Skonto an jedem Tag möglich zu günstigen Konditionen. 1%0,5%1,5%2% 14 Tage60 Tage

Privacy Policy

Privacy Policy

We are delighted about the visit of our website. Hereinafter, we would like to inform about how personal data is processed on our website.

Controller

Traxpay GmbH
Schleusenstr. 17
60327 Frankfurt am Main
Contact:
Tel.: +49 69 / 59 772 15-0
E-Mail: [email protected]

Data Protection Officer

Contact:
Schleusenstr. 17, 60327 Frankfurt am Main
E-Mail: [email protected]

Information on data processing

Terms

The specialist terms used in this Privacy Policy are to be understood as legally defined in article 4 GDPR.

Automated data processing (log files etc.)

Our website can be visited without actively providing personal information about the user. However, every time our website is accessed, we automatically store access data (server log files), such as the name of the internet service provider, the operating system used, the website the user visited us from, the date and duration of the visit and the name of the file accessed, as well the IP address of the device used (for security reasons, such as to recognise attacks on our website) for a duration of 7 days. This data is solely evaluated for the purpose of improving our offering and does not enable conclusions to be drawn about the person of the user. This data is not merged with other data sources. We process and use the data for the following purposes: to provide the website, to improve our websites and to prevent and identify errors/malfunctions and the abuse of the website.

Data categories:meta- and communications data (e. g. IP-address, date and time of access, time, type of HTTP-requests, website, from which access is made (referrer-URL), used browser and if applicable operating system of the accessing computer (User-Agent))
Purposes of processing:minimising and recognizing malfunctions, recognizing abuse of website
Legal base:legitimate interests Art. 6 para. 1 lit. f) GDPR
Legitimate interests:Fraud prevention to detect misuse of the website

Strictly neccessary Cookies (functionality, opt-out-links etc.)

In order to enable the use of basic functions on our website and to provide the service requested by the user, we use so-called cookies. Cookies are a common internet technology for storing and retrieving information for users of the website. Cookies provide information and/or data that may be stored, on the users device. With the classic cookie technology, the user’s browser is instructed to store certain information on the user’s device when a specific website is accessed.

Indispensable cookies are used to provide a telemedia service expressly requested by the user, for example:

  • Cookies for failure analysis and security purpose
  • Cookies for storing logins
  • Cookies for saving data in online forms, should the document stretch over several pages
  • Cookies for saving (language-)settings
  • Cookies for saving consent or withdrawal of consent(Opt-in, Opt-out)

Session-cookies are deleted once the browser is closed.

Cookies can subsequently be deleted by users in order to remove data that the website has stored on the users computer.

The described data processing also refers to information that is not person-related, however represents information in accordance with the TTDSG (German Telecommunications-Telemedia Data Protection Act). Even in these cases, this information may be necessary for the use of an expressly requested service and will therefore be stored in accordance with § 25 TTDSG.

Opt-Out:Firefox:
https://support.mozilla.org/de/kb/wie-verhindere-ich-dass-websites-mich-verfolgen
Google Chrome:
https://support.google.com/chrome/answer/95647?hl=de
Microsoft Edge:
https://support.microsoft.com/de-de/microsoft-edge/inprivate-browsen-in-microsoft-edge-cd2c9a48-0bc4-b98e-5e46-ac40c84e27e2
Opera:
https://help.opera.com/en/latest/security-and-privacy/
Safari:
https://support.apple.com/de-de/HT201265
Legal bases:legitimate interest (Art. 6 para. 1 lit. f) GDPR in conjunction with §25 para.) 2 sentence 2 TTDSG), Consent (Art. 6 para. 1 lit. a) GDPR in conjunction with §25 para). 1 TTDSG
Legitimate interests:Storing of opt-in preferences, assurance of the website’s functionality, provision of user status across the entire website

Storing and processing of optional information and data

Beyond the necessary extent, the processing of users data can occur in using additional cookies, simi-lar technologies or application-related technologies, for example for the purpose of (cross-site) tracking or personalized advertising etc. This data may be transferred to third parties. Storage and further processing of the user data, which are not absolutely necessary to provide the tel-emedia service, then takes place on the basis of consent in accordance with article Art. 6 para. 1 lit. a) GDPR (if applicable in conjunction with §25 para. 1 sentence 2 TTDSG).

Consent Management Platform

We use a consent management procedure on our online offering in order to be able to prove, store and manage the consent granted by our website visitors in accordance with the requirements of the GDPR. The consent management platform we use helps us to recognize all cookies and tracking technologies and manage them based on consent status. Visitors to our online offering can also manage the consent and preferences granted or withdraw con-sent via the service and the following link:

Adjust cookie settings

The consent status is stored on the server and/or in a cookie (so-called opt-in cookie) or a comparable technology in order to be able to assign the consent to a user or their device. In addition, the time of the declaration of consent is recorded.

Data categories:Usage data (Consent-ID and -number, accesstime, optIn or optOut), metadata and communication data (e. g. device information, IP ad-dresses)
Purposes of processing:Fulfilment of accountability obligations, Consent management
Legal bases:Legal obligation (Art. 6 para 1 lit. c) GDPR, Art. 7 GDPR)

Borlabs Cookie

Recipient:BORLABS – Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg, Deutschland
Privacy policy:https://de.borlabs.io/datenschutz/

Hosting (incl. Content Delivery Network)

Our online offer is hosted by an external service provider. Personal data of the website visitors to our online offer, so-called log files, are stored on the servers of our service provider. By using a specialised service provider, we can provide our website securely and efficiently. The hosting provider we use does not process the data for its own purposes.

We also use a so-called Content Delivery Network (CDN) in order to be able to provide the content of our website more quickly. When website visitors access e. g. graphics, scripts, or other content on our website, these are provided quickly and optimally with the help of regionally and internationally distributed servers. When the files are retrieved, a connection is established to the servers of a CDN provider, whereby personal data of the website visitors are processed, e. g. the IP address, browser data or the so-called user agent.

Data categories:Usage data (e. g. websites visited, interest in content, access times), metadata and communication data (e. g. device information, IP addresses)
Purposes of processing:Optimisation and proper presentation of the website, quick and location-independent way to reach the website
Legal bases:Consent (article 6 para. 1 lit. a) GDPR), legitimate interest (Art. 6 para. 1 lit. f))
Legitimate interests:Optimisation and proper presentation of the website, fast website ac-cessibility, avoidance of downtimes, high scalability
Guarantee according to article 44 ff. GDPR:https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en

CloudFlare

Recipient:Cloudflare GmbH, Rosental 7, 80331 München, Deutschland
Privacy policy:https://www.cloudflare.com/de-de/privacypolicy/

Google Static

Recipient:Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland
Privacy policy:https://policies.google.com/privacy?hl=en-US

jsDelivr

Recipient:Prospect One, Królewska 65A, 30-081 Karków, Polen
Privacy policy:https://www.jsdelivr.com/terms/privacy-policy-jsdelivr-com

Web analysis and optimisation

We use tools for web analysis and reach measurement so that we can evaluate user flows to our online offering. To do so, we collect information about the behaviour, interests, or demographics of our users, such as their age, gender, and so on. This helps us to recognise the times at which our online offering, its func-tions, and content are frequented the most or accessed more than once.

In addition, we can use the information that has been collected to determine whether our online offering requires optimisation or adjustment.

The information collected for this purpose is stored in cookies or deployed in similar procedures used for reach measurements and optimisation. The collection of this data is made possible by the use of certain technologies (e.g. cookies). These are stored on users’ end devices as part of client-side tracking when they visit our website.

We take precautions to protect the identity of our website visitors. We do not process any clear data of website visitors for the purposes described.

Website visitors are assigned an ID (identification code) when they visit the website so that they can be recognized when they return. The IDs and associated information are stored in user profiles. In addition, the IP addresses of website visitors are anonymized and the storage duration of cookies is reduced.

We have also integrated the data for analyzing user behavior and measuring reach into our CMS. The CMS provider may also receive information about the data collected here.

Data categories:Usage data (e. g. websites visited, interest in content, access times), metadata and communication data (e. g. device information, anony-mized IP addresses, location data), contact data (e.g. email address), content data (e.g. text inputs)
Purposes of processing:Website analyses, reach measurement, utilisation and assessment of website interaction, for web optimization and reach measurement, review of website utilization, lead evaluation, sales increase, budget control.
Legal bases:Consent (article 6 para. 1 lit. a) GDPR)
Guarantee according to article 44 ff. GDPR:https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en

Matomo

Recipient:InnoCraft Ltd, 150 Willis St., 6011 Wellington, Neuseeland
Privacy policy:https://matomo.org/privacy-policy/

Use of SalesViewer® technology

This website uses SalesViewer® technology from SalesViewer® GmbH on the basis of the website operator’s legitimate interests (Section 6 paragraph 1 lit.f GDPR) in order to collect and save data on marketing, market research and optimisation purposes.

In order to do this, a javascript based code, which serves to capture company-related data and according website usage. The data captured using this technology are encrypted in a non-retrievable one-way function (so-called hashing). The data is immediately pseudonymised and is not used to identify website visitors personally

The data stored by Salesviewer will be deleted as soon as they are no longer required for their intended purpose and there are no legal obligations to retain them.

The data recording and storage can be repealed at any time with immediate effect for the future, by clicking on https://www.salesviewer.com/opt-out in order to prevent SalesViewer® from recording your data. In this case, an opt-out cookie for this website is saved on your device. If you delete the cookies in the browser, you will need to click on this link again.

Social media presence

We maintain online presences on social networks and career platforms so we can exchange infor-mation with users registered there and easily contact them.

Using social networks helps us to increase our reach as well as actively interact and communicate with users. The activity and communication in social media has a high value in terms of winning new customers and employees. Using social media and the website is beneficial for sharing relevant information about our company, publishing events, and communicating important short-term news and job advertisements. They also help us to get in touch with users prompt and uncomplicated.

Social media platform operators create so-called user profiles about the users behavior, for example the indication of interests (likes, shares). These are used to adapt advertisements to the interests of targeted groups. When users are active on social media channels, cookies or other technologies are regularly stored on the users end devices, regardless of whether they are registered users of the social network.

Insights (statistics)

Data that has been evaluated from social media platform operators in form of anonymized statistics, no longer contain personal data of users. Based on these statistics we are able to see how often and at which time our social media profile has been visited. Currently it is not possible for fanpage operators to disable this function. We therefore have no influence on the extent to which the data is processed by social media platforms.

Social Media Messenger

In context with use of social media, we may use the corresponding messenger service to communicate easily with the users. The security of individual services may depend on the user’s account settings. Even in the case of end-to-end encryption, the social media platform operator can draw conclusions if and when users communicate with us. Location data can also be recorded.

Depending on where the social network is hosted, the user data can be processed outside the European Union or outside the European Economic Area. This can lead to risks for users because it is more difficult for them to assert their rights, for example.

Data categories:Master data (e.g. name, address), contact data (e.g. email address, telephone number), content data (e.g. text inputs, photographs, videos), usage data (e.g. websites visited, interest in content, access times), metadata and communication data (e.g. device information, IP ad-dresses)
Purposes of processing:Increase in the reach, networking of users
Legal bases:Consent (article 6 para. 1 lit a) GDPR), legitimate interest (article 6 para. 1 lit. f) GDPR)
Legitimate interests:Interaction and communication on social media pages, increase in profits, findings regarding target groups
Guarantee according to article 44 ff. GDPR:https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en

Indeed

Recipient:Indeed Ireland Operations Limited, Dublin – Block B, Capital Dock 80 Sir John Rogerson’s Quay, Grand Canal Dock, Dublin 2, D02 HE36, Ireland
Privacy policy:https://hrtechprivacy.com/de/brands/about-indeed#privacypolicy

LinkedIn

Recipient:LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
Privacy policy:https://www.linkedin.com/legal/privacy-policy

Twitter

Recipient:Twitter International Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07 Irland
Privacy policy:https://twitter.com/de/privacy

Xing

Recipient:New Work SE, Am Strandkai 1, 20457 Hamburg, Deutschland
Privacy policy:https://privacy.xing.com/de/datenschutzerklaerung

Plug-ins and integrated third-party content

We have integrated functions and content obtained from third-party providers into our online offering. For example, videos, depictions, buttons, cartographic services (Maps) or contributions (hereinafter termed ‘content’) are integrated. If the third-party contents are accessed by website visitors (e.g., click, play, etc.), information and data are collected and – in the form of cookies or other technologies (e.g., pixels, Java script commands or web assembly) – linked to the end device of the website visitor and transferred to the server of the third-party provider used. The third-party receives usage as well as interaction data of the website visitor and makes it accessible to us in form of statistics via a dashboard. The statistics we receive contain dimensions and metrics and no clear user data.

Without the indicated processing operation it is impossible to load and display third-party content.

We have integrated these third-party plugins into our CMS. The CMS provider receives information about the collected data as well.

We have taken security precautions to prevent this data from being automatically transferred, with the aim of protecting the personal data of visitors to our online offering. This data is only transferred if the visitor uses the buttons or click on the third-party content.

Data categories:Usage data (e.g. websites visited, interest in content, access times), metadata and communication data (e.g. device information, anonymized IP addresses)
Purposes of processing:Design of our online offering, increase in the reach of adverts on social media, sharing of contributions and content, interest-based and behav-ioural marketing, cross-device tracking
Legal bases:Consent (article 6 para. 1 lit. a) GDPR)

YouTube

Recipient:Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland
Privacy policy:https://policies.google.com/privacy?hl=de&gl=de

Vimeo

Recipient:Vimeo Inc., 555 West 18th Street New York, New York 10011, USA
Privacy policy:https://vimeo.com/privacy

Google Fonts

Recipient:Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland
Privacy policy:https://policies.google.com/privacy?hl=de&gl=de

Google Maps

Recipient:Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland
Privacy policy:https://policies.google.com/privacy?hl=de&gl=de

jQuery

Recipient:OpenJS Foundation, 1 Letterman Drive, SuiteD4700, San Francisco, CA94129, USA
Privacy policy:https://openjsf.org/wp-content/uploads/sites/84/2021/04/OpenJS-Foundation-Privacy-Policy-2019-11-15.pdf

Download (whitepaper, product information)

On our online offering, visitors have the opportunity to download documents, so that we can provide them with recent or relevant information. In some cases, our visitors can download pdf files without being recorded by our system. Tracking or statistical analysis does not take place.

For certain dokuments we collect personal data including IP-address via a form before the download and make the provision of our free services dependent on the entry of contact details.

The download then takes place via a download link, which we provide to our users by e-mail. Consequently follows an outreach and a request about interest of further information about our products.

Data categories:meta and communication data (e. g. device information, IP-address), usage data (e. g. access time)
Purposes of processing:Marketing, acquisition of new customers, sales increase
Legal bases:Consent (art. 6 para. 1 lit. a) GDPR) and Initiation of contract (art. 6 para. 1 lit. b) GDPR)

Contacting us

On our online offering, we offer the option of contacting us directly or requesting information via various contact options.

In the event of contact being made, we process the data of the person making the enquiry to the extent necessary for answering or handling their enquiry. The data processed can vary depending on the method via which contact is made with us.

Data categories:Master data (e.g. name, address), contact data (e.g. email address, telephone number), content data (e.g. text inputs), metadata and communication data (e.g. device information, IP ad-dresses), usage data (e.g. websites visited, interest in content, access times)
Purposes of processing:Processing requests
Legal bases:Consent (art. 6 para. 1 lit. performance of contract (art. 6 para. 1 lit. b) GDPR)

Further obligational information for data processing

Data transfer

We transfer the personal data of visitors to our online offering for internal purposes (e.g. for internal administration or to the HR department so we can meet statutory or contractual obligations). Internal data transfer or the disclosure of data only occurs to the extent necessary, under the pertinent data protection provisions.

It may be necessary for us to disclose personal data for the performance of contracts or to comply with legal obligations. If the data necessary in this regard is not provided to us, it may be the case that the contract cannot be concluded with the data subject.

In the event of transferring personal data to a country outside the EEA in the context of internal group processing, the requirements of Article 44 GDPR will be met. Additional measures are implemented to guarantee the highest level of protection for the personal data of data subjects. Our privacy policy with the respective Recipients specifies the guarantee that applies to the transfer of third countries.

Data processing

Assigned recipients possess the ability to act as processors for us. In accordance with art. 28 para. 3 GDPR, we have concluded data processing agreements (DPA) with them. Meaning that the processors are only allowed to process your personal data in a way that we have ex-plicitly instructed them to do. To ensure your data is processed securely and in accordance with our instructions, processors must take appropriate technical and organizational measures.

Storage period

In principle, we store the data of visitors to our online offering for as long as needed to render our ser-vice or to the extent that the European body issuing directives and regulations or another legislator stipulates in laws and regulations to which we are subject. In all other cases, we delete personal data once the purpose has been fulfilled, with the exception of data that we need to continue to store to comply with legal obligations (e.g. if retention periods under tax law and trade law require us to keep documents such as contracts and invoices for a certain period of time).

Storage time for required cookies: 30 day

Storage time for optional Cookies/technology: After the expiry of 30 days and the withdrawal of consent of the data subject

Automated decision-making (including profiling)

We do not use automated decision-making or profiling according to art. 22 GDPR.

Legal bases

The decisive legal bases primarily arise from the GDPR. They are supplemented by national laws from member states and can, if applicable, be applied alongside or in addition to the GDPR.

Consent:Art. 6 para. 1 lit. a) GDPR serves as the legal basis for processing procedures regarding which we have sought consent for a particular purpose of processing.
Performance of a contract:Art. 6 para. 1 lit. b) GDPR serves as the legal basis for processing required to perform a contract to which the data subject is a contractual party or for taking steps prior to entering into a contract, at the request of the data subject.
Legal obligation:Art. 6 para. 1 lit. c) GDPR is the legal basis for processing that is required to comply with a legal obligation.
Vital interests:Art. 6 para. 1 lit. d) GDPR serves as the legal basis if the processing is neces-sary to protect the vital interests of the data subject or another natural person.
Public interest:Art. 6 para. 1 lit. e) GDPR serves as the legal basis for processing that is nec-essary to perform a task in the public interest or to exercise public force that is transferred to the controller.
Legitimate interest:Art. 6 para. 1 lit. f) GDPR serves as the legal basis for processing that is necessary to protect the legitimate interests of the controller or a third party, provided this is not outweighed by the interests or fundamental rights and fundamental freedoms of the data subject that require personal data to be protected, particularly if the data subject is a child.

Rights of the data subject

Right of access:Pursuant to article 15 GDPR, data subjects have the right to request confirmation as to whether we process data relating to them. They can request access to their data, along with the additional information listed in article 15 (1) (1) GDPR and a copy of their data.
Right to rectification:Pursuant to article 16 GDPR, data subjects have the right to request that data relating to them, and that we process, be rectified or completed.
Right to erasure:Pursuant to article 17 GDPR, data subjects have the right to request that data re-lating to them be erased without delay. Alternatively, they can request that we restrict the processing of their data, pursuant to article 18 GDPR.
Right to data portability:Pursuant to article 20 GDPR, data subjects have the right to request that data made available to us by them be provided and transferred to another controller.
Right to lodge a complaint:In addition, data subjects have the right to lodge a complaint with the supervisory authority responsible for them, under article 77 GDPR.
Right to object:If personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 S. 1 lit. f) GDPR, under article 21 GDPR data subjects have the right to object to the processing of their personal data, provided there are reasons for this that arise from their particular situation or the objection relates to direct advertising. In the latter case, data subjects have a general right to object that is to be put into effect by us without a particular situation being stated.

Withdrawal of consent

Some data processing procedures can only be carried out with the express consent of the data subject. Once granted, you are able to withdraw consent at any time. To do so, sending an informal note or email to [email protected] is sufficient. The consent of data processing operations on our online offer can be directly adjusted and withdrawn in our consent manager.

Adjust cookie settings

The legality of the data processing carried out up to the point of withdrawal shall remain unaffected by the withdrawal.

External links

Our website includes links to online offerings from other providers. We note that we have no influence over the content of the online offerings linked to and over whether their providers comply with data protection provisions.

Amendments

We reserve the right to amend this information on data protection, in compliance with the applicable data protection provisions, if changes are made to our online offering so that it complies with the legal requirements.

This Privacy Policy was drawn up by DDSK GmbH