Data Protection Notice of Syntegon Technology GmbH

Data protection notice of Syntegon Technology GmbH for used Microsoft 365 modules (M 365)

1. Data Protection Notice
Syntegon Technology GmbH (hereinafter "Syntegon" or "We" or "Us") welcomes you to our internet pages and mobile applications (together also referred to as “Online Offers”). We thank you for your interest in our company and our products.

2. Syntegon respects your privacy
The protection of your privacy throughout the course of processing personal data as well as the security of all business data is an important concern to us. We process personal data that was gathered during your visit of our Online Offers confidentially and only in accordance with statutory regulations.

Data protection and information security are included in our corporate policy.

3. Controller
Syntegon is the controller responsible for the processing of your data; exceptions are outlined in this data protection notice.

Our contact details are as follows:

Syntegon Technology GmbH
Mercedesstraße 41
70372 Stuttgart
Germany

E-Mail: info@syntegon.com
Phone: +49 71 51 14-0

4. Collection, processing and usage of personal data
4.1. Processed categories of data
The following categories of data are processed:

• Communication data (company, name, telephone, e-mail, address, IP address)
• Contractual master data (e.g. contractual relationships, contractual or pro-duct interest)
• Online usage and interaction data (e.g. pages and content viewed, date and time of visits, interactions with links, downloads and forms, referral source, cookie or session identifiers);
• Marketing and communication interaction data (e.g. marketing preferences and consent status, delivery, opening and click behaviour regarding e-mails, interactions with personalized links and landing pages).

4.2. Principles
Personal data consists of all information related to an identified or identifiable natural person, this includes, e.g. names, addresses, phone numbers, email addresses, contractual master data, contract accounting and payment data, which is an expression of a person's identity.

We collect, process and use personal data (including IP addresses) only when there is either a statutory legal basis to do so or if you have given your consent to the processing or use of personal data concerning this matter, e.g. by means of registration.

4.3. Processing purposes and legal basis
We as well as the service providers commissioned by us process your personal data for the following processing purposes:

4.3.1 Provision of these Online Offers
(Legal basis: Legitimate interest on our part in direct marketing as long as this occurs in accordance with data protection and competition law).

4.3.2 Resolving service disruptions as well as for security reasons.
(Legal bases: Fulfillment of our legal obligations within the scope of data security and legitimate interest in resolving service disruptions as well as in the protection of our offers).

4.3.3 Self-promotion and promotion by others as well as market research and reach analysis done within the scope statutorily permitted or based on consent
(Legal bases: Consent / justified interest on our part in direct marketing if in accordance with data protection and competition law).

4.3.4 Product or customer surveys by postal mail
(Legal basis: Legitimate interest in the improvement of products / services). Note: In case we involve a market research institute for the purpose of surveys, it shall only act based on our instructions and follow our directives.

4.3.5 Safeguarding and defending our rights.
(Legal basis: Legitimate interest on our part for safeguarding and defending our rights).

4.3.6 Other purposes

• Sending information material if requested via our websites or social media channels
• Sending quotes if requested via our websites or social media channels
• Answering general inquiries made on our websites or social media channels
  (Legal basis: Implementation of pre-contractual measures at the request of the person concerned Art. 6 para. 1 lit. b) GDPR).

4.4. Log files
Each time you use the internet, your browser is transmitting certain information which we store in so-called log files.

We store log files to determine service disruptions and for security reasons (e.g., to investigate attack attempts) for a period of [30-60 days] and delete them afterwards. Log files which need to be maintained for evidence purposes are excluded from deletion until the respective incident is resolved and may, on a case-by-case basis, be passed on to investigating authorities.

Log files are also used for analysis purposes (without the IP address or without the complete IP address) see module “Advertisements and/or market research (including web analysis, no customer surveys)”.

In log files, the following information is saved:

• IP address (internet protocol address) of the terminal device used to access the Online Offer;
• Internet address of the website from which the Online Offer is accessed (so-called URL of origin or referrer URL);
• Name of the service provider which was used to access the Online Offer;
• Name of the files or information accessed;
• Date and time as well as duration of recalling the data;
• Amount of data transferred;
• Operating system and information on the internet browser used, including add-ons installed (e.g., Flash Player);
• http status code (e.g., “Request successful” or “File requested not found”).

4.5. Children
This Online Offer is not meant for children under 16 years of age.

4.6.Data transfer

4.6.1. Data transfer to other controllers
Principally, your personal data is forwarded to other controllers only if required for the fulfillment of a contractual obligation, or if we ourselves, or a third party, have a legitimate interest in the data transfer, or if you have given your consent. Particulars on the legal basis and the recipients or categories of recipients can be found in the Section – Processing purposes and legal basis.

Additionally, data may be transferred to other controllers when we are obliged to do so due to statutory regulations or enforceable administrative or judicial orders.

4.6.2.Service providers (general)
We involve external service providers with tasks such as sales and marketing services, programming and data hosting. We have chosen those service providers carefully and monitor them on a regular basis, especially regarding their diligent handling of and protection of the data that they store. All service providers are obliged to maintain confidentiality and to comply to the statutory provisions.

4.7. Transfer to recipients outside the EEA
We might transfer personal data to recipients located outside the EEA into so-called third countries. In such cases, prior to the transfer we ensure that either the data recipient provides an appropriate level of data protection or that you have consented to the transfer.

4.8. Duration of storage; retention periods
Principally, we store your data for as long as it is necessary to render our Online Offers and connected services or for as long as we have a legitimate interest in storing the data (e.g. we might still have a legitimate interest in postal mail marketing after fulfillment of our contractual obligations). In all other cases we delete your personal data with the exception of data we are obliged to store for the fulfillment of legal obligations (e.g. due to retention periods under the tax and commercial codes we are obliged to have documents such as contracts and invoices available for a certain period of time).

Tracking is possible using different technologies. In particular, we process information using pixel technology and/or during log file analysis.

5.2. Categories
We distinguish between cookies that are mandatorily required for the technical functions of the online service and such cookies and tracking mechanisms that are not mandatorily required for the technical function of the online service.

It is generally possible to use the online service without any cookies that serve non-technical purposes.

5.2.1 Technically required cookies
By technically required cookies we mean cookies without those the technical provision of the online service cannot be ensured. These include e.g. cookies that store data to ensure smooth reproduction of video or audio footage.
Such cookies will be deleted when you leave the website.

5.2.2. Cookies and tracking mechanisms that are technically not required
We only use such cookies and tracking mechanisms if you have given us your prior consent in each case. We distinguish between two sub-categories with regard to these cookies and tracking mechanisms:

5.3. Convenience cookies
These cookies facilitate operation and thus allow you to browse our online service more comfortably; e.g. your language settings may be included in these cookies.

5.4. Marketing cookies and tracking mechanisms
By using marketing cookies and tracking mechanisms we and our partners are able to show you offerings based on your interests, resulting from an analysis of your user behaviour:

- Statistics:
By using statistical tools, we measure e.g. the number of your page views.
- Conversion tracking:
Our conversion tracking partners place a cookie on your computer (“conversion cookie”) if you accessed our website via an advertisement of the respective partner. Normally these cookies are no longer valid after 30 days. If you visit certain pages of our website and the cookie has not yet expired, we and the relevant conversion partner can recognize that a certain user clicked on the advertisement and thereby was redirected to our website. The information obtained by means of the conversion cookie serves the purpose of compiling conversion statistics and recording the total number of users who clicked on the respective advertisement and were redirected to a website with a conversion tracking tag.
- Retargeting:
These tools create user profiles by means of advertising cookies or third-party advertising cook-ies so called "web beacons" (in-visible graphics that are also called pixels or tracking pixels), or by means of comparable technologies. These are used for interest-based advertising and to control the frequency with which the user looks at cer-tain advertisements. The rele-vant provider is the controller responsible for the processing of data in connection with the tool. The providers of the tools might disclose information also to third parties for the purposes mentioned above. Please note the data protection notices of the relevant provider in this con-text.

Please note that using the tools might include transfer of your data to recipients outside of the EEA where there is no adequate level of data protection pursuant to the GDPR (e.g. the USA). For more details in this respect please refer to the following description of the individual marketing tools.

5.4.1. Google Analytics
We use Google Analytics on our website, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter: "Google"). In this context, Google acts as a processor. We have entered into a corresponding data processing agreement with Google based on the EU-U.S. Data Privacy Framework as well as (alternatively) the EU Standard Contractual Clauses pursuant to Art. 28 GDPR.

Google Analytics allows us to analyze how users interact with the content provided on the website, thereby helping us identify what works well and what does not. Based on this, we can optimize our offerings on the website. When Google Analytics is used, the following data is collected and transmitted to Google in the USA: device and browser data (hostname, browser type, referrer, language), IP address, and the respective user interaction on the website (e.g., which page a user visits, which products the user selects and purchases). In addition, a random, pseudonymous ID is assigned to a user via a cookie, to which the aforementioned information is linked. This is usually a cookie ID. It is linked to the identifier of the cookie set by Google Analytics for the specific device. Furthermore, we set a User ID for cross-device tracking. We have also activated the IP address anonymization function. This means that as soon as the IP packet arrives at Google's servers, the data is fully anonymized at Google.

We also use the "demographic characteristics" function of Google Analytics. This allows reports to be created that contain statements about the age, gender, and interests of visitors. This data comes from interest-based advertising by Google as well as from visitor data from third-party providers. This data cannot be attributed to a specific person.
Google offers you the option to download and install a browser add-on to disable Google Analytics, which can be found here:
https://tools.google.com/dlpage/gaoptout?hl=en

For more information on terms of use and data protection, please visit: http://www.google.com/analytics/terms/en.html or https://www.google.com/intl/en/policies/ and https://policies.google.com/technologies/partner-sites.

5.4.2. Google Tag Manager
In connection with Google Analytics and Google Ad Services, we also use Google Tag Manager, provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter: "Google"). In this context, Google acts as a processor. We have entered into a corresponding data processing agreement with Google based on the EU-U.S. Data Privacy Framework as well as (alternatively) the EU Standard Contractual Clauses pursuant to Art. 28 GDPR.

This solution enables the technical integration of Google Analytics and Google Ads on the website. Google Tag Manager functions like a container in which the web analytics and marketing tools to be deployed on the website are tagged and stored using so-called tags. A tag is a code fragment that determines which data may be collected under which conditions by the tools used. You can find Google's privacy notices for this tool here: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.

5.4.3. Google Ad Services Conversion / Remarketing
We use the remarketing and conversion tracking function of Google Ads on our website, a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter: "Google"). In this context, Google acts as a processor. We have entered into a corresponding data processing agreement with Google based on the EU-U.S. Data Privacy Framework as well as (alternatively) the EU Standard Contractual Clauses pursuant to Art. 28 GDPR.

The remarketing function serves to present interest-based advertisements to website visitors within the Google advertising network. The conversion tracking function, in turn, allows us to measure how effective the ads we place and that website visitors click on are, and whether they lead to profitable activities on the website, such as purchases or registrations.

When Google Ad Services is used, the following data is collected and transmitted to Google in the USA: device and browser data (hostname, browser type, referrer, language), IP address, and the respective user interaction on our website as well as on other websites where our advertisements are placed (e.g., which page a user visits, which products the user selects and purchases, which ads a user clicks on). In addition, a random, pseudonymous ID is assigned to a user via a cookie, to which the aforementioned information is linked.

In connection with Google Ads, we also use the "Google Ads Store Sales" tool. This tool is used to evaluate the extent to which online advertising expenditure affects sales in physical stores. We do not make use of the optional option to upload sales data from physical stores (e.g., customer name, address) to Google Ads.

Furthermore, as part of our use of the Google AdWords service, we use so-called conversion tracking. If you click on an ad placed by Google, a cookie for conversion tracking will be stored on your computer/device. These cookies expire after 30 days (our setting with Google) or a maximum of 90 days (according to Google itself), do not contain personal data, and therefore are not used for personal identification. The information obtained with the help of the conversion cookie is used to create conversion statistics.

For this purpose, we have set up Enhanced Conversions.

Enhanced Conversions is a feature that can improve the accuracy of conversion tracking while protecting user privacy by supplementing existing conversion tags with hashed first-party conversion data from the website. Hashing the first-party data before sending it to Google Ads ensures data protection, as personal information (here: email address) is converted into a hashed/pseudonymized (SHA256) string.

Google offers you the option to download and install a browser add-on to disable Google Analytics, which can be found here:
https://tools.google.com/dlpage/gaoptout?hl=en

Information on data protection at Google Ads is available at: https://ads.google.com/intl/en_us/home/faq/gdpr/

5.4.4. Google Marketing Platform
Our website also uses additional services from the Google Marketing Platform. These services use cookies to display ads relevant to users, improve campaign performance reports, or avoid showing a user the same ad multiple times. We use the following tools within the Google Marketing Platform:

Google Campaign Manager 360: This solution is part of the Google Marketing Platform and serves as an ad management and measurement tool for advertisers and agencies, enabling centralized management of digital campaigns for websites and mobile devices. This includes running advertising campaigns, measuring ad placements, and verifying correct ad delivery.

Search Ads 360: This tool is part of the Google Marketing Platform and is used for the centralized management of marketing campaigns across different search engines.

Display & Video 360: We use this Google tool to be able to present advertisements tailored to your interests. For this purpose, your browser stores cookies that allow recognition within the Google network. This enables ads to be presented to you based on your browsing behavior. This tool is also used to evaluate previously delivered advertisements and thus optimize future advertising measures.

Furthermore, as part of our use of the Google Marketing Platform, we use so-called conversion tracking. If you click on an ad placed by Google, a cookie for conversion tracking will be stored on your computer/device. These cookies expire after 30 days (Search Ads 360) and a maximum of 540 days (Campaign Manager and Display & Video 360), do not contain personal data, and therefore are not used for personal identification. The information obtained with the help of the conversion cookie is used to create conversion statistics.

For this purpose, we have set up Enhanced Conversions.

Enhanced Conversions is a feature that can improve the accuracy of conversion tracking while protecting user privacy by supplementing existing conversion tags with hashed first-party conversion data from the website. Hashing the first-party data before sending it to Google Ads ensures data protection, as personal information (here: email address) is converted into a hashed/pseudonymized (SHA256) string.

5.4.5. Google Ads Customer Match
We use Google Ads Customer Match lists as part of our Google advertising activities. We use Google Ads Customer Match with your consent or based on our legitimate interest pursuant to Art. 6(1)(a) + (f) GDPR. To use Customer Match, lists containing encrypted user data (e.g., names, email addresses, addresses, Mobile Advertiser ID, customer-specific identifiers) are uploaded to Google. Google then compares whether the transmitted user data matches existing Google customers. This allows target groups to be created, which can be used for the targeting of ads/campaigns. After the Customer Match lists are created, the encrypted customer data is automatically deleted again. As a result, providers do not gain access to new addresses.

The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as processor. We have entered into a data processing agreement with Google for this purpose. Google LLC, headquartered in California, USA, has joined the EU-U.S. Data Privacy Framework and is certified accordingly.

You can object to this use by preventing the installation of cookies through a corresponding setting in your browser software (opt-out option). You can also customize personalized advertising in your Google account under the "Privacy" tab according to your preferences. To do this, log in to Google and go to "Manage Google Account" in the "Data & Privacy" section.

You can find out more about how Google uses and processes your data overall here:
https://policies.google.com/technologies/partner-sites

5.4.6. Microsoft Advertising
We use Microsoft Advertising on our website, an advertising service provided by Microsoft Ireland Operations Ltd., Ireland (hereinafter: "Microsoft"), and, as part of Microsoft Advertising, so-called conversion tracking. In this context, Microsoft acts as an independent controller.

This solution enables us to place advertisements and track user actions in relation to these advertisements (conversion tracking). To this end, Microsoft sets a cookie when you click on an ad placed via Microsoft Advertising for which the advertiser has opted for conversion tracking. The cookie collects the following data and forwards it to Microsoft: user ID, ad data, i.e., data on access to and use of placed ads. The Microsoft cookie expires after 30 days. If you visit certain pages of our website while the cookie has not yet expired, Microsoft and we can recognize that you clicked on the ad and were redirected to that page. Each advertiser receives a different cookie. Therefore, cookies cannot be tracked across advertisers' websites.

The parent company in the USA, Microsoft Corporation, headquartered in Redmond, Washington, USA, has joined the EU-U.S. Data Privacy Framework and is certified accordingly.

Further information on data protection and the cookies used by Microsoft and Microsoft Advertising can be found on Microsoft's website:
https://privacy.microsoft.com/en-us/privacystatement

5.4.7. Facebook / Meta Custom Audiences Pixel
In order to present interest-based advertisements to visitors of our website during their visit to Facebook, we use the Custom Audiences Pixel provided by Meta Platforms Ireland Ltd., Ireland (hereinafter "Facebook"). To this end, we have implemented a Facebook pixel on our website, which links your visit to our website to your personal Facebook user account.

Facebook acts as a processor pursuant to Art. 28 GDPR insofar as data is processed within the scope of using Facebook Business Tools for the presentation of interest-based advertisements and reach measurement. Facebook also acts jointly with us as a controller insofar as data is processed within the scope of using Facebook Business Tools for ad targeting and improving ad delivery. We and Facebook have entered into a corresponding joint controller agreement pursuant to Art. 26 GDPR. For further information on this agreement, you can contact us using the contact options provided above.

The data collected about you through the pixel includes:

• Pages you have viewed
• Use of a Facebook advertisement
• pages, content and landing pages viewed;
• date and time of website visits and interactions;
• clicks on links, downloads and interactions with forms;
• the referring website or source of a visit;
• browser, device and technical information;
• cookie, visitor or session identifiers; and
• marketing preferences and consent status.

Furthermore, as part of our use of the Custom Audiences service, we use so-called "conversion tracking." If you click on an ad placed by Meta, a cookie for "conversion tracking" will be stored on your computer/device. These cookies expire after 90 days, do not contain personal data, and therefore are not used for personal identification. The information obtained with the help of the conversion cookie is used to create conversion statistics.

For this purpose, we have set up "Advanced Matching."

"Advanced Matching" is a feature that can improve the accuracy of conversion tracking while protecting user privacy by supplementing existing conversion tags with hashed first-party conversion data from the website. Hashing the first-party data before sending it to Meta ensures data protection, as personal information (here: email address) is converted into a hashed/pseudonymized (SHA256) string.

In addition, we use Custom Audiences from Meta customer lists to reach people who have already shown interest in our products. For this purpose, we use identifying information such as email addresses, phone numbers, and addresses. Meta matches the hashed information with existing profiles in Meta technologies. This service allows us to show individually tailored, interest-based advertising on Facebook to specific groups of pseudonymized visitors to our website who also use Facebook. Using the Facebook Custom Audience pixel described above, Meta automatically checks whether you have a Facebook cookie stored. The Facebook cookie is used to automatically determine whether you belong to the target group relevant to us. If, based on your interests or activities on our website, you belong to the target group, corresponding interest-based ads from us may be displayed to you on Facebook (retargeting). During this process, you are not personally identified by us or by Facebook through the data matching.

The data may be forwarded by Facebook to its parent company, Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94304, USA. This company has joined the EU-U.S. Data Privacy Framework and is certified accordingly.

For more information on the collection and use of data by Facebook, as well as your related rights and options for protecting your privacy, please refer to Facebook's privacy policy at https://www.facebook.com/about/privacy/.

5.4.8. HubSpot
Provider: HubSpot Germany GmbH, Unter den Linden 26, 10117 Berlin, Germany
Function: Managing and analyzing user convenience and behavior (page views, number and timing of sessions, downloads, A/B testing, browser login and managing login data). Further information on the handling of transmitted data can be found in HubSpot's privacy policy: https://www.hubspot.com/

5.4.9. LinkedIn Insight Tag
We use the conversion tracking technology and retargeting function of LinkedIn Corporation, 1000 West Maude Avenue, Sunnyvale, CA 94085, USA, on our website. This technology allows personalized advertisements to be displayed to visitors of this website on LinkedIn. Anonymous reports on ad performance as well as information on website interaction can also be generated. This is made possible by embedding the LinkedIn Insight Tag on this website, which establishes a connection to the LinkedIn server when this website is visited and the visitor is simultaneously logged into their LinkedIn account.

You can find more information on data collection and use, as well as options and rights for protecting your privacy, in LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy. If you are logged into LinkedIn, you can disable data collection at any time using the following link:
https://www.linkedin.com/psettings/enhanced-advertising.

5.4.10. Microsoft Clarity
Provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
We work with Microsoft Clarity to record your usage behavior and interactions with our website. Behavioral metrics, heatmaps, and session recordings are used to improve and market our products/services. Usage data is collected using first-party and third-party cookies as well as other tracking technologies. This serves to analyze the popularity of our products/services as well as online activities. In addition, we use this information to optimize our website, for fraud prevention and security purposes, as well as for advertising purposes. Further information on data processing by Microsoft can be found in Microsoft's privacy policy.

5.4.11 Microsoft Dynamics 365 Customer Insights – Journeys

Provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (“Microsoft”).

Function: We use Microsoft Dynamics 365 Customer Insights – Journeys for the management, implementation and evaluation of marketing communications, web forms, landing pages and related marketing activities.

Subject to your consent via our cookie settings, Microsoft Dynamics 365 Customer Insights – Journeys may use cookies, comparable technologies and tracking scripts to collect information about your interaction with our Online Offers. This may include, in particular:

Initially, website interactions may be collected using pseudonymous identifiers. An interaction may be assigned to an existing contact profile where such assignment is possible, in particular where you submit a Dynamics form, access our Online Offers through an individualized link in a marketing e-mail, or otherwise provide information that enables us to associate the interaction with you.

We use this information to evaluate the performance of our Online Offers and marketing communications, to understand interest in particular content, to manage communication preferences, to create target groups and segments, and, where applicable, to initiate or personalize marketing communications and customer journeys.

Where we send marketing e-mails using Microsoft Dynamics 365 Customer Insights – Journeys, we may also process information on delivery, opening and click behaviour. For this purpose, we may use tracking pixels or comparable technologies and individualized links. Individualized links can enable us to associate visits to our Online Offers, viewed content, submitted forms and other interactions with the respective e-mail recipient.

The use of non-essential cookies and comparable tracking technologies, as well as the processing of website and e-mail interaction data for personalized marketing purposes, is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time with effect for the future via our privacy settings. You may also unsubscribe from marketing e-mails using the unsubscribe link included in each e-mail. The lawfulness of processing carried out before withdrawal remains unaffected.

Data submitted through a form are processed in order to handle your request or, where applicable, to take steps prior to entering into a contract. If you have separately consented to marketing communications, we may additionally use your contact details and interaction data for the marketing purposes described above.

Microsoft processes personal data on our behalf as a service provider. We have concluded an agreement on commissioned processing pursuant to Art. 28 GDPR with Microsoft.

Personal data may be transferred to recipients outside the EEA, including Microsoft Corporation in the United States. Where required, such transfers are safeguarded by appropriate transfer mechanisms, in particular the EU-U.S. Data Privacy Framework and/or the Standard Contractual Clauses adopted by the European Commission.

Further information on Microsoft’s processing of personal data is available at:
https://privacy.microsoft.com/en-us/privacystatement

5.5. Management of cookies and tracking mechanisms
You can manage your cookie and tracking mechanism settings in the browser and/or our privacy settings.

Note: The settings you have made refer only to the browser used in each case.

5.5.1. Deactivation of all cookies
If you wish to deactivate all cookies, please deactivate cookies in your browser settings. Please note that this may affect the functionality of the website.

5.5.2. Management of your settings with regard to cookies and tracking mechanisms not required technically
When visiting our websites, you will be asked in a cookie layer whether you consent to our using of any convenience cookies, marketing cookies or tracking mechanisms, respectively.

In our privacy settings, you may withdraw the consent with effect for the future or grant your consent at a later point in time.

6. YouTube
Our Online Offers use the YouTube video platform which is operated by YouTube, LLC, 901 Cherry Ave. San Bruno, CA 94066, USA (“YouTube”). YouTube is a platform which allows the playback of audio and video files.

When you access a respective site of our Online Offers that contains an embedded YouTube player, this creates a connection to YouTube so that the video or audio file can be transmitted and played back. In doing so, data is transferred to YouTube as a data controller. We are not responsible for the processing of such data by YouTube.

Additional information on the scope and purpose of collected data, on further processing and usage of data by YouTube, on your rights and the privacy options available to be chosen by you, can be found in YouTube's data protection notice.

7. Communication tools on social media platforms
We use on our social media platform (e.g. twitter) communication tools to process your messages sent via this social media platform and to offer you support.

When sending a message via our social media platform the message is processed to handle your query (and if necessary additional data, which we receive from the social media provider in connection with this message as your name or files).
In addition we can analyze these data in an aggregated and anonymized form in order to better understand how our social media platform is used.

We will forward the personal data you provide to the Syntegon legal entity responsible for the processing of your query (for example, in the event your query refers to a product that is distributed by another Syntegon legal entity). The legal basis for the processing of your data is our legitimate interest (Art. 6 para. 1 lit. f GDPR) or, if applicable, an existing contractual relationship (Art. 6 para. 1 lit. b GDPR). The processed personal data is deleted 180 days upon receipt of your message the latest.

By using social media, we offer comprehensive contact and information options, based on Art. 6 Para. 1 Sentence 1 Letter f DSGVO (EU GDPR). These social media services may collect personal data, e.g. via the user profile.

If you are already logged into a social network of your choice, this is carried out without another window being opened. As this transfer occurs directly, we do not obtain any knowledge of the data transferred.

What is transferred is the fact that you have launched the respective site. If you are simultaneously logged onto Meta & Co., this information will be assigned to your social media account and will thus be connected with you.

The best way to obtain information on the further use and storage of your personal data by Meta and Twitter, is to go directly to these social media companies.

8. External links
Our Online Offers may contain links to third party internet pages – by providers who are not related to us. Upon clicking on the link, we have no influence on the collecting, processing and use of personal data possibly transmitted by clicking on the link to the third party (such as the IP address or the URL of the site on which the link is located) as the conduct of third parties is naturally beyond our supervision. We do not assume responsibility for the processing of personal data by third parties.

9. Security
Our employees and the companies providing services on our behalf, are obliged to confidentiality and to compliance with the applicable data protection laws.

We take all necessary technical and organizational measures to ensure an appropriate level of security and to protect your data that are administrated by us especially from the risks of unintended or unlawful destruction, manipulation, loss, change or unauthorized disclosure or unauthorized access. Our security measures are, pursuant to technological progress, constantly being improved.

10. User rights
To enforce your rights, please use the details provided in the Contact section. In doing so, please ensure that an unambiguous identification of your person is possible.

Right to information and access:
You have the right to obtain confirmation from us about whether or not your personal data is being processed, and, if this is the case, access to your personal data.

Right to correction and deletion:
You have the right to obtain the rectification or completion of inaccurate personal data or deletion of your data as far as statutory requirements are fulfilled.

This does not apply to data which is necessary for billing or accounting purposes or which is subject to a statutory retention period. If access to such data is not required, however, its processing is restricted (see the following).

Restriction of processing:
You have the right to demand for – as far as statutory requirements are fulfilled – restriction of the processing of your data.

Data portability:
You are entitled to receive data that you have provided to us in a structured, commonly used and machine-readable format or – if technically feasible – to demand that we transfer those data to a third party.

Objection to direct marketing:
Additionally, you may object to the processing of your personal data for direct marketing purposes at any time. Please take into account that due to organizational reasons, there might be an overlap between your objection and the usage of your data within the scope of a campaign which is already running.

Objection to data processing based on the legal basis of “legitimate interest”:
In addition, you have the right to object to the processing of your personal data at any time, insofar as this is based on legitimate interest. We will then terminate the processing of your data, unless we demonstrate compelling legitimate grounds according to legal requirements which override your rights.

Withdrawal of consent:
In case you consented to the processing of your data, you have the right to revoke this consent at any time with effect for the future. The lawfulness of data processing prior to your withdrawal remains unchanged.

Right to lodge complaint with supervisory authority:
You have the right to lodge a complaint with a supervisory authority. You can appeal to the supervisory authority which is responsible for your place of residence or your state of residency or to the supervisory authority responsible for us. This is:

State Commissioner for Data Protection and Freedom of Information

Address:

Heilbronner Straße 35
70191 Stuttgart

Postal address:
P.O. Box 10 29 32
70025 Stuttgart
Germany

Phone: +49 711 / 615541-0

E-Mail: poststelle@lfdi.bwl.de

11. Changes to the Data Protection Notice
We reserve the right to change our security and data protection measures. In such cases, we will amend our data protection notice accordingly. Please, therefore, notice the current version of our data protection notice, as this is subject to changes.

12. Contact
If you wish to contact us, please find us at the address stated in the “Controller” section.

To assert your rights and to notify data protection incidents please use the following link: https://www.bkms-system.net/syntegon.

For suggestions and complaints regarding the processing of your personal data we recommend that you contact our data protection officer:

Chief Data Protection Officer
Dept. Data Protection Office (DPO)             
Syntegon Technology GmbH
Mercedesstraße 41
70372 Stuttgart
Germany

or

E-Mail: dpo@syntegon.com

Effective date: 01.09.2026