Privacy Policy

Website privacy statement and information of data subjects pursuant to Article 13 and Article 14 of the EU General Data Protection Regulation

General information

Details of the responsible body

Company: BridgeFlow GmbH

Legal representative: Bernd Kopin (Managing Director)

Address: Bänschstr. 63, 10247 Berlin, Germany

General data processing information

Data concerned:

Personal data is only collected if you provide it to us of your own accord. No other personal data is collected. Any processing of your personal data that goes beyond the scope of the legal permissions will only be carried out on the basis of your express consent.

Purpose of processing: Execution of contract.

Categories of recipients: Public authorities in the case of overriding legal provisions.

External service providers or other contractors.

Other external bodies insofar as the data subject has given his/her consent or a transfer is permissible for overriding interest.

Data exchange within the group of companies: We transfer your data to our companies in the group of companies (group of companies within the meaning of Art. 4 No. 19 DSGVO) if this is necessary to protect our legitimate interests within the meaning of Art. 6 (1) sentence 1 lit. 1 DSGVO.

Third country transfers:

In the context of the execution of the contract, order processors outside the European Union may also be used.

Duration of data storage:

The duration of data storage depends on the statutory retention obligations and is usually 10 years.

Specific information about the website

Provision of the website

WordPress.com

This website uses WordPress.com-Stats, a tool for statistical analysis of visitor traffic, operated by Automattic Inc, 60 29th Street #343, San Francisco, CA 94110-4929, USA, using tracking technology from Quantcast Inc, 201 3rd St, Floor 2, San Francisco, CA 94103-3153, USA and comScore Inc, 11950 Democracy Drive, Suite 600 Reston, VA 20190, USA. WordPress.com-Stats uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookies about your use of this website is stored on servers in the USA. The IP address is anonymised immediately after processing and before storage. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this blog. You can object to the collection and use of data by Quantcast with effect for the future by setting an opt-out cookie in your browser at this point by clicking on the link “Click here to opt-out”: http://www.quantcast.com/opt-out. You can object to the collection and use of data by comScore with effect for the future by setting an opt-out cookie in your browser at this point: http://www.scorecardresearch.com/OptOutTag.aspx. If you delete all cookies on your computer, you must set the opt-out cookies again.

Use of a newsletter

We may also use your e-mail address, which we receive in connection with the sale of goods or services, exclusively for direct advertising in the form of our newsletter for our own similar goods or services, such as those ordered by you, provided you have not objected to this use. You can object to the use of your e-mail address at any time without incurring any costs other than the transmission costs according to the basic rates. Your objection (and thus the cancellation of our newsletter) can be exercised by sending a corresponding message to our e-mail address (see imprint).

Mailchimp

The newsletter is sent using the mailing service provider “MailChimp”, a newsletter mailing platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the privacy policy of the mailing service provider here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with the European level of data protection (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). The shipping service provider is used on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f. DSGVO and an order processing agreement pursuant to Art. 28 para. 3 p. 1 DSGVO.

The dispatch service provider may use the data of the recipients in pseudonymous form, i.e. without assignment to a user, to optimise or improve its own services, e.g. to technically optimise the dispatch and presentation of the newsletter or for statistical purposes. However, the dispatch service provider does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.

Google Tag Manager

We occasionally use the Google Tag Manager. The Google Tag Manager does not collect any personal data, but the IP address of the page visitor is transmitted to Google when it is integrated. The Tag Manager only plays out other components and scripts and does not access data of these played out elements. The elements played are named separately, and you can make individual data protection settings for them, for example by deactivating cookies for these elements.

Use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, by activating IP anonymisation on this website, your IP address will be truncated beforehand by Google within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. In addition, you can prevent the collection of the data generated by the cookie and related to your use of the website (incl. your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plugin http://tools.google.com/dlpage/gaoptout?hl=de available under the following link. In view of the discussion about the use of analysis tools with complete IP addresses, we would like to point out that this website uses Google Analytics with the extension “_anonymizeIp()” and therefore IP addresses are only processed in abbreviated form in order to exclude direct personal references. Especially for browsers on mobile devices, please click this link to prevent the anonymised collection of data by Google Analytics on this website for your browser in the future by means of a so-called “opt-out cookie”.

Google AdWords Conversion Tracking

This website uses Google AdWords Conversion Tracking, a web analytics service provided by Google, Inc. (“Google”). Google AdWords Conversion Tracking also uses “cookies”, which are stored on your computer and which allow an analysis of your use of the website. The information generated by the cookie about your use of this website will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate the data with any other data held by Google. You can generally prevent the use of cookies if you prohibit the storage of cookies in your browser.

Use of own “cookies”

This website uses its own “cookies” to improve user-friendliness (“cookies” are data records that are sent from the web server to the user’s browser and stored there for later retrieval). No personal data is stored in our own “cookies”. You can generally prevent the use of “cookies” if you prohibit the storage of “cookies” in your browser.

Pipedrive

We use Pipedrive as our CRM tool for processing and storing contact data.
When contacting us (via contact form or e-mail), the user’s details are processed for the purpose of handling the contact request and its processing pursuant to Art. 6 (1) lit. b) DSGVO. In order to be able to process and answer your request and messages as quickly as possible, we have connected our contact form with our customer relationship management tool (“CRM tool”) Pipedrive. The data transmitted when filling out the form is transferred to Pipedrive and stored there on Pipedrive servers. We use the CRM system Pipedrive of the provider Pipedrive OÜ on the basis of our legitimate interests (efficient and fast processing of user enquiries, existing customer management, new customer business), a private limited company established under the laws of the Republic of Estonia, with the address Paldiski mnt 80, Tallinn, 10617, Estonia, registered in the Estonian Commercial Register under the code 11958539, and a subsidiary of Pipedrive US. Pipedrive’s privacy policy can be accessed here: https://www.pipedrive.com/en/privacy.

Autopilot

To optimise our website, we use the marketing automation platform “Autopilot” of the US provider AutopilotHQ, Inc., 149 New Montgomery St, 4th Floor, Suite 631, San Francisco, CA, 94105, USA. You can view the service provider’s privacy policy here: https://www.autopilothq.com/legal/privacy-policy . AutopilotHQ, Inc. is certified under the Privacy Shield Agreement and thereby offers a guarantee of compliance with the European level of data protection ( https://www.privacyshield.gov/participant?id=a2zt0000000TRfOAAW ).

Autopilot allows, within the framework of so-called “click tracking”, to overview the movements of users within an entire online offer and to display information relevant to the user. Since the results are more accurate if the interaction of the users can be tracked over a certain period of time (e.g. to determine whether a user returns), cookies are placed on the users’ devices for this purpose. Only pseudonymous data of the users is processed. For further information, please refer to AutopilotHQ’s privacy policy: https://www.autopilothq.com/legal/privacy-policy . If we ask users for consent (e.g. in the context of a cookie consent), the legal basis of this processing is Art. 6 para. 1 lit. a. DSGVO. Otherwise, the users’ personal data is processed on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO) are processed.

Unbounce

We use the service unbounce for individual sub-pages. The provider is unbounce Marketing Solutions Inc, 400-401 West Georgia Street, Vancouver, BC, Canada, V6B 5A1. The EU Commission has classified Canada as a safe third country with an adequate level of data protection and we have concluded an order processing agreement. Individual sub-pages are hosted by unbounce and your browser communicates directly with unbounce so that your IP address is transmitted and cookies can be set. All information that you enter on these pages is also stored by unbounce. We are then provided with an anonymous evaluation of the activities. Further information about unbounce and data protection at unbounce can be found here: https://unbounce.com/privacy/.

YouTube

Our website uses plugins from the YouTube site operated by Google. The operator of the site is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account. Further information on the handling of user data can be found in YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy.

Facebook

BridgeFlow GmbH operates a company page on the social media platform Facebook. This is operated by facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA. When you visit our company website there, data about your visitor behaviour is automatically transmitted to the Facebook servers. We have no influence on the type and scope of the data collected and transmitted to Facebook. Please read the privacy policy and cookie policy of Facebook.

Instagram

BridgeFlow GmbH operates a company page on the social media platform Instagram. This is operated by Instagram LLC, represented by Kevin Systrom and Mike Krieger, 1601 Willow Rd, Menlo Park CA 94025, USA. When you access our company website there, data about your visitor behaviour is transmitted to the Instagram servers. We have no influence on the type and scope of the data collected and transmitted to Instagram. Please read the privacy policy and the cookie policy of Instagram.

LinkedIn

You can recognise the call from LinkedIn, LinkedIn, 2029 Stierlin Courtm, Mountain View, CA 94043 USA, by the “in” sign on a blue background. If you activate our “in” button within the scope of the 2-click solution, a connection is established with the LinkedIn server and the LinkedIn plugin is reloaded on the respective website. The content of the “in” button is transmitted by LinkedIn directly to your browser and integrated into the website by it. It is possible that your IP address will be transmitted to LinkedIn in the USA in this way. For the purpose and scope of the data collection and the further processing and use of the data by LinkedIn, as well as your rights in this regard and setting options for protecting your privacy, please refer to LinkedIn’s data protection information (http://www.linkedin.com/legal/privacy-policy) on the “in” button. If you are a LinkedIn member and do not want LinkedIn to collect data about you via our website when the “in” button is activated and link it to your membership data stored on LinkedIn, you must log out of LinkedIn before visiting our website.

XING

You can recognise the call from XING, XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany, by the “x” or “xing” sign on a green background. If you activate our “XING” button as part of the 2-click solution, a connection is established with the XING server and the XING share button functions (in particular the calculation/display of the counter value) are reloaded on the respective website, XING does not store any personal data from you about the call-up of this website. In particular, XING does not store any IP addresses. There is also no evaluation of your usage behaviour via the use of cookies in connection with the “XING Share Button”. The current data protection information on the “XING Share Button” and supplementary information can be found on this website: https://www.xing.com/app/share?op=data_protection.

Information on further data processing procedures

Specific information on the application procedure

Data concerned: Application details

Purpose of processing: Carrying out the application procedure

Categories of recipients: Public bodies in case of overriding legal provisions.

External service providers or other contractors, e.g. for data processing and hosting.

Other external bodies insofar as the data subject has given his or her consent or a transfer is permissible for overriding interests, including customers and interested parties in the context of order acquisition.

Third-country transfers: In the context of the execution of the contract, order processors outside the European Union may also be used, including email providers, HR management system.

Duration of data storage: Application data is usually deleted within four months after notification of the decision, unless consent to longer data storage has been given in the context of inclusion in the applicant pool.

Specific information on the processing of customer data/prospect data.

Data concerned: Data provided for the performance of the contract; if applicable, any additional data for processing on the basis of your express consent.

Purpose of processing: Contract execution, including offers, orders, sales and invoicing, quality assurance, support.

Categories of recipients: Public authorities in the event of overriding legal provisions.

External service providers or other contractors, including for data processing, accounting, administration and hosting as well as call centres.

Other external bodies insofar as the data subject has given his or her consent or a transfer is permissible for overriding interests, e.g. for creditworthiness information in the case of purchase on account, for the electronic dispatch of information, for quality assurance purposes.

Third country transfers: In the context of the execution of the contract, order processors outside the European Union may also be used, including email providers, project management system, support system.

Duration of data storage: The duration of data storage depends on the statutory retention obligations and is usually 10 years.

Specific information on the processing of employee data.

Data concerned: Data provided for the performance of the contract; if applicable, any additional data for processing on the basis of your express consent.

Purpose of processing: Performance of the contract within the framework of the employment relationship.

Categories of recipients: Public authorities in the event of overriding legal provisions, including the tax office, social insurance institutions, employers’ liability insurance association.

External service providers or other contractors, including for data processing and hosting, processing of assigned tasks, payroll accounting, travel expense accounting, insurance benefits, vehicle use.

Other external bodies insofar as the data subject has given his or her consent or a transfer is permissible for predominant interest, including for order acquisition, insurance services, company events.

Third-country transfers: In the context of the execution of the contract, order processors outside the European Union may also be used, including email providers, HR management system, project management system.

Duration of data storage: The duration of data storage depends on the statutory retention obligations and is usually 10 years.

Specific information on the processing of supplier data.

Data concerned: Data provided for the performance of the contract; if applicable, any additional data for processing on the basis of your express consent.

Purpose of processing: Execution of contract, e.g. enquiries, purchasing, quality assurance.

Categories of recipients: Public authorities in the event of overriding legal provisions, e.g. tax office, customs.

External service providers or other contractors, e.g. for data processing and hosting, accounting, payment processing, administration.

Other external bodies insofar as the data subject has given his or her consent or a transfer is permissible for overriding interests.

Third country transfers: In the context of the execution of the contract, order processors outside the European Union may also be used, including email providers, project management system.

Duration of data storage: The duration of data storage depends on the statutory retention obligations and is usually 10 years.

Further information and contacts

In addition, you can assert your rights to information, correction or deletion or to restriction of processing or the exercise of your right to object to processing as well as the right to data portability at any time. Here you will find the possibility to contact us by e-mail. You also have the right to contact the data protection supervisory authority in the event of complaints.