Privacy Policy

1. Introduction

With the following information, we would like to provide you, as the “data subject”, with an overview of the processing of your personal data by us and of your rights under data protection laws. In principle, our websites can be used without providing any personal data. However, if you wish to make use of special services offered by our company via our website, the processing of personal data may become necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain your consent.

The processing of personal data, for example your name, address or email address, is always carried out in accordance with the General Data Protection Regulation (GDPR) and in compliance with the applicable country-specific data protection provisions that apply to “DEKOM GmbH”. By means of this Privacy Policy, we would like to inform you about the scope and purpose of the personal data collected, used and processed by us.

As the controller, we have implemented numerous technical and organizational measures to ensure the most complete possible protection of personal data processed via this website. Nevertheless, internet-based data transmissions may in principle have security gaps, so that absolute protection cannot be guaranteed. For this reason, you are free to transmit personal data to us via alternative means, for example by telephone or by post.

You can also take simple and easily implementable measures to protect yourself against unauthorized access by third parties to your data. We would therefore like to provide you at this point with some information on how to handle your data securely:

Protect your account (login, user or customer account) and your IT system (computer, laptop, tablet or mobile device) with secure passwords.

Only you should have access to the passwords.

Make sure you use your passwords for only one account (login, user or customer account).

Do not use one password for different websites, applications or online services.

In particular when using publicly accessible or shared IT systems, you should always log out after each login to a website, an application or an online service.

Passwords should consist of at least 12 characters and should be chosen so that they cannot be easily guessed. Therefore, they should not contain common everyday words, your own name or the names of relatives, but should include upper and lower case letters, numbers and special characters.

2. Controller

The controller within the meaning of the GDPR is:

DEKOM AV Integration & Collaboration s.p. z o.o.

Grzybowska 87, 00-844 Warsaw, Poland

Telephone: +48 223 073 970

Email: info-pl@dekom.com

Representative of the controller: Daniel Policht

3. Data Protection Officer

We have not designated a DPO.
Please direct privacy requests to Daniel Policht.

4. Definitions

This Privacy Policy is based on the terminology used by the European legislator when adopting the General Data Protection Regulation (GDPR). Our Privacy Policy is intended to be easy to read and understand both for the general public and for our customers and business partners. To ensure this, we would like to explain the terminology used in advance.

In this Privacy Policy, we use, among others, the following terms:

Personal data

Personal data means any information relating to an identified or identifiable natural person. A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Data subject

A data subject is any identified or identifiable natural person whose personal data are processed by the controller (our company).

Processing

Processing means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Restriction of processing

Restriction of processing means the marking of stored personal data with the aim of limiting their processing in the future.

Profiling

Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.

Pseudonymization

Pseudonymization means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

Processor

A processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Recipient

A recipient is a natural or legal person, public authority, agency or other body to which personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.

Third party

A third party is a natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.

Consent

Consent means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which the data subject, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to them.

5. Legal basis for processing

Article 6(1)(a) GDPR (in conjunction with the applicable national rules implementing the ePrivacy framework (cookies and similar technologies)) serves our company as the legal basis for processing operations for which we obtain consent for a specific processing purpose.

If the processing of personal data is necessary for the performance of a contract to which you are a party, as is the case, for example, for processing operations required for the delivery of goods or the provision of any other service or consideration, the processing is based on Article 6(1)(b) GDPR. The same applies to such processing operations that are necessary in order to take steps at your request prior to entering into a contract, for example in cases of inquiries about our products or services.

If our company is subject to a legal obligation requiring the processing of personal data, for example to fulfill tax obligations, the processing is based on Article 6(1)(c) GDPR.

In rare cases, the processing of personal data may be necessary to protect vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor were to be injured on our premises and their name, age, health insurance data or other vital information had to be passed on to a doctor, hospital or other third parties. In that case, the processing would be based on Article 6(1)(d) GDPR.

Finally, processing operations may be based on Article 6(1)(f) GDPR. This legal basis applies to processing operations that are not covered by any of the aforementioned legal bases, if the processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, provided that the interests, fundamental rights and freedoms of the data subject do not override those interests. Such processing operations are permitted to us in particular because they were specifically mentioned by the European legislator. In this respect, the legislator considered that a legitimate interest could be assumed if you are a customer of our company (Recital 47, sentence 2 GDPR).

6. Technology

6.1 SSL/TLS encryption

This site uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, such as orders, login data or contact inquiries that you send to us as the operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

We use this technology to protect the data you transmit.

6.2 Data collection when visiting the website

When you use our website for informational purposes only, i.e., if you do not register or otherwise transmit information to us or do not give consent to processing requiring consent, we collect only the data that is technically necessary to provide the service. These are regularly data that your browser transmits to our server (“server log files”). Our website collects a series of general data and information each time you access a page, either by you or by an automated system. This general data and information is stored in the server’s log files. The following may be recorded:

browser types and versions used,

the operating system used by the accessing system,

the website from which an accessing system reaches our website (so-called referrer),

the subpages that are accessed on our website via an accessing system,

the date and time of access to the website,

a truncated internet protocol address (anonymized IP address), and

the internet service provider of the accessing system.

When using this general data and information, we do not draw any conclusions about your person. Rather, this information is needed to:

deliver the content of our website correctly,

optimize the content of our website and advertising for it,

ensure the long-term functionality of our IT systems and the technology of our website, and

provide law enforcement authorities with the information necessary for prosecution in the event of a cyberattack.

We therefore evaluate these collected data and information statistically and also with the aim of increasing data protection and data security in our company in order ultimately to ensure an optimal level of protection for the personal data we process. The anonymous data in the server log files are stored separately from any personal data provided by a data subject.

The legal basis for data processing is Article 6(1)(f) GDPR. Our legitimate interest arises from the purposes for data collection listed above.

7. Cookies

7.1 General information on cookies

Cookies are small files that your browser automatically creates and that are stored on your IT system (laptop, tablet, smartphone, etc.) when you visit our site.

In the cookie, information is stored that results in each case from the context with the specific end device used. However, this does not mean that we thereby obtain direct knowledge of your identity.

The use of cookies serves to make the use of our services more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

In addition, we also use temporary cookies for the purpose of optimizing user-friendliness; these are stored on your end device for a defined period of time. If you visit our site again to use our services, it is automatically recognized that you have been with us before and which entries and settings you made, so that you do not have to enter them again.

On the other hand, we use cookies to statistically record the use of our website and to evaluate our offer for optimization purposes. These cookies enable us to automatically recognize, on a repeat visit to our website, that you have already visited our website. Such cookies are automatically deleted after a defined period. The respective storage duration of cookies can be found in the settings of the consent tool used.

8. Content on our website

8.1 Data processing when creating a customer account and for contract processing

Pursuant to Article 6(1)(b) GDPR, personal data are collected and processed when you provide them to us for the performance of a contract or when creating a customer account. Which data are collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be done, among other things, by sending a message to the controller at the address stated above. We store and use the data you provide for the purpose of contract processing. After complete processing of the contract or deletion of your customer account, your data will be blocked in accordance with statutory retention periods under tax and commercial law and deleted after expiration of these periods, unless you have expressly consented to further use of your data or further use of your data is permitted by law and reserved by us, about which we will inform you below as appropriate.

8.2 Contact / contact form

When you contact us (e.g., via contact form or email), personal data are collected. Which data are collected when using a contact form can be seen from the respective contact form. These data are stored and used exclusively for the purpose of responding to your request and/or contacting you and for the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request pursuant to Article 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Article 6(1)(b) GDPR. Your data will be deleted after your request has been finally processed. This is the case if it can be inferred from the circumstances that the relevant matter has been conclusively clarified and if there are no statutory retention obligations preventing deletion.

8.3 Applicant management / job board

We collect and process the personal data of applicants for the purpose of conducting the application procedure. Processing may also take place electronically. This is especially the case if an applicant submits corresponding application documents to us electronically, for example by email or via a web form on the website. If we conclude an employment or service contract with an applicant, the transmitted data will be stored for the purpose of handling the employment relationship in compliance with statutory provisions. If we do not conclude a contract with the applicant, the application documents will be automatically deleted six months after notification of the rejection decision, unless deletion is prevented by other legitimate interests on our part. Another legitimate interest in this sense is, for example, an obligation to provide evidence in proceedings under the German General Equal Treatment Act (AGG).

The legal basis for processing your data is Article 6(1)(b), 88 GDPR and applicable national employment and data protection laws.

9. Newsletter distribution

9.1 Marketing newsletter

Our website offers you the possibility to subscribe to our company newsletter. Which personal data are transmitted to us when ordering the newsletter results from the input form used for this purpose.

We inform our customers and business partners at regular intervals by means of a newsletter about our offers. In principle, you can only receive our company’s newsletter if:

you have a valid email address, and

you have registered for newsletter distribution.

For legal reasons, a confirmation email is sent to the email address entered for the first time for newsletter distribution using the double opt-in procedure. This confirmation email serves to verify whether you, as the owner of the email address, have authorized receipt of the newsletter.

When registering for the newsletter, we also store the IP address assigned by your internet service provider (ISP) of the IT system you used at the time of registration as well as the date and time of registration. The collection of this data is necessary in order to be able to trace possible misuse of your email address at a later time and therefore serves our legal protection.

The personal data collected as part of a newsletter registration will be used exclusively for sending our newsletter. Furthermore, newsletter subscribers may be informed by email if this is necessary for the operation of the newsletter service or for registration relating to it, as may be the case in the event of changes to the newsletter offering or changes to technical conditions. The personal data collected as part of the newsletter service will not be passed on to third parties. You can cancel your subscription to our newsletter at any time. You can revoke your consent to the storage of personal data that you have given us for newsletter distribution at any time. For the purpose of revoking consent, each newsletter contains a corresponding link. Furthermore, you can also unsubscribe from the newsletter at any time directly on our website or notify us of this in another way.

The legal basis for data processing for the purpose of newsletter distribution is Article 6(1)(a) GDPR.

9.2 Mailchimp

Our email newsletters are sent via the technical service provider Intuit Inc., The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA, to whom we transmit the data you provided when subscribing to the newsletter. This transfer takes place within the scope of processing on our behalf by MailChimp. Please note that your data are generally transferred to a MailChimp server in the USA and stored there.

MailChimp uses this information to send the newsletter and to statistically evaluate it on our behalf. For evaluation purposes, the emails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. This makes it possible to determine whether a newsletter message has been opened and which links may have been clicked. In addition, technical information is recorded (e.g., the time of retrieval, the IP address, the browser type and the operating system). These data are used exclusively for statistical analysis of newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to the interests of recipients.

The use of the service provider is based on Article 6(1)(f) GDPR and on a data processing agreement pursuant to Article 28 GDPR. The legal basis for processing your personal data in connection with the newsletter is your consent granted in the “double opt-in” procedure within the meaning of Article 6(1)(a) GDPR. Consent can be revoked at any time.

Furthermore, MailChimp may use these data itself on the basis of its own legitimate interest pursuant to Article 6(1)(f) GDPR in the needs-based design and optimization of the service and for market research purposes, for example to determine from which countries the recipients come. However, MailChimp does not use the data of our newsletter recipients to contact them itself or to pass them on to third parties.

If you wish to object to the data processing described, it is necessary to unsubscribe from the newsletter.

This US company is certified under the EU-U.S. Data Privacy Framework. There is therefore an adequacy decision pursuant to Article 45 GDPR, so that personal data may be transferred without further guarantees or additional measures.

You can view MailChimp’s privacy policy here: https://mailchimp.com/legal/privacy/

10. Our activities on social networks

In order to communicate with you on social networks and inform you about our services, we maintain our own pages on these platforms. If you visit one of our social media pages, we are jointly responsible with the provider of the respective social media platform for the processing operations triggered thereby, within the meaning of Article 26 GDPR.

We are not the original provider of these pages, but merely use them within the scope of the possibilities offered to us by the respective providers.

We therefore point out as a precaution that your data may also be processed outside the European Union or the European Economic Area. Use may therefore involve data protection risks for you, as the enforcement of your rights (e.g., to information, deletion, objection, etc.) may be more difficult and processing on social networks often takes place directly for advertising purposes or for analyzing user behavior by the providers, without us being able to influence this. If usage profiles are created by the provider, cookies are often used and/or usage behavior is assigned to the social network membership profile you created.

The described processing operations of personal data are carried out pursuant to Article 6(1)(f) GDPR on the basis of our legitimate interest and the legitimate interest of the respective provider to communicate with you in a contemporary manner and/or to inform you about our services. If you must give consent to data processing as a user to the respective providers, the legal basis is Article 6(1)(a) GDPR in conjunction with Article 7 GDPR.

Since we do not have access to the providers’ data, we point out that you are best able to assert your rights (e.g., to information, rectification, deletion, etc.) directly with the respective provider. Further information on the processing of your data on social networks is provided below for each social network provider we use:

10.1 Facebook

(Joint) controller for data processing in Europe:

Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Unless an objection is made, Meta (Facebook) may process content of adult users from the EU, such as photos, posts or comments, to train its own AI models. The legal basis is a legitimate interest pursuant to Article 6(1)(f) GDPR. As a company, we have no influence on this specific data processing by Meta. Users can object via an online form on the Meta platforms.

Privacy policy (Data Policy):

https://www.facebook.com/about/privacy

10.2 LinkedIn

(Joint) controller for data processing in Europe:

LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

Privacy policy:

https://www.linkedin.com/legal/privacy-policy

10.3 X (Twitter)

(Joint) controller for data processing in Europe:

Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland

Privacy policy:

https://twitter.com/de/privacy

Access to your data:

https://twitter.com/settings/your_twitter_data

10.4 XING (New Work SE)

(Joint) controller for data processing in Germany:

New Work SE, Am Strandkai 1, 20457 Hamburg, Germany

Privacy policy:

https://privacy.xing.com/de/datenschutzerklaerung

Information requests for XING members:

https://www.xing.com/settings/privacy/data/disclosure

10.5 YouTube

(Joint) controller for data processing in Europe:

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Privacy policy:

https://policies.google.com/privacy

11. Social media plugins

11.1 Facebook plugin

We have integrated components of Facebook on this website. Facebook is a social network.

A social network is a social meeting place operated on the internet, an online community that generally enables users to communicate with each other and interact in virtual space. A social network can serve as a platform for exchanging opinions and experiences or enables the internet community to provide personal or company-related information. Facebook enables users of the social network, among other things, to create private profiles, upload photos and connect via friend requests.

The operating company of Facebook is Meta Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the USA or Canada, the controller for the processing of personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Each time you access one of the individual pages of this website operated by us and on which a Facebook component (Facebook plugin) has been integrated, the internet browser on your IT system is automatically prompted by the respective Facebook component to download a representation of the corresponding Facebook component from Facebook. An overview of all Facebook plugins can be accessed at https://developers.facebook.com/docs/plugins/?locale=de_DE. As part of this technical procedure, Facebook receives knowledge of which specific subpage of our website you visited.

If you are logged into Facebook at the same time, Facebook recognizes with each call to our website and during the entire duration of your stay on our website which specific subpage you visit. This information is collected by the Facebook component and assigned by Facebook to your Facebook account. If you click one of the Facebook buttons integrated on our website, for example the “Like” button, or leave a comment, Facebook assigns this information to your personal Facebook user account and stores the personal data.

Facebook receives information via the Facebook component that you have visited our website whenever you are logged into Facebook at the time you access our website; this takes place regardless of whether you click the Facebook component or not. If you do not want such transmission of information to Facebook, you can prevent transmission by logging out of your Facebook account before accessing our website.

This US company is certified under the EU-U.S. Data Privacy Framework. There is therefore an adequacy decision pursuant to Article 45 GDPR, so that personal data may be transferred without further guarantees or additional measures.

Personal data are processed via the social media buttons only on the basis of your explicit consent pursuant to Article 6(1)(a) GDPR.

The data policy published by Facebook, which can be accessed at https://de-de.facebook.com/about/privacy/, provides information about the collection, processing and use of personal data by Facebook. It also explains which settings options Facebook offers to protect privacy. In addition, various applications are available that make it possible to suppress data transmission to Facebook. You can use such applications to prevent data transmission to Facebook.

11.2 LinkedIn plugin

We have integrated components of the LinkedIn Corporation on this website. LinkedIn is an internet-based social network that enables users to connect with existing business contacts and to make new business contacts.

The operating company of LinkedIn is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. For data protection matters outside the USA, LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible.

Each time you access our website equipped with a LinkedIn component (LinkedIn plugin), this component prompts your browser to download a corresponding display of the component from LinkedIn. Further information about the LinkedIn plugins can be accessed at https://developer.linkedin.com/plugins. As part of this technical procedure, LinkedIn receives knowledge of which specific subpage of our website you visited.

If you are logged into LinkedIn at the same time, LinkedIn recognizes with each call to our website and during the entire duration of your stay on our website which specific subpage you visit. This information is collected by the LinkedIn component and assigned by LinkedIn to your LinkedIn account. If you click a LinkedIn button integrated on our website, LinkedIn assigns this information to your personal LinkedIn user account and stores the personal data.

LinkedIn receives information via the LinkedIn component that you have visited our website whenever you are logged into LinkedIn at the time you access our website; this takes place regardless of whether you click the LinkedIn component or not. If you do not want such transmission of information to LinkedIn, you can prevent transmission by logging out of your LinkedIn account before accessing our website.

As part of processing via LinkedIn, data may be transferred to the USA and Singapore. This US company is certified under the EU-U.S. Data Privacy Framework. There is therefore an adequacy decision pursuant to Article 45 GDPR, so that personal data may be transferred without further guarantees or additional measures. In addition, the security of transfers is regularly safeguarded by so-called standard contractual clauses, which ensure that the processing of personal data is subject to a level of security equivalent to that of the GDPR. If the standard contractual clauses are not sufficient to ensure an adequate level of security, consent pursuant to Article 49(1)(a) GDPR will be obtained from you.

Personal data are processed via the social media buttons only on the basis of your explicit consent pursuant to Article 6(1)(a) GDPR.

LinkedIn offers the possibility to unsubscribe from email messages, SMS messages and targeted ads and to manage ad settings at https://www.linkedin.com/psettings/guest-controls. LinkedIn also uses partners such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua and Lotame, which may set cookies. Such cookies can be rejected at https://www.linkedin.com/legal/cookie-policy. LinkedIn’s applicable privacy policy is available at https://www.linkedin.com/legal/privacy-policy. LinkedIn’s cookie policy is available at https://www.linkedin.com/legal/cookie-policy.

11.3 X plugin (Twitter plugin)

We have integrated components of X (formerly Twitter) on this website. X is a multilingual, publicly accessible microblogging service on which users can publish and disseminate so-called tweets, i.e., short messages limited to 140 characters. These short messages are available to everyone, including persons who are not registered with X. However, tweets are also displayed to so-called followers of the respective user. Followers are other X users who follow a user’s tweets. Furthermore, X enables addressing a broad public via hashtags, links or retweets.

The operating company of X is X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.

Each time you access one of the individual pages of this website operated by us and on which an X component (Twitter button) has been integrated, the internet browser on your IT system is automatically prompted by the respective X component to download a display of the corresponding X component from X. Further information about the Twitter buttons is available at https://about.twitter.com/de/resources/buttons. As part of this technical procedure, X receives knowledge of which specific subpage of our website you visited. The purpose of integrating the X component is to enable our users to disseminate the content of this website, to make this website known in the digital world and to increase our visitor numbers.

If you are logged into X at the same time, X recognizes with each call to our website and during the entire duration of your stay on our website which specific subpage you visit. This information is collected by the X component and assigned by X to your X account. If you click one of the Twitter buttons integrated on our website, the data and information transmitted thereby are assigned to your personal X user account and stored and processed by X.

X receives information via the X component that you have visited our website whenever you are logged into X at the time you access our website; this takes place regardless of whether you click the X component or not. If you do not want such transmission of information to X, you can prevent transmission by logging out of your X account before accessing our website.

Personal data are processed via the social media buttons only on the basis of your explicit consent pursuant to Article 6(1)(a) GDPR.

X’s applicable privacy policy is available at https://twitter.com/privacy?lang=de.

11.4 XING plugin

We have integrated components of XING on this website. XING is an internet-based social network that enables users to connect with existing business contacts and to make new business contacts. Individual users can create a personal profile on XING. Companies can, for example, create company profiles or publish job offers on XING.

The operating company of XING is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany.

Each time you access one of the individual pages of this website operated by us and on which a XING component (XING plugin) has been integrated, the internet browser on your IT system is automatically prompted by the respective XING component to download a display of the corresponding XING component from XING. Further information about the XING plugins can be accessed at https://dev.xing.com/plugins. As part of this technical procedure, XING receives knowledge of which specific subpage of our website you visited.

If you are logged into XING at the same time, XING recognizes with each call to our website and during the entire duration of your stay on our website which specific subpage you visit. This information is collected by the XING component and assigned by XING to your XING account. If you click one of the XING buttons integrated on our website, for example the “Share” button, XING assigns this information to your personal XING user account and stores the personal data.

XING receives information via the XING component that you have visited our website whenever you are logged into XING at the time you access our website; this takes place regardless of whether you click the XING component or not. If you do not want such transmission of information to XING, you can prevent transmission by logging out of your XING account before accessing our website.

Personal data are processed via the social media buttons only on the basis of your explicit consent pursuant to Article 6(1)(a) GDPR.

The data protection provisions published by XING, which can be accessed at https://www.xing.com/privacy, provide information about the collection, processing and use of personal data by XING. In addition, XING has published data protection information for the XING share button at https://dev.xing.com/plugins/share_button/privacy_policy#lang-de.

11.5 YouTube plugin

We have integrated components of YouTube on this website. YouTube is an internet video portal that allows video publishers to post video clips and other videos free of charge and allows other users to view, rate and comment on them free of charge. YouTube permits the publication of all types of videos, which is why complete films and TV shows, music videos, trailers or videos created by users themselves can be accessed via the internet portal.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Each time you access one of the individual pages of this website operated by us and on which a YouTube component (YouTube plugin) has been integrated, the internet browser on your IT system is automatically prompted by the respective YouTube component to download a display of the corresponding YouTube component from YouTube. Further information about YouTube can be accessed at https://www.youtube.com/yt/about/de/. As part of this technical procedure, YouTube and Google receive knowledge of which specific subpage of our website you visited.

If you are logged into YouTube at the same time, YouTube recognizes, when accessing a subpage containing a YouTube plugin, which specific subpage of our website you visit. This information is collected by YouTube and Google and assigned to your YouTube account.

YouTube and Google receive information via the YouTube component that you have visited our website whenever you are logged into YouTube at the time you access our website; this takes place regardless of whether you click a YouTube video or not. If you do not want such transmission of information to YouTube and Google, you can prevent transmission by logging out of your YouTube account before accessing our website.

The use of YouTube is in the interest of convenient and easy use of our website. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR.

This US company is certified under the EU-U.S. Data Privacy Framework. There is therefore an adequacy decision pursuant to Article 45 GDPR, so that personal data may be transferred without further guarantees or additional measures.

Personal data are processed via the social media buttons only on the basis of your explicit consent pursuant to Article 6(1)(a) GDPR.

The privacy policy published by YouTube, which can be accessed at https://www.google.de/intl/de/policies/privacy/, provides information about the collection, processing and use of personal data by YouTube and Google.

12. Web analytics

12.1 Google Analytics 4 (GA4) – Additional information on Consent Mode, advanced implementation

Under the Digital Markets Act (DMA), Google is required to obtain users’ consent before Google processes user data for personalized advertising. Google meets this requirement with “Consent Mode”. Users are required to implement Consent Mode and thereby provide evidence that website visitors’ consent has been obtained.

Google offers two implementation modes: basic and advanced implementation.

We use the advanced implementation method of Google Consent Mode. If you consent to data processing in connection with the use of GA4 (see above), a connection to Google is established, Google Analytics cookies are set and the corresponding processing operations are carried out. If you refuse consent, no Google Analytics cookies are set. However, a unique “ping ID” is generated and transmitted to Google. The Google code is executed, whereby only limited user data are transmitted to Google, including, among other things, information such as:

IP address

Browser details

Visited URL

A personalized user ID is not assigned.

If you have consented to Google Analytics 4, Consent Mode, advanced implementation, the legal basis for processing personal data is Article 6(1)(a) GDPR. In addition, it is in our legitimate interest within the meaning of Article 6(1)(f) GDPR to use Google Analytics 4, Consent Mode, advanced implementation, to obtain conversion data without creating user profiles and thereby increase cost-effectiveness.

12.2 Google Analytics Universal

On our websites we use Google Analytics, a web analytics service provided by Google Ireland Limited (https://www.google.de/intl/de/about/), Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). In this context, pseudonymized usage profiles are created and cookies are used (see section “Cookies”). The information generated by the cookie about your use of this website, such as

browser type/version,

operating system used,

referrer URL (the previously visited page),

host name of the accessing computer (IP address), and

time of the server request,

is transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website usage and internet usage for market research purposes and for the needs-based design of these websites. This information may also be transmitted to third parties where required by law or where such third parties process the data on behalf of Google. Under no circumstances will your IP address be merged with other Google data. IP addresses are anonymized so that assignment is not possible (IP masking).

You can prevent the installation of cookies by setting your browser software accordingly; however, we point out that in this case you may not be able to use all functions of this website to their full extent.

These processing operations are carried out only if you have given your explicit consent pursuant to Article 6(1)(a) GDPR.

You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).

Google’s parent company, Google LLC, as a US company, is certified under the EU-U.S. Data Privacy Framework. There is therefore an adequacy decision pursuant to Article 45 GDPR, so that personal data may be transferred without further guarantees or additional measures.

You can view Google Analytics’ privacy policy at: https://support.google.com/analytics/answer/6004245?hl=de.

12.3 Google Analytics Remarketing

We have integrated Google Remarketing services on this website. The operating company of Google Remarketing services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Remarketing is a Google Ads function that enables a company to display advertising to internet users who have previously visited the company’s website. Integrating Google Remarketing therefore allows a company to create user-related advertising and thus display interest-relevant ads to the internet user.

The purpose of Google Remarketing is to display interest-relevant advertising. Google Remarketing enables us to display ads via the Google advertising network or on other websites that are tailored to the individual needs and interests of internet users.

Google Remarketing places a cookie on the data subject’s IT system. By setting the cookie, Google is enabled to recognize visitors to our website if they subsequently access websites that are also members of the Google advertising network. Each time a website on which the Google Remarketing service has been integrated is accessed, your internet browser automatically identifies itself to Google. As part of this technical procedure, Google receives knowledge of personal data, such as your IP address or browsing behavior, which Google uses, among other things, to display interest-relevant advertising.

Using the cookie, personal information, such as the websites you visited, is stored. Each time you visit our websites, personal data, including your IP address, are therefore transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may pass on these personal data collected via the technical procedure to third parties under certain circumstances.

These processing operations are carried out only if you have given your explicit consent pursuant to Article 6(1)(a) GDPR.

Google’s parent company, Google LLC, as a US company, is certified under the EU-U.S. Data Privacy Framework. There is therefore an adequacy decision pursuant to Article 45 GDPR, so that personal data may be transferred without further guarantees or additional measures.

You can view Google Analytics Remarketing’s privacy policy at: https://www.google.de/intl/de/policies/privacy/.

12.4 Matomo

We have integrated the Matomo component from the provider InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, on this website. Matomo is a software tool for web analysis, i.e., for collecting, gathering and evaluating data about the behavior of visitors to websites. Among other things, it records data about which website a data subject came from to reach a website (so-called referrer), which subpages of the website were accessed, or how often and for how long a subpage was viewed. This is used to optimize the website and to conduct a cost-benefit analysis of internet advertising.

The software is operated on the server of the controller; the log files relevant under data protection law are stored exclusively on this server.

Matomo places a cookie on your IT system. By setting the cookie, we are enabled to analyze the use of our website. Each time you access one of the individual pages of this website, the internet browser on your IT system is automatically prompted by the Matomo component to transmit data to our server for the purpose of online analysis. As part of this technical procedure, we receive knowledge of personal data, such as the data subject’s IP address, which helps us, among other things, to trace the origin of visitors and clicks.

Using the cookie, personal information, such as the access time, the place from which access originated and the frequency of visits to our website, is stored. Each time you visit our websites, these personal data, including the IP address of your internet connection, are transmitted to our server. These personal data are stored by us. We do not pass these personal data on to third parties.

These processing operations are carried out only if you have given your explicit consent pursuant to Article 6(1)(a) GDPR.

You can view Matomo’s privacy policy at: https://matomo.org/privacy/.

13. Advertising

13.1 Google AdSense

We have integrated Google AdSense on this website. The operating company of the Google AdSense component is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google AdSense is an online service that enables the placement of advertising on third-party websites. Google AdSense is based on an algorithm that selects the ads displayed on third-party websites to match the content of the respective third-party site. Google AdSense enables interest-based targeting of internet users, which is implemented by generating individual user profiles.

The purpose of the Google AdSense component is the integration of ads on our website. Google AdSense places a cookie on your IT system. By setting the cookie, Alphabet Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA, is enabled to analyze the use of our website. Each time you access one of the individual pages of this website operated by us and on which a Google AdSense component has been integrated, the internet browser on your IT system is automatically prompted by the respective Google AdSense component to transmit data to Alphabet Inc. for the purposes of online advertising and the accounting of commissions. As part of this technical procedure, Alphabet Inc. receives knowledge of personal data, such as your IP address, which Alphabet Inc. uses, among other things, to trace the origin of visitors and clicks and subsequently to enable commission settlements.

Google AdSense also uses so-called tracking pixels. A tracking pixel is a miniature graphic embedded in websites to enable log file recording and log file analysis, which makes statistical evaluation possible. Using the embedded tracking pixel, Alphabet Inc. can recognize whether and when a website was opened by your IT system and which links were clicked by you. Tracking pixels are used, among other things, to evaluate the visitor flow of a website.

Via Google AdSense, personal data and information, which also includes the IP address and is necessary for recording and accounting for the displayed ads, are transmitted to Alphabet Inc. in the United States of America. These personal data are stored and processed in the United States of America. Alphabet Inc. may pass on these personal data collected via the technical procedure to third parties under certain circumstances.

These processing operations are carried out only if you have given your explicit consent pursuant to Article 6(1)(a) GDPR.

Google’s parent company, Google LLC, as a US company, is certified under the EU-U.S. Data Privacy Framework. There is therefore an adequacy decision pursuant to Article 45 GDPR, so that personal data may be transferred without further guarantees or additional measures.

You can view Google AdSense’s privacy policy and further information at: https://www.google.de/intl/de/adsense/start/ and https://www.google.com/policies/technologies/ads/.

14. Your rights as a data subject

14.1 Right to confirmation

You have the right to obtain from us confirmation as to whether personal data concerning you are being processed.

14.2 Right of access (Article 15 GDPR)

You have the right to obtain from us at any time, free of charge, information about the personal data stored about you and a copy of such data in accordance with the statutory provisions.

14.3 Right to rectification (Article 16 GDPR)

You have the right to request rectification of inaccurate personal data concerning you. Furthermore, taking into account the purposes of processing, you have the right to request completion of incomplete personal data.

14.4 Erasure (Article 17 GDPR)

You have the right to request that we erase personal data concerning you without undue delay, provided that one of the reasons provided by law applies and insofar as the processing or storage is not necessary.

14.5 Restriction of processing (Article 18 GDPR)

You have the right to request that we restrict processing if one of the legal requirements is met.

14.6 Data portability (Article 20 GDPR)

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another controller without hindrance from us, to whom the personal data have been provided, provided that the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

Furthermore, in exercising your right to data portability pursuant to Article 20(1) GDPR, you have the right to have the personal data transmitted directly from one controller to another, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.

14.7 Withdrawal of consent under data protection law

You have the right to withdraw consent to the processing of personal data at any time with effect for the future.

14.8 Complaint to a supervisory authority

You have the right to lodge a complaint with a supervisory authority responsible for data protection about our processing of personal data.

15. Routine storage, erasure and blocking of personal data

We process and store your personal data only for the period necessary to achieve the purpose of storage or insofar as this is provided for by the legal provisions to which our company is subject.

If the purpose of storage no longer applies or a statutory retention period expires, the personal data will be routinely blocked or erased in accordance with statutory provisions.

16. Duration of storage of personal data

The criterion for the duration of storage of personal data is the respective statutory retention period. After expiry of the period, the corresponding data are routinely erased, provided that they are no longer required for contract fulfillment or contract initiation.

17. Validity and amendment of this Privacy Policy

This Privacy Policy is currently valid and is dated: January 2026.

Due to the further development of our websites and offerings or due to changed legal or official requirements, it may become necessary to amend this Privacy Policy. The current Privacy Policy can be accessed and printed at any time on the website at “https://www.dekom.com/pl-pl/impressum-datenschutz/”.