Privacy & Imprint

Privacy as from 28/06/2021

1. Introduction

Thank you very much for your interest in our website. The protection of your personal data is an important matter to us. In the following, you will find information regarding the handling of your data which are collected as the result of your usage of our website. The processing of your data shall be undertaken in accordance with the statutory data protection provisions. Insofar as links are placed to other websites, we have neither influence nor control over the linked content and the data protection guidelines that are valid on those websites. We recommend that you review the Data Protection Declarations on the linked websites in order to be able to determine whether and in what scope personal data are collected, processed, used or made available to third parties.

Please note: This imprint also applies to our social media presences on Youtube, Facebook, Instagram, Twitter, TikTok, LinkedIn, Xing.


2. Contact Information

Responsible Party in accordance with Data Protection Law

metoda GmbH

Bayerstraße 69, 80335 Munich

[email protected]

+49 (0) 89 124 137 800



Contact Data of the Data Protection Officer

Datenschutzexperte.de
Proliance GmbH
Leopoldstraße 21
80802 München
[email protected]

http://www.datenschutzexperte.de

3. Definitions

Our Data Protection Declaration is supposed to be straightforward and understandable to everyone. As a rule, the Data Protection Declaration uses the official term definitions in the General Data Protection Regulation (GDPR). The official definitions are discussed in detail in Art. 4 GDPR.

4. Data processing as the result of visiting our website

Whenever you visit our website, it is technically required that data be transmitted to our web server via your Internet browser. The following data shall be stored during the continuous connection in order to communicate between your Internet browser and our web server:

  • Domain visited
  • Date and time of day of the inquiry
  • Page from which the file was requested
  • Access status (file transferred, file not found, etc.)
  • Web browser and operating system used
  • IP address of the requesting computer
  • Data quantity transferred



We shall collect the aforementioned listed data in order to guarantee a seamless connection set-up of the website and enable comfortable usage of our website by the users. In addition, the log file serves the purpose of the evaluation of the system security and system stability as well as for administrative purposes. The legal basis for the temporary storage of the data and/or the log files shall be Art. 6 Para. 1 lit. f GDPR.

5. Contact form and making contact by e-mail

If you send us inquiries via the contact form or e-mail, we shall store your data from the inquiry form and/or your e-mail–including the contact data which you provide there–for the purpose of processing the inquiry and in the event that there are follow-up questions. In no case shall we pass on these data without your consent.

The legal basis for the processing of the data shall be our rightful interest in responding to your inquiry in accordance with Art. 6 Para. 1 lit. f GDPR as well as, where applicable, Art. 6 Para. 1 lit. b GDPR insofar as your inquiry is intended for the purpose of concluding a contractual agreement. After the definitive processing of your inquiry, your data shall be deleted insofar as no statutory retention obligations oppose this.

6. Registration

You shall have the option of registering for certain services provided on our website and thus creating a user profile. During the registration and the creation of the user profile, we shall collect and use the following personal data:

  • First name, last name
  • Telephone number
  • E-mail address of the user
  • Date and time of day of the registration



Moreover, voluntary data may also be provided. Mandatory data, which are provided for the purpose of the registration, shall be labelled with an asterisk as a mandatory field in the input mask. Through your user account, you shall receive the opportunity to use additional sections of our website and to log in for the offers which you have available to you.

The legal basis for the data process shall be the consent granted in accordance with Art. 6 Para. 1 lit. a GDPR and/or Art. 6 Para. 1 lit. b GDPR insofar as the processing is required for the rendering of the requested services. Your data shall be deleted as soon as the user account has been deleted on our website and insofar as no statutory retention obligations oppose this. As a rule, after logging in directly to your user account, you can make a change to and/or delete your user account–including the data which you have provided–or have this done by sending a corresponding message to the aforementioned responsible party.

7. Newsletter

If you would like to subscribe to the newsletter offered on the website which provides information upon a regular basis about our offers and products, we shall require your e-mail address as a mandatory field. In order to send the newsletter, we use the so-called double opt-in process. This means that we only then send you our newsletter by e-mail if you have expressly confirmed to us that you consent to the sending of the newsletter. In order to do this, as the first step, you shall receive an e-mail with a link which you can use to confirm that you–as the owner of the corresponding e-mail address, want to receive the newsletter in the future. By making confirmation, you are hereby issuing to us your consent in accordance with Art. 6 Para. 1 lit. a GDPR so we may use your personal data for the purpose of sending the requested newsletter.

During your registration for the newsletter, we shall, in addition to the e-mail address which is required for the sending of the newsletter, store the IP address which you have used to register for the newsletter as well as the date and the time of day of the registration and confirmation in order to be able to detect any possible misuse at a later point in time.

You may, at any time, cancel the newsletter via the link placed in each newsletter or via an e-mail sent to the aforementioned responsible party. After cancellation has been made, your e-mail address shall be promptly deleted from our newsletter mailing list insofar as you have not expressly approved the continued usage of the collected data or the continued processing thereof is otherwise permissible by law.

8. Google Analytics

Our website uses Google Analytics, a web analysis service from Google Inc. (“Google”). Google Analytics uses so-called cookies. Cookies are text files which are stored on your computer and which enable an analysis of your usage of the website. As a rule, the information generated by the cookie regarding your usage of this website shall be transmitted to a Google server in the USA and stored there.

We use Google Analytics only with activated IP anonymisation. That means that the IP address of the users shall be shortened by Google within the member countries of the European Union or in other contracting countries to the European Economic Area Convention whereby it shall not possible to make personal inferences. Google Inc., with its commercial residence in the USA, is certified in accordance with the US- European Data Protection Convention called “Privacy Shield” which guarantees the fulfilment of the data protection level that is valid in the EU. The processing shall be undertaken in accordance with Art. 6 Para. 1 lit. f GDPR and/or § 15 Para 3 TMG [German Telemedia Act] upon the basis of our rightful interest in the statistical analysis of user behaviour for optimisation and marketing purposes.

By mandate from this website’s operator, Google shall use this information in order to evaluate your usage of the website, in order to draft reports regarding the website activities and in order to render additional services associated with the usage of the website and the Internet to the website’s operator. The IP address transmitted by your browser for Google Analytics shall not be commingled with other data by Google.

The Usage Terms and Conditions of Google Analytics and information regarding data protection can be retrieved by clicking on the following links:

https://www.google.com/analytics/terms/us.html

as well as

https://policies.google.com/?hl=en-GB&gl=de.

You can prevent the storage of cookies by correspondingly adjusting the settings on your browser software; however, we wish to point out that, in this case, you may not be able to comprehensively use all functions of this website. Moreover, you can prevent the collection of the data (including your IP address) which are generated by the cookie and which refer to your usage of the website from being sent to Google as well as the processing of these data by Google by downloading and installing the browser plug-in which is available at the following URL: https://tools.google.com/dlpage/gaoptout?hl=en A click on the following link shall prevent the data collection by Google Analytics by placing a so-called opt-out cookie.

You can find information regarding the handling of user data by Google Analytics in Google’s Data Protection Declaration: https://support.google.com/analytics/answer/6004245?hl=en


9. Matomo Analytics

This website uses Matomo, an open source, self-hosted software to collect anonymous usage data for this website.

The visitor behavior data is collected to find out any problems like pages not found, search engine problems or unpopular pages. Once the data is processed (number of visitors who see error pages or only one page, etc.), Matomo generates reports for website owners to act on. (layout changes, new content, etc.).

Matomo processes the following data:

  • Cookies
  • Anonymized IP-Addresses by removing the last 2 bytes (i.e. 198.51.0.0 instead of 198.51.100.54)
  • Pseudo-anonymized location (based on the anonymized IP address)
  • Country (with low probability based of anonymized IP address)
  • Date and time
  • Title of requested page
  • URL of requested page
  • URL of previous page (if allowed)
  • Screen resolution
  • Local time
  • Downloaded files
  • External links
  • Duration of page load
  • Main language of browser
  • User Agent of Browser

When you use this website, the request is recorded by the host of the website (metoda.com). This log contains your IP address, which indirectly identifies you through your ISP. The recording of this data is mandatory by law and necessary for security. There is no possibility to opt-out for technical reasons, but the data will never be used for other purposes.


9.1 Basis of the Legitimate Interest

Data processing is based on the principle of legitimate interest.

Processing the data helps us to find out what works on our site and what does not. For example, it helps us find out if the content is well received or how we can improve the structure of the website. Our team benefits from this and can react to it. Due to the data processing, you therefore benefit from a website that is constantly improving.

Without the data we could not provide the service. Your data will only be used to improve the use of the website.


9.2 Recipient of the data

The personal data will only be sent to us (the metoda GmbH team).


9.3 Details on transfer to third countries

The data of this website and Matomo are hosted in Ireland. The data never leaves the EU.


9.4 Rights of data subjects

Since Matomo collects data based on legitimate interest, you can exercise the following rights:

  • Right of access and data portability: you can request all your data at any time.
  • Right to erasure and rectification: you can request that we erase all your data completely at any time.
  • Right to object and restrict processing: you can object to data collection at any time by checking DoNotTrack in your browser.


9.5 The right to lodge a complaint with the data protection authority.

If you think that the way we process your data with Matomo is against the law, you have the right to file a complaint with the Data Protection Authority.


10. Hubspot

We use the services of the software manufacturer HubSpot. HubSpot is a software company from the USA with a branch in Ireland (HubSpot European Headquarters, Ground Floor, Two Dockland Central, Guild Street, Dublin 1, Ireland).

HubSpot is a service platform. The service used is an integrated software solution that allows us to manage customer data and cover various aspects of our online marketing. This includes, among other things, the analysis of landing pages and reporting. In the process, so-called “web beacons” are used and cookies are stored on the terminal device you use.

The following personal data may be collected:

  • IP address,
  • Geographic position (imprecise position)
  • Type of browser
  • Duration of visit
  • Requested pages

If you are a registered user or are creating an account, the following data is collected in addition:

  • First & last name
  • Email address

The collected information as well as the content of our website is stored on servers of our software partner HubSpot Ireland. We use HubSpot to analyze the use of our website. This enables us to continuously optimize our website and make it more user-friendly. We also use information to determine which of our company’s services are of interest to customers and newsletter subscribers and to contact them for advertising purposes. In addition, we use the evaluation to optimize our web offer for you.

However, we only use your IP address in a shortened version. This means that the user’s IP address is shortened by HubSpot within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a HubSpot server in the USA and shortened there.

The cookies have a usual lifetime of 13 months. In addition, we delete the personal data collected via HubSpot as soon as the purpose for which you were collected has been achieved, unless the deletion conflicts with legal retention periods.

The information generated by the cookie about the use of the online offer by the user may also be transmitted to and stored by Google on servers in the United States. The processing takes place on the basis of EU standard contractual clauses. Through this, HubSpot offers a guarantee of compliance with European data protection law.

The storage of cookies is based on Art. 6 para. 1 lit. a GDPR. You can revoke your consent here. Further information about the functioning of HubSpot, can be found in the privacy policy of HubSpot Inc.


11. Social-media-links

Social networks (Facebook, Twitter, Google Plus, LinkedIn and Xing) have been integrated into our website merely as a link to the corresponding services. After clicking on the integrated text/image link, you shall be guided to the respective provider’s website. Only then after you have been guided to this respective provider’s website shall user information be transmitted to the respective provider. In order to obtain information regarding the handling of your personal data during the usage of these websites, please review the respective Data Protection Guidelines of the providers which you utilise.

11.1 Livefeed of Instagram

In some circumstances the Livefeed of instagram can be loaded on the website. Loading of the plugin does only work if you’ve accepted the loading by accepting cookies.

The privacy policy of Instagram can be found here:
https://help.instagram.com/519522125107875


12. Cookies

Our website uses cookies which are stored by the browser on your device and contain certain settings for the usage of the website (e.g. for the current session). Cookies serve the purpose of making our website more user-friendly, more effective and more secure. Cookies are small text files which are stored on your computer and which your browser stores. Most of the cookies which we use are so-called session cookies which are automatically deleted after the browser is closed. Other cookies shall remain stored on your device until you delete them or the storage timeframe lapses. These cookies enable us to identify your browser during your next visit.

Sometimes, the cookies serve the purpose of simplifying website processes by saving the settings (e.g. the saving of already-selected options). Insofar as, via individual cookies which we implement, personal data are also processed, the processing shall be undertaken, in accordance with Art. 6 Para. 1 lit. b GDPR, either for the implementation of the contractual agreement or, in accordance with Art. 6 Para. 1 lit. f GDPR, for the safeguarding of our rightful interests in the best-possible functionality of the website as well as a customer-friendly and effective layout for the website visit.

You can adjust the settings on your browser in such a manner that you are notified of the placement of cookies and permit cookies only in the individual case, block the acceptance of cookies for certain cases or generally block them as well as activate the automatic deletion of cookies when the browser is closed. The cookie settings can be managed via the following links for the respective browsers.

You can also manage the cookies of many companies and functions individually which are used for advertising. In this regard, you can use the corresponding user tools which are retrievable at https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices

In addition, you can prevent the loading of so-called scripts as a standard practice. NoScript permits the running of JavaScripts, Java and other plug-ins only from the trusted domains of your choice. You can find information and instructions regarding how you can use this function via your browser’s provider (e.g. for Mozilla Firefox) at: https://addons.mozilla.org/en-GB/firefox/addon/noscript/.

However, please keep in mind that, in the event that you deactivate the cookies, the functionality of this website may be restricted.


12.1 Change of Cookie preferences

You can change your cookie preferences here: Cookie Settings


13. Scrips and Fonts

For better function of our website we download various scripts and fonts from different CDN.


14.  Data dissemination and recipient

A dissemination of your personal data to third parties shall not be made unless:

  • We have expressly made reference to this in the description of the respective data processing.
  • You have granted your express consent in this regard in accordance with Art. 6 Para. 1 Clause 1 lit. a GDPR,
  • The dissemination is required in accordance with Art. 6 Para. 1 Clause 1 lit. f GDPR in order to assert, exercise or ward off legal claims and
  • No reason exists to assume that you have a prevailing interest worthy of protection in the non-dissemination of your data, in the event that a statutory obligation exists for the dissemination thereof in accordance with Art. 6 Para. 1 Clause 1 lit. c GDPR and
  • Insofar as this is required in accordance with Art. 6 Para. 1 Clause 1 lit. b GDPR for the implementation of the contractual relationships with you.


Moreover, we shall commission external service providers for the rendering of our services whom we have carefully selected and commissioned in writing. They shall be obliged to follow our instructions and we shall control them upon a regular basis. As required, we have concluded contracted data processing agreements with these external service providers in accordance with Art. 28 GDPR. These are service providers for the web hosting, the sending of e-mails as well as the maintenance and servicing of our IT systems, etc. The service providers shall not pass on these data to third parties.

14.1 Third party recipients



Contractor Short Name Purpose Contractor Legal Entity Contractor Address Contractor GDPR directory Datatransfer out of EU

Contractor
Subcontractor

Contractor uses Subcontractor with datatransfer out of EU Data security level
Amazon Advertising Advertising Amazon Europe Core SARL 38 avenue John F. KennedyL-1855 Luxembourg

Link

Link

no not available yes Link
AWS IaaS provider AWS EMEA SARL 38 avenue John F. KennedyL-1855 Luxembourg

Link

Link

no Link yes Link
ChargeBee Payment provider ChargeBee Inc. 340 S Lemon Avenue, #1537 Walnut, California 91789, USA

Link

yes Link yes not available
Freshdesk Inc. Service/Support Freshdesk Inc 2950 S. Delaware Street, Suite 201San MateoCA 94403, USA Link no Link yes Link
Intercom Inc. Service/Support Chat Intercom Inc 55 2nd Street, 4th Fl.San Francisco,CA 94105, USA Link yes Link yes Link
Google Analytics Analytics Google Ireland Limited Gordon House, Barrow StreetDublin 4Irland Link no Link yes Link
Scalegrid Inc. DaaS provider Scalegrid Inc 2225 E Bayshore RdPalo AltoCA 94303, USA Link yes Link yes Link
Stripe Inc. Payment Stripe Inc 510 Townsend StreetSan FranciscoCA 94103, USA Link yes Link yes Link
Google G-Suite Business Management Tools Google Ireland Limited Gordon House, Barrow StreetDublin 4Irland Link (GDPR)
Link (DPA)
no Link yes Link
Honeybadger.io Analytics Honeybadger Industries LLC 11410 NE 124th Street246 KirklandWA 98034, USA Link yes Link yes Link
Hotjar Analytics Hotjar Ltd Dragonara Business Centre5th Floor, Dragonara Road,Paceville St Julian’s STJ 3141Malta

Link (Privacy)

Link (GDPR)

no Link yes Link
Candis Payment Candis GmbH Friedrichstraße 20010117 Berlin Link no (see PDF) not known not available
Microsoft IaaS provider Microsoft Deutschland GmbH Walter-Gropius-Straße 580807 München

Link

Link

yes Link yes Link
Salesforce GmbH CRM Salesforce GmbH Erika-Mann-Str. 3180636 München Link no Link yes Link
Twilio Messaging provider Twilio Germany GmbH Rosenheimer Str. 143C81671 München Link  yes Link  yes Link
Zapier Automation Zapier Inc. 548 Market St. #62411
San Francisco, CA 94104-5401
Link  yes Link  yes Link
Mailchimp Mailing services The Rocket Science Group, LLC  675 Ponce de Leon Ave NESuite 5000Atlanta, GA 30308 USA  Link  yes Link  yes Link 
Woodpecker Mailing services Woodpecker.co S.A. 29D Krakowska STR, Zip code: 50-424Wrocław  Link  no not available no Link
Clickmeeting Webinar tool ClickMeeting Sp. z o.o. ul. Arkońska 6/A4, 80-387 Gdańsk, Polen Link  not known not available not known not available
Hubspot Marketing automation HubSpot Germany GmbH Am Postbahnhof 1710243 Berlin

Link (GDPR)

Link (Privacy)

yes Link yes not available
Appcues Interactive user tours Appcues, Inc. 177 Huntington Ave Ste 1703PMB 94414Boston, MA 02115 USA Link yes Link yes Link
WPengine Hosting services WPengine Inc 504 Lavaca Street, Suite 1000Austin, TX 78701

Link (Privacy)

Link (DPA)

yes Link yes not available

15. Timeframe for the storage of personal data

The timeframe for the storage of personal data shall be based upon the applicable statutory retention timeframes (e.g. from commercial law and tax law). After the respective timeframe lapses, the corresponding data shall be routinely deleted. Insofar as data are required for the fulfilment of the contractual agreement or for contractual negotiations, or we have a rightful interest in the continued storage of these data, the data shall be deleted when they are no longer required for these purposes or you have exercised your right of revocation or right of objection.

16. Your rights

In the following, you will find information regarding which rights of affected parties the valid data protection law affords you in your dealings with the responsible party with regards to the processing of your personal data:

The right, in accordance with Art. 15 GDPR, to request information regarding your personal data which we process. In particular, you may request information regarding the processing purposes, the category of personal data, and the categories of recipients to whom your data have been or are being disclosed, the planned storage timeframe, the existence of a valid right to the correction, deletion or restriction of the processing or to lodge an objection, the existence of a valid right to lodge a complaint, the origin of your data–insofar as we have not collected these data–as well as regarding the existence of automated decision-making including profiling and, as required, extensive information regarding the details thereof.

The right, in accordance with Art. 16 GDPR, to request the prompt correction or completion of your personal data that we have stored which are incorrect or incomplete.

The right, in accordance with Art. 17 GDPR, to request the deletion of your personal data that we have stored insofar as the processing thereof is no longer required for the exercising of the right to free expression and the right to request information, in order to fulfil a legal obligation, for reasons of public interest or in order to assert, exercise or ward off legal claims.

The right, in accordance with Art. 18 GDPR, to request the restriction of the processing of your personal data insofar as the correctness of your data is disputed, the processing is illegal but you reject the deletion of the data and we no longer require the data, but you nonetheless require these data in order to assert, exercise or ward off legal claims or you have, in accordance with Art. 21 GDPR, lodged an objection to the processing.

The right, in accordance with Art. 20 GDPR, to receive your personal data, which you have provided to us, in a structured, popular and machine-readable format or to request the transmission thereof to another responsible party.

The right, in accordance with Art. 77 GDPR, to lodge a complaint with a government supervisory agency. As a rule, in order to do this, you may contact the government supervisory agency of the German federal state for our aforementioned commercial residence or, where applicable, for your customary abode or workplace.

Right to revocation of consents that have been issued in accordance with Art. 7 Para. 3 GDPR: You shall, at any time, have the right to revoke a consent that has already been issued for the processing of the data with effectiveness for the future. In the event that such a revocation is made, we shall promptly delete the affected data insofar as additional processing cannot be supported upon a legal basis for the processing of the data in the absence of such a consent to do so. By revoking the consent, the legality of the processing previously undertaken until the consent was revoked shall not hereby be affected;

16.1 Right to Lodge an Objection

Insofar as we process your personal data upon the basis of rightful interests in accordance with Art. 6 Para. 1 Clause 1 lit. f GDPR, you shall have the right, in accordance with Art. 21 GDPR, to lodge an objection to the processing of your personal data insofar as this is done based upon reasons which are attributable to your special situation. Insofar as the objection to the processing of personal data for direct advertising purposes is lodged, you shall have a general right of objection without being required to state a special situation.

If you would like to exercise your right of revocation or right of objection, it shall suffice to send an e-mail to: [email protected].

17. Changes to our data protection declaration

As required, we reserve the right to make changes to and/or update this Data Protection Declaration subject to the fulfilment of the valid data protection guidelines. In this manner, we can adapt it to the current legal requirements and also take changes in our services into consideration, e.g. for the introduction of new services. The respectively current version shall be valid for your visit.

18. Terms and conditions for competitions

For competitions (lotteries and raffles) held by metoda GmbH additional Terms and Conditions apply. These can be found here.

19. Imprint

metoda GmbH


Bayerstraße 69

80335 Munich

Germany

CEOs: Stefan Bures, Robert Schmidtke

Phone: +49 (0) 89 124 137 800

Email: [email protected]

Legal


Register number: HRB 209729

Register court: District Court of Munich

Tax identification number (USt-IdNr.): DE261171098