1. Name and address of the controller

The controller within the meaning of the General Data Protection Regulation (hereinafter “GDPR”), other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is:

 

Process Squad GmbH

Ringstraße 48

45219 Essen

Germany

 

T: +49 2054 8605480

E: info@process-squad.com

 

2. Collection and storage of personal data and the nature and purpose of their use

a.Visiting our website

Each time you visit our website, your browser automatically sends information to the server of our website and temporarily stores it in a so-called log file.

 

The following data is collected without your intervention and stored until automated deletion:

  • IP address
  • Date and time of the request
  • Time zone difference from Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Amount of data transferred in each case
  • Website from which the request came
  • Browser
  • Operating system and its interface
  • Language and version of the browser software.

 

The above data will be processed by us for the following purposes:

  • Ensuring a trouble-free connection of the website
  • Ensuring a comfortable use of our website
  • Evaluation of system security and stability
  • other administrative purposes.

 

The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed above. In no case we use the collected data for the purpose of drawing conclusions about your person.

 

b. Contact via contact form

If you have any questions, we offer you the possibility to send us a message via a form provided on this website.

 

In doing so, it is necessary to provide your name, mail address and telephone number. We need this information to know who sent the request and to be able to answer it. Further information can be provided voluntarily.

 

The data processing for the purpose of contacting us is carried out in response to your request and is based on Art. 6 para. 1 p. 1 lit. b GDPR. If you have provided additional voluntary information, the processing of this data is based on your voluntarily given consent (Art. 6 para. 1 p. 1 lit. a GDPR). We delete the data arising in this context after the storage is no longer necessary or restrict the processing if there are statutory retention obligations.

 

c. Contact via mail

For questions of any kind, you can write to us by mail. Data processing for the purpose of contacting us is carried out in response to your request and is based on Art. 6 para. 1 p. 1 lit. b GDPR. We delete the data arising in this context after the storage is no longer necessary or restrict the processing if there are statutory retention obligations.

 

d. Contact via phone

For questions of any kind, you can call us by phone. Data processing for the purpose of contacting us is carried out in response to your request and is based on Art. 6 para. 1 p. 1 lit. b GDPR. We delete the data arising in this context after the storage is no longer necessary or restrict the processing if there are statutory retention obligations.

 

e. User account

You have the option of creating a user account. As part of the registration process, you must provide the required mandatory information (first name, last name, e-mail address). These are processed for the purpose of providing the user account on the basis of a contractual obligation. All information is required for the performance of contracts.

 

If you delete your user account, the data stored in the user account will be deleted subject to your legal permission, obligation or consent.

 

The purpose of the processing is the provision of contractual services.

 

Data processing for the purpose of creating a user account is carried out in response to your request and is based on Art. 6 para. 1 p. 1 lit. b GDPR.

 

f. Cookies

To learn more about how we use these and your choices in relation to these tracking technologies, please refer to our Cookie Policy.

 

g. Google Analytics

If you have given your consent, we use Google Analytics for web analytics. This serves to evaluate visitor flows and visitor behavior. In addition, the collected data can be used to optimize our website.

 

For this purpose, profiles, i.e., summarized data, can also be created, stored in the browser and read out again. The data collected includes usage data such as the website visited, access times, etc., meta, communication and procedural data such as IP addresses, time data, etc.

 

The provider of Google Analytics in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

 

Google Analytics also uses cookies that allow us to analyze how you use our websites. As a security measure, we use IP masking. This is a pseudonymization of the IP address. According to Google, this takes place on servers within the EU or the EEA. Only in exceptional cases the full IP address is transferred to servers in a third country, in particular the USA, and is shortened there. According to Google, the IP address is not merged with other information.

 

The data sent by us and linked to cookies are automatically deleted after 2 months. The maximum life of Google Analytics cookies is 2 years. The deletion of data whose retention period has been reached takes place automatically.

 

As Google has parent companies in the USA, a third country transfer is possible. The basis for this transfer of data is the EU-US Data Privacy Framework (DPF) as well as standard contractual clauses (https://business.safety.google/adsprocessorterms/).

 

The legal basis for data processing within the scope of Google Analytics is your consent pursuant to Art.6 para.1 p.1 lit. a GDPR.

 

You can withdraw your consent at any time with effect for the future. To do so, you can call up the cookie settings and change your selection there. The lawfulness of the processing carried out on the basis of the consent until the withdrawal remains unaffected.

 

You can find more information and Google’s privacy policy on the following pages:

https://marketingplatform.google.com/intl/us/about/analytics/

https://policies.google.com/privacy

https://business.safety.google/adsservices/ (types of processing and data processed).

 

h. Google Tag Manager

We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

 

The Google Tag Manager is a tool that helps us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, does not store cookies and does not perform any independent analyses. It only serves to manage and play out the tools integrated via it. However, the Google Tag Manager records your IP address, which may also be transferred to Google’s parent company in the United States.

 

The use of the Google Tag Manager is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in a quick and uncomplicated integration and management of various tools on our website. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be withdrawn at any time.

 

Google’s privacy policy can be found here: https://policies.google.com/privacy

 

i. External content

We integrate external content into our website that is loaded from the servers of the respective provider. This may involve videos, for example.

 

An integration always requires that the provider sends its content to your browser via your IP address. The IP address is used to display the content and is also required for the function. In some cases, providers use pixel tags (invisible graphics) for statistical or marketing purposes. This allows information to be evaluated. In addition, cookies are sometimes used in which user data is stored.

 

The legal basis for the integration of this content is our legitimate interest in providing our website and user-friendliness in accordance with Art. 6 para. 1 p. 1 lit. f) DSGVO.

 

The service provider for the integration of YouTube videos is Google. The basis for a third country transfer is the EU-US Data Privacy Framework (DPF).

 

Google’s privacy policy can be found here: https://policies.google.com/privacy

 

3. Transfer of data

In the context of the aforementioned processing activities, we cooperate with various service providers who receive personal data in individual cases. In detail, these are the following categories of possible recipients:

  • IT service provider
  • TC provider
  • Communications service provider

 

Your personal data will only be transferred to third parties if

  • You have given your explicit consent (Art. 6 para. 1 p. 1 lit. a GDPR)
  • the transfer is legally permissible and necessary for the performance of contractual with you (Art. 6 para. 1 p. 1 lit. b GDPR)
  • there is a legal obligation to transfer data (Art. 6 para. 1 p. 1 lit. c GDPR)
  • the transfer is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-transfer of your data (Art. 6 para. 1 p. 1 lit. f GDPR).

 

The legal basis for the use of the web hoster is Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interest lies in not having to operate our own server for our website.

 

4. Data subject rights

You have the following rights in respect of personal data relating to you:

 

  • Right to withdraw consent (pursuant to Art. 7 para. 3 GDPR): Consent given by you for the processing of personal data can be withdrawn in whole or in part at any time. The withdrawal does not affect the lawfulness of the data processing carried out until the withdrawal. The only consequence of the withdrawal is that we may no longer continue the data processing based on this consent in the future.
  • Right to information (according to Art. 15 GDPR): You can obtain information about your personal data processed by us. In particular, you can request information about the processing purposes, the categories of personal data that are or have been processed, the recipients or categories of recipients to whom your data are or have been disclosed, the planned storage period, the existence of a right to rectification, erasure or restriction of processing or a right to object, the existence of a right to lodge a complaint with a supervisory authority, the source of your data if it has not been collected by us, as well as the existence of automated decision-making, including profiling and, if applicable, meaningful information about the logic involved as well as the significance and the envisaged consequences of such processing for you.
  • Right to rectification (pursuant to Art. 16 GDPR): You can immediately obtain the rectification of any inaccurate personal data concerning you or the completion of your personal data stored by us if it is incomplete.
  • Right to erasure (pursuant to Art. 17 GDPR): You may obtain the deletion of your personal data stored by us. This does not apply insofar as the processing of your data is necessary for the exercise of the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest in the area of public health, for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes or for the establishment, exercise or defence of legal claims.
  • Right to restriction of processing (according to Art. 18 GDPR): You may obtain the restriction of the processing of your personal data. This applies if you dispute the accuracy of the data, the processing is unlawful, but you refuse to delete the data and instead request the restriction of data use, we no longer need the data, but you need the data to establish, exercise or defend legal claims, or you have objected to the processing pursuant to Article 21 para. 1 of the GDPR.
  • Right to data portability (according to Art. 20 DSGVO): You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller.
  • You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data by us (pursuant to Art. 77 GDPR).

 

5. Right to object

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 p. 1 lit. f GDPR, you have the right to object to the processing pursuant to Art. 21 GDPR, provided that there are grounds for doing so that arise from your particular situation.

If you wish to exercise your right to object, please send a mail to info@process-squad.com.

 

6. Data security

To ensure data security, the transfer of the contents of our website is encrypted using the SSL procedure in accordance with the state of the art. To secure the data, we and the contracted service providers, with whom corresponding contractual agreements have been made, use suitable measures in accordance with the state of the art, in particular to restrict access to the data, to protect against changes and loss, and to ensure confidentiality in accordance with the state of the art.

 

7. Revision and updating of this privacy policy

This Privacy Policy is current as of 09/2023. We reserve the right to update the Privacy Policy in due course in order to improve and/or adapt data protection.