barrow Street 4, Dublin, Ireland. We use this data to ensure the full functionality of our website. Your browser may transmit personal data to Youtube in this respect. As part of the order processing, personal data may also be transferred to the servers of the company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA. Google LLC as a potential data recipient is certified under the Data Privacy Framework Agreement.
• Legal basis
  The legal basis for the processing of personal data is your consent in our information banner regarding the use of cookies and web tracking (consent through clear confirming action or behavior) in accordance with Article 6(1)(a) GDPR.
• Purpose of data processing
  We embed videos from the Youtube platform directly on our website via the service, without you having to visit the Youtube website.
• Duration of storage
  The data is deleted as soon as the purpose of its processing has been fulfilled.
• Possibility of objection and removal
  You can prevent the collection and forwarding of personal data to Google (in particular your IP address) and the processing of this data by Google by preventing scripts from being executed in your browser or by activating your browser’s “Do Not Track” setting. You can also prevent Google from collecting the data generated by the Google cookie and relating to your use of the website (including your IP address) and prevent Google from processing this data, by downloading and installing the browser plug-in available from the following link (http://tools.google.com/dlpage/gaoptout). Google’s security and privacy policy can be found at https://policies.google.com/privacy.

We use active JavaScript content from external providers, known as web services on our website. When you access our website, these external providers may receive personal information about your visit to our website. In this case, it may be possible that data is processed outside the EU. You can prevent this by installing a JavaScript blocker such as the browser plug-in ‘NoScript’ (www.noscript.net) or by disabling JavaScript in your browser. This may result in functional restrictions on Internet pages that you visit. We use the following external web services:

Our website loads a web service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter referred to as Google APIs). We use this information to ensure the full functionality of our website. Your browser may transmit personal data to Google APIs in this respect. As part of the order processing, personal data may also be transferred to the servers of the company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA. Google LLC as a potential data recipient is certified under the Data Privacy Framework Agreement. The legal basis for the data processing is Art. 6(1)(f) GDPR. The legitimate interest is an error-free function of the website. The data is deleted as soon as the purpose of its collection has been fulfilled. For more information on handling the transferred data, please refer to the Google APIs Privacy Policy: https://policies.google.com/privacy
You can prevent the collection and processing of your personal data by Google APIs by preventing scripts from being executed in your browser or by installing a script blocker in your browser (for example from www.noscript.net or www.ghostery.com).

On our website we use the Google Fonts service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland. We use the Google Fonts service to be able to embed attractive fonts on our site to show you our website in a visually better version. For processing itself, the service collects data on fonts, IP address of the website visitor, statistics on the use of fonts and other data from Google services related to our website. Similarly, the service may be used on our website if other Google services are reloaded on our website that require Google Fonts to run. This is the case, for example, if our website uses Google services that require Google Fonts to run. The legal basis for the processing of personal data is your consent in accordance with Article 6(1)(a) GDPR. You can revoke your consent at any time. For more information on the handling of transferred data, please refer to the service provider’s Privacy Policy at https://policies.google.com/privacy. Google also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451.

• Scope of the processing of personal data
  We use cookies on various pages to enable the use of certain functions of our website. ‘Cookies’ are small text files that your browser can store on your computer. These text files contain a distinctive string of characters that uniquely identify the browser when you return to our site. The process of storing a cookie file is also called ‘setting a cookie’.
• Legal basis for processing personal data
  Article 6(1)(f) GDPR (legitimate interest). Our legitimate interest is to maintain the full functionality of our website, improve its usability and enable a more individual approach to our customers. We can only identify individual website visitors with the help of cookie technology if the website visitor has previously provided us with corresponding personal data on the basis of a separate consent.
• Purpose of data processing
  Our website places cookies to maintain the full functionality of our website and to improve usability. Cookie technology also allows us to recognize individual visitors by means of pseudonyms, e.g. an individual, arbitrary ID, so that we are able to offer more individual services.
• Duration of storage
  Our cookies are stored in your browser until they are deleted or, in the case of a session cookie, until the session has expired.
• Possibility of objection and removal
  You can configure your browser’s settings according to your wishes so that cookies are generally refused. You can then decide whether to accept cookies on a case-by-case basis or accept cookies as a general principle. Cookies can be used for various purposes, e.g. to recognize that your PC has already accessed our website (permanent cookies) or to save recently viewed offers (session cookies). We use cookies to provide you with increased user convenience. We recommend that you allow cookies to be accepted for our website in order to use our convenience functions. The possibilities for objection and removal are otherwise based on the general regulations described below in this Privacy Policy relating to the right of objection and erasure under data protection law.

Your personal data is protected by technical and organizational measures during collection, storage, and processing in such a way that it is not accessible to third parties. In the case of unencrypted communication by email, we cannot guarantee complete data security on the transmission path to our IT systems. Consequently, we recommend the use of encrypted communication or of the postal service for information requiring a high level of confidentiality.

• Scope of the processing of personal data
  We expressly point out that our email system has an automated archiving procedure. All incoming and outgoing emails are digitally archived in a tamper-proof manner.
• Legal basis for processing personal data
  Article 6(1)(f) GDPR (legitimate interest) and Article 6(1)(c) GDPR (fulfillment of a legal obligation). Our legitimate interest or our legal obligation is compliance with tax and commercial law requirements (e.g. §§ 146, 147 AO [German Fiscal Code]).
• Purpose of data processing
  The purpose of archiving is to comply with tax and commercial law requirements (e.g. §§ 146, 147 AO).
• Duration of storage
  Our mail communications are stored until the expiration of fiscal and commercial retention obligations. The retention period can be up to 10 years.
• Possibility of objection and removal
  If you have any questions regarding our email archiving system, please contact our Data Protection Officer. We would also point out that we only consider application documents in PDF format. Our security systems filter out and do not deliver compressed (WinZip, WinRAR, 7Zip etc.) files. We do not consider applications in Word file format and other file formats, and we delete these unread. Please note that application documents sent unencrypted by email may be opened by third parties before they arrive at our IT systems. We assume that any of our replies to unencrypted application emails may also be unencrypted. If you do not want this, please let us know in your application email.

At reasonable intervals you have the right to obtain information (free of charge) about your stored data as well as the right to correction, blocking or deletion of your data at any time. We shall delete your data on first request, provided this is not contrary to legal regulations. You can withdraw at any time any permission you have granted us to use your personal data. You can send requests for information, deletion and correction of your data and suggestions at any time to the following address:

MicroNova AG
Unterfeldring 6
85256 Vierkirchen
Email: info@who-needs-spam.micronova.de
Tel.: +49 8139 9300-0
Fax: +49 8139 9300-80

You have the right for us to provide you with the personal data that you have transmitted to us, in a structured, common and machine-readable format. You can also request that we transfer this data to a third party immediately on your first instruction, provided that the processing is based on a consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR, and the processing is carried out by us within the framework of automated data processing. In exercising this right of data portability, you also have the right to have your personal data transferred directly to another controller, insofar as this is technically feasible. Freedoms and rights of other persons must not be affected by this.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

If you suspect that your data is being illegally processed on our website, you can of course at any time bring about a legal clarification of the problem. Irrespective of this, you have the option of contacting a supervisory authority. You have the right to lodge a complaint in the EU Member State of your place of residence, place of work, and/or place of alleged infringement, i.e. you can choose the supervisory authority to which you apply in the above places. The supervisory authority to which the complaint was submitted will then inform you of the status and results of your complaint, including the possibility of a judicial remedy under Article 78 GDPR.

• Data controller
  MicroNova AG
  Unterfeldring 6
  85256 Vierkirchen
  Germany
  Tel.: +49 8139 9300-0
  E-Mail: datenschutz@who-needs-spam.micronova.de
  Internet: www.micronova.de

• Data protection officer’s contact details
  MKM Datenschutz GmbH
  Äußere Sulzbacher Str. 118
  90491 Nuremberg
  Tel.: +49 911 990 860 0
  E-Mail: datenschutz@micronova.de

• Purpose and legal basis
  We process your personal data (master data, contact details) and any other data you may provide to us as part of our customer satisfaction survey. The legal basis for initiating contact is our legitimate interest in accordance with Art. 6 (1) (f) GDPR. Should you choose to take part in the customer satisfaction survey, your data will be processed on the basis of your consent, Art. 6 (1) (a) GDPR.

• Recipients of the personal data
  The only persons and departments within our company who will have access to your data are those who need it to carry out the customer satisfaction survey.
  Your data will only be passed on to third parties if we are legally or officially obliged to do so or if you have given us your consent to this.

• Duration of storage
  Your data will be deleted once it is no longer required for the stated purposes. Please note that when data is deleted, it is initially only blocked and then finally deleted after a certain period in order to prevent any inadvertent deletion or intentional damage.
  Data may be duplicated in data backup files and mirrored services for technical reasons. Such copies will also only be deleted after a certain period for technical reasons.

• Rights of data subjects
  You have the following rights where the legal requirements are met:
  You have the right to request information (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR) or restriction (Art. 18 GDPR) from us regarding your personal data to the extent permitted by law. We will also provide you with your data in a structured, commonly used and machine-readable format upon request (Art. 20 GDPR). Please contact the office responsible if you wish to exercise your rights. You have the right to object to the processing of your personal data if we do this based on a legitimate interest (Art. 21 GDPR). You also have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is unlawful (Art. 77 GDPR). The supervisory authority responsible for us is:

  Bayerisches Landesamt für Datenschutzaufsicht (Bavarian Data Protection Authority)
  Promenade 18
  91522 Ansbach
  Germany
  Tel.: +49 (0) 981 180093-0
  E-mail: poststelle@who-needs-spam.lda.bayern.de

• Right of withdrawal of consent
  If you have consented to data processing through a corresponding declaration, you can withdraw your consent at any time with effect for the future by sending an email to datenschutz@who-needs-spam.micronova.de. We will cease to process your personal data for the specified purpose in the future.

• Transfer to third countries outside the EU
  Data is not transferred to third countries (countries outside the European Economic Area – EEA).

• Automated decision-making and profiling
  We do not use any form of automatic decision-making, including profiling, within the meaning of Art. 22 GDPR.