Privacy & Imprint
Privacy as from 28/06/2021
Thank you very much for your interest in our website. The protection of your personal data is an important matter to us. In the following, you will find information regarding the handling of your data which are collected as the result of your usage of our website. The processing of your data shall be undertaken in accordance with the statutory data protection provisions. Insofar as links are placed to other websites, we have neither influence nor control over the linked content and the data protection guidelines that are valid on those websites. We recommend that you review the Data Protection Declarations on the linked websites in order to be able to determine whether and in what scope personal data are collected, processed, used or made available to third parties.
2. Contact Information
Responsible Party in accordance with Data Protection Law
Bayerstraße 69, 80335 Munich
Contact Data of the Data Protection Officer
Our Data Protection Declaration is supposed to be straightforward and understandable to everyone. As a rule, the Data Protection Declaration uses the official term definitions in the General Data Protection Regulation (GDPR). The official definitions are discussed in detail in Art. 4 GDPR.
4. Data processing as the result of visiting our website
Whenever you visit our website, it is technically required that data be transmitted to our web server via your Internet browser. The following data shall be stored during the continuous connection in order to communicate between your Internet browser and our web server:
- Domain visited
- Date and time of day of the inquiry
- Page from which the file was requested
- Access status (file transferred, file not found, etc.)
- Web browser and operating system used
- IP address of the requesting computer
- Data quantity transferred
We shall collect the aforementioned listed data in order to guarantee a seamless connection set-up of the website and enable comfortable usage of our website by the users. In addition, the log file serves the purpose of the evaluation of the system security and system stability as well as for administrative purposes. The legal basis for the temporary storage of the data and/or the log files shall be Art. 6 Para. 1 lit. f GDPR.
5. Contact form and making contact by e-mail
If you send us inquiries via the contact form or e-mail, we shall store your data from the inquiry form and/or your e-mail–including the contact data which you provide there–for the purpose of processing the inquiry and in the event that there are follow-up questions. In no case shall we pass on these data without your consent.
The legal basis for the processing of the data shall be our rightful interest in responding to your inquiry in accordance with Art. 6 Para. 1 lit. f GDPR as well as, where applicable, Art. 6 Para. 1 lit. b GDPR insofar as your inquiry is intended for the purpose of concluding a contractual agreement. After the definitive processing of your inquiry, your data shall be deleted insofar as no statutory retention obligations oppose this.
You shall have the option of registering for certain services provided on our website and thus creating a user profile. During the registration and the creation of the user profile, we shall collect and use the following personal data:
- First name, last name
- Telephone number
- E-mail address of the user
- Date and time of day of the registration
Moreover, voluntary data may also be provided. Mandatory data, which are provided for the purpose of the registration, shall be labelled with an asterisk as a mandatory field in the input mask. Through your user account, you shall receive the opportunity to use additional sections of our website and to log in for the offers which you have available to you.
The legal basis for the data process shall be the consent granted in accordance with Art. 6 Para. 1 lit. a GDPR and/or Art. 6 Para. 1 lit. b GDPR insofar as the processing is required for the rendering of the requested services. Your data shall be deleted as soon as the user account has been deleted on our website and insofar as no statutory retention obligations oppose this. As a rule, after logging in directly to your user account, you can make a change to and/or delete your user account–including the data which you have provided–or have this done by sending a corresponding message to the aforementioned responsible party.
If you would like to subscribe to the newsletter offered on the website which provides information upon a regular basis about our offers and products, we shall require your e-mail address as a mandatory field. In order to send the newsletter, we use the so-called double opt-in process. This means that we only then send you our newsletter by e-mail if you have expressly confirmed to us that you consent to the sending of the newsletter. In order to do this, as the first step, you shall receive an e-mail with a link which you can use to confirm that you–as the owner of the corresponding e-mail address, want to receive the newsletter in the future. By making confirmation, you are hereby issuing to us your consent in accordance with Art. 6 Para. 1 lit. a GDPR so we may use your personal data for the purpose of sending the requested newsletter.
During your registration for the newsletter, we shall, in addition to the e-mail address which is required for the sending of the newsletter, store the IP address which you have used to register for the newsletter as well as the date and the time of day of the registration and confirmation in order to be able to detect any possible misuse at a later point in time.
You may, at any time, cancel the newsletter via the link placed in each newsletter or via an e-mail sent to the aforementioned responsible party. After cancellation has been made, your e-mail address shall be promptly deleted from our newsletter mailing list insofar as you have not expressly approved the continued usage of the collected data or the continued processing thereof is otherwise permissible by law.
8. Google Analytics
Our website uses Google Analytics, a web analysis service from Google Inc. (“Google”). Google Analytics uses so-called cookies. Cookies are text files which are stored on your computer and which enable an analysis of your usage of the website. As a rule, the information generated by the cookie regarding your usage of this website shall be transmitted to a Google server in the USA and stored there.
We use Google Analytics only with activated IP anonymisation. That means that the IP address of the users shall be shortened by Google within the member countries of the European Union or in other contracting countries to the European Economic Area Convention whereby it shall not possible to make personal inferences. Google Inc., with its commercial residence in the USA, is certified in accordance with the US- European Data Protection Convention called “Privacy Shield” which guarantees the fulfilment of the data protection level that is valid in the EU. The processing shall be undertaken in accordance with Art. 6 Para. 1 lit. f GDPR and/or § 15 Para 3 TMG [German Telemedia Act] upon the basis of our rightful interest in the statistical analysis of user behaviour for optimisation and marketing purposes.
By mandate from this website’s operator, Google shall use this information in order to evaluate your usage of the website, in order to draft reports regarding the website activities and in order to render additional services associated with the usage of the website and the Internet to the website’s operator. The IP address transmitted by your browser for Google Analytics shall not be commingled with other data by Google.
The Usage Terms and Conditions of Google Analytics and information regarding data protection can be retrieved by clicking on the following links:
You can prevent the storage of cookies by correspondingly adjusting the settings on your browser software; however, we wish to point out that, in this case, you may not be able to comprehensively use all functions of this website. Moreover, you can prevent the collection of the data (including your IP address) which are generated by the cookie and which refer to your usage of the website from being sent to Google as well as the processing of these data by Google by downloading and installing the browser plug-in which is available at the following URL: https://tools.google.com/dlpage/gaoptout?hl=en A click on the following link shall prevent the data collection by Google Analytics by placing a so-called opt-out cookie.
You can find information regarding the handling of user data by Google Analytics in Google’s Data Protection Declaration: https://support.google.com/analytics/answer/6004245?hl=en
9. Matomo Analytics
This website uses Matomo, an open source, self-hosted software to collect anonymous usage data for this website.
The visitor behavior data is collected to find out any problems like pages not found, search engine problems or unpopular pages. Once the data is processed (number of visitors who see error pages or only one page, etc.), Matomo generates reports for website owners to act on. (layout changes, new content, etc.).
Matomo processes the following data:
- Anonymized IP-Addresses by removing the last 2 bytes (i.e. 18.104.22.168 instead of 198.51.100.54)
- Pseudo-anonymized location (based on the anonymized IP address)
- Country (with low probability based of anonymized IP address)
- Date and time
- Title of requested page
- URL of requested page
- URL of previous page (if allowed)
- Screen resolution
- Local time
- Downloaded files
- External links
- Duration of page load
- Main language of browser
- User Agent of Browser
When you use this website, the request is recorded by the host of the website (metoda.com). This log contains your IP address, which indirectly identifies you through your ISP. The recording of this data is mandatory by law and necessary for security. There is no possibility to opt-out for technical reasons, but the data will never be used for other purposes.
9.1 Basis of the Legitimate Interest
Data processing is based on the principle of legitimate interest.
Processing the data helps us to find out what works on our site and what does not. For example, it helps us find out if the content is well received or how we can improve the structure of the website. Our team benefits from this and can react to it. Due to the data processing, you therefore benefit from a website that is constantly improving.
Without the data we could not provide the service. Your data will only be used to improve the use of the website.
9.2 Recipient of the data
The personal data will only be sent to us (the metoda GmbH team).
9.3 Details on transfer to third countries
The data of this website and Matomo are hosted in Ireland. The data never leaves the EU.
9.4 Rights of data subjects
Since Matomo collects data based on legitimate interest, you can exercise the following rights:
- Right of access and data portability: you can request all your data at any time.
- Right to erasure and rectification: you can request that we erase all your data completely at any time.
- Right to object and restrict processing: you can object to data collection at any time by checking DoNotTrack in your browser.
9.5 The right to lodge a complaint with the data protection authority.
If you think that the way we process your data with Matomo is against the law, you have the right to file a complaint with the Data Protection Authority.
We use the services of the software manufacturer HubSpot. HubSpot is a software company from the USA with a branch in Ireland (HubSpot European Headquarters, Ground Floor, Two Dockland Central, Guild Street, Dublin 1, Ireland).
HubSpot is a service platform. The service used is an integrated software solution that allows us to manage customer data and cover various aspects of our online marketing. This includes, among other things, the analysis of landing pages and reporting. In the process, so-called “web beacons” are used and cookies are stored on the terminal device you use.
The following personal data may be collected:
- IP address,
- Geographic position (imprecise position)
- Type of browser
- Duration of visit
- Requested pages
If you are a registered user or are creating an account, the following data is collected in addition:
- First & last name
- Email address
The collected information as well as the content of our website is stored on servers of our software partner HubSpot Ireland. We use HubSpot to analyze the use of our website. This enables us to continuously optimize our website and make it more user-friendly. We also use information to determine which of our company’s services are of interest to customers and newsletter subscribers and to contact them for advertising purposes. In addition, we use the evaluation to optimize our web offer for you.
However, we only use your IP address in a shortened version. This means that the user’s IP address is shortened by HubSpot within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a HubSpot server in the USA and shortened there.
The cookies have a usual lifetime of 13 months. In addition, we delete the personal data collected via HubSpot as soon as the purpose for which you were collected has been achieved, unless the deletion conflicts with legal retention periods.
The information generated by the cookie about the use of the online offer by the user may also be transmitted to and stored by Google on servers in the United States. The processing takes place on the basis of EU standard contractual clauses. Through this, HubSpot offers a guarantee of compliance with European data protection law.
Social networks (Facebook, Twitter, Google Plus, LinkedIn and Xing) have been integrated into our website merely as a link to the corresponding services. After clicking on the integrated text/image link, you shall be guided to the respective provider’s website. Only then after you have been guided to this respective provider’s website shall user information be transmitted to the respective provider. In order to obtain information regarding the handling of your personal data during the usage of these websites, please review the respective Data Protection Guidelines of the providers which you utilise.
11.1 Livefeed of Instagram
In some circumstances the Livefeed of instagram can be loaded on the website. Loading of the plugin does only work if you’ve accepted the loading by accepting cookies.
Sometimes, the cookies serve the purpose of simplifying website processes by saving the settings (e.g. the saving of already-selected options). Insofar as, via individual cookies which we implement, personal data are also processed, the processing shall be undertaken, in accordance with Art. 6 Para. 1 lit. b GDPR, either for the implementation of the contractual agreement or, in accordance with Art. 6 Para. 1 lit. f GDPR, for the safeguarding of our rightful interests in the best-possible functionality of the website as well as a customer-friendly and effective layout for the website visit.
You can adjust the settings on your browser in such a manner that you are notified of the placement of cookies and permit cookies only in the individual case, block the acceptance of cookies for certain cases or generally block them as well as activate the automatic deletion of cookies when the browser is closed. The cookie settings can be managed via the following links for the respective browsers.
You can also manage the cookies of many companies and functions individually which are used for advertising. In this regard, you can use the corresponding user tools which are retrievable at https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices
However, please keep in mind that, in the event that you deactivate the cookies, the functionality of this website may be restricted.
12.1 Change of Cookie preferences
You can change your cookie preferences here: Cookie Settings
13. Scrips and Fonts
For better function of our website we download various scripts and fonts from different CDN.
14. Data dissemination and recipient
A dissemination of your personal data to third parties shall not be made unless:
- We have expressly made reference to this in the description of the respective data processing.
- You have granted your express consent in this regard in accordance with Art. 6 Para. 1 Clause 1 lit. a GDPR,
- The dissemination is required in accordance with Art. 6 Para. 1 Clause 1 lit. f GDPR in order to assert, exercise or ward off legal claims and
- No reason exists to assume that you have a prevailing interest worthy of protection in the non-dissemination of your data, in the event that a statutory obligation exists for the dissemination thereof in accordance with Art. 6 Para. 1 Clause 1 lit. c GDPR and
- Insofar as this is required in accordance with Art. 6 Para. 1 Clause 1 lit. b GDPR for the implementation of the contractual relationships with you.
Moreover, we shall commission external service providers for the rendering of our services whom we have carefully selected and commissioned in writing. They shall be obliged to follow our instructions and we shall control them upon a regular basis. As required, we have concluded contracted data processing agreements with these external service providers in accordance with Art. 28 GDPR. These are service providers for the web hosting, the sending of e-mails as well as the maintenance and servicing of our IT systems, etc. The service providers shall not pass on these data to third parties.
14.1 Third party recipients
|Contractor Short Name||Purpose||Contractor Legal Entity||Contractor Address||Contractor GDPR directory||Datatransfer out of EU||
|Contractor uses Subcontractor with datatransfer out of EU||Data security level|
|Amazon Advertising||Advertising||Amazon Europe Core SARL||38 avenue John F. KennedyL-1855 Luxembourg||no||not available||yes||Link|
|AWS||IaaS provider||AWS EMEA SARL||38 avenue John F. KennedyL-1855 Luxembourg||no||Link||yes||Link|
|ChargeBee||Payment provider||ChargeBee Inc.||340 S Lemon Avenue, #1537 Walnut, California 91789, USA||yes||Link||yes||not available|
|Freshdesk Inc.||Service/Support||Freshdesk Inc||2950 S. Delaware Street, Suite 201San MateoCA 94403, USA||Link||no||Link||yes||Link|
|Intercom Inc.||Service/Support Chat||Intercom Inc||55 2nd Street, 4th Fl.San Francisco,CA 94105, USA||Link||yes||Link||yes||Link|
|Google Analytics||Analytics||Google Ireland Limited||Gordon House, Barrow StreetDublin 4Irland||Link||no||Link||yes||Link|
|Scalegrid Inc.||DaaS provider||Scalegrid Inc||2225 E Bayshore RdPalo AltoCA 94303, USA||Link||yes||Link||yes||Link|
|Stripe Inc.||Payment||Stripe Inc||510 Townsend StreetSan FranciscoCA 94103, USA||Link||yes||Link||yes||Link|
|Google G-Suite||Business Management Tools||Google Ireland Limited||Gordon House, Barrow StreetDublin 4Irland||Link (GDPR)
|Honeybadger.io||Analytics||Honeybadger Industries LLC||11410 NE 124th Street246 KirklandWA 98034, USA||Link||yes||Link||yes||Link|
|Hotjar||Analytics||Hotjar Ltd||Dragonara Business Centre5th Floor, Dragonara Road,Paceville St Julian’s STJ 3141Malta||no||Link||yes||Link|
|Candis||Payment||Candis GmbH||Friedrichstraße 20010117 Berlin||Link||no||(see PDF)||not known||not available|
|Microsoft||IaaS provider||Microsoft Deutschland GmbH||Walter-Gropius-Straße 580807 München||yes||Link||yes||Link|
|Salesforce GmbH||CRM||Salesforce GmbH||Erika-Mann-Str. 3180636 München||Link||no||Link||yes||Link|
|Twilio||Messaging provider||Twilio Germany GmbH||Rosenheimer Str. 143C81671 München||Link||yes||Link||yes||Link|
|Zapier||Automation||Zapier Inc.||548 Market St. #62411
San Francisco, CA 94104-5401
|Mailchimp||Mailing services||The Rocket Science Group, LLC||675 Ponce de Leon Ave NESuite 5000Atlanta, GA 30308 USA||Link||yes||Link||yes||Link|
|Woodpecker||Mailing services||Woodpecker.co S.A.||29D Krakowska STR, Zip code: 50-424Wrocław||Link||no||not available||no||Link|
|Clickmeeting||Webinar tool||ClickMeeting Sp. z o.o.||ul. Arkońska 6/A4, 80-387 Gdańsk, Polen||Link||not known||not available||not known||not available|
|Hubspot||Marketing automation||HubSpot Germany GmbH||Am Postbahnhof 1710243 Berlin||yes||Link||yes||not available|
|Appcues||Interactive user tours||Appcues, Inc.||177 Huntington Ave Ste 1703PMB 94414Boston, MA 02115 USA||Link||yes||Link||yes||Link|
|WPengine||Hosting services||WPengine Inc||504 Lavaca Street, Suite 1000Austin, TX 78701||yes||Link||yes||not available|
15. Timeframe for the storage of personal data
The timeframe for the storage of personal data shall be based upon the applicable statutory retention timeframes (e.g. from commercial law and tax law). After the respective timeframe lapses, the corresponding data shall be routinely deleted. Insofar as data are required for the fulfilment of the contractual agreement or for contractual negotiations, or we have a rightful interest in the continued storage of these data, the data shall be deleted when they are no longer required for these purposes or you have exercised your right of revocation or right of objection.
16. Your rights
In the following, you will find information regarding which rights of affected parties the valid data protection law affords you in your dealings with the responsible party with regards to the processing of your personal data:
The right, in accordance with Art. 15 GDPR, to request information regarding your personal data which we process. In particular, you may request information regarding the processing purposes, the category of personal data, and the categories of recipients to whom your data have been or are being disclosed, the planned storage timeframe, the existence of a valid right to the correction, deletion or restriction of the processing or to lodge an objection, the existence of a valid right to lodge a complaint, the origin of your data–insofar as we have not collected these data–as well as regarding the existence of automated decision-making including profiling and, as required, extensive information regarding the details thereof.
The right, in accordance with Art. 16 GDPR, to request the prompt correction or completion of your personal data that we have stored which are incorrect or incomplete.
The right, in accordance with Art. 17 GDPR, to request the deletion of your personal data that we have stored insofar as the processing thereof is no longer required for the exercising of the right to free expression and the right to request information, in order to fulfil a legal obligation, for reasons of public interest or in order to assert, exercise or ward off legal claims.
The right, in accordance with Art. 18 GDPR, to request the restriction of the processing of your personal data insofar as the correctness of your data is disputed, the processing is illegal but you reject the deletion of the data and we no longer require the data, but you nonetheless require these data in order to assert, exercise or ward off legal claims or you have, in accordance with Art. 21 GDPR, lodged an objection to the processing.
The right, in accordance with Art. 20 GDPR, to receive your personal data, which you have provided to us, in a structured, popular and machine-readable format or to request the transmission thereof to another responsible party.
The right, in accordance with Art. 77 GDPR, to lodge a complaint with a government supervisory agency. As a rule, in order to do this, you may contact the government supervisory agency of the German federal state for our aforementioned commercial residence or, where applicable, for your customary abode or workplace.
Right to revocation of consents that have been issued in accordance with Art. 7 Para. 3 GDPR: You shall, at any time, have the right to revoke a consent that has already been issued for the processing of the data with effectiveness for the future. In the event that such a revocation is made, we shall promptly delete the affected data insofar as additional processing cannot be supported upon a legal basis for the processing of the data in the absence of such a consent to do so. By revoking the consent, the legality of the processing previously undertaken until the consent was revoked shall not hereby be affected;
16.1 Right to Lodge an Objection
Insofar as we process your personal data upon the basis of rightful interests in accordance with Art. 6 Para. 1 Clause 1 lit. f GDPR, you shall have the right, in accordance with Art. 21 GDPR, to lodge an objection to the processing of your personal data insofar as this is done based upon reasons which are attributable to your special situation. Insofar as the objection to the processing of personal data for direct advertising purposes is lodged, you shall have a general right of objection without being required to state a special situation.
If you would like to exercise your right of revocation or right of objection, it shall suffice to send an e-mail to: [email protected].
17. Changes to our data protection declaration
As required, we reserve the right to make changes to and/or update this Data Protection Declaration subject to the fulfilment of the valid data protection guidelines. In this manner, we can adapt it to the current legal requirements and also take changes in our services into consideration, e.g. for the introduction of new services. The respectively current version shall be valid for your visit.
18. Terms and conditions for competitions
For competitions (lotteries and raffles) held by metoda GmbH additional Terms and Conditions apply. These can be found here.