Please note: This English version is provided for convenience only. Only the German version is legally binding. In the event of any discrepancy, the German version shall prevail.
Data protection information
In the following, we inform you about the processing of your personal data by us and the rights and obligations that you have under data protection regulations, in particular the European General Data Protection Regulation (GDPR).
This privacy policy informs you about the type, scope, and purpose of the processing of personal data within our website (hereinafter „Website“). This privacy policy applies regardless of the domains, platforms, and devices used (e.g., desktop, mobile, etc.).
Personal data within the meaning of the GDPR is any data that can be attributed to you personally, e.g. name, address, email addresses, user behavior. The specific data processed and the manner in which it is used are determined primarily by the services we offer.
In our data protection information, we use various other terms in the sense of the GDPR. These include terms such as processing, restriction of processing, profiling, pseudonymization, controller, processor, recipient, third party, consent, supervisory authority, and international organization. Article 4 GDPR provides you with relevant definitions for these terms.
1. Who is responsible for data processing and to whom can I turn?
The person responsible is:
mip Consult GmbH
Wilhelm-Kabus-Straße 9
10829 Berlin
Tel: +49 (0) 30 – 20 88 999 – 00
Fax: +49 (0) 30 – 20 88 999 – 88
Email: kontakt@mip-consult.de
You can reach our Data Protection Officer at:
Marvin Süß
mip Consult GmbH
Wilhelm-Kabus-Straße 9
10829 Berlin
Tel: +49 (0) 30 – 20 88 999 – 00
datenschutz@mip-consult.de
www.sofortdatenschutz.de
2. Which sources and data do we use?
We process personal data that we receive from you as part of the use of our website and, if applicable, our business relationship.
When using the website purely for informational purposes, that is, if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. When you visit our website, we collect the following access data that are technically necessary for us to display our website and ensure its stability and security. The access data includes the IP address, the date and time of the request, the time zone difference from Greenwich Mean Time (GMT), the content of the request (i.e., the name of the specifically requested webpage), the access status/HTTP status code, the data transmitted in each case, the referrer URL (the previously visited page), the operating system and its interface, the language and version, as well as the type of browser software.
Furthermore, we receive your personal data if you contact us, for example via a contact form by phone or email. Personal data here includes, for example, your name, company, email address, telephone number, and, if applicable, the data that you send to us as a message (hereinafter referred to as „contact details“). Please note that when communicating by email, the complete data security for this transmission method cannot be guaranteed by us, so we recommend that you use the postal service for information requiring high confidentiality.
3. For what do we process your data (purpose of processing) and on what legal basis?
We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) for the following purposes and based on the following legal bases:
3.1 Data processing based on your consent
To the extent that you have provided us with consent to the processing of personal data for certain purposes, in particular for contacting us (e.g., via our web forms or by email for the processing and handling of your request), for sending newsletters, or for the purpose of advertising by telephone, email, or SMS (direct marketing), the legality of this processing based on your consent pursuant to Art. 6(1)(a) GDPR is granted.
A given consent can be revoked at any time.
Please note that the revocation only takes effect for the future. Therefore, processing that has taken place before the revocation is not affected by the revocation. The revocation can be made at any time to us, via the contact details mentioned above.
3.2. Data processing for the implementation of pre-contractual measures at the request of the person
When contacting us (e.g. via a web form, telephone or email), your details are processed for the purpose of processing the contact request and its follow-up, Art. 6(1)(s)(1)(b) GDPR.
3.3 Data processing for the fulfillment of legal obligations
To the extent that processing of your personal data is necessary to fulfill a legal obligation to which we are subject, data processing is carried out on the basis of Art. 6(1)(b) GDPR.
3.4. Processing to safeguard legitimate interests of us or third parties
We process your personal data, if necessary, to safeguard legitimate interests of ourselves or of third parties. In doing so, we primarily pursue the following legitimate interests:
- Ensuring IT security, especially the security of the website;
- Improving the web offering in terms of structure and content;
Assertion of legal claims and defense in legal disputes
3.5. Direct advertising to existing customers
If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services by e-mail. For this purpose, we are not required to obtain your separate consent in accordance with § 7 (3) UWG. The data processing is carried out on the basis of our legitimate interest in personalized direct advertising in accordance with Art. 6 (1) (f) GDPR in conjunction with § 7 (3) UWG. If you have initially objected to the use of your e-mail address for this purpose, we will not send you any e-mail messages in the future. You have the option to object to the use of your e-mail address for the aforementioned advertising purpose at any time with effect for the future, e.g. by clicking on the unsubscribe link at the end of our e-mails or by notifying us using the contact options mentioned above. For this, you will only incur transmission costs according to the basic rates. In the event of a complaint, we will not then use your email address for the purpose of direct marketing.
3.6. Conducting application procedures
When contacting us (via the contact form or email) in connection with your application, we process your data to assess your suitability for the position (or, if applicable, other open positions in our companies) and to conduct the application process, Art. 6(1)(b) GDPR. Your application data will be reviewed by the HR department after receiving your application. Suitable applications will then be forwarded internally to the department managers responsible for the respective open position. There, the next steps will then be decided upon. In principle, only the persons within the company have access to your data, who need this for the proper functioning of our application process.
For data processing that is not strictly necessary for the implementation of the application process, we obtain your consent, Art. 6(1)(1)(f) GDPR.
3.7. Storage of data on your device or access to data that is located on your device
We use cookies and similar technologies on our website. We store information on your device because it is absolutely necessary to provide you with our website, § 25, Para. 2 No. 2 TDDDG. The data processing is carried out in order to safeguard our legitimate interest pursuant to Art. 6, Para. 1, S. 1, lit. f GDPR for the best possible functionality of the website.
If you are visiting our website for the first time, you will also be asked whether you consent to the placement of cookies that are not technically necessary and to the use of comparable technologies. The collection and storage of data, as well as any subsequent data processing associated with this, will only take place with your express consent, pursuant to § 25, Paragraph 1 of the TDDDG, Article 6, Paragraph 1, letter a of the GDPR.
If personal data is also processed through individual cookies or comparable technologies, the processing will usually be carried out in accordance with Art. 6(1)(f) GDPR, to safeguard our legitimate interests, e.g. the best possible functionality of the website and a customer-friendly and effective design of the site visit, or in accordance with Art. 6(1)(a) GDPR following your consent.
For more information about the use of cookies and similar technologies, please see the section „Cookies and similar technologies“. We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) for the following purposes and on the basis of the following legal bases:
3.1 Data processing based on your consent
To the extent that you have provided us with consent to the processing of personal data for certain purposes, in particular for contacting us (e.g., via our web forms or by email for the processing and handling of your request), for sending newsletters, or for the purpose of advertising by telephone, email, or SMS (direct marketing), the legality of this processing based on your consent pursuant to Art. 6(1)(a) GDPR is granted.
A given consent can be revoked at any time.
Please note that the revocation only takes effect for the future. Therefore, processing that has taken place before the revocation is not affected by the revocation. The revocation can be made at any time to us, via the contact details mentioned above.
3.2 Data processing to carry out pre-contractual measures at the request of the person
When contacting us (e.g. via a web form, telephone or email), your details are processed for the purpose of processing the contact request and its follow-up, Art. 6(1)(s)(1)(b) GDPR.
3.3 Data processing for the fulfillment of legal obligations
To the extent that processing of your personal data is necessary to fulfill a legal obligation to which we are subject, data processing is carried out on the basis of Art. 6(1)(b) GDPR.
3.4 Processing to safeguard legitimate interests of us or third parties
We process your personal data, if necessary, to safeguard legitimate interests of ourselves or of third parties. In doing so, we primarily pursue the following legitimate interests:
• Ensuring IT security, especially the security of the website;
• Improvement of the web offering in terms of structure and content;
• Assertion of legal claims and defense in legal disputes;
3.5 Direct advertising to existing customers
If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services by e-mail. For this purpose, we are not required to obtain your separate consent in accordance with § 7 (3) UWG. The data processing is carried out on the basis of our legitimate interest in personalized direct advertising in accordance with Art. 6 (1) (f) GDPR in conjunction with § 7 (3) UWG. If you have initially objected to the use of your e-mail address for this purpose, we will not send you any e-mail messages in the future. You have the option to object to the use of your e-mail address for the aforementioned advertising purpose at any time with effect for the future, e.g. by clicking on the unsubscribe link at the end of our e-mails or by notifying us using the contact options mentioned above. For this, you will only incur transmission costs according to the basic rates. In the event of a complaint, we will not then use your email address for the purpose of direct marketing.
3.6 Conducting recruitment procedures
When contacting us (via the contact form or email) in connection with your application, we process your data to assess your suitability for the position (or, if applicable, other open positions in our companies) and to conduct the application process, Art. 6(1)(b) GDPR. Your application data will be reviewed by the HR department after receiving your application. Suitable applications will then be forwarded internally to the department managers responsible for the respective open position. There, the next steps will then be decided upon. In principle, only the persons within the company have access to your data, who need this for the proper functioning of our application process.
For data processing that is not strictly necessary for the implementation of the application process, we obtain your consent, Art. 6(1)(1)(f) GDPR.
3.7 Storing data on your device or accessing data that is stored on your device
We use cookies and similar technologies on our website. We store information on your device because it is absolutely necessary to provide you with our website, § 25, Para. 2 No. 2 TDDDG. The data processing is carried out in order to safeguard our legitimate interest pursuant to Art. 6, Para. 1, S. 1, lit. f GDPR for the best possible functionality of the website.
If you are visiting our website for the first time, you will also be asked whether you consent to the placement of cookies that are not technically necessary and to the use of comparable technologies. The collection and storage of data, as well as any subsequent data processing associated with this, will only take place with your express consent, pursuant to § 25, Paragraph 1 of the TDDDG, Article 6, Paragraph 1, letter a of the GDPR.
If personal data is also processed through individual cookies or comparable technologies, the processing will usually be carried out in accordance with Art. 6(1)(f) GDPR, to safeguard our legitimate interests, e.g. the best possible functionality of the website and a customer-friendly and effective design of the site visit, or in accordance with Art. 6(1)(a) GDPR following your consent.
Further information about the use of cookies and similar technologies can be found under the section „Cookies and similar technologies“.
4. Who gets my data?
Within our company, those positions that need to access your data to fulfill our contractual and legal obligations will have access to it.
Order processors employed by us (Art. 28 GDPR) may also receive data for the above-mentioned purposes. These are companies in the IT services and sales categories. If we share data with our service providers, they may only use the data to fulfill their duties. The service providers have been carefully selected and commissioned by us. They are contractually bound to our instructions, possess appropriate technical and organizational measures to protect the rights of the data subjects, ensure an adequate level of data protection, and are subject to careful monitoring by us.
Data is only disclosed to third parties who are not contract processors within the framework of statutory requirements. We only disclose user data to third parties if this is necessary, for example, on the basis of Art. 6(1)(b) GDPR for contractual purposes or on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, for the economic and effective operation of our business operations, or if you have consented to the data transmission. In the case of purely informational use of the website, we generally do not disclose data to third parties.
5. How long will my data be stored?
5.1 Access data
For security reasons (e.g. to investigate abuse or fraud), log file information is stored for a maximum of four weeks and then deleted (see point 2 above). Data whose further retention is necessary for evidentiary purposes is exempt from deletion until the respective incident has been resolved.
5.2 (Pre-)contractual measures
To the extent necessary, we process and store your personal data for the duration of our business relationship, which also includes, for example, initiating a contract via the contact form or by e-mail.
5.3 Candidate data
Applicant data will be deleted after 6 months in the event of a rejection. If an employment opportunity has not been found, but your application is still of interest to us, we will keep your application for future job postings, provided that you have given us your express written consent. The data will be deleted no later than two years after the end of the application process or upon withdrawal of your consent. If we hire you for the advertised position, your data will be stored in our personnel management system.
5.4 Legal retention obligations
Furthermore, we are subject to various retention and documentation obligations that arise, among other things, from the Commercial Code (HGB) and the Tax Code (AO). The retention and documentation periods stipulated there are six to ten years.
5.5 Time limits for actions
Finally, the storage period is also assessed according to the statutory limitation periods, which, for example, under §§ 195 ff. of the Civil Code (BGB) can generally be 3 years, but in certain cases can also be up to thirty years, with the regular limitation period being three years.
If you exercise your rights as an affected person, we will store the information you have requested regarding this matter until the expiration of the statutory limitation period in accordance with § 31, Para. 2, No. 1 of the OWiG, § 41, Para. 1 of the BDSG, Art. 83, Para. 5, letter b of the GDPR for 3 years. This period may be extended if the statutory limitation period is extended due to time limits (e.g., in the context of requests from supervisory authorities).
5.6 Further storage periods
Information about further retention periods can be found in the following paragraphs.
6. Are data transferred to a third country or to an international organization?
The data provided will be processed within the European Union and in the United States. When transferring data to the United States, we ensure that the recipients of the data are certified under the EU-US Data Privacy Framework or that we have agreed with recipients without such certification to comply with EU standard data protection clauses. If we base the data transfer on the EU standard data protection clauses, we will take additional security measures to protect your data and to achieve an adequate level of protection for your personal data. You have the option to obtain or view a copy of the EU standard data protection clauses. If necessary, we will obtain your explicit consent for the data transfer to the United States.
7. What data protection rights do I have?
· the right to Information pursuant to Article 15 GDPR (i.e., you have the right to request information about your personal data stored by us at any time);,
· the right to Correction pursuant to Article 16 GDPR (i.e., in the event that your personal data is incorrect or incomplete, you may request the correction of this data),
· the right to Deletion in accordance with Article 17 GDPR and the right to Restriction of processing According to Article 18 of the GDPR (i.e., you may have the right to request the deletion or restriction of the processing of your personal data if, for example, there is no longer a legitimate business purpose for such processing and statutory retention obligations do not require further storage).,
· the right to Data portability According to Art. 20 GDPR (i.e., you may have the right to obtain the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and to transmit this data to another controller without hindrance).
Furthermore, you can revoke consents, generally with effect for the future.
Furthermore, there is a Right to appeal to a data protection supervisory authority (Art. 77 GDPR in conjunction with § 19 BDSG). You can find the supervisory authority responsible for you under https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html. We would appreciate it if you could address your concerns before contacting the supervisory authority, and therefore ask that you first contact us with your complaint.
In addition, we would like to point out your right to object in accordance with Art. 21 GDPR:
Information about your right to object under Art. 21 GDPR
You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you that takes place pursuant to Art. 6(1)(e) GDPR (data processing in the public interest) and Art. 6(1)(f) GDPR (data processing based on a balance of interests); this also applies to profiling based on this provision within the meaning of Art. 4(4) GDPR.
If you object, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.
In individual cases, we process your personal data to conduct direct marketing. You have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is related to such direct marketing. If you object to the processing for the purposes of direct marketing, we will no longer process your personal data for these purposes.
The objection can be made in any form to us using the contact details mentioned above, and there are no costs other than the transmission costs according to the basic rates.
8. To what extent is automated decision-making in individual cases, including profiling, involved?
As part of accessing our website or in connection with contacting us via a form or email, we generally do not use fully automated automatic decision-making in accordance with Article 22 GDPR. Should we use these procedures in individual cases, we will inform you separately, provided that this is required by law. We do not process your data automatically with the aim of evaluating certain personal aspects (profiling).
9. Is there a mandatory requirement for me to provide data?
As part of your visit to our website, you must provide the personal data that is required for the technical use of our website or for IT security reasons. If you do not provide this data, you will not be able to use our website.
When contacting us via a form or email, you must only provide the personal data necessary for processing your request. Otherwise, we cannot process your request.
If your request is aimed at concluding a contract or the provision of data is required as part of the contract initiation process, failure to provide data may result in us being unable to provide the intended service.
10. Cookies and similar technologies
10.1 General
We, as well as the service providers commissioned by us, process personal data on this website and use cookies and similar technologies in this context, such as web storage or web beacons. These technologies can store information on your device or access information stored on your device (so-called client-based tracking).
Cookies are stored in the user’s browser on their device. They contain information that is stored in a visited page. The cookie is either sent by the web server to the browser or created by a script (JavaScript) in the browser. The web server can read this cookie information directly during subsequent visits to this page or transfer the cookie information to the server via a script from the website. If cookies are set, they usually collect and process certain user information in individual scope, such as browser and location data as well as IP address values. Some of these cookies are essential for the functioning of our website, while others help us improve our website by providing insights into the use of the website by you.
Web storage involves storing information locally in the cache of your browser. The stored information is either automatically deleted after closing the browser window („session storage“) or remains there so that it can be read again when you visit the website again („local storage“), unless you delete your browser cache („browser data“).
Web beacons are 1×1 pixel-sized graphics that are integrated in various ways into web pages or even emails (newsletters), and also serve to collect and analyze user data.
You can disable the storage of cookies individually through the settings of your browser (you can find out how to set cookie handling in the help page of the browser). You can find help on cookie management in the most common browsers at the following addresses:
- Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
- Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
- Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
- Opera: http://www.opera.com/de/help
- Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE
- Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-l%C3%B6schen-63947406-40ac-c3b8-57b9-2a946a29ae09.
Please note that disabling cookies may result in functional limitations of this website.
We will inform you within the following paragraphs about the specific use of the aforementioned technologies, as well as the scope of the information collected in each case.
10.2 Service information and consent management
We, and the service providers we employ, process personal data on this website and use cookies and similar technologies in this context. These technologies can store information on your device or access information stored on your device.
Some of these data processing activities are technically necessary for the provision of our website. For other data processing activities, we require your consent. By clicking „Accept all“, you consent to the setting of cookies and similar technologies and the processing of your data in order to provide external map content, collect information about website usage and create corresponding statistics, as well as to serve personalized advertising and measure the success of our advertising campaigns. Detailed information about the processing of your personal data can be found in our privacy policy.
You can revoke your consent at any time via the consent settings (button at the bottom left), with effect for the future.
Your current status: rejected
Your consent ID: fc34037c2b3625ff
Date of consent: 24.2.2026, 10:29:22
Technically necessary
Consent management with CCM19
Processing company
Papoo Software & Media GmbH – Auguststr. 4, 53229 Bonn, Germany („Papoo“)
Job description and processing purposes
We use the ccm19 consent management service from Papoo on our website. To allow you to manage your consents conveniently, a consent banner is displayed to you the first time you visit our website. You will have the opportunity to learn about the use of cookies and similar technologies and the processing of personal data on our website and to give your consent to services subject to consent. On our behalf, Papoo processes the data listed below. These are necessary to be able to associate the consents granted with you or their revocation. In order to ensure that your individual settings for future visits to our website remain stored and the banner does not display again each time, the service stores this information in web storage on your device. The consent data is stored for 1 year. You can revoke your consent at any time with effect for the future by using the consent settings (button at the bottom left).
Link to the privacy information
https://www.ccm19.de/datenschutzerklaerung.html
Collected data
IP address and geographic location, opt-in and opt-out data, referrer URL, user agent, user preferences, consent ID, time of consent and type of consent
Purpose of data collection
Consent management
Local Storage:
| Name | Duration of validity | Description |
|---|---|---|
| ccm_consent | 1 year | Stores the website visitor's preferences regarding consent-based services and retains these settings across multiple visits. |
Legal basis
The data collection is carried out in accordance with § 25, paragraph 2, no. 2 of the TDDDG, the subsequent data processing in accordance with Art. 6, paragraph 1, letter c of the GDPR, as the obtaining of consent for the use of cookies and similar technologies and the processing of personal data is legally required, as well as in accordance with Art. 6, paragraph 1, letter f of the GDPR on the basis of our legitimate interest in consent management.
Place of processing
The storage of the aforementioned data takes place exclusively in Germany.
Bot and spam protection
Processing company
mip Consult GmbH – Wilhelm-Kabus-Straße 9, 10829 Berlin („mip Consult GmbH“)
Job description and processing purposes
We use a Captcha solution to protect our forms and other user interaction points from bots and spam. This is a security mechanism designed to ensure that the interactions are actually made by human users. Depending on the result of the verification, requests made through our website are either processed further or rejected.
Our solution combines a Proof-of-Work (PoW) mechanism with advanced spam filtering technologies. The PoW mechanism serves to authenticate and validate user interactions by requiring significant computing power from the user’s device—an effort that bots generally cannot handle. Additionally, the spam filter analyzes incoming IP addresses, for example to determine whether they originate from data centers or over TOR proxies, and matches them against known blacklists to identify and block potential bots early. Furthermore, the content of the requests as well as the user’s email addresses are analyzed to additionally assess the legitimacy of the respective interaction.
The data will be deleted as soon as they are no longer necessary for the purposes for which they were collected or processed in any other way.
Link to the privacy information
https://www.sofortdatenschutz.de/datenschutz/
Collected data
IP address, browser and device information, email address, request content
Purpose of data collection
Bot and spam protection
Legal basis
Data processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in protecting our website from malicious access by bots, i.e., spam protection and protection against attacks (e.g., mass requests).
Place of processing
European Union
Analysis
Google Analytics
Processing company
Google Ireland Limited – Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“)
Job description and processing purposes
We use the web analytics tool Google Analytics to evaluate the use of our website and to compile reports on website activity. As part of Google Analytics, the data listed below is processed. We use the collected information for optimization and marketing purposes. For access from within the EU, IP address data is only used to derive location data and is immediately deleted afterwards. It is not logged, not accessible, and not used for any other purposes. In Google Analytics 4, all data from devices located in the EU (based on geographic location according to IP address) is collected via domains and servers in the EU before the traffic is forwarded to the Analytics server for processing. The Google Analytics servers are located in the USA. Other recipients of the data are: Google LLC, Alphabet Inc. The collected data is stored for 2 months. We use Google Tag Manager from Google to integrate Google Analytics.
Link to the privacy information
https://policies.google.com/privacy
Collected data
IP address (anonymized), geographic location, browser and device information, referrer URL, information about user behavior, Google creates pseudonymized user profiles.
Purpose of data collection
Website analysis
Cookies:
| Name | Duration of validity | Description |
|---|---|---|
| _ga_* | 13 months | The cookie is used to store the session status. |
| _ga | 13 months | The cookie stores a unique identifier to distinguish individual users. |
Legal basis
The data collection and storage takes place in accordance with § 25, paragraph 1, TDDDG; the subsequent data processing takes place in accordance with Art. 6, paragraph 1, letter a of the GDPR only with your express consent.
Place of processing
European Union, USA
Ahrefs Analytics
Processing company
Ahrefs Pte Ltd – 16 Raffles Quay #33-03 Hong Leong Building, 048581 Singapore („Ahrefs“)
Job description and processing purposes
We use the Ahrefs web analytics tool to evaluate the usage of our website and to obtain aggregated reports on website activity. To do this, Ahrefs collects the technical information listed below with each page view. Ahrefs processes the IP address and the user agent of the website visitor to generate a user ID using a secure hash function and a randomly generated string („Salt“). The random salt is updated every 24 hours, so that user behavior can only be analyzed for the respective day. Any longer-term tracking of individual users or cross-device tracking is not possible. The IP address is used solely to generate the user ID and is immediately deleted afterwards. We use the collected information to optimize our website.
Link to the privacy information
https://ahrefs.com/de/legal/privacy-policy
Collected data
IP address, geographic location (city, country), browser and device information (e.g., user agent), referrer URL, language, information about user behavior
Legal basis
Data processing is carried out in accordance with Art. 6(1)(a) GDPR only with your express consent.
Place of processing
Ahrefs's server locations are located in Singapore and the USA. The transfer of your data is based on a decision on adequacy and the conclusion of standard contractual clauses (SCCs) of the European Commission, which you can request a copy of from us.
Marketing
Google Tag Manager
Processing company
Google Ireland Limited – Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“)
Job description and processing purposes
We use the Google Tag Manager to integrate additional third-party services, such as Google Analytics. The Google Tag Manager itself does not set any cookies; however, as part of its operation, Google receives your IP address.
Link to the privacy information
https://policies.google.com/privacy
Collected data
IP address
Purpose of data collection
Effective time management
Legal basis
The data processing takes place in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in effective time management.
Place of processing
USA
Functional
Google Maps
Processing company
Google Ireland Limited – Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“)
Job description and processing purposes
We use Google Maps to display maps on our website. In connection with this service, Google processes the data listed below. If you have a Google account and are logged in there at the time of visiting our website, the data will be directly associated with your account. If you do not want the data to be associated with your account, you must log out before providing your consent to this service. However, Google also stores the data regardless of whether you have a Google account, creates user profiles, and evaluates them. In this context, Google stores cookies that are stored on your device. When using the service, the data collected by the service, in particular your IP address, may be transferred to a server of Google in the USA. You can revoke your consent to the creation of user profiles with effect for the future. In this case, you must contact Google to exercise this right: https://adssettings.google.com/. The recipients of the data are Google Ireland Limited, Google LLC and Alphabet Inc. Google deletes the data as soon as it is no longer necessary for the purposes for which it was collected or otherwise processed.
Link to the privacy information
https://policies.google.com/privacy
Collected data
IP address and geographic location, browser and device information, referrer URL, time of access, general usage data
Purpose of data collection
Integration of card content
Legal basis
The data collection and storage takes place in accordance with § 25, paragraph 1, TDDDG; the subsequent data processing takes place in accordance with Art. 6, paragraph 1, letter a of the GDPR only with your express consent.
Place of processing
European Union, USA
11. Our social media profiles
We can be found through presence within social networks and platforms, so that we can also communicate with you there and inform you about our services.
We point out that your data can also be processed outside the European Union when using social media networks or platforms, and that the providers of the social networks usually process the data for market research and advertising purposes. Usage profiles can be created based on the user’s usage behavior and resulting interests. These usage profiles can then be used to, for example, display advertisements within and outside the platforms that are believed to correspond to the interests of the users. For this purpose, cookies and similar technologies may be stored on the user’s device, in which the user’s usage behavior and interests are stored. These usage profiles may also store other data, in particular if the users are members of the respective platforms and logged in to them.
We link to our company profiles on the respective social networks on our website. However, please note that when clicking on a link to the social networks, data is transmitted to their servers. If you are logged in to the respective social network at that time with your username and password, the information will be transmitted to that network that you have visited our company profile on the respective social network from our website and the respective provider can store this information in your user account.
We generally have no significant influence on the data processing by the social networks. However, we receive statistics from the providers regarding the use and visits of our company profiles in the social networks (e.g., data on the number of views, interactions such as likes and comments, and summarized demographic and other information or statistics). For more information about the data used by the providers, please refer to the privacy information of the providers linked below.
To the extent that we receive personal data from you via social networks (e.g., as part of a message) and process it ourselves exclusively, we are the controller of the data processing. In this case, you are entitled to the rights mentioned in this privacy information above. You can submit your requests regarding data processing within the framework of our company profiles to us using the contact details above. Please carefully consider which personal data you share with us via social networks.
To the extent that the data you provide via the social network is processed by the social network provider alone or exclusively (insights data), in addition to us, the respective provider is also responsible for data processing within the meaning of the GDPR. The data processing takes place to that extent on the basis of an agreement between jointly responsible parties pursuant to Article 26 GDPR.
If you wish to assert rights regarding the provider of the social network in this regard, you can most easily contact them directly. The provider is aware of both the details regarding the technical operation of the platform and the associated data processing, as well as the specific purposes of data processing. The contact details can be found in the privacy information links below. We are also happy to assist you in asserting your rights, to the extent possible.
The processing of the personal data of users is generally based on your consent pursuant to Art. 6(1)(1)(a) GDPR. Art. 6(1)(1)(b) GDPR also serves as the legal basis if we receive and process your data in the context of a contractual inquiry via our social media presence. Art. 6(1)(1)(f) GDPR serves as the legal basis for linking and operating our company profiles in social networks, including the collection of statistics on the use of our company profiles, based on our legitimate interest in our corporate communications in the respective social networks.
For information about the respective processing and the respective options for objection, we refer to the privacy information provided by the providers linked below:
- Facebook (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland), Social Network – Privacy Information: https://www.facebook.com/about/privacy/, Opt-Out: https://www.facebook.com/settings?tab=ads, Agreement on shared responsibility: https://www.facebook.com/legal/terms/page_controller_addendum.
- Instagram (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland), online service for sharing photos and videos – Privacy information: https://help.instagram.com/519522125107875/?helpref=hc_fnav.
- LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland), social network for maintaining existing and establishing new business contacts – Privacy information: https://www.linkedin.com/legal/privacy-policy, Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out, Agreement on shared responsibility: https://legal.linkedin.com/pages-joint-controller-addendum.
- TikTok Video portal for short video clips (TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland), video portal for short video clips with social network features, privacy information: https://www.tiktok.com/legal/privacy-policy.
- X (Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland), microblogging service – Privacy Policy: https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization.
- YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), Video portal – Privacy Policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated.
