We welcome you to our website and appreciate your interest in our services. We take the protection of your personal data very seriously. We process your data in accordance with applicable data protection laws, in particular the EU General Data Protection Regulation (GDPR) and the country-specific implementing laws that apply to us. Through this Privacy Policy, we provide you with comprehensive information about the processing of your personal data and the rights to which you are entitled.

In general, you can use our website without providing any personal data. However, if you wish to take advantage of certain offers available on our website, the processing of personal data may be necessary. We have created dedicated pages and content about our services (training programs, newsletters, advertising, sales offers, etc.) that we would like to make available to you as our customers and prospective clients; in this area, we provide you with information through applications, some of which require the processing of your personal data. If there is no legal basis for such required processing, we will generally obtain your consent in advance as the data subject.

Personal data refers to information that makes it possible to identify a natural person (data subject). This includes, in particular, name, address, date of birth, telephone number, email address, and your IP address.

Data is considered anonymous if no personal connection to the user can be established.

You can find the privacy notice for our website in this Privacy Policy. Even if you contact us via social media, you will find relevant information on data protection there or a reference to the provisions below.

Data Controller: Basys Gesellschaft für Anwender- und Systemsoftware mbH (Basys) –
A company of the develop group –

Am Weichselgarten 4
91058 Erlangen

t +49-9131-777-40
f +49-9131-777-444

e connect@develop-group.de
w develop-group.de

Contact information for the Data Protection Officer
datenschutz@develop-group.de

First, we would like to take this opportunity to inform you of your rights as a data subject. These rights are set forth in Articles 15–22 of the GDPR. They include:

• The right of access (Art. 15 GDPR),
• The right to erasure (Art. 17 GDPR),
• The right to rectification (Art. 16 GDPR),
• the right to data portability (Art. 20 GDPR),
• the right to restriction of processing (Art. 18 GDPR),
• the right to object to processing (Art. 21 GDPR).

You also have the right to file a complaint with a data protection supervisory authority.

To exercise your rights, please contact: datenschutz@develop-group.de. The same applies if you have questions about data processing within our corporate group or wish to withdraw your consent. You also have the right to file a complaint with a data protection supervisory authority.

We would like to reiterate the following: If we have stored inaccurate information about you, we will correct it as soon as you bring it to our attention.

Please note the following regarding your right to object:

If we process your personal data for the purpose of direct marketing, you have the right to object to this data processing at any time without providing a reason. This also applies to profiling, insofar as it is related to direct marketing.

If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection is free of charge and may be submitted in any form, preferably to: datenschutz@develop-group.de.

In the event that we process your data to safeguard legitimate interests, you may object to this processing at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions.

We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

When processing your personal data, we comply with the provisions of the GDPR and all other applicable data protection regulations. The legal basis for data processing is derived in particular from Article 6 of the GDPR.

We use your data to initiate business relationships, to offer services or products, to fulfill contractual and legal obligations, to carry out a contractual relationship, for advertising purposes through various channels, for statistical purposes, and to strengthen customer relationships, which may also include analyses for marketing purposes and direct marketing.

Your consent also constitutes a legal basis for data processing under data protection law. In this regard, we inform you about the purposes of data processing and your right to withdraw consent.

If the consent also relates to the processing of special categories of personal data, we will expressly point this out to you in the consent form. Otherwise, the processing of special categories of personal data pursuant to Article 9 of the GDPR will only take place if required by law.

Please note that your withdrawal of consent takes effect only for the future. Processing that took place prior to your withdrawal is not affected by it.

Processing of special categories of personal data within the meaning of Article 9(1) of the GDPR takes place only if required by law and there is no reason to believe that your legitimate interest in excluding such processing outweighs this requirement.

We will only disclose your data to third parties (such as data processors) in accordance with legal requirements or with your consent. Otherwise, we will not disclose your data to third parties unless we are required to do so by mandatory legal provisions (such as disclosure to external entities, including regulatory authorities or law enforcement agencies).

Within our corporate group, we ensure that your data is only shared with those individuals who need it to fulfill contractual and legal obligations.

Our corporate group consists of develop group Holding AG and its affiliated companies: Basys Gesellschaft für Anwender- und Systemsoftware mbH, develop group Gebäudeverwaltungs GmbH, and Sigma Gesellschaft für Systementwicklung und Datenverarbeitung mbH. In accordance with data protection requirements, valid data processing agreements are in place between all companies within the group.

In some cases, service providers may assist our specialist departments (field service, sales, etc.) in performing their tasks. The necessary data protection agreements are always concluded with all service providers.

Data will only be transferred to third countries (outside the European Union or the European Economic Area) if required by law or if you have given us your consent to do so.

We do not transfer your personal data to any service provider outside the European Economic Area.

We store your data for as long as it is needed for the respective processing purpose. Please note that numerous retention periods require that data continue to be stored. This applies in particular to retention obligations under commercial or tax law (as set forth in the German Commercial Code, the German Fiscal Code, and similar statutes). Unless further retention obligations apply, the data will be routinely deleted once the purpose has been fulfilled.

In addition, we may retain data if you have given us your consent to do so, or if legal disputes arise and we need to use the data as evidence within the statutory limitation periods, which can be up to 30 (thirty) years; the standard limitation period is 3 (three) years.

Security
To provide the best possible protection for the data we store against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons, we implement appropriate technical and organizational security measures. Security levels are continuously reviewed in collaboration with security experts and adapted to new security standards. Data exchange to and from our website is always encrypted. We use HTTPS as the transmission protocol for our website, always employing the latest encryption protocols. Additionally, you have the option to use alternative communication channels (such as postal mail).

TLS Encryption
For security reasons and to protect the transmission of confidential content—such as the inquiries you send to us as the website operator—our website uses TLS (Transport Layer Security) encryption, also known by its former name, Secure Sockets Layer (SSL). You can recognize an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the padlock icon in your browser bar. When TLS encryption is enabled, the data you transmit to us cannot be read by third parties. Please note that data transmission over the Internet (for example, when communicating via email) may be subject to security vulnerabilities. It is not possible to completely protect data from access by third parties.

Various types of personal data are necessary for the establishment, performance, and termination of, for example, a service contract or another legal obligation, as well as for the fulfillment of the associated contractual and legal obligations. The same applies to the use of our website and the various functions it provides.

We have summarized the details for you in Section 4, “Purposes and legal basis for data processing”. In certain cases, data must also be collected or provided in accordance with legal provisions. Please note that it is not possible to process your inquiry or fulfill an underlying contractual obligation without the provision of this data.

The specific context determines which data we process: This depends, for example, on whether you are submitting an inquiry via a form, sending us a job application, or booking a training

Please note that, where applicable, we may also provide information regarding specific processing situations separately in the appropriate section—for example, when uploading application materials or submitting a contact request.

We may collect your data through our website, depending on where and how you interact with it. Please refer to the information below for further details.

However, we generally receive your personal data from you as part of the contract initiation process or during the ongoing contractual relationship. In exceptional cases and under certain circumstances, we may also obtain your personal data from other publicly available sources, such as print and online media, as well as at trade shows or similar events.

When you visit our website, we collect and process the following data:

• Name of the Internet service provider
• Information about the website from which you are visiting us
• Web browser and operating system used
• The IP address assigned by your Internet service provider
• Requested files, amount of data transferred, downloads / file exports
• Information about the pages you visit on our site, including date and time
• Analytical data, if applicable

For technical security reasons (in particular to defend against attempted attacks on our web server), this data is stored in accordance with Article 6(1)(f) of the GDPR. After no later than 7 (seven) days, the data is anonymized by truncating the IP address so that no connection to the user can be established.

When you contact us, we also collect and process the following data:

• Last name, first name
• Contact information
• Title
• Email address
• Information regarding requests and interests

For online applications, we collect and process the following data:

• Last name, first name
• Title
• Email address
• Address
• Contact information
• Data you provide to us
• In addition, we use data that we have lawfully obtained from publicly accessible directories (such as professional networks or job portals).

For more information, please see our privacy notice for applicant data protection and Section 15.

For newsletters, we also collect and process the following data:

• Last name, first name
• Title
• Email address
• Where applicable, analytics data from newsletter evaluation

When you register for and participate in our webinars/training sessions, we process the following data:

• Contact information (specifically first and last name; if applicable, first and last names of contacts, as well as any honorifics; mailing address; business phone number(s) with extension; fax number(s); email address(es); …)
• Employment-related data (such as position within the company, department, …)
• Records of communication with you, such as emails, messages, and phone calls (no recording of the call itself), …
• Company data (industry, company name, address, …)
• Billing data (specifically billing address and VAT ID number)
• Contract data (e.g., order numbers, contract numbers, ASQF numbers, …)
• Training data (attendance records)

We process your personal data (see Section 11) exclusively in connection with your job application for the purpose of deciding whether to establish an employment relationship with you. We process only those personal data that are necessary for conducting the application process.

Processing may also take place electronically, particularly when we receive application materials via email.

If an employment relationship is established between you and us, we may continue to process the personal data we have already received from you for purposes related to the employment relationship (personnel file) if this is necessary for the conduct or termination of the employment relationship after it has been established.

We store your personal data for as long as necessary to make a decision regarding your application. If your application is unsuccessful, we will inform you immediately. Your data will be stored for up to 6 (six) months following receipt of our decision to complete the entire application process and will be irrevocably deleted no later than the expiration of this period, unless longer storage is required due to legal disputes.

Further information can be found in our guidelines on applicant data protection.

If you contact us via email, we will process the personal data provided in the email solely for the purpose of handling your inquiry. If you do not use any contact forms that may be provided, no further data will be collected.

By using email, you agree that the data controller may send data and documents related to the contractual relationship via unencrypted email to your email address. You give your consent with the understanding that the emails sent to you may contain personal data and that sending such unencrypted emails involves potential risks, such as unauthorized access to the content, the creation of copies, or the alteration or deletion of the email. If you no longer wish to be contacted in this manner, please feel free to let us know at any time. If you would like to have your emails encrypted, please contact us.

We are interested in maintaining our customer relationship with you and providing you with information and/or offers regarding our services and products. Therefore, we process your data to send you relevant information and offers via email.

If you do not wish to receive such communications, you may object at any time to the use of your personal data for direct marketing purposes; this also applies to profiling, insofar as it is related to direct marketing. If you object, we will no longer process your data for this purpose.

The objection may be made free of charge and without formal requirements, without the need to provide reasons, and should preferably be directed to +49 (0) 9131 777-40, via email to datenschutz@develop-group.de, or by mail to develop group Holding AG, Am Weichselgarten 4, D-91058 Erlangen, Germany.

In connection with the services and products we offer, you can subscribe to free service- or product-specific newsletters on our website. The email address and your name provided during newsletter registration will be used to send you the personalized newsletter; see Section 11.

We adhere to the principles of data minimization and data avoidance, as the only required fields are the email address (and, if applicable, your name for personalized newsletters). For technical reasons and to ensure legal compliance, your IP address is also processed when you subscribe to the newsletter.

We use the so-called double opt-in procedure to send subscribed newsletters via email. This means that you will only receive promotional emails for your subscription if you have previously expressly confirmed that you want us to activate the newsletter service. This is done by sending you a confirmation email and asking you to click a link contained in that email to confirm that you wish to receive our newsletter at this email address. In doing so, we refer to the consent you have provided and this Privacy Policy.

Use of CleverReach
In addition, we use CleverReach to send out our subscription-based newsletter. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach allows us to analyze and organize our newsletter.

When you enter your data to subscribe to our newsletter (name, email address, etc.), this data is stored and deleted in compliance with data protection regulations not only on our servers but also on CleverReach’s servers in Germany. For more details, please refer to CleverReach’s privacy policy at: www.cleverreach.com/de/da-tenschutz/.

The newsletters we send via CleverReach allow us to analyze your usage behavior regarding our newsletter. Among other things, we can analyze how many recipients opened the newsletter, which messages were read, and how often specific links in the newsletter were clicked. Using so-called conversion tracking, it is also possible to analyze whether a predefined action (such as contacting us regarding a specific topic) took place after clicking a link in the newsletter. For more information on data analysis by CleverReach newsletters, please visit: www.cle-verreach.com/de/funktionen/reporting-und-tracking/.

By subscribing to our newsletter, you consent to the analysis of the newsletter as described above (the legal basis for this is Art. 6(1)(a) of the GDPR).

Withdrawal
You may, of course, cancel your subscription at any time using the unsubscribe option provided in the newsletter, thereby withdrawing your consent. You may also unsubscribe from the newsletter at any time directly through our website. Upon unsubscribing from the newsletter, CleverReach’s analysis of your data will also cease.

The data you have provided to us for the purpose of receiving our newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from both our servers and CleverReach’s servers after you unsubscribe. Data that has been stored by us up to that point or for other purposes (such as email addresses for a login area and the like) remains unaffected by this. The lawfulness of data processing operations that have already taken place also remains unaffected by this revocation.

Since the data collected through newsletter tracking is used solely for statistical purposes (“evaluation and analysis”) and without any direct reference to specific individuals—that is, anonymously—it is not possible to link it to any personal data we have received from you through other means. If you nevertheless wish to object to our data analysis for statistical purposes, you must cancel your newsletter subscription and unsubscribe from the newsletter. Unsubscribing from the newsletter is considered by us to be an objection.

Cookies
Our website uses so-called cookies in several places. They serve to make our website more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer and saved by your browser (locally on your hard drive).

Most of the cookies we use are so-called “session cookies.” These are automatically deleted after your visit. Persistent cookies are automatically deleted from your computer once their validity period (usually six months) has expired, or if you delete them yourself before the validity period expires.

Most web browsers automatically accept cookies. When you use our website, cookies are stored on your computer and transmitted from it to our web pages. You can control the use of cookies while using our website. By changing the settings in your web browser, you can disable or restrict the setting of cookies and, where applicable, their transmission. Furthermore, cookies that have already been set can be deleted at any time via a web browser or other software programs. This is possible in all common web browsers.

Please note: If you disable cookies, you may not be able to use all features of our website to their full extent.

Cookie Banner
You can find the content of our cookie banner [HERE].

Server Log Files
Even when you use our website without registering, logging in, or communicating with us as the provider, our website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:

• IP address
• Browser type and version
• Language and version of the browser software
• Operating system used
• Referrer URL (website from which the visit originated)
• Webpages visited
• Downloads
• Amount of data transferred
• Hostname of the accessing computer
• Time of the server request
• Duration of the visit
• Clicks on individual links
• Content of the request (specific page)

This data cannot be traced back to specific individuals. This data is not combined with data from other sources. We reserve the right to review this data retrospectively if we become aware of specific indications of unlawful use. Visits to our website are logged for security analysis and to defend against attacks. With the exception of the IP address, no personal data is collected and/or used. This processing is necessary to safeguard our legitimate interests as a provider. Log data is regularly deleted in a timely manner.

Data and information are analyzed statistically and for the purpose of enhancing data protection and data security to ensure a level of protection appropriate to the risk. With these insights, we can better protect our website, further optimize it, and tailor it even more effectively to the needs of our visitors.

We use Google reCaptcha, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google reCaptcha helps us determine whether entries on our website are made by a human or automatically by a computer program. In particular, the service is designed to protect our website and the forms provided there from abusive automated entries, such as those made by so-called bots. To this end, various types of information and security mechanisms are processed, and server content from Google is loaded. As a result, Google receives information about the use of the website on which reCAPTCHA is integrated.

Processed Data
When using Google reCaptcha, the following information, in particular, may be processed:

• Your IP address
• Your browser's language setting
• Information about the browser plugins you use
• Information about your click path
• Date and time of your visit
• Information about your usage behavior
• Time spent on a page
• Input you have provided
• Technical information about your device
• Mouse movements
• Information about your geographic location
• The operating system you are using

Google analyzes this information to determine whether an entry was made by a human or through automated, machine-based processing.

Purposes of Processing
Processing is carried out for the following purposes:

• To protect our website from malicious and automated access
• To prevent automated entries in our forms
• To detect and defend against bot attacks
• To ensure the security and functionality of our online services

Legal Basis
Processing is carried out on the basis of our legitimate interest pursuant to Art. 6(1)(f) of the GDPR and § 25(2) of the TDDDG. Our legitimate interest consists in ensuring the security of our website, preventing automated and malicious input, and protecting our technical systems from such attacks.

Recipients of the Data
The recipient of the data processed in connection with the use of Google reCaptcha is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

As part of the provision of services, data may also be processed by other companies within the Alphabet/Google group.

Transfers to Third Countries
It cannot be ruled out that, in connection with the use of Google reCaptcha, personal data may also be processed in third countries, particularly in the United States. To the extent necessary, such transfers are made on the basis of appropriate safeguards in accordance with the requirements of the GDPR. In particular, the service provider may be obligated to maintain an adequate level of data protection based on certification under the EU-U.S. Data Privacy Framework.

Retention Period
The personal data processed in connection with the use of Google reCaptcha will be deleted as soon as it is no longer necessary for the stated purposes, but no later than 180 (one hundred eighty) days, provided that no statutory retention requirements preclude this.

Further Information
For more information about Google reCaptcha and Google’s processing of personal data, please refer to Google’s privacy policy and the information on Google reCaptcha:

https://www.google.com/intl/de/policies/privacy
https://cloud.google.com/security/products/recaptcha

We use Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that allows us to integrate tracking and analytics tools, as well as other technologies, into our websites. Google Tag Manager itself does not create user profiles, store cookies, or perform any independent analyses. It is used solely to manage and deploy the tools integrated through it. However, Google Tag Manager does collect your IP address, which may also be transferred to Google’s parent company in the United States.

Processed Data
When using Google Tag Manager, the following information, in particular, may be processed:

• Your IP address

Purposes of Processing
Processing is carried out for the following purposes:

• Integration of tracking and analytics tools

Legal Basis
Use of this service is based on your consent pursuant to Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG. You may withdraw your consent at any time.

Recipients of the Data
The recipient of the data processed in connection with the use of Google reCaptcha is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

As part of the provision of services, data may also be processed by other companies within the Alphabet / Google group.

Transfers to Third Countries
It cannot be ruled out that, in connection with the use of Google Tag Manager, personal data may also be processed in third countries, particularly in the United States. To the extent necessary, such transfers are made on the basis of appropriate safeguards in accordance with the requirements of the GDPR. In particular, the service provider may be required to maintain an adequate level of data protection based on certification under the EU-U.S. Data Privacy Framework.

Retention Period
The personal data processed in connection with the use of Google Tag Manager will be deleted as soon as it is no longer necessary for the stated purposes, but no later than 14 (fourteen) days, provided that no statutory retention requirements preclude this.

Further Information
For more information about Google Tag Manager and Google’s processing of personal data, please see Google’s Privacy Policy and the information about Google Tag Manager:

https://www.google.com/intl/de/policies/privacy
https://support.google.com/tagmanager/answer/9323295?hl=de
https://www.dataprivacyframework.gov/participant/5780.

We use Google Ads, a service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads is an online advertising program that enables us to display ads in the Google search engine or on third-party websites when users enter specific search terms into Google (keyword targeting). Furthermore, targeted ads can be displayed based on user data available to Google (such as location data and interests) (audience targeting). We can evaluate this data quantitatively by, for example, analyzing which search terms led to the display of our ads and how many ads resulted in corresponding clicks.

Processed Data
In connection with the use of Google Ads, the following information in particular may be processed:

• Your IP address
• the browser language setting
• Information about browser plugins used
• Information about your click path
• Date and time of the visit
• Information about your usage behavior
• Time spent on a page
• Input you have provided
• Technical information about your device
• Mouse movements
• Information about your geographic location
• The operating system you are using

Purposes of Processing
The data is processed for the following purposes:
If you arrive at our website via a Google ad and perform an action (such as visiting a specific subpage), Google can associate this action with the ad you previously clicked on or viewed. This allows us to track the success of our advertising campaigns and optimize our advertising efforts accordingly. Google itself uses the data to generate performance reports and for features designed to optimize advertising campaigns. Cookies or similar technologies may be used as part of conversion tracking. In particular, this may involve processing information about interactions with an ad, a unique identifier for the ad click or the user, details about pages visited and actions taken, as well as technical information about the device and browser used. Google explains that when you interact with an ad, a cookie containing information about the interaction and a unique identifier is stored and, in the event of a conversion, can be transmitted back to Google Ads via the conversion tracking tag.

Legal Basis
The use of this service is based on your consent pursuant to Art. 6(1)(a) of the GDPR and § 25(1) of the TDDDG. Consent may be revoked at any time.

Recipients of the Data
The recipient of the data processed in connection with the use of Google Ads is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

In connection with the provision of services, data may also be processed by other companies within the Alphabet/Google group.

Transfers to Third Countries
It cannot be ruled out that, in connection with the use of Google Ads, personal data may also be processed in third countries, particularly in the United States. To the extent necessary, such transfers are made on the basis of appropriate safeguards in accordance with the requirements of the GDPR. In particular, the service provider may be obligated to maintain an adequate level of data protection based on certification under the EU-U.S. Data Privacy Framework.

Retention Period
The personal data processed in connection with the use of Google Ads will be deleted as soon as it is no longer necessary for the stated purposes, but no later than after 180 (one hundred eighty) days, provided that no statutory retention obligations prevent this.

Further Information
For more information about Google Ads and Google’s processing of personal data, please refer to Google’s privacy policy and the information on Google Ads:

https://www.google.com/intl/de/policies/privacy
https://support.google.com/google-ads/answer/93148?hl=de

We use Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, on our website for statistical analysis. GA4 helps us analyze how our website is used, improve the functionality of our online offerings, and continuously optimize the user experience.

Server-Side Processing via Stape
GA4 is operated via a server-side implementation. For this purpose, we use a server container provided through the Stape platform. The data transmitted from your device is initially processed exclusively on our server container. Before being forwarded to Google, all personal data is removed or anonymized.
In particular:

• IP addresses are not transmitted to Google,
• personal identifiers are removed or anonymized,
• and only anonymized information—or information that can no longer be attributed to a specific individual—is forwarded to Google.

According to our technical design, Google thus receives only data that no longer contains any personal references.

Processed Data
As part of this web analytics process, the following information, in particular, may be processed:

• Your IP address
• Technical information about the browser you are using and its settings
• The operating system you are using
• The screen resolution you are using
• The website from which you are visiting us (referrer URL)

Purposes of Processing
Processing is carried out for the following purposes:

• Analysis of the use of our website
• Optimization of our online offering
• Improvement of user-friendliness
• Error analysis and technical optimization
• Creation of statistical analyses

Legal Basis
Processing is based on your consent pursuant to Art. 6(1)(a) of the GDPR, which you can provide via our consent management tool. Anonymization takes place prior to transmission to Google. Google receives only anonymized data that can no longer be associated with any natural person.

Recipients of the Data
The recipient of the anonymized data is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

The service provider

Stape Europe OÜ
Sepapaja tn 6
15551 Tallinn
Estonia

is also used to operate the server-side container. This provider processes the data exclusively for the purpose of providing the server-side infrastructure and on the basis of a corresponding data processing agreement in accordance with Art. 28 of the GDPR.

Transfers to Third Countries
It cannot be ruled out that Google may also process anonymized data in third countries, particularly in the United States. Since only anonymized data is transferred, this processing takes place without the transfer of personal data.

Retention Period
The data generated in the course of server-side processing, which is transmitted to Google exclusively in anonymized form, is stored for 180 (one hundred eighty) days and subsequently deleted or permanently anonymized, provided that no statutory retention requirements preclude this.

Withdrawal of Your Consent
You may withdraw your consent at any time with future effect via the privacy settings on our website. The lawfulness of the processing carried out prior to the withdrawal remains unaffected.

We maintain profiles on “social media,” currently on Xing, Kununu, LinkedIn, and YouTube. To the extent that we have control over the processing of your data, we ensure compliance with applicable data protection regulations. Below you will find the most important information regarding data protection law in relation to our profiles.

Name and Address of the Data Controller
In addition to us, the following entities are responsible for the company’s/group’s social media accounts within the meaning of the GDPR and other data protection regulations, depending on the platform used:

• Kununu (kununu GmbH, Kurfürstenstraße 1, 80801 Munich, Germany)
• LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland)
• Xing (New Work SE, Baumwall 7, 20459 Hamburg, Germany)
• YouTube (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland)

However, you use these platforms and their features at your own risk. This applies in particular to the use of interactive features (commenting, sharing, rating, and the like).
We also wish to point out that your data may be processed outside the European Union in this context.

Purpose and Legal Basis
We maintain our own profiles to communicate with visitors to these platforms and, in this way, inform them about our offerings.

In addition, we collect data for statistical purposes so that we can further develop and optimize our content and make our offerings more appealing to you. The data required for this (for example, the total number of page views, page activity, data provided by visitors, and interactions) is processed by the social media networks and made available to us. We have no influence over how this data is generated or presented.

In addition, your personal data is processed by social media providers—as well as by us—for market research and advertising purposes. This makes it possible, for example, to create user profiles based on your usage behavior and the resulting interests. Among other things, this allows advertisements that match your interests to be displayed both within and outside the platforms. Cookies are typically stored on your computer for this purpose. Regardless of this, your user profiles may also store data that is not directly collected from your devices. Storage and analysis also take place across devices; this applies in particular, but not exclusively, when you are registered as a member and logged in to the respective platforms. Aside from the data mentioned above, we do not collect or process any other personal data.

Our processing of your personal data is based on our legitimate interests in effective information and communication pursuant to Art. 6(1), first sentence, lit. f of the GDPR.

If you are asked to consent to data processing—that is, if you give your consent by clicking a button or similar action (opt-in)—the legal basis for the processing is Article 6(1), first sentence, letter a, and Article 7 of the GDPR.

Your Rights / Right to Object
If you are a member of a social network and do not want the network to collect data about you through our page and link it to your stored member data on the respective network, you must

• log out of the respective network before visiting our fan page,
• delete the cookies stored on your device, and
• close and restart your browser.

However, once you log in again, you will once more be recognizable to the network as a specific user.

For a detailed description of the respective processing activities and the options to object (opt-out), please refer to the information linked below:

Kununu

• Privacy Policy: https://www.kununu.com/de/info/datenschutz
• Opt-Out: http://www.youronlinechoices.com.

LinkedIn

• Privacy Policy: https://www.linkedin.com/legal/privacy-policy
• Opt-out: https://www.linkedin.com/legal/cookie-policy and https://www.youronlinechoices.com

Xing

• Privacy Policy: https://privacy.xing.com/de/datenschutzerklaerung
• Opt-out: http://www.youronlinechoices.com.

YouTube

• Privacy Policy: https://policies.google.com/privacy
• Opt-Out: https://tools.google.com/dlpage/gaoptout?hl=de and https://www.youronlinechoices.com.

In general, you have the following rights regarding the processing of your personal data:

Right of access; right to rectification; right to erasure; right to restriction of processing; right to object; right to data portability; right to lodge a complaint with the competent data protection authority regarding unlawful processing of your personal data. However, since we do not have full access to your personal data, you should contact the social media providers directly to exercise these rights, as they each have access to their users’ personal data and can take appropriate measures and provide information.

Should you nevertheless need assistance, we will of course try to help you. Please contact datenschutz@develop-group.de.

Information on Copyright and Artistic Copyright
If you wish to publish content (images, text, plans, videos, music, etc.) on one of our social media platforms, you should be aware that you may thereby transfer all rights of use to the network, which could ultimately have legal consequences for you if you are not the author or rights holder yourself.

We hereby object to the use of contact information published in accordance with the legal requirement to provide a site notice for the purpose of sending unsolicited advertising and informational materials. The operators of this website expressly reserve the right to take legal action in the event of the unsolicited transmission of promotional information, such as through spam emails.

We do not use fully automated processing to make a decision.

We reserve the right to update this Privacy Policy from time to time. In such cases, we will update the date and version number to indicate when our Privacy Policy was last revised. If any changes have a significant impact on the way we use your personal data, we will notify you via email or by other means appropriate to the circumstances.

Unless otherwise specified, any updates take effect on the date they are published. If you do not agree with the contents of the updated Privacy Policy, you should discontinue using our offerings and services. By continuing to use or access our services after an update, you agree to the new version of our Privacy Policy.

Privacy Policy Internet Basys – V 2.5.1_20261013