Privacy Policy

Scope of data collection and storage

Purpose of Data Processing

In general, it is not necessary for you to provide personal data in order to use our website. However, in order for us to actually provide our services, we may require your personal data. This applies both to the sending of information materials and to responding to individual inquiries.

Consent to Data Processing

If we carry out any of the actions described below or provide any other services, we would like to collect, track and store your personal data. For this purpose, we will request your express consent at the relevant point on our website, for example in connection with:

• personalizing our website,
• analyzing usage behavior.

Processing takes place only where there is a legal basis for doing so, in particular consent or a legitimate interest.
If you request information or use personalized services, we will collect further data, as described in the section “Newsletter and Other Advertising”, to the extent necessary for the performance of a contract or on the basis of your consent.

Which categories of personal data are processed?

We store the following data:
For tracking purposes, we use cookie-setting technology. This information enables recognition when you visit the website again. In the tracking tool used, the IP address is anonymized and then stored in anonymized form.

Web Tracking and Analysis

We use systems provided by the following providers for analytics purposes.

Google Analytics 4

This website uses the web analytics service Google Analytics 4 (“GA4”) provided by Google Ireland Limited. The provider in Europe is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics 4 uses cookies and comparable technologies to evaluate the use of our website. In particular, the following data may be processed:

• truncated IP address,
• pages accessed,
• usage behavior and interactions,
• technical information about the browser and end device,
• referrer URL,
• approximate location data.

IP anonymization is enabled by default in Google Analytics 4. This means that the IP address is truncated within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area before transmission.
It cannot be ruled out that data may be transferred to servers of Google LLC in the United States. For data transfers to the United States, Google relies on the adequacy decision of the European Commission and on appropriate safeguards pursuant to Article 46 GDPR.
Processing takes place only after you have given your express consent via our consent management tool.
The legal basis for storing information on end devices and accessing such information is Section 25(1) TDDDG. The legal basis for the subsequent processing of personal data is Article 6(1)(a) GDPR (consent).

The processing of personal data enables us to analyze the usage behavior of visitors to our website. By evaluating the data obtained, we are able to compile information about the use of individual components of our website and to continuously improve the usability and quality of our online offering.

The personal data processed by Google Analytics 4 will be deleted as soon as it is no longer required for the purposes for which it was collected.
The retention period for user data is a maximum of 14 months, unless statutory retention obligations apply or shorter retention periods have been specified.

You may withdraw or amend your consent at any time with effect for the future via our consent management tool.
In addition, you may prevent the storage of cookies by selecting the appropriate settings in your browser software. Cookies that have already been set may be deleted at any time.
You may also prevent Google from collecting and processing your data by downloading and installing the browser add-on available at the following link:
Browser add-on for disabling Google Analytics.

Matomo

We use the open-source software tool Matomo (formerly PIWIK) on our website to analyze the browsing behavior of our users. The software places a cookie on users’ computers (see the information on cookies above). When individual pages of our website are accessed, the following data is stored:

• two bytes of the IP address of the user’s accessing system,
• the website accessed,
• the website from which the user reached the accessed website (referrer),
• the sub-pages accessed from the accessed website,
• the time spent on the website,
• the frequency with which the website is accessed.

The software runs exclusively on the servers of our website. Users’ personal data is stored only there. The data is not disclosed to third parties.

The software is configured so that IP addresses are not stored in full; instead, two bytes of the IP address are masked (e.g. 192.168.xxx.xxx). This means that the truncated IP address can no longer be assigned to the accessing computer.

The legal basis for processing users’ personal data is Article 6(1)(f) GDPR.
The processing of users’ personal data enables us to analyze their browsing behavior. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us continuously improve our website and its usability. These purposes also constitute our legitimate interest in processing the data pursuant to Article 6(1)(f) GDPR. The anonymization of the IP address adequately takes account of users’ interest in the protection of their personal data.

The data will be deleted as soon as it is no longer required for our recording purposes.
In our case, this occurs after 425 days.

Cookies are stored on the user’s computer and transmitted from there to our website. As a user, you therefore have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Cookies already stored may be deleted at any time. This may also be done automatically. If cookies are disabled for our website, not all functions of the website may be fully available.

We offer users of our website the option to opt out of the analytics process. To do so, you must remove the check mark from the relevant checkbox. This will place another cookie on your system, which signals to our system that the user’s data should not be stored. If the user deletes the corresponding cookie from their own system in the meantime, the opt-out cookie must be set again. You have the option to prevent actions you take here from being analyzed and linked. This will protect your privacy, but it will also prevent the website operator from learning from your actions and improving usability for you and other users.

Google Tag Manager

We use Google Tag Manager to manage and deploy website tags. Google Tag Manager itself does not create user profiles and generally does not store cookies. However, for technical reasons, in particular the IP address as well as information about the browser and end device used may be transmitted to Google servers.

Processing is carried out on the basis of Article 6(1)(f) GDPR, provided that Google Tag Manager is used exclusively for the technical management of tags. Where services requiring consent are loaded via Google Tag Manager, those services are executed only after you have given your consent pursuant to Article 6(1)(a) GDPR.

The use of Google Tag Manager serves the efficient management, control and integration of website tags and the technical optimization of our online offering.

Personal data is processed only for as long as is necessary to fulfill the respective purposes. In all other respects, the retention period depends on the services integrated via Google Tag Manager. You may withdraw any consent you have given at any time with effect for the future or adjust your selection by accessing the settings of our consent management tool.

Google Search Console

This website uses Google Search Console. This service is used to collect information about individual web pages that is obtained during automated analysis, known as crawling. The information collected, such as loading speed, mobile optimization, pages that cannot be accessed successfully and search queries, is not classified as personal data.

Clarity

In some of our products, we use Microsoft Clarity, a technology that helps us understand how our products are used, which images and text passages attract attention, and how we can create an even better user experience.

The provider, Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, https://docs.microsoft.com/en-us/clarity/ (hereinafter “Clarity”), is certified under the EU-U.S. Data Privacy Framework (DPF), an agreement between the European Union and the United States that ensures compliance with European data protection standards when data is processed in the United States. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider.

Clarity uses technologies that enable users to be recognized for the purpose of analyzing user behaviour, such as cookies or device fingerprinting. Your personal data is stored on Microsoft servers, specifically the Microsoft Azure Cloud Service, in the United States.

We mask sensitive areas and do not evaluate them. In this context, we collect customary visitor data, such as IP address, location, browser information, screen resolution, language settings, sub-pages visited, date and time of access to the website, and mouse movements.

Processing is carried out exclusively on the basis of your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG.

The data will be deleted as soon as it is no longer required for the purposes stated. As a rule, session recordings are retained for 30 days, and heatmaps, click data and aggregated usage data are retained for 13 months.

You may withdraw your consent at any time via our consent management tool.

Further details on Clarity’s privacy practices can be found here.

Bing-Webmaster-Tools

We use Bing Webmaster Tools, a web service provided by Microsoft Corporation. When Bing Webmaster Tools are used, Microsoft may in particular collect technical information such as the IP address, browser data, device settings, referring URLs and usage data. Collection takes place automatically when our website is accessed, provided that the corresponding analytics functions of Microsoft are integrated.

It cannot be ruled out that personal data may be transferred to Microsoft Corporation. Microsoft is certified under the EU-U.S. Data Privacy Framework (DPF). Data transfers to the United States are based on the adequacy decision of the European Commission pursuant to Article 45 GDPR.

Processing is carried out on the basis of our legitimate interest pursuant to Article 6(1)(f) GDPR. Our legitimate interest lies in analyzing website performance, technically optimizing the website and improving the visibility of our website in search engines. Where prior consent via a consent management tool is required, for example for the storage of cookies or comparable technologies, processing is instead carried out on the basis of your consent pursuant to Article 6(1)(a) GDPR.

The purpose of processing is to analyze the findability and technical functionality of our website. The data helps us identify errors, improve performance and optimize our website for search engines.

Microsoft stores the data in accordance with its own policies. The retention of personal data may vary depending on the type of information collected. Data may be deleted once it is no longer required for the analytics purposes provided by Bing Webmaster Tools. In addition, users may influence the transmission of certain data through browser or privacy settings.

You may generally object to the data processing by disabling tracking technologies in your browser or by withdrawing your consent in the consent management tool, where consent was required. Further information on Microsoft’s privacy practices and available settings can be found in Microsoft’s Privacy Statement: Microsoft Privacy Statement.

Supademo

We use the Supademo service on our website to provide interactive product demonstrations, guides and presentations. When a demo provided via Supademo is accessed, personal data and technical information may be processed. This may include, in particular, the IP address, information about the end device and browser used, the date and time of access, and usage and interaction data, such as clicks, viewing duration and navigation behavior within the demo.

Personal data is processed on the basis of Article 6(1)(f) GDPR where the integration of Supademo is necessary for the user-friendly presentation and optimization of our content. Where Supademo uses cookies or comparable technologies for analytics or tracking purposes, processing takes place exclusively on the basis of your consent pursuant to Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

The data is processed for the purpose of providing interactive content, analyzing the use of our demos and presentations, and improving the user-friendliness and quality of our online offering.

The retention period for personal data depends on the respective processing purposes and Supademo’s requirements. Data will be deleted as soon as it is no longer required for the purposes for which it was collected and no statutory retention obligations prevent deletion.

Where you have given your consent via our consent management tool, you have the right to object to the processing of your personal data at any time. Further information: Supademo’s privacy policy is available at Supademo Privacy Policy.

WPML (Multilingual Functionality)

We use the WPML plugin on our website to provide multilingual content. WPML sets cookies in order to store the language you have selected and to display the website in accordance with your preference when you visit again. In this context, information about the selected language, technical information about the browser and end device used, and other data required to provide this functionality may be processed.

Cookies are stored and accessed on the basis of Section 25(2) No. 2 TDDDG, insofar as they are technically necessary for providing the multilingual website. The subsequent processing of personal data is carried out on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in providing a user-friendly multilingual website.

Processing is carried out for the purpose of storing your language preference and displaying the website in the language you have selected. This serves to improve user-friendliness and to ensure consistent use of our online offering. The cookies set by WPML are stored for as long as is necessary to maintain the selected language setting, or until you delete the cookies via your browser settings. Personal data will be deleted as soon as it is no longer required to achieve the purposes referred to above and no statutory retention obligations apply. You may restrict or prevent the storage of cookies by selecting the appropriate settings in your browser or in our cookie management tool, and you may delete cookies that have already been stored at any time. Please note that this may impair the proper functioning of the language switcher.

Deletion and data autonomy

You may request information from conrizon AG at any time about the personal data stored about you and may request the rectification, erasure or restriction of processing of such data at any time. You may also amend or withdraw any declaration of consent you have given at any time, without stating reasons, with effect for the future. You will not incur any costs for doing so other than postage costs or transmission costs.
Consent may be withdrawn at any time by sending a corresponding notification, by post or by email, to conrizon AG at .
An objection to the purposes referred to above has no effect on your contractual relationship with conrizon AG.

Data portability

Data subjects have the right to receive the data that originates directly from them. Upon explicit request by the data subject, we will provide this data in a structured, commonly used and machine-readable format. Proof of the data subject’s identity is required.

Right to lodge a complaint with a supervisory authority

As a data subject, you have the right to appeal to a data protection authority in your place of residence or work if you suspect a privacy violation. The regulating authority in charge of United Kingdom is the Information Commissioners Office (ICO). https://ico.org.uk/
If you believe that your privacy rights have been violated, you may have the right to submit a complaint to the appropriate regulatory authority in the United States. Depending on the applicable federal or state privacy law, complaints may be directed to the Federal Trade Commission (FTC), the Attorney General of the relevant U.S. state, or another competent privacy regulator with jurisdiction over the matter.
For general consumer privacy and data protection concerns, you may contact the Federal Trade Commission (FTC):
https://www.ftc.gov/
Residents of certain U.S. states may also have the right to lodge a complaint with their respective state Attorney General’s Office or other designated state privacy authority, such as the California Privacy Protection Agency (CPPA), where applicable.
Additional information regarding your rights and the appropriate authority for your jurisdiction can be obtained from your state’s consumer protection or privacy regulator.

Hosting (WebCoding24)

We host this website with WebCoding24 GmbH, Germany. Processing is carried out under a data processing agreement pursuant to Article 28 GDPR. The servers are located within the European Union.

Contact person

Data protection officer:
datarea GmbH
Meißner Straße 103
01445 Radebeul
Germany

Mailing address:
conrizon AG
Datenschutzbeauftragter
Jakob-Funke-Platz 1
45127 Essen
Germany

Legal representative

Board of Directors:
Andreas Zipser (Chairman), Ulrich Edelmann
Jakob-Funke-Platz 1
45127 Essen
Germany
District Court Essen HRB 35092