Data protection

You can visit our websites without providing any personal information. When you visit, we automatically store the following access data in so-called server log files without any action on your part:

• IP address of the requesting computer,
• Website from which the access is made (referrer URL),
• Browser type and version as well as other information transmitted by the browser (such as the operating system of your computer).

According to Article 6 (1) (f) of the GDPR (legitimate interest), this data processing is carried out to ensure the trouble-free operation of the website — for example, to guarantee a smooth connection setup, to evaluate system security and stability, to detect and prevent attacks on our website, among other purposes.
The information is stored in the log files for a period of 7 days and then deleted, unless further retention is necessary for evidence purposes until final clarification.

The provision, maintenance, adaptation, and servicing of our website is ensured by a service provider who processes your data on our behalf (data processing pursuant to Article 28 GDPR). If additional service providers are involved or data is transferred to third parties in any other way, this will be listed separately in the corresponding sections.

Our website offers you a function via contact forms where, upon use, personal data is collected, processed, and stored by us. Below, we explain what happens with this data: The data captured via our contact forms (mandatory details: last name, first name, email address, phone number, inquiry) is used (based on your consent, for contract fulfillment, due to our legitimate interest – Art. 6(1)(a), (b), and (f) GDPR) solely for processing inquiries submitted through the forms. Additional information in the contact form (company, position) provided by you is voluntary. To process your inquiry, we record your contact details in our CRM and may additionally contact you via email if we believe we have an offer of interest to you. The legal basis is our legitimate interest in building contacts in a B2B environment and using contact data obtained in connection with the contact forms for this purpose (Art. 6(1)(f) GDPR). We store the personal data collected via our contact form for the duration of the communication conducted and the processing of your inquiry. You can object to this data processing at any time, without stating reasons, effective for the future, by sending us an email to info@oraylis.de. Upon your objection, your data will be deleted immediately, unless you have deposited this data with us in another context (e.g., for an application) and it may be subject to statutory retention obligations. Should further communication arise from the contact, e.g., an offer, job interview, or commission, the data processing, including the storage period, will follow the procedure defined for that context. Furthermore, in the event of a contract conclusion, retention obligations according to § 257 of the German Commercial Code (HGB) apply.

Newsletter

Furthermore, you have the option to subscribe to our newsletter. With this newsletter, we inform you about our company, our products, and our services. If you wish to receive the newsletter, we process your email address, salutation, and your last name (mandatory details) based on your consent (Art. 6(1)(a) GDPR). Further details (company, title, first name) are voluntary. For verification purposes, we store (Art. 6(1)(f) GDPR) your IP address and the time of registration as well as the confirmation of this registration.

Furthermore, the data you entered is transmitted in pseudonymized form via an interface to the social networks LinkedIn and Facebook, so that if you are active on these networks, you will be informed about our offers and news from our company. Further information on this can be found in the paragraphs “Use of the LinkedIn Conversion API” and “Use of Meta Conversion API”.

Your details are stored in our CRM system. For this purpose and for sending the newsletter, your data is stored in the CRM software Hubspot. More details about Hubspot can be found in the paragraph about Hubspot below.

You can unsubscribe from the newsletter at any time, without stating reasons, effective for the future, via a link in the newsletter. Alternatively, you can write us an email at info@oraylis.de. Upon your objection, your personal data will be deleted immediately, unless you have deposited this data with us in another context (e.g., for an application) and it may be subject to statutory retention obligations.

We inform you that when sending the newsletter, we evaluate your user behavior. For this evaluation, the sent emails contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. For the evaluations, we link data and the web beacons with your email address and an individual ID. The data mentioned in the previous sentence includes the IP address, date and time of the request; the time zone difference to Greenwich Mean Time; the content of the request (specific page); the access status/HTTP status code; the amount of data transferred; the website from which the request comes, the browser; the operating system and its interface and language, and the version of the browser software. Links received in the newsletter also contain this ID.

Blog

You have the possibility to comment on our posts in our blog. The data deposited there is only used within the scope of publishing the comment. As the operators of the website are responsible for the content, we store your IP address when leaving a comment based on our legitimate interest (Art. 6(1)(f) GDPR), in order to potentially trace comments that may contain insults, polemics, racist, or similar unlawful content. The comments themselves are published and stored until revoked. You can object to this data processing and the publication of your comment at any time, without stating reasons, effective for the future, by sending us an email to info@oraylis.de.

Registration for Events (In-person events, webinars, strategy talks, etc.)

If you register for an event via our website, we process your personal data (mandatory details: first name, last name, company, email address) based on your consent (Art. 6(1)(a) GDPR) to ensure your participation in the event, e.g., inclusion in the participant list, sending the booking confirmation. If we conduct the events in cooperation with another company or with the support of a service provider (e.g., event hotel, software provider of a webinar tool, etc.), the data you entered is forwarded to the cooperation partner or service provider so that they can further process your data for the purpose of conducting the event. The subject of the contract with our cooperation partners or service providers also includes data protection-compliant handling of personal data, so the security of your data is our top priority. Please note that some events are not conducted by us, but you enter your data directly on the respective cooperation partner’s site. In this case, you can obtain data protection-relevant information in the privacy policy of the respective cooperation partner or service provider.

To promote our events and webinars and for the implementation of the registration form, we use Mobile Funnel (hereinafter: Funnel). Exact details about this provider and its functionality can be found in the section below “Use of Mobile Funnel”. Alternatively to Mobile Funnel, you can also register for the webinars via a contact form on our website or via LinkedIn. When you enter your personal data via the Funnel and register for events or alternatively use our contact form or register via LinkedIn, we record your contact details in our CRM and contact you via email if we believe we have an offer of interest to you. The legal basis is our legitimate interest in building contacts in a B2B environment and using contact data obtained in connection with our events for this purpose (Art. 6(1)(f) GDPR).

Furthermore, the data you entered is transmitted in pseudonymized form via an interface to the social networks LinkedIn and Facebook, so that if you are active on these networks, you will be informed about our offers and news from our company. Further information on this can be found in the paragraphs “Use of the LinkedIn Conversion API” and “Use of Meta Conversion API”.

You can object to this data processing at any time, without stating reasons, effective for the future, by sending us an email to info@oraylis.de. Upon your objection, your data will be deleted immediately, unless you have deposited this data with us in another context (e.g., for an application) and it may be subject to statutory retention obligations. Should further communication arise from the contact, e.g., an offer, job interview, or commission, the data processing, including the storage period, will follow the procedure defined for that context.

Download of the Career Magazine

When you request our career magazine, we need your first name and email address. We use this information to send you a link to the magazine based on your consent (Legal basis: Art. 6(1)(a) GDPR). Furthermore, we use your data to trace, in the event of an application for a vacancy, whether you have already been in contact with us, or to contact you regarding a suitable vacancy. The legal basis for this is our legitimate interest (Art. 6(1)(f) GDPR) in building and maintaining contacts in a B2B environment. You can object to this data processing at any time, without stating reasons, effective for the future, by sending us an email to info@oraylis.de. Upon your objection, your data will be deleted immediately, unless you have deposited this data with us in another context (e.g., for an application) and it may be subject to statutory retention obligations. Should further communication arise from the contact, e.g., an application process, the data processing, including the storage period, will follow the procedures defined for that context.

Download of our Whitepapers

For the implementation of the download and to promote our whitepapers, we use Mobile Funnel (hereinafter: Funnel). Exact details about this provider and its functionality can be found in the section below “Use of Mobile Funnel”. Alternatively to Mobile Funnel, you can also request our whitepapers on our website via a form or via LinkedIn. When you enter your data via the Funnel or use our form or LinkedIn and download our whitepaper, we record your contact details (mandatory details: first name, last name, company, position, email address) in our CRM and contact you via email if we believe we have an offer of interest to you. The legal basis is our legitimate interest in building contacts in a B2B environment and using contact data obtained in connection with the download for this purpose (Art. 6(1)(f) GDPR). You can object to this data processing at any time, without stating reasons, effective for the future, by sending us an email to info@oraylis.de.

Additionally, the data you entered is transmitted in pseudonymized form via an interface to the social networks LinkedIn and Facebook, so that if you are active on these networks, you will be informed about our offers and news from our company. Further information on this can be found in the paragraphs “Use of the LinkedIn Conversion API” and “Use of Meta Conversion API”.

Furthermore, downloading one of our whitepapers is only possible if you have previously given us your consent to receive the newsletter (Art. 6(1)(a) GDPR). You can unsubscribe from the newsletter at any time, without stating reasons, effective for the future, via a link in the newsletter. Alternatively, you can write us an email to info@oraylis.de. Further information regarding the newsletter dispatch can be found in the section above “Newsletter”.

Upon your objection, your data will be deleted immediately, unless you have deposited this data with us in another context (e.g., for an application) and it may be subject to statutory retention obligations. Should further communication arise from the contact, e.g., an offer or commission, the data processing, including the storage period, will follow the procedures defined for that context.

Use of Hubspot as CRM software, for implementing our contact forms, and for sending our newsletter

For providing the contact forms, sending our newsletter, and managing our contacts, we use the CRM software HubSpot by the provider HubSpot Inc., 25 First Street, Cambridge, MA 02141, USA). Regarding the location of data processing, we have ensured that the data is hosted in a data center located in the EU. However, we cannot exclude that through our use of HubSpot, personal data may also be transmitted to servers located in the USA. We have concluded a Data Processing Addendum (DPA) (https://legal.hubspot.com/dpa) with HubSpot to ensure the processing of data complies with data protection regulations. By concluding EU Standard Contractual Clauses as part of the DPA and certification under the EU-U.S. Data Privacy Framework, HubSpot guarantees an equivalent level of data protection to the EU even when processing on U.S. servers. Information on data protection at HubSpot can be found here: https://legal.hubspot.com/privacy-policy.

Use of Mobile Funnel

We use the Mobile Funnel tool “involve.me”. Using this tool, we create quiz funnels and can thus accompany (potential) customers at every stage of the purchasing process, e.g., with quizzes, individual calculators, or customer surveys. To better understand our customers and increase our conversion rate, we conduct behavioral analyses.

The processing of your personal data by the forms in the “Funnel” for the purpose of sending the information you requested is based on your consent (Art. 6(1)(a) GDPR).

Furthermore, we record your contact details (mandatory details: first name, last name, company, position, email address) in our CRM and contact you subsequently via email if we believe we have an offer of interest to you. The legal basis is our legitimate interest in building contacts in a B2B environment and using contact data obtained in connection with the download for this purpose (Art. 6(1)(f) GDPR). You can object to this data processing at any time, without stating reasons, effective for the future, by sending us an email to info@oraylis.de. Upon your objection, your data will be deleted immediately, unless you have deposited this data with us in another context (e.g., for an application) and it may be subject to statutory retention obligations. Should further communication arise from the contact, e.g., an offer or commission, the data processing, including the storage period, will follow the procedure defined for that context.

For providing a quiz funnel, we use the software from stereosense GmbH, an Austrian company based at Gußhausstraße 15/8, 1040 Vienna. An agreement for commissioned processing according to Art. 28(3) GDPR exists with stereosense GmbH. The data entered as part of using the Sales Funnel is transmitted via SSL encryption and stored in a database. In addition to the data you enter for your registration, general log data, so-called server logs, are collected with each access to the Funnel. Without this data, it would technically be partially impossible to deliver and display the content of the software. Furthermore, processing this data is imperative for security aspects, particularly for access, input, transfer, and storage control. Moreover, the log files can be checked and evaluated subsequently if unlawful use of the software is suspected. Data such as the domain name of the website, the web browser and web browser version, the operating system, and the timestamp of access to the software are collected. The user’s IP address is not stored. However, a so-called session ID is assigned to the user. The storage period for these access logs is up to 7 days. All data entered by the user when using the Funnel (e.g., answering form fields; using interactive components) is assigned to the user via a session ID and made available to us. The legal basis for this data processing is Art. 6(1)(f) GDPR in conjunction with § 25(2) No. 2 TTDSG (ensuring security when visiting the website, standard language settings) or serves to improve the user experience or performance (i.e., speed and functionality) on the website. Storage period: Up to 1 month or until the end of the browser session.

Furthermore, based on your prior consent pursuant to Art. 6(1)(a) GDPR in conjunction with § 25(1) TTDSG, this data is used for the purposes of analyzing and optimizing our offering. If you have not consented, no data processing takes place.

You can revoke your consent according to Art. 7(3) GDPR at any time, without stating reasons, effective for the future, by sending an email to info@oraylis.de.

Signature

For promoting our content in our signature, we use mailtastic, an offering from the company NETSTAG GmbH (NETSTAG GmbH, Große Bleiche 10, 55116 Mainz). If you receive an email from us and click on the banner contained in the signature, you will be redirected to a corresponding subpage of our website presence or to a perspective Funnel (More about perspective Funnel can be found in the upper section).

Webinars

On our website, we use the webinar tool of the provider Banzai International Inc., located at 453 Eriksen Ave, Suite 250, Bainbridge Island, Washington. We use this tool to conduct our webinars as live conferences, record them, and interact with participants (presentation, creation of a survey).

During your participation in the live broadcast, Banzai collects in-session data such as screen data, keyboard and mouse clicks, mouse movements, browser and device data, as well as the content of the live chat. The flow and attractiveness of our webinar for participants are analyzed by us. Besides information such as the total number of registered/present participants, we process the following data in particular for the analyses:

• Who had registered for a webinar and via which channels (Meta etc.),
• Who (did not) participate in a webinar,
• Duration of participation in a webinar,
• Log data (login, logout data, timestamps),
• Other data for real-time analysis of participant engagement (mouse clicks, downloading handouts, activity in the live chat, etc.).

We store the data acquired in this way in our systems and analyze the results. This helps us to better understand participants’ preferences and tailor our webinars better to their needs.

The use of Demio occurs according to Art. 6(1)(a) GDPR in conjunction with § 25(1) TTDSG only if you have given us your consent. If you have not consented, no data processing takes place. You can revoke your consent according to Art. 7(3) GDPR at any time, without stating reasons, effective for the future, by sending us an email to info@oraylis.de. Upon your objection, your data will be deleted immediately.

We have concluded an order processing contract according to Art. 28(3) GDPR with the provider Banzai International Inc. with Standard Contractual Clauses. Within the scope of order processing, your data is transmitted to the company Banzai in the United States. Banzai Inc. is pursuing certification according to the EU-U.S. Data Privacy Framework. We point out that as long as Banzai is not yet subject to this certification, an equivalent level of data protection cannot be guaranteed for data transfers to the USA. Further information on data processing by the provider Banzai International Inc. can be found in Banzai’s privacy policy: https://www.banzai.io/legal/privacy-policy.

Use of the LinkedIn Conversion API

As part of our marketing and analysis activities, we use the LinkedIn Conversion API service of the company LinkedIn Ltd., Wilton Place, Dublin 2, Ireland. This means that when you interact with our website, e.g., by ordering the newsletter, downloading a whitepaper, registering for a webinar, etc., and enter your data (name data, contact data, etc.), we record this in our CRM system. Through the LinkedIn Conversion API, an upload is then performed to a server first. On this server, the data is pseudonymized. In particular, email addresses are hashed using a SHA-256 algorithm. Subsequently, a transfer to the platform of the provider LinkedIn and a matching with potentially stored data there takes place. The data transmitted via the LinkedIn Conversion API is automatically deleted after 180 days. Only aggregated conversion reports continue to be stored.

If you have given corresponding consent via the consent banner, data about your use of our website is collected via the LinkedIn Insight Tag (see § 5 > LinkedIn Insight Tag). These pseudonymous usage data are merged with the aforementioned data on the LinkedIn Ad platform.

Further information about the LinkedIn Conversion API can be found here: https://www.linkedin.com/help/lms/answer/a1686124?lang=de-DE as well as under point 13 of the LinkedIn Ads Agreement https://de.linkedin.com/legal/sas-terms?

If you are a member of LinkedIn, you will be shown corresponding offers and news from our company when visiting LinkedIn. The purpose of this data processing is to provide you with information about our company and our business activities that is interesting for you and to inform you about news from our company such as current webinar offers, advertised positions, and much more. The legal basis is your consent (Art. 6(1)(a) GDPR), which you have given via the consent banner or when ordering the newsletter / submitting the contact form / ordering a whitepaper / further interactions. You can object to this data processing at any time, without stating reasons, effective for the future, by sending us an email to info@oraylis.de. Upon your objection, your data will be deleted immediately, unless you have deposited this data with us in another context (e.g., for an application) and it may be subject to statutory retention obligations.

We cannot exclude that personal data may be transmitted outside the legal territory of the European Union, e.g., to servers located in the USA. LinkedIn is subject to the certification of the Data Privacy Framework and guarantees an equivalent level of data protection in the event of a possible data transfer to the USA. Furthermore, LinkedIn contractually commits to processing the data in accordance with the General Data Protection Regulation and ensuring the protection of the rights of the data subject (Art. 45, 46 GDPR).

For details about the collection and storage of your personal data as well as the type, scope, and purpose of its use by the LinkedIn Insight Tag, please refer to LinkedIn’s privacy policy. There you will also find further information about your rights and settings options to protect your privacy https://de.linkedin.com/legal/privacy-policy?#choices-oblig

Use of the Meta Conversion API

As part of our marketing and analysis activities, we use the Meta Conversion API service of the company Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. This means that when you interact with our website, e.g., by ordering the newsletter, downloading a whitepaper, registering for a webinar, etc., and enter your data (name data, contact data, etc.), we record this in our CRM system. Via the Meta Conversion API, this data is first uploaded to a separate server and then pseudonymized. This means that the data is hashed using a SHA-256 algorithm and plain text data is no longer recognizable. Subsequently, these hash values are transferred to the platform of the provider Meta and matched with potentially stored hash values there. Personal data transmitted via the Meta Conversion API is automatically deleted by Meta within 48 hours after matching with its own user data. This means that Meta stores the raw data only as long as it is needed for matching and assignment. Only aggregated or anonymized data for analysis and reporting purposes may continue to be used.

If you have given corresponding consent via the consent banner, data about your use of our website is collected via the Facebook Pixel (see § 5 > Facebook Pixel) and is also processed by the Meta Conversion API or merged with the aforementioned data. Further information about the Meta Conversion API can be found here: https://de-de.facebook.com/business/help/2041148702652965?id=565900110447546.

If you are a member of Facebook or Instagram, you will be shown corresponding offers and news from our company when visiting these networks. The purpose of this data processing is to provide you with information about our company and our business activities that is interesting for you and to inform you about news from our company such as current webinar offers, advertised positions, and much more. The legal basis is your consent (Art. 6(1)(a) GDPR), which you have given via the consent banner or when ordering the newsletter / submitting the contact form / ordering a whitepaper / further interactions. You can object to this data processing at any time, without stating reasons, effective for the future, by sending us an email to info@oraylis.de. Upon your objection, your data will be deleted immediately, unless you have deposited this data with us in another context (e.g., for an application) and it may be subject to statutory retention obligations.

We cannot exclude that personal data may be transmitted outside the legal territory of the European Union, e.g., to servers located in the USA. Meta is subject to the certification of the Data Privacy Framework and guarantees an equivalent level of data protection in the event of a possible data transfer to the USA. Furthermore, Meta contractually commits to processing the data in accordance with the General Data Protection Regulation and ensuring the protection of the rights of the data subject (Art. 45, 46 GDPR).

For details about the collection and storage of your personal data as well as the type, scope, and purpose of its use by Meta, please refer to the provider’s privacy policy. There you will also find further information about your rights and settings options to protect your privacy: https://de-de.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0

You can apply for open positions via our website or send us your unsolicited application. Please only use the application platform provided for this purpose. We can then guarantee that your application will only be processed by the appropriately authorized persons in our company.

For the automated processing of your application, we process the following data from you:

• First name, last name, e-mail and, if applicable, address/city, date of birth, title, telephone number, citizenship, and, if applicable, other data relevant to the position (e.g. driver’s license).
• Data from your motivation letter and CV, in particular information on professional experience and education, skills (e.g. Photoshop, MS Office), qualifications, awards and language skills
• Application photo, references, letters of recommendation, other documents you may upload
• We store the written, electronic communication that takes place between you and us. Furthermore, we process comments that are written about you in the course of your application process.

The data is stored for the purpose of processing your application and establishing an employment relationship Art. 6 para. 1 lit. b DSGVO. After receipt, your application will first be pre-sorted by the HR department and, if you are interested, forwarded to the relevant managers of the specialist department. If you receive a rejection, your documents will be deleted/destroyed in the specialist departments. For reasons of verifiability (contractual obligations, if applicable, personnel service providers, proof with regard to possible claims based on the General Equal Treatment Act), your data will be stored for a maximum of 12 months and then deleted. If we store your application for a longer period of time in order to contact you again at a later date about career prospects with our company, this will only happen if you give us your consent to do so (Art. 6 Para. 1 lit. a DSGVO). You can revoke your consent to data processing at any time and without giving reasons with effect for the future by sending us an e-mail to info@oraylis.de.

We use the e-recruiting system “Onlyfy” (Onlyfy International GmbH, Mariahilfer Straße 17, 1060 Vienna) to receive and process applications, so your data is hosted in the systems of Onlyyfy. An agreement on order processing according to Art. 28 para. 3 DSGVO is available.

In order to provide its services, Onlyfy commissions further subcontractors for the provision of IT services. In such a case, Onlyfy contractually obligates the order processors to comply with the applicable data protection provisions. For more information on the purpose and scope of data collection and its processing by Onlyfy, please refer to the privacy policy of Onlyfy International GmbH: https://onlyfy.io/de/datenschutzerklaerung/.

To generate applicants, we also use Mobile Funnel from Software perspective. You can find all information about this in § 3 “Use of Mobile Funnel”.

Cookies

Cookies are small text files that are placed on your computer by a web server. When you visit the website again, it can recognize your web browser through the cookie. Cookies cannot execute programs or transmit viruses to your computer. They serve to make the internet offering more user-friendly and effective overall.

There are different types of cookies, whose scope and functionality we would now like to explain:

• There are so-called temporary or transient cookies, which are automatically deleted when you close the browser. These include session cookies, among others. These store a so-called session ID, which allows various requests from your browser to be assigned to a common session. This enables your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close your web browser.
• Furthermore, there are permanent or persistent cookies, which remain stored after closing the browser but are automatically deleted after a specified period. The duration varies depending on the cookie, although we would like to point out that you can delete the cookies at any time using the security settings of your web browser.
• Third-party cookies are cookies that are offered by providers other than the controller operating the online service.

We also use Mobile Funnel (hereinafter: Funnel) for the technical implementation of various forms. Through the use of this tool, cookies are also set, about which you can find more information in § 3 (section on the use of Mobile Funnel). The use of cookies is based on Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG, only in the case that you have given us your consent through the selection in our consent banner. If you have not consented, no data processing takes place.

Detailed information about the cookies and pixels we use can be obtained by clicking on the “Privacy Settings” button integrated in the footer of our website and thus calling up the consent banner. You can then view detailed information about the individual tools under the right-hand item “Services”.

Legal Basis for Use

The use of certain cookies is necessary to ensure the functionality and security of our site (Art. 6(1)(f) GDPR, legitimate interest). When you visit our site for the first time, you will be informed via our consent banner which technically necessary cookies are strictly required for the operation of the site. Via the consent banner, you can also make a selection as to which technically non-essential cookies are used based on your visit to our site.

The implementation of this selection via the consent banner we use requires the use of a cookie that is stored on your device for a period of one year, unless you delete it beforehand through your browser settings. Through the use of a consent banner, the following data is processed:

• Date and time of the visit
• Browser information
• Information about consents
• Device information
• The IP address of the requesting device.

The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in maintaining proof of the cookie selection you have made and fulfilling our accountability obligation under Art. 5(2) GDPR.

If you consent via the consent banner that technically non-essential cookies (usually for the implementation of tracking and remarketing tools) are set, the processing of your personal data is based on your consent (Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG)

Use of Google reCAPTCHA

We use Google reCAPTCHA on our website, a service of Google Ireland Limited with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. Google reCAPTCHA attempts to distinguish whether a particular action is performed by a human or by a computer program or “bot”. During the verification by Google reCAPTCHA, the following personal data, among others, is transmitted to Google:

• The page that integrates Google reCAPTCHA
• Your IP address
• Your browser’s language setting
• Information about screen and window resolution
• The time zone
• Installation of browser plugins

Additionally, Google reCAPTCHA checks whether a cookie has already been set in your browser. If this is not the case, a cookie is set by Google reCAPTCHA.

Furthermore, we would like to inform you that Google Fonts is a component of the Google reCAPTCHA tool and is loaded as a necessary sub-function within this service.

For details about the collection and storage of your personal data as well as the type, scope, and purpose of their use by Google reCAPTCHA, please refer to Google’s privacy policy: https://policies.google.com/technologies/partner-sites?hl=de.

Use of Google Analytics for Web Analysis

We use Google Analytics on our website, a service of Google Ireland Limited with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. This is a web-based analysis tool with which we can analyze the use of our website and make our web presence more interest-appropriate. During your visit to our website, Google Analytics places a cookie on your device with which your browser can be recognized and your behavior analyzed. When subpages of our website are accessed, the following personal data is collected by Google Analytics, among others:

• Your IP address
• The subpage accessed and time of access
• The source of your visit (i.e., via which website you came to us)
• Technical information (information about browser, internet provider, device, and screen resolution)
• The achievement of “website goals” (e.g., contact requests, newsletter registrations)

The use of Google Analytics is based on your consent according to Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG only in the case that you have given us your consent through the selection in our cookie banner. We would like to inform you that you can revoke your consent at any time according to Art. 7(3) GDPR with effect for the future without stating reasons by clicking on the “Privacy Settings” button integrated in the footer of our website and thus calling up the consent banner. Using the banner, you can then make a new selection. Alternatively, Google provides a deactivation add-on that can be installed on common internet browsers. The link to the deactivation add-on can be found at: https://tools.google.com/dlpage/gaoptout?hl=de. This add-on ensures that information about your visit to our website is not transmitted to Google Analytics.

We cannot rule out that personal data may be transmitted outside the legal territory of the European Union, e.g., to servers located in the USA. Google is certified under the Data Privacy Framework and guarantees an equivalent level of data protection in the event of a possible data transfer to the USA. Furthermore, we have concluded agreements with Google regarding data processing. Through these agreements, Google ensures that they process the data in accordance with the GDPR and guarantee the protection of the rights of the data subject (Art. 45, 46 GDPR).

For details about the collection and storage of your personal data as well as the type, scope, and purpose of their use by Google Analytics, please refer to Google’s privacy policy: https://policies.google.com/technologies/partner-sites?hl=de.

Google Ads

For the promotion of our website, we use Google Ads (Google Ireland Limited with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland). Google Ads is an internet advertising service that allows advertisers to place ads both in Google’s search engine results and in the Google advertising network. Google Ads enables an advertiser to predefine certain keywords that will cause an ad to appear in Google’s search engine results only when the user retrieves a keyword-relevant search result with the search engine. In the Google advertising network, the ads are distributed via an automatic algorithm and in compliance with the predefined keywords on thematically relevant websites.

If a data subject accesses our website via a Google ad, a so-called conversion cookie is placed on the data subject’s IT system by Google. The purpose of Google Ads is to promote our website by displaying interest-relevant advertising on third-party websites and in the search engine results of Google and to display third-party advertising on our website. A conversion cookie loses its validity after 30 days and does not serve to identify the data subject. Via the conversion cookie, it can be tracked whether certain subpages of our website have been accessed, provided the cookie has not yet expired. Through the conversion cookie, both we and Google can track how a data subject who came to our website via an AdWords ad behaved, e.g., whether they ordered a newsletter or not.

The data and information collected through the use of the conversion cookie are used by Google to create visit statistics for our website. These visit statistics are in turn used by us to determine the total number of users who were referred to us via Ads ads, i.e., to determine the success or failure of the respective Ads ad and to optimize our AdWords ads for the future or to make our web presence more interest-appropriate. The use of Google AdWords is based on your consent according to Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG only in the case that you have given us your consent through the selection in our cookie banner. You can revoke your consent at any time according to Art. 7(3) GDPR with effect for the future without stating reasons by clicking on the “Privacy Settings” button integrated in the footer of our website and thus calling up the consent banner. Using the banner, you can then make a new selection. Additionally, you can object to interest-based advertising by Google by calling up www.google.de/settings/ads in the internet browser you use and making the desired settings there.

We cannot rule out that personal data may be transmitted outside the legal territory of the European Union, e.g., to servers located in the USA. Google is certified under the Data Privacy Framework and guarantees an equivalent level of data protection in the event of a possible data transfer to the USA. Furthermore, we have concluded agreements with Google regarding data processing. Through these agreements, Google ensures that they process the data in accordance with the GDPR and guarantee the protection of the rights of the data subject (Art. 45, 46 GDPR).

For details about the collection and storage of your personal data as well as the type, scope, and purpose of their use by Google Ads, please refer to Google’s privacy policy: https://policies.google.com/technologies/partner-sites?hl=de.

Google Tag Manager

We use Google Tag Manager on our website, a service of Google Ireland Limited with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. This is an organizational tool with which we can manage our analysis tags via an interface. In doing so, Google Tag Manager collects data on our website and forwards it to our connected analysis tools. The connected analysis tools store and evaluate this data. Google Tag Manager itself does not set cookies and does not store personal data. The organizational tool only collects data about how individual tags are used.

The use of Google Tag Manager is based on Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG only in the case that you have given us your consent through the selection in our cookie banner. You can revoke your consent at any time according to Art. 7(3) GDPR with effect for the future without stating reasons by clicking on the “Privacy Settings” button integrated in the footer of our website and thus calling up the consent banner. Using the banner, you can then make a new selection.

We cannot rule out that personal data may be transmitted outside the legal territory of the European Union, e.g., to servers located in the USA. Google is certified under the Data Privacy Framework and guarantees an equivalent level of data protection in the event of a possible data transfer to the USA. Furthermore, we have concluded agreements with Google regarding data processing. Through these agreements, Google ensures that they process the data in accordance with the GDPR and guarantee the protection of the rights of the data subject (Art. 45, 46 GDPR).

Further information about Google Tag Manager can be found at https://support.google.com/tagmanager/answer/9323295?hl=de. For details about the collection and storage of your personal data as well as the type, scope, and purpose of their use through the use of Google Tag Manager, please refer to Google’s privacy policy: https://policies.google.com/privacy.

Hotjar

We use Hotjar on our website. This is a web analysis service of Hotjar Limited, Level 2, St. Julian’s Business Centre 3, Elia Zammit Street, St. Julian’s STJ 1000, Malta. With Hotjar, we can record and evaluate your user behavior on our website, in particular your mouse behavior (movement, clicks). Your visit to our website is anonymized. Furthermore, only information about the operating system, your internet browser, incoming or outgoing referrals (so-called links), geographical origin, and the device used is evaluated and processed for statistical purposes.

The use of Hotjar is based on Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG only in the case that you have given us your consent through the selection in our consent banner. If you have not consented, no data processing takes place.

You can revoke your consent at any time according to Art. 7(3) GDPR with effect for the future without stating reasons by clicking on the “Privacy Settings” button integrated in the footer of our website and thus calling up the consent banner. Using the banner, you can then make a new selection.

For details about the collection and storage of your personal data as well as the type, scope, and purpose of their use by Hotjar, please refer to Hotjar’s privacy policy: https://hotjar.com/privacy.

Hubspot Pixel

Furthermore, we use the analysis function of the CRM software Hubspot we use (see also § 3) on our website. Through the use of Hubspot, pixels are stored locally on your device and thus enable an analysis of the use of the website, in particular the use of the contact forms integrated on our site. For this purpose, data such as your IP address, geographical location, type of browser, duration of visit, and pages accessed are collected and analyzed by Hubspot.

The use of the Hubspot Pixel is based on your consent according to Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG only in the case that you have given us your consent through the selection in our cookie banner. You can revoke your consent at any time according to Art. 7(3) GDPR with effect for the future without stating reasons by clicking on the “Privacy Settings” button integrated in the footer of our website and thus calling up the consent banner. Using the banner, you can then make a new selection.

We cannot rule out that personal data may be transmitted outside the legal territory of the European Union, e.g., to servers located in the USA. Hubspot is certified under the Data Privacy Framework and guarantees an equivalent level of data protection in the event of a possible data transfer to the USA. Furthermore, we have concluded a Data Protection Addendum with Hubspot. Through these agreements, Hubspot ensures that the data is processed in accordance with the GDPR and that the protection of the rights of the data subject is guaranteed (Art. 45, 46 GDPR).

Facebook Pixel

On our website, the so-called “Facebook Pixel” of the provider Facebook (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) is used.

This is a code that we have implemented on our website. When you visit our website, this code establishes a connection with Facebook’s servers to track your behavior on our website. Among other things, the following personal data is collected by the Facebook Pixel:

• Your IP address
• Device information (device ID, device type, and your operating system)

Facebook uses this personal data to identify visitors to our website and to assign their actions to a Facebook user account as well as to display personalized advertising and create interest-based user profiles. The individual data processing operations and their scope are not necessarily traceable for us. The collected data remains anonymous and invisible to us and is only usable for us in the context of measuring the effectiveness of advertising placements.

The use of the Facebook Pixel is based on Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG only in the case that you have given us your consent through the selection in our consent banner. If you have not consented, no data processing takes place.

You can revoke your consent at any time according to Art. 7(3) GDPR with effect for the future without stating reasons by clicking on the “Privacy Settings” button integrated in the footer of our website and thus calling up the consent banner. Using the banner, you can then make a new selection.

We cannot rule out that personal data may be transmitted outside the legal territory of the European Union, e.g., to servers located in the USA. Meta is certified under the Data Privacy Framework and guarantees an equivalent level of data protection in the event of a possible data transfer to the USA. Furthermore, Facebook ensures within the framework of contractual agreements that they process the data in accordance with the GDPR and guarantee the protection of the rights of the data subject (Art. 45, 46 GDPR).

For details about the collection and storage of your personal data as well as the type, scope, and purpose of their use by the Facebook Pixel, please refer to Facebook’s privacy policy: https://de-de.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0.

LinkedIn Insight Tag

On our website, we use the LinkedIn Insight Tag of LinkedIn Corporation and the associated conversion tracking technology as well as the retargeting function of LinkedIn Ireland Unlimited Company with its registered office at Wilton Place, Dublin 2, Ireland. During your visit to our website, the LinkedIn Insight Tag places a cookie on your device with which LinkedIn members can be identified and their behavior analyzed. Among other things, the following personal data is collected by the LinkedIn Insight Tag:

• Your IP address
• Referrer URL and URL
• Time of access
• Technical information (information about browser, internet provider, device, and screen resolution)

This data is encrypted and anonymized within seven days. The anonymized data is deleted within 90 days. We do not receive any personal data from LinkedIn. The individual data processing operations and their scope are not necessarily traceable for us. We can only see summarized reports about the website’s target audience and ad performance in order to achieve a target group-appropriate improvement of the user experience when visiting our website.

If you are logged into your LinkedIn account during an online session, LinkedIn assigns your visit to our website to your personal user account. In addition, the use of the LinkedIn Insight Tag enables retargeting of visitors to our website. Based on this retargeting, we can address visitors to our website with advertising outside our website.

The use of the LinkedIn Insight Tag is based on Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG only in the case that you have given us your consent through the selection in our consent banner. If you have not consented, no data processing takes place.

You can revoke your consent at any time according to Art. 7(3) GDPR with effect for the future without stating reasons by clicking on the “Privacy Settings” button integrated in the footer of our website and thus calling up the consent banner. Using the banner, you can then make a new selection. Additionally, we recommend that you log out of your LinkedIn account, delete your cookies in the browser settings, and restart the browser. Alternatively, you can object to the collection by the LinkedIn Insight Tag by adjusting your advertising settings in your LinkedIn profile accordingly. In this regard, you can use the following link to disable the use of the LinkedIn Insight Tag and the use of interest-based advertising on LinkedIn: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

We cannot rule out that personal data may be transmitted outside the legal territory of the European Union, e.g., to servers located in the USA. LinkedIn is certified under the Data Privacy Framework and guarantees an equivalent level of data protection in the event of a possible data transfer to the USA. Furthermore, LinkedIn ensures within the framework of contractual agreements that the data is processed in accordance with the GDPR and that the protection of the rights of the data subject is guaranteed (Art. 45, 46 GDPR).

For details about the collection and storage of your personal data as well as the type, scope, and purpose of their use by the LinkedIn Insight Tag, please refer to LinkedIn’s privacy policy. There you will also find further information about your rights and setting options to protect your privacy https://de.linkedin.com/legal/privacy-policy?#choices-oblig.

Zapier

We use Zapier on our website, a service of Zapier Inc. with its registered office at 548 Market St #62411, San Francisco, California 94104, USA. Zapier is a web service with which we can link actions between different tools and thus synchronize the applications with each other. During the use of Zapier, the following personal data, among others, can be collected:

• Names,
• Email addresses,
• IP address,
• Details about the website visit

The use of Zapier is based on Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG only in the case that you have given us your consent through the selection in our consent banner. If you have not consented, Zapier will not be used.

You can revoke your consent at any time according to Art. 7(3) GDPR with effect for the future without stating reasons by clicking on the “Privacy Settings” button integrated in the footer of our website and thus calling up the consent banner. Using the banner, you can then make a new selection.

The personal data transmitted to Zapier is used solely for technical processing and for the administration of our services.

Zapier is certified under the Data Privacy Framework and guarantees an equivalent level of data protection in the event of a possible data transfer to the USA

For details about the collection and storage of your personal data as well as the type, scope, and purpose of their use by Zapier, please refer to Zapier’s privacy policy: https://zapier.com/privacy.

Surfer SEO

We use the analysis tool Surfer SEO, a service of Surfer Sp. z o.o., Plac Solny 14/3, 50-062 Wrocław, Poland. With Surfer SEO, we are shown anomalies on our website and are supported in using the right keywords to optimize our texts as best as possible for search engines.

The use of Surfer SEO is based on Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG only in the case that you have given us your consent through the selection in our consent banner. If you have not consented, Zapier will not be used.

You can revoke your consent at any time according to Art. 7(3) GDPR with effect for the future without stating reasons by clicking on the “Privacy Settings” button integrated in the footer of our website and thus calling up the consent banner. Using the banner, you can then make a new selection.

For details about the collection and storage of your personal data as well as the type, scope, and purpose of their use by Surfer SEO, please refer to Surfer SEO’s privacy policy: https://surferseo.com/privacy-policy/.

Social Plug Ins
Through the use of the plug-ins named below, we offer you the opportunity to interact with social networks and other users so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 p. 1 lit. f DS-GVO. We use the so-called Shariff solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can identify the provider of the plug-in by marking the box with its initial letter or logo. We give you the opportunity to communicate directly with the provider of the plug-in via the button. Only when you click on the marked box and thereby activate it, does the plug-in provider receive the information that you have accessed the corresponding website of our online offer

• Facebook
• X
• LinkedIn
• Xing

You have the option of interacting with the social network by clicking on the button. Please note that even without interaction on your part, your data will be collected by the provider of the social network. To the best of our knowledge, we inform you as follows:
By using the plug-in, the plug-in provider receives the information that you have accessed the corresponding website of our online offer. In addition, the IP address, the date and time of the request; the time zone difference to Greenwich Mean Time; the content of the request (specific page); the access status/HTTP status code; the respective amount of data transferred; the website from which the request comes, the browser; the operating system and its interface and the language as well as the version of the browser software are transmitted.
According to the providers, the IP address is anonymised immediately after collection. By activating the plug-in, your personal data may be transmitted to the respective plug-in provider and stored there (in the case of US providers, in the USA). Since the plug-in provider collects the data in particular via cookies, we recommend that you delete all cookies via your browser’s security settings before clicking on the greyed-out box.

The plug-in provider stores the data collected about you as a usage profile and uses it for the purposes of advertising, market research and/or designing its website to meet your needs. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right.
The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, your data collected from us will be directly assigned to your account with the plug-in provider. If you click the activated button and, for example, link to the page, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this will help you to avoid an assignment to your profile with the plug-in provider.

We have no influence on the data collected and data processing procedures, nor are we aware of the full extent of the data collection, the purposes of the processing, the storage periods. We also have no information on the deletion of the collected data by the plug-in provider.
Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the data protection declarations of these providers communicated below. There you will also receive further information on your rights in this regard and setting options for protecting your privacy.

Facebook privacy policy
http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Privacy policy X
X, Inc, 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://x.com/privacy. X has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Privacy policy LinkedIn
LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy. LinkedIn hat sich dem EU-US-Privacy-Shield unterworfen, https://www.privacyshield.gov/EU-US-Framework.

Privacy policy Xing
Xing AG, Gänsemarkt 43, 20354 Hamburg, DE; http://www.xing.com/privacy.

Integration of widgets from the providers kununu and glassdoor

We have integrated so-called “widgets” from the providers kununu and glassdoor on our careers page. The integration of these widgets means that if the overall rating of our company changes in these forums, this change is automatically adjusted on our website.

When you call up the page, kununu or glassdoor receives the information that you have called up the corresponding sub-page of our website. In addition, the IP address, date, time, content (specific page) of the request; the access status/HTTP status code; the respective amount of data transferred; the website from which the request comes, the browser; the operating system and its interface and the language as well as the version of the browser software are transmitted. This takes place regardless of whether the provider of the respective widget provides a user account via which you are logged in or whether no user account exists. If you are logged in to the respective provider, your data will be directly assigned to your account. If you do not wish to have your data associated with your profile, you must log out before accessing the provider’s site. We assume that the respective provider uses the data received for the purposes of advertising, market research, creation of user profiles or similar, but we cannot provide you with any concrete information on this.

The provider Glassdoor Inc. is certified under the E.U.-U.S. Privacy Shield agreement and, according to its own statement, processes the data in the function of the data controller. Please contact the respective provider for further information on the purpose and scope of the processing of the data as well as your rights and settings options in this regard:

• Privacy policy kununu: kununu GmbH, Neutorgasse 4-8, Top 3.02, A-1010 Wien,
  https://privacy.xing.com/de/datenschutzerklaerung
• Privacy policy glassdoor: Glassdoor, Inc., 100 Shoreline Highway, Building A, Mill Valley, California, 94941, USA, https://www.glassdoor.com/about/privacy.htm, https://help.glassdoor.com/Privacy_Request/en_US

Integration of YouTube videos (extended data protection mode)
We have integrated YouTube videos into our online offer, which are stored on http://www.YouTube.com and can be played directly from our website. These are all integrated in “extended data protection mode”, i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence on this data transmission.

By visiting the website, YouTube receives the information that you have accessed the corresponding sub-page of our website. In addition, the IP address, the date and time of the request; the time zone difference to Greenwich Mean Time; the content of the request (specific page); the access status/HTTP status code; the respective amount of data transferred; the website from which the request comes, the browser; the operating system and its interface and the language as well as the version of the browser software are transmitted. This takes place regardless of whether YouTube provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or designing its website in line with requirements. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right.

For more information on the purpose and scope of data collection and its processing by YouTube, please see the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

This privacy statement informs you about the type, scope, and purpose of the collection and use of personal data through our corporate presence on social networks. As the operator of corporate presences on social networks, we process personal data jointly with the respective provider of the social network. Personal data, according to Art. 4 No. 1 GDPR, is all information relating to an identified or identifiable person (e.g., name, first name, date of birth, address, photos, etc.). The legal basis for processing your personal data is Art. 6 (1) (f) GDPR. Our legitimate interest lies in presenting our company in common communication media and offering users, interested parties, and customers a preferred, nowadays common form of communication with our company. We operate the following corporate presences on social networks:

• Facebook
• Instagram
• LinkedIn
• X
• Xing
• YouTube
• kununu
• glassdoor

We point out that your use of social media, particularly interaction with the networks, such as posting and sharing content, is at your own responsibility. Alternatively, you can contact us via the contact form on our website or by email/letter/phone. Please find our contact details in § 1 of our privacy statement.

Joint Responsibility according to Art. 26 GDPR

The joint data processing with the respective provider of the social network requires, according to Art. 26 GDPR, the conclusion of an agreement in which the distribution of our obligations under the GDPR and the obligations of the respective provider of the social network are bindingly established. By creating and publishing our corporate presences, we have concluded such an agreement by accepting the so-called terms of use of the respective social network, which regulate the conditions for using the page and the resulting data processing.

The providers of the social network generally assume primary responsibility for fulfilling the data protection obligations (cf. ECJ judgment of 5.6.2018, Case C-210/16). This includes, among other things:

• The fulfillment of information obligations (pursuant to Art. 12, 13 GDPR)
• The data subject rights (pursuant to Art. 15-22 GDPR)
• The security of processing (pursuant to Art. 32 GDPR)
• The reporting of data protection violations (pursuant to Art. 33, 34 GDPR)

Further details about the collection and storage of your personal data as well as about the type, scope, and purpose of their use by the respective provider of the social network can be found in the respective privacy statement of the platform operator.

We as operators of corporate presences on social networks also assume responsibility for fulfilling our data protection obligations. This includes, among other things:

• The lawfulness of data processing (pursuant to Art. 6 (1) GDPR)
• The forwarding of data subject inquiries relating to content published by us on the respective social networks to the respective platform operator
• The obligation to create a privacy statement for our corporate presence on social networks

Processing of Your Data When Using Our Social Networks

Facebook

We use the technical platform and services of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland for our information service on Facebook (https://de-de.facebook.com/ORAYLIS/).

Your visit to our Facebook profile triggers numerous data processing operations. In doing so, your personal data is collected, used, and stored not only by us but also by Facebook. This happens even if you yourself do not have a profile on Facebook. We only process the personal data that you provide to us through your public account and commenting on our posts. You are not obliged to provide us with your personal data. However, this may be necessary for certain functionalities of our Facebook profile. These functionalities are not available or only available to a limited extent if you do not provide us with your personal data.

The legal basis for processing your personal data is Art. 6 (1) sentence 1 (f) GDPR. Our legitimate interest lies in being able to communicate with users, interested parties, and customers and to inform them about our services.

If you have a Facebook profile and are logged in, Facebook processes, among other things, your voluntarily entered data such as first and last name, username, email address, and telephone number. Additionally, Facebook can analyze your usage behavior and create a corresponding user profile. So-called cookies are stored on your device. These cookies allow Facebook to create user profiles based on your preferences and interests and to show you tailored advertising (within and outside the platform). We have no access to the usage data that Facebook collects to create these statistics. The individual data processing operations and their scope are not necessarily comprehensible to us. We are only provided with anonymous usage statistics by Facebook, which we use in accordance with Art. 6 (1) sentence 1 (f) GDPR to improve the user experience of our Facebook profile in a target-group-oriented manner.

If you do not agree with Facebook assigning the collected data directly to your Facebook profile, we recommend that you log out of this social network, delete your cookies in your browser settings, and restart your browser. Additionally, you have the right to object to the creation of these user profiles, but you must contact Facebook to exercise this right.

We cannot rule out that personal data may be transmitted outside the legal territory of the European Union, for example to servers located in the USA. Meta is certified under the Data Privacy Framework and guarantees an equivalent level of data protection in the event of a possible data transfer to the USA. Furthermore, we have concluded agreements with Meta regarding data processing. Through these agreements, Meta assures that the data is processed in accordance with the General Data Protection Regulation and that the protection of the rights of the data subject is guaranteed (Art. 45, 46 GDPR).

Details about the collection and storage of your personal data as well as about the type, scope, and purpose of their use by Facebook can be found in Facebook’s privacy statements: https://www.facebook.com/about/privacy/update?ref=old_policy. You will also find further information about your rights at https://www.facebook.com/privacy/policy/?section_id=7-WhatIsOurLegal. Additionally, inform yourself about your privacy settings at https://www.facebook.com/privacy/guide/security to configure notifications to your network, disable the visibility of your profile via search engines, or manage your profile display.

Instagram

We use the technical platform and services of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland for our information service on Instagram (https://www.instagram.com/oraylis_people/?hl=de).

Your visit to our Instagram profile triggers numerous data processing operations. In doing so, your personal data is collected, used, and stored not only by us but also by Instagram. This happens even if you yourself do not have a profile on Instagram. We only process the personal data that you provide to us through your public account and commenting on our posts. You are not obliged to provide us with your personal data. However, this may be necessary for certain functionalities of our Instagram profile. These functionalities are not available or only available to a limited extent if you do not provide us with your personal data.

The legal basis for processing your personal data is Art. 6 (1) sentence 1 (f) GDPR. Our legitimate interest lies in being able to communicate with users, interested parties, and customers and to inform them about our services.

If you have an Instagram profile and are logged in, Instagram processes, among other things, your voluntarily entered data such as first and last name, username, email address, and telephone number. Additionally, Instagram can analyze your usage behavior and create a corresponding user profile. So-called cookies are stored on your device. These cookies allow Instagram to create user profiles based on your preferences and interests and to show you tailored advertising (within and outside the platform). We have no access to the usage data that Instagram collects to create these statistics. The individual data processing operations and their scope are not necessarily comprehensible to us. We are only provided with anonymous usage statistics by Instagram, which we use in accordance with Art. 6 (1) sentence 1 (f) GDPR to improve the user experience of our Instagram profile in a target-group-oriented manner.

If you do not agree with Instagram assigning the collected data directly to your Instagram profile, we recommend that you log out of this social network, delete your cookies in your browser settings, and restart your browser. Additionally, you have the right to object to the creation of these user profiles, but you must contact Instagram to exercise this right.

We cannot rule out that personal data may be transmitted outside the legal territory of the European Union, for example to servers located in the USA. Meta is certified under the Data Privacy Framework and guarantees an equivalent level of data protection in the event of a possible data transfer to the USA. Furthermore, we have concluded agreements with Meta regarding data processing. Through these agreements, Meta assures that the data is processed in accordance with the General Data Protection Regulation and that the protection of the rights of the data subject is guaranteed (Art. 45, 46 GDPR).

Details about the collection and storage of your personal data as well as about the type, scope, and purpose of their use by Instagram can be found in Instagram’s privacy statements: https://help.instagram.com/155833707900388. You will also find further information about your rights under “VI. How can you exercise your rights granted under the GDPR?”. Additionally, inform yourself about your privacy settings at https://help.instagram.com/811572406418223/?helpref=hc_fnav to configure notifications to your network, disable the visibility of your profile via search engines, or manage your profile display.

LinkedIn

We use the technical platform and services of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland for our information service on LinkedIn (https://de.linkedin.com/company/oraylis-gmbh).

Your visit to our LinkedIn profile triggers numerous data processing operations. In doing so, your personal data is collected, used, and stored not only by us but also by LinkedIn. This happens even if you yourself do not have a profile on LinkedIn. We only process the personal data that you provide to us through your public account and commenting on our posts. You are not obliged to provide us with your personal data. However, this may be necessary for certain functionalities of our LinkedIn profile. These functionalities are not available or only available to a limited extent if you do not provide us with your personal data.

The legal basis for processing your personal data is Art. 6 (1) sentence 1 (f) GDPR. Our legitimate interest lies in being able to communicate with users, interested parties, and customers and to inform them about our services.

If you have a LinkedIn profile and are logged in, LinkedIn processes, among other things, your voluntarily entered data such as first and last name, username, email address, and telephone number. Additionally, LinkedIn can analyze your usage behavior and create a corresponding user profile. So-called cookies are stored on your device. These cookies allow LinkedIn to create user profiles based on your preferences and interests and to show you tailored advertising (within and outside the platform). We have no access to the usage data that LinkedIn collects to create these statistics. The individual data processing operations and their scope are not necessarily comprehensible to us. We are only provided with anonymous usage statistics by LinkedIn, which we use in accordance with Art. 6 (1) sentence 1 (f) GDPR to improve the user experience of our LinkedIn profile in a target-group-oriented manner.

If you do not agree with LinkedIn assigning the collected data directly to your LinkedIn profile, we recommend that you log out of this social network, delete your cookies in your browser settings, and restart your browser. Additionally, you have the right to object to the creation of these user profiles, but you must contact LinkedIn to exercise this right.

We cannot rule out that personal data may be transmitted outside the legal territory of the European Union, for example to servers located in the USA. LinkedIn is certified under the Data Privacy Framework and guarantees an equivalent level of data protection in the event of a possible data transfer to the USA. Furthermore, we have concluded agreements with LinkedIn regarding data processing. Through these agreements, LinkedIn assures that the data is processed in accordance with the General Data Protection Regulation and that the protection of the rights of the data subject is guaranteed (Art. 45, 46 GDPR).

Details about the collection and storage of your personal data as well as about the type, scope, and purpose of their use by LinkedIn can be found in LinkedIn’s privacy statements: https://de.linkedin.com/legal/privacy-policy. You will also find further information about your rights under “4.2 Right to access and control your personal data”. Additionally, inform yourself about your privacy settings at https://www.linkedin.com/help/linkedin/answer/a545600 to configure notifications to your network, disable the visibility of your profile via search engines, or manage your profile display.

X

We use the technical platform and services of X Inc., One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland for our information service on X (https://x.com/oraylisgmbh).

Your visit to our X profile triggers numerous data processing operations. In doing so, your personal data is collected, used, and stored not only by us but also by X. This happens even if you yourself do not have a profile on X. We only process the personal data that you provide to us through your public account and commenting on our posts. You are not obliged to provide us with your personal data. However, this may be necessary for certain functionalities of our X profile. These functionalities are not available or only available to a limited extent if you do not provide us with your personal data.

The legal basis for processing your personal data is Art. 6 (1) sentence 1 (f) GDPR. Our legitimate interest lies in being able to communicate with users, interested parties, and customers and to inform them about our services.

If you have an X profile and are logged in, X processes, among other things, your voluntarily entered data such as first and last name, username, email address, and telephone number. Additionally, X can analyze your usage behavior and create a corresponding user profile. So-called cookies are stored on your device. These cookies allow X to create user profiles based on your preferences and interests and to show you tailored advertising (within and outside the platform). We have no access to the usage data that X collects to create these statistics. The individual data processing operations and their scope are not necessarily comprehensible to us. We are only provided with anonymous usage statistics by X, which we use pursuant to Art. 6 (1) sentence 1 (f) GDPR to improve the user experience of our X profile in a target-group-oriented manner.

If you do not agree with X processing your personal data, we recommend that you log out of this social network, delete your cookies in your browser settings, and restart your browser. Additionally, you have the right to object to the creation of these user profiles, but you must contact X to exercise this right.

We cannot rule out that when accessing our corporate presence on X, personal data may be transmitted outside the legal territory of the European Union, for example to servers located in the USA. Furthermore, we expressly point out that an equivalent level of data protection cannot be guaranteed for the USA.

Details about the collection and storage of your personal data as well as about the type, scope, and purpose of their use by X can be found in X’s privacy statement: https://x.com/de/privacy. You will also find further information about your rights under “How can I control my data”. Additionally, inform yourself about your privacy settings at https://help.x.com/de/resources/how-you-can-control-your-privacy to configure notifications to your network, disable the visibility of your profile via search engines, or manage your profile display.

Xing

We use the technical platform and services of New Work SE, Am Strandkai 1, 20457 Hamburg, Germany for our information service on Xing (https://www.xing.com/pages/oraylis).

Your visit to our Xing profile triggers numerous data processing operations. In doing so, your personal data is collected, used, and stored not only by us but also by Xing. This happens even if you yourself do not have a Xing profile. We only process the personal data that you provide to us through your public account and commenting on our posts. You are not obliged to provide us with your personal data. However, this may be necessary for certain functionalities of our Xing profile on social networks. These functionalities are not available or only available to a limited extent if you do not provide us with your personal data.

The legal basis for processing your personal data is Art. 6 (1) sentence 1 (f) GDPR. Our legitimate interest lies in being able to communicate with users, interested parties, and customers and to inform them about our services.

If you have a Xing profile and are logged in, Xing processes, among other things, your voluntarily entered data such as first and last name, username, email address, and telephone number. Additionally, Xing can analyze your usage behavior and create a corresponding usage profile. So-called cookies are stored on your device. These cookies allow Xing to create user profiles based on your preferences and interests and to show you tailored advertising (within and outside the platform). We have no access to the usage data that Xing collects to create these statistics. The individual data processing operations and their scope are not necessarily comprehensible to us.

We are only provided with anonymous usage statistics by Xing, which we use pursuant to Art. 6 (1) sentence 1 (f) GDPR to improve the user experience of our Xing profile in a target-group-oriented manner.

If you do not agree with Xing processing your personal data, we recommend that you log out of this social network, delete your cookies in your browser settings, and restart your browser. Additionally, you have the right to object to the creation of these user profiles, but you must contact Xing to exercise this right.

Details about the collection and storage of your personal data as well as about the type, scope, and purpose of their use by Xing can be found in Xing’s privacy statements: https://privacy.xing.com/de/datenschutzerklaerung. You will also find further information about your rights under “Which rights can you assert?”. Additionally, inform yourself about your privacy settings at https://privacy.xing.com/de/ihre-privatsphaere to configure notifications to your network, disable the visibility of your profile via search engines, or manage your profile display.

YouTube

We use the technical platform and services of Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) for our information service on YouTube (https://www.youtube.com/channel/UCK_IHk4Ybnhk6Z1-3qPdYBw).

Your visit to our YouTube account triggers numerous data processing operations. In doing so, your personal data is collected, used, and stored not only by us but also by YouTube. This happens even if you yourself do not have a YouTube account. We only process the personal data that you provide to us through your public account and commenting on our videos. You are not obliged to provide us with your personal data. However, this may be necessary for certain functionalities of our YouTube account on social networks. These functionalities are not available or only available to a limited extent if you do not provide us with your personal data.

The legal basis for processing your personal data is Art. 6 (1) (f) GDPR. Our legitimate interest lies in being able to communicate with users, interested parties, and customers and to inform them about our services.

If you have a YouTube account and are logged in, YouTube processes, among other things, your voluntarily entered data such as first and last name, username, email address, and telephone number. Additionally, YouTube can analyze your usage behavior and create a corresponding user profile. So-called cookies are stored on your device. These cookies allow YouTube to create user profiles based on your preferences and interests and to show you tailored advertising (within and outside the platform). We have no access to the usage data that YouTube collects to create these statistics. The individual data processing operations and their scope are not necessarily comprehensible to us. We are only provided with anonymous usage statistics by YouTube and/or Google, which we use pursuant to Art. 6 (1) sentence 1 (f) GDPR to improve the user experience of our YouTube account in a target-group-oriented manner.

If you do not agree with YouTube and/or Google processing your personal data, we recommend that you log out of the respective accounts of the aforementioned portals, delete your cookies in your browser settings, and restart your browser. Additionally, you have the right to object to the creation of these user profiles, but you must contact YouTube and/or Google to exercise this right.

We cannot rule out that personal data may be transmitted outside the legal territory of the European Union, for example to servers located in the USA. Furthermore, we expressly point out that an equivalent level of data protection cannot be guaranteed for the USA.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de. You will also find further information about your rights under “Requirements in Europe”. Additionally, inform yourself about your privacy settings at https://myaccount.google.com/intro/privacycheckup?utm_source=pp&utm_medium=Promo-in-product&utm_campaign=pp_body&hl=de to configure notifications to your network, disable the visibility of your profile via search engines, or manage your profile display.

kununu

kununu (https://www.kununu.com/de/oraylis) the rating platform and services of XING kununu Onlyfy GmbH, Schottenring 2-6, A – 1010 Vienna, Austria.

Your visit to our kununu profile triggers numerous data processing operations. In doing so, your personal data is collected, used, and stored not only by us but also by kununu. This happens even if you yourself do not have a kununu profile. We only process the personal data that you provide to us through your public account and commenting on kununu. You are not obliged to provide us with your personal data. However, this may be necessary for certain functionalities of our kununu profile on social networks. These functionalities are not available or only available to a limited extent if you do not provide us with your personal data.

The legal basis for processing your personal data is Art. 6 (1) (f) GDPR. Our legitimate interest lies in communicating with users and responding to their reviews.

If you have a kununu user account and are logged in, kununu processes, among other things, your voluntarily entered data such as first and last name, username, email address, and telephone number. Additionally, kununu can analyze your usage behavior and create a corresponding usage profile. So-called cookies are stored on your device. These cookies allow kununu to create user profiles based on your preferences and interests and to show you tailored advertising (within and outside the platform). We have no access to the usage data that kununu collects to create these statistics. The individual data processing operations and their scope are not necessarily comprehensible to us. Through the “kununu-Insights” function, we are only provided with anonymous statistical evaluations by kununu, from which we derive measures to improve our corporate presence pursuant to Art. 6 (1) sentence 1 (f) GDPR.

If you do not agree with kununu processing your personal data, we recommend that you log out of your kununu user account, delete your cookies in your browser settings, and restart your browser. Additionally, you have the right to object to the creation of these user profiles, but you must contact kununu to exercise this right.

Further information on the purpose and scope of data collection and its processing by kununu can be found in the following privacy statement: https://privacy.xing.com/de/datenschutzerklaerung. You will also find further information about your rights at https://privacy.xing.com/de/datenschutzerklaerung/welche-rechte-koennen-sie-geltend-machen. Additionally, inform yourself about your privacy settings at: https://myaccount.google.com/intro/privacycheckup?utm_source=pp&utm_medium=Promo-in-product&utm_campaign=pp_body&hl=de, to configure notifications to your network, disable the visibility of your profile via search engines, or manage your profile display.

glassdoor

We use the rating platform and services of Glassdoor, Inc., 300 Mission Street, 16th Floor, San Francisco, CA 94105, USA for our information service on glassdoor (https://www.glassdoor.de/%C3%9Cberblick/Arbeit-bei-ORAYLIS-EI_IE1059559.11,18.htm).

Your visit to our glassdoor profile triggers numerous data processing operations. In doing so, your personal data is collected, used, and stored not only by us but also by glassdoor. This happens even if you yourself do not have a glassdoor profile. We only process the personal data that you provide to us through your public account and commenting on glassdoor. You are not obliged to provide us with your personal data. However, this may be necessary for certain functionalities of our glassdoor profile on social networks. These functionalities are not available or only available to a limited extent if you do not provide us with your personal data.

The legal basis for processing your personal data is Art. 6 (1) (f) GDPR. Our legitimate interest lies in communicating with users and responding to their reviews.

If you have a glassdoor, Facebook, or Google user account and are logged in, glassdoor processes, among other things, your voluntarily entered data such as first and last name, username, email address, and telephone number. Additionally, glassdoor can analyze your usage behavior and create a corresponding user profile. So-called cookies are stored on your device. These cookies allow glassdoor to create user profiles based on your preferences and interests and to show you tailored advertising (within and outside the platform). We have no access to the usage data that glassdoor collects to create these statistics. The individual data processing operations and their scope are not necessarily comprehensible to us. We are only provided with anonymous usage statistics by glassdoor, which we use pursuant to Art. 6 (1) sentence 1 (f) GDPR to derive measures for improving our corporate presence.

If you do not agree with glassdoor processing your personal data, we recommend that you log out of the respective accounts of the aforementioned portals, delete your cookies in your browser settings, and restart your browser. Additionally, you have the right to object to the creation of these user profiles, but you must contact glassdoor to exercise this right.

We cannot rule out that personal data may be transmitted outside the legal territory of the European Union, for example to servers located in the USA. Facebook/Instagram/LinkedIn/Twitter/Google is certified under the Data Privacy Framework and guarantees an equivalent level of data protection in the event of a possible data transfer to the USA. Furthermore, we have concluded agreements with Facebook/Glassdoor/Google regarding data processing. Through these agreements, Facebook/Glassdoor/Google assure that they process the data in accordance with the General Data Protection Regulation and ensure the protection of the rights of the data subject (Art. 45, 46 GDPR).

Further information on the purpose and scope of data collection and its processing by glassdoor can be found in glassdoor’s privacy policy: https://hrtechprivacy.com/de/brands/glassdoor#privacypolicy. You will also find further information about your rights at https://hilfe.glassdoor.de/s/privacyrequest?language=de. Additionally, inform yourself about your privacy settings under “Choices Regarding Personal Data” to configure notifications to your network, disable the visibility of your profile via search engines, or manage your profile display.

You have the following rights with regard to the functions of our website explained in the section “Information on data processing” and the purposes of data processing described there:

Right to information (Art. 15 DSGVO)
We must provide you with information as to whether we are processing data relating to you. In the case of such processing, we must, among other things, explain the purposes for which the processing takes place, which categories of personal data are processed, to whom data may be transferred and for how long the data will be stored.

Correction (Art. 16 DSGVO), objection (Art. 21 DSGVO), restriction of processing (Art. 18 DSGVO)
If you discover that we are processing personal data that is incorrect or incomplete, you may of course request rectification. You may also object to the processing for specific reasons and, if justified, request the restriction of processing.

Deletion (Art. 17 DSGVO) and data portability (Art. 20 DSGVO)
In the event that personal data is processed by us, inter alia, without justification or after the purpose has ceased to apply, you may request its erasure. Please note that deletion may not always be possible due to the existence of legal obligations to provide proof/retention. Furthermore, you have the right to receive from us all information that you have provided to us in a structured, common and machine-readable format. For a better understanding and easier readability of the personal rights, we have summarised them here in parts. If required, please inform yourself in the (original text: link to http://eur-lex.europa.eu/legal-con-tent/de/TXT/?uri=CELEX%3A32016R0679) or contact our data protection officer directly. You can exercise your data protection rights at any time and without incurring any costs. Please use the following contact option for your request: info@oraylis.de.

Right to complain to a supervisory authority
You have the right to contact the supervisory authority for data protection regarding compliance with data protection and to lodge a complaint in this regard. The authority responsible for us is:

North Rhine-Westphalia State Commissioner for Data Protection and Freedom of Information (LDI NRW).
Kavalleriestr. 2-4 | 40213 Düsseldorf
Telephone: 0211 384 24-0 | E-Mail: poststelle@ldi.nrw.de