Privacy policy

1. Privacy at a glance

General information

The following notes give a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please refer to the privacy policy below.

Data collection on our website

Who is responsible for data collection on this website?

Data on this website is processed by the website operator. Their contact details can be found in the legal notice (Impressum) of this website.

How do we collect your data?

Some of your data is collected because you provide it to us, for example data you enter in a contact form.

Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data (e.g. web browser, operating system or time of the page request). This data is collected automatically as soon as you enter our website.

What do we use your data for?

Part of the data is collected to ensure that the website is provided without errors. Other data may be used to analyse how you use the website.

What rights do you have regarding your data?

You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request the correction, blocking or deletion of this data. For this and any other questions about data protection, you can contact us at any time at the address given in the legal notice. You also have the right to lodge a complaint with the competent supervisory authority.

Analytics and third-party tools

When you visit our website, your browsing behaviour may be evaluated statistically. This is done mainly with cookies and so-called analytics programs. The analysis of your browsing behaviour is usually anonymous; it cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools.

2. General and mandatory information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

Please note that data transmission over the internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

Controller

The controller responsible for data processing on this website is:

Gero Hesse
SAATKORN
Brockweg 104
33332 Gütersloh
Germany

Phone: +49 160 7132570
E-mail: saatkorn@googlemail.com

Withdrawing your consent to data processing

Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. An informal e-mail to us is sufficient. The lawfulness of the processing carried out before the withdrawal remains unaffected.

Right to lodge a complaint with the competent supervisory authority

In the event of a breach of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. A list of the data protection authorities and their contact details can be found at the following link: www.bfdi.bund.de.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format.

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the address bar of your browser changing from "http://" to "https://" and by the lock symbol in your browser bar.

Information, blocking, deletion

Within the framework of the applicable statutory provisions, you have the right at any time to information free of charge about your stored personal data, its origin and recipients and the purpose of the data processing and, where applicable, a right to correction, blocking or deletion of this data.

Objection to advertising e-mails

We hereby object to the use of the contact details published in our legal notice for sending advertising and information material that we have not expressly requested. The operators of these pages expressly reserve the right to take legal action in the event of unsolicited advertising, for example spam e-mails.

3. Data collection on our website

Cookies

Some of our web pages use cookies. Cookies do not harm your computer and do not contain viruses. They serve to make our offering more user-friendly, effective and secure.

You can set your browser to inform you when cookies are set and to allow cookies only in individual cases, to refuse cookies for certain cases or in general, and to delete cookies automatically when you close the browser. If you disable cookies, the functionality of this website may be limited.

Server log files

The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• browser type and browser version
• operating system used
• referrer URL
• host name of the accessing computer
• time of the server request
• IP address

This data is not combined with other data sources. The legal basis for the processing is Art. 6(1)(f) GDPR.

4. Social media

Plugins of social networks (Facebook, Twitter, LinkedIn) may be integrated on our pages. When you visit one of our pages that contains such a plugin, a direct connection is established between your browser and the server of the respective provider. For more information, please refer to the privacy policies of the respective providers.

5. Analytics tools

Google Analytics 4

We use Google Analytics 4 to evaluate the use of our website statistically and to improve our offering. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google processes the data on our behalf on the basis of a data processing agreement.

Only with your consent: Google Analytics is only loaded after you have agreed to the “Statistics” category in the cookie banner. Without consent, no Google Analytics cookies are set and no data is sent to Google. The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG for setting the cookies. We have disabled the use of the data for advertising or personalised ads.

What data is processed?

• IP address – Google Analytics 4 uses it only to determine an approximate location and does not store it
• pages viewed, page titles, time and duration of the visit
• previously visited page (referrer) and campaign parameters
• search terms entered in the provider and product search and the number of results
• clicks on provider profiles, external links, downloads, videos and similar interactions
• browser, operating system, device type, screen resolution, language and approximate region
• a random visitor ID in a cookie to recognise returning visits

What you enter in the AI chat, form data, e-mail addresses and login credentials are not transmitted to Google Analytics. The administration area is not tracked.

Transfer to third countries: The data may also be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework; to that extent, there is an adequacy decision of the European Commission for the USA (Art. 45 GDPR). Further information can be found in Google’s privacy policy.

Cookies and storage period: _ga (visitor ID, 2 years) and _ga_* (session state, 2 years). User- and event-level data is deleted by Google after 14 months at the latest; only aggregated statistics are kept after that.

Withdrawal: You can withdraw your consent at any time with effect for the future – via “Cookie settings” in the footer of every page or in our cookie policy. On withdrawal, the Google Analytics cookies are deleted. We ask for your consent again after 12 months at the latest.

6. Newsletter

If you would like to receive the newsletter offered on the website, we need your e-mail address as well as information that allows us to verify that you are the owner of this e-mail address and agree to receive the newsletter. The processing is based on your consent (Art. 6(1)(a) GDPR). You can withdraw this consent at any time.

7. Paid plans and payment processing

Contract and billing data

When you book a paid plan as a provider, we process the data we need to conclude, perform and bill the contract: company name, contact e-mail address, booked plan and price, term, subscription status as well as plan changes and cancellations. The legal basis is Art. 6(1)(b) GDPR (performance of a contract). Without this data we cannot conclude a paid plan with you; you can use the free plan without any payment details.

Payment processing via Stripe

We process payments through the payment service provider Stripe. The contracting party for customers in the European Economic Area is Stripe Payments Europe, Limited, based in Dublin, Ireland (“Stripe”).

To pay, we redirect you to a Stripe payment page. You also manage payment methods, billing address and invoices in a customer portal operated by Stripe. You enter your payment details (e.g. credit card or bank account details) directly with Stripe; they are not stored on our servers. We only see limited information such as the card type and the last four digits. Stripe does not embed any scripts or cookies on our website; Stripe’s own privacy and cookie notices apply on Stripe’s pages.

What data is processed?

• sent by us to Stripe: company name, contact e-mail address, booked plan and an internal ID of your company profile
• collected directly by Stripe: name or company and billing address, VAT ID and promotion code where applicable, payment method details and technical data about the payment such as IP address and device information
• reported back to us by Stripe: your Stripe customer and subscription IDs, subscription status, booked price, end of the term and scheduled cancellations

Legal bases: Art. 6(1)(b) GDPR (performance of the contract and the payment), Art. 6(1)(c) GDPR (legal obligations, in particular retention obligations under tax and commercial law) and Art. 6(1)(f) GDPR (our legitimate interest in secure payment processing and in preventing fraud).

Stripe’s role: Stripe processes the data partly on our behalf and partly as an independent controller, for example to prevent fraud and to meet its legal obligations as a payment service provider (e.g. anti-money-laundering rules). For details, see Stripe’s privacy policy.

Transfer to third countries: Stripe may also transfer data to its parent company Stripe, LLC in the USA. Stripe is certified under the EU-U.S. Data Privacy Framework; to that extent, there is an adequacy decision of the European Commission for the USA (Art. 45 GDPR). In addition, Stripe uses the European Commission’s standard contractual clauses.

Storage period: We store contract and billing data for the duration of the contract. After that, we keep invoices and other accounting records for as long as commercial and tax law requires (usually six to ten years).