Imprint

Privacy Policy

Note: This is a machine-generated translation. The German original version shall prevail. In the event of any discrepancies or contradictions, the German text takes precedence.

This privacy policy informs you about the nature, scope and purposes of the processing of your personal data (hereinafter “data”) and about your rights as a data subject.

1. Responsible for Data Processing

The controller responsible for data processing under the General Data Protection Regulation (GDPR) is:

keeunit GmbH
Am Brand 41
55116 Mainz, Germany
Email: datenschutz@keeunit.de

2. Contact details of our Data Protection Officer

VARY.LEGAL GmbH, Äppelallee 27, 65203 Wiesbaden, Germany
Email: datenschutz@keeunit.de

3. General information on data processing

We process data in the course of operating our business and our website.

This also includes disclosure by transfer to third parties and, where applicable, to so-called third countries outside the European Union (“EU”) and the European Economic Area (“EEA”). Transfers to third countries take place only on the basis of an adequacy decision pursuant to Art. 45 GDPR, appropriate safeguards pursuant to Art. 46 GDPR (e.g. EU Standard Contractual Clauses) or an exception pursuant to Art. 49 GDPR. Where we transfer data outside the EU or the EEA, this is indicated accordingly below.

4. Data processing

The data concerned, the purposes of processing, the legal bases, the recipients and, where applicable, transfers to third countries are set out in the following overview:

a) Log files when visiting the website

We log your visit to our website. In doing so, we process:

the name(s) of the web page(s) accessed,
the date and time of access,
the amount of data transferred,
the browser type and version,
the operating system you use,
the referrer URL (the previously visited website),
your IP address,
the requesting provider.

The legal basis for this processing is our overriding legitimate interest in the continuous provision and security of our website pursuant to Art. 6(1)(f) GDPR.

The log file is deleted after seven days, unless it is needed to prove or investigate specific legal violations that became known within the retention period.

b) Hosting

To provide our online presence, we use the services of web hosting providers who process the data mentioned above and all other data to be processed in connection with the operation of this website (log files when visiting the website) on our behalf. The legal basis for this processing is our overriding legitimate interest in providing our website pursuant to Art. 6(1)(f) GDPR.

For hosting, we use Webflow, Inc., 398 11th St., Floor 2, San Francisco, CA 94103, USA (“Webflow”). Data may also be transferred to Webflow in the USA. Webflow is certified under the EU-US Data Privacy Framework and is therefore covered by the EU adequacy decision for the USA.

c) Contacting us

If you contact us, we process the following data for the purpose of handling and processing your enquiry: your name, your contact details (if provided by you) and your message.

The legal basis for this processing is the performance of a contract and/or our pre-contractual obligations pursuant to Art. 6(1)(b) GDPR and/or our overriding legitimate interest in handling your enquiry pursuant to Art. 6(1)(f) GDPR.

d) HubSpot CRM system

We use various services of HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin, Germany (“HubSpot”), a subsidiary of HubSpot Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA. HubSpot processes the data on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR. The data is stored in data centres within the EU. Data may nevertheless be transferred to HubSpot Inc. in the USA. HubSpot is certified under the EU-US Data Privacy Framework and is therefore covered by the EU adequacy decision for the USA.

aa) CRM system

We use HubSpot’s CRM system to manage our customer and prospect data. Data we receive in the course of contract performance, through enquiries via our forms, by telephone or through a demo request is processed in HubSpot in order to support customers and prospects.

The legal basis is the performance of a contract or the implementation of pre-contractual measures pursuant to Art. 6(1)(b) GDPR, as well as our legitimate interest in efficient customer support pursuant to Art. 6(1)(f) GDPR.

bb) Forms

We use HubSpot forms for contact, demo and download requests. We process the data you enter into the form, e.g. name, email address, company, telephone number and your message. In addition, technical data such as your IP address, the time of submission and the page on which the form was submitted are processed. The data is stored directly in our HubSpot CRM and used to process your request.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or our legitimate interest in processing your request pursuant to Art. 6(1)(f) GDPR. Access to your device that is technically necessary for the form to function is based on Section 25(2) No. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG).

cc) Appointment booking (HubSpot Meetings)

We embed the appointment booking tool “HubSpot Meetings” on our website for booking demo and consultation appointments. When you book an appointment, we process your name, your email address, any further voluntary information and the selected appointment. This data is stored in our HubSpot CRM. You will then receive an appointment confirmation by email.

To ensure that only available time slots are displayed and that the booked appointment is added directly to the calendar of the responsible employee, HubSpot Meetings is connected to Microsoft Outlook (Microsoft 365). The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland (“Microsoft”). Your name, email address and appointment details are stored at Microsoft as a calendar entry. Microsoft processes the data on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR. Data may be transferred to Microsoft Corporation in the USA. Microsoft is certified under the EU-US Data Privacy Framework and is therefore covered by the EU adequacy decision for the USA.

The legal basis is the implementation of pre-contractual measures pursuant to Art. 6(1)(b) GDPR.

dd) HubSpot tracking cookies

If you have given your consent in the consent banner, we additionally use the HubSpot tracking code. For this purpose, HubSpot stores cookies on your device, e.g. “__hstc”, “hubspotutk”, “__hssc” and “__hssrc”, with a storage period of up to six months. In particular, the following data is processed:

the pages visited and the time spent on them,
the referrer URL,
the date and time of the visit,
your IP address,
information about your browser and device,
a pseudonymous visitor ID.

We use this information to analyse the use of our website and to improve our offering. If you fill in a form or book an appointment, your previous website visits may be assigned to your contact in the CRM. This allows us to better understand your enquiry and advise you according to your needs.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) sentence 1 TDDDG. The tracking code is only loaded after you have given your consent in the consent banner. You can withdraw your consent at any time with effect for the future by adjusting your preferences in our consent banner.

Further information can be found in HubSpot’s privacy policy at https://legal.hubspot.com/privacy-policy.

e) Job applications

If you contact us to send us your application as an employee, e.g. by email or via a contact form, the data you provide (e.g. name, email address, preferred place of work, etc.), your message and the application documents submitted will be processed exclusively for the purpose of handling and processing your application.

To manage applications, we use the applicant management system of Factorial (Everyday Software, S.L., Barcelona, Spain). If you apply via our careers page or the linked job advertisements, your details and application documents are stored in Factorial and processed there by the persons involved in the selection process. Factorial processes the data exclusively on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR. The data is stored on servers within the EU.

Your application data will be deleted no later than 6 months after the conclusion of the application process, unless you have consented to longer storage (e.g. inclusion in our talent pool).

Should the data be required for legal proceedings after the conclusion of the application process, it may be processed to protect our legitimate interests pursuant to Art. 6(1)(f) GDPR, namely to assert and/or defend against claims.

The legal basis is Art. 6(1)(b) GDPR (initiation of an employment relationship) and, for the talent pool, your consent pursuant to Art. 6(1)(a) GDPR.

f) Newsletter

To provide you with regular information about our company and offerings, we offer an email newsletter. When you subscribe to the newsletter, we process the data you enter during registration (email address and any other voluntary information). To prevent misuse, we send you an email after registration asking you to confirm your subscription (double opt-in procedure). To be able to prove that the registration process complies with the law, your registration is logged. This concerns the time of registration and confirmation as well as your IP address.

The legal basis for sending the newsletter is your consent pursuant to Art. 6(1)(a) GDPR. The processing of data in connection with sending the confirmation email and the associated logging is based on our legitimate interest in proving your proper registration pursuant to Art. 6(1)(f) GDPR.

If you give us your consent, we also analyse whether you have opened the newsletter as well as your scrolling and click behaviour within the newsletter. This is done in order to tailor our newsletter optimally to your interests and to improve its content. The legal basis for analysing the newsletter is your consent pursuant to Art. 6(1)(a) GDPR.

We use HubSpot to send the newsletter (see section d).

g) Customer account

In connection with opening and using a customer account, we process your master data (name, address, email address, bank details) and your usage data (username, password). This gives you access to the admin area of the instance you have booked and allows us to identify you as a customer. The legal basis is the performance of the contract on the use of the customer account pursuant to Art. 6(1)(b) GDPR.

h) Use of cookies

We use so-called cookies on our website. Cookies are small text files that are placed on your device (PC, smartphone, tablet, etc.) and stored by your browser.

Information about the specific cookies we use, their providers and purposes can be found in our consent banner. There you can give your consent to the respective services, withdraw it or adjust your settings at a later time.

Our consent banner: Usercentrics

We use the Usercentrics service on our website. This service enables us to obtain, manage and document consents. The provider of this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany (“Usercentrics”). Usercentrics acts on our behalf.

The legal basis is Art. 6(1)(c) GDPR, in order to obtain the legally required consents for the use of cookies.

https://usercentrics.com/
https://usercentrics.com/privacy-policy/
https://usercentrics.com/terms-and-conditions/

a) Analytics / Marketing

aa) Google services

We use various services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) on our website. Data may also be transferred to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google is certified under the EU-US Data Privacy Framework and is therefore covered by the EU adequacy decision for the USA.

Google Analytics 4

We use Google’s tracking tool Google Analytics on our website. We use Google Analytics to evaluate your use of the website, to compile reports on activities within this website and to provide further services related to website usage, thereby improving user-friendliness.

When Google Analytics is used, website visitors’ interactions are primarily recorded using cookies and systematically evaluated.

Google Analytics 4 does not store or log IP addresses.

The following data is processed through the use of Google Analytics:

3 bytes of the IP address of the website visitor’s system (anonymised IP address),
the website accessed,
the website from which the user reached the accessed page of our website (referrer),
the subpages accessed from the website,
the time spent on the website,
the frequency of visits to the website.

Google Remarketing/Retargeting

We use so-called Google tracking cookies on our website. When you visit our site, information about which products you have viewed and via which ads and third-party pages users reach our website is stored in permanent cookies. When you subsequently visit a partner website, personalised advertising can be displayed to you based on the items you viewed on our site.

Google Ads

We use Google Ads, an online advertising program by Google, on our website. This involves so-called conversion tracking. If you click on an ad placed by Google, a cookie is set. This cookie expires after 30 days and is not used to personally identify users. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the ad and was redirected to this page.

The data collected using the conversion cookie is used to create statistics for Ads customers who have opted for conversion tracking.

Legal basis and withdrawal

The legal basis for data processing in connection with the aforementioned Google services is your prior consent pursuant to Art. 6(1)(a) GDPR.

You can withdraw your consent at any time with effect for the future under “Privacy Settings” by adjusting your preferences in our consent banner.

bb) Hotjar

We use “Hotjar” on our site, an analytics tool of Hotjar Ltd. (http://www.hotjar.com, 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta, Europe). Hotjar makes it possible to measure and evaluate user behaviour (clicks, mouse movements, scroll depth, etc.) on our website. The information generated about your visit to our website by the “tracking code” and cookies is transmitted to and stored on Hotjar servers in Ireland. The following information may be recorded by your device and browser:

the IP address of your device (collected and stored in anonymised form),
your email address including your first and last name, if you have provided these to us via our website,
the screen size of your device,
device type and browser information,
geographic location (country only),
the preferred language for displaying our website.

Log data

The following data is automatically generated by our servers when Hotjar is used:

referring domain,
pages visited,
geographic location (country only),
the preferred language for displaying our website,
date and time the website was accessed.

Hotjar will use this information to evaluate your visit to our website, to compile reports on usage and to evaluate other services relating to website use and internet analysis of the website. Hotjar also uses services of third-party companies, such as Google Analytics and Optimizely, to provide its services. These third parties may store information that your browser sends during your website visit, such as cookies or IP requests. For more information on how Google Analytics and Optimizely store and use data, please refer to their respective privacy policies.

The cookies used by Hotjar have different “lifetimes”. Some remain for up to 365 days, others are only valid for the current visit.

You can prevent Hotjar from collecting your data by clicking on the following link and following the instructions there: https://www.hotjar.com/opt-out.

The legal basis for this processing is your prior consent pursuant to Art. 6(1)(a) GDPR.

cc) LinkedIn Insight Tag

We use the LinkedIn Insight Tag service on our website for analytics, retargeting and marketing purposes. This is a service of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”).

The LinkedIn Insight Tag uses cookies to process the following data relating to your use of our website:

referrer URL,
IP address,
device information,
browser information,
timestamp.

The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR.

You can withdraw your consent to data processing by LinkedIn for our web domain at any time with effect for the future by adjusting your preferences in our consent banner.

Data may be transferred to and processed by LinkedIn Corporation in the USA in connection with the LinkedIn Insight Tag. For data transfers to the USA, LinkedIn ensures an adequate level of data protection through the EU Standard Contractual Clauses. A copy of the relevant EU Standard Contractual Clauses is available on request. Please contact datenschutz@keeunit.de.

dd) Facebook Custom Audiences (Pixel/Cookies)

We use a so-called tracking pixel of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of Meta Platforms Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, on our website. We use the Facebook Pixel to track the success of our own Facebook advertising campaigns and to optimise the delivery of Facebook advertising campaigns to interested target groups.

After clicking on a Facebook ad or when visiting our website, the pixel on our website stores a cookie on your device. The cookie processes data on whether you reached our website via a Facebook ad and makes it possible to analyse user behaviour up to the point of purchase. This allows us to track the success rate of our Facebook advertising campaigns. In addition, the pixel processes data indicating that you have visited our website and makes it possible to tailor the advertising displayed on Facebook to your interests.

The Facebook Pixel integrated on our website establishes a direct connection to Facebook’s servers when you visit our website. The information generated by the cookie about your use of this website (including your IP address) is transmitted to Facebook in the USA.

The data collected is anonymous to us and does not allow us to draw any conclusions about the user. If you are registered with Facebook, Facebook can assign the information collected to your account. Even if you do not have a Facebook account or are not logged in when visiting our website, Facebook may process and store your IP address and other identifying data.

The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR.

You can withdraw your consent to data processing by the Facebook Pixel for our web domain at any time with effect for the future by adjusting your preferences in our consent banner.

Meta is certified under the EU-US Data Privacy Framework and is therefore covered by the EU adequacy decision for the USA.

ee) TikTok Pixel

We use the TikTok Pixel tracking tool of TikTok Technology Ltd., 10 Earlsfort Terrace, Dublin, Ireland, a subsidiary of Beijing Bytedance Technology Ltd. based in China, on our website. We use the TikTok Pixel to track the success of our own TikTok advertising campaigns and to optimise the delivery of TikTok advertising campaigns to interested target groups.

After clicking on a TikTok ad or when visiting our website, the pixel on our website stores a cookie on your device. The cookie processes data on whether you reached our website via a TikTok ad and makes it possible to analyse user behaviour up to the point of purchase. This allows us to track the success rate of our TikTok advertising campaigns. In addition, the TikTok Pixel processes data indicating that you have visited our website and makes it possible to tailor the advertising displayed on TikTok to your interests.

The TikTok Pixel integrated on our website establishes a direct connection to TikTok’s servers when you visit our website. The information generated by the cookie about your use of this website (including your IP address) is transmitted to TikTok in China.

The data collected is anonymous to us and does not allow us to draw any conclusions about the user. If you are registered with TikTok, TikTok can assign the information collected to your account. Even if you do not have a TikTok account or are not logged in when visiting our website, TikTok may process and store your IP address and other identifying data.

The use of the cookies or similar technologies set is based on your consent pursuant to Section 25(1) sentence 1 TDDDG. The legal basis for data processing is your consent pursuant to Art. 6(1)(a) GDPR.

You can withdraw your consent to data processing by the TikTok Pixel for our web domain at any time with effect for the future by adjusting your preferences in our consent banner.

There is no adequacy decision by the EU Commission for data transfers to China. TikTok ensures an adequate level of data protection through the EU Standard Contractual Clauses. Nevertheless, risks may exist, as government access to data in China cannot be ruled out. A copy of the Standard Contractual Clauses is available on request.

ff) OpenAI Pixel (ads in ChatGPT)

We run ads in ChatGPT and use the conversion pixel of OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland (“OpenAI”) for this purpose. We use the pixel to measure the success of our ChatGPT advertising campaigns and to track whether and which pages of our website you visit after clicking on an ad displayed in ChatGPT.

After clicking on a ChatGPT ad or when visiting our website, the pixel stores a cookie on your device or places an identifier in your browser’s local storage. The following data is processed:

the page accessed,
the referrer URL,
the time of access,
your IP address,
information about your browser and device.

If you fill in a form on our website, the pixel may additionally transmit your email address, telephone number and name to OpenAI in hashed form (SHA-256) so that the conversion can be attributed to the respective ad. The plain-text data does not leave your browser.

The pixel integrated on our website establishes a direct connection to OpenAI’s servers with every page view. The information generated about your use of this website may be transmitted to OpenAI OpCo, LLC, 3180 18th Street, San Francisco, CA 94110, USA. This transfer is based on Art. 46(2)(c) GDPR in conjunction with the Standard Contractual Clauses of the European Commission (Implementing Decision (EU) 2021/914) as appropriate safeguards.

The use of the pixel and of the cookies or similar technologies set is based on your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) sentence 1 of the German Telecommunications Digital Services Data Protection Act (TDDDG). The pixel is only loaded after you have given your consent in the cookie consent banner; without your consent, no connection to OpenAI is established. You can withdraw your consent to data processing by the OpenAI Pixel for our web domain at any time with effect for the future by adjusting your preferences in our consent banner.

gg) Microsoft Advertising

We run ads via Microsoft Advertising, e.g. in the Bing search engine and in the Microsoft advertising network. For this purpose, we use the conversion and remarketing tool “Universal Event Tracking” (UET) of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland (“Microsoft”) on our website. We use the UET tag to measure the success of our Microsoft advertising campaigns and to display ads to people who have already shown interest in our offering (remarketing).

After clicking on a Microsoft ad or when visiting our website, cookies are stored on your device, e.g. “_uetsid”, “_uetvid” and “MUID”. The following data is processed:

the pages accessed and your interactions on our website,
the referrer URL,
the time of access,
your IP address,
information about your browser and device,
a pseudonymous identifier (cookie ID) and, where applicable, the click ID of the ad.

The data collected is pseudonymous to us and does not allow us to draw any conclusions about your identity. If you have a Microsoft account and are logged in, Microsoft can assign the information collected to your account and use it for its own purposes, such as personalising advertising.

Data may be transferred to Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Microsoft is certified under the EU-US Data Privacy Framework and is therefore covered by the EU adequacy decision for the USA.

The use of the UET tag and the cookies set is based on your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) sentence 1 TDDDG. The UET tag is only loaded after you have given your consent in the consent banner.

You can withdraw your consent at any time with effect for the future by adjusting your preferences in our consent banner. In addition, you can deactivate personalised advertising from Microsoft at https://account.microsoft.com/privacy/ad-settings. Further information can be found in Microsoft’s privacy statement at https://privacy.microsoft.com/en-us/privacystatement.

Server-side tracking (TAGGRS)

To bundle and forward the website tags described above (Google, Meta, TikTok, LinkedIn, OpenAI, Microsoft), we use the server-side tracking tool “TAGGRS” of TAGGRS B.V., Heerenveen, Netherlands (https://taggrs.io).

The website tags issued by our website are not transmitted directly from your browser to the respective target systems, but are bundled server-side via the infrastructure of TAGGRS B.V. and forwarded from there to the target systems.

When you use our website, the following categories of data are processed as part of server-side tracking: IP address, device type and browser type, location data, usage and browsing behaviour. The processing serves to analyse and optimise our online offering, to optimise conversions and to improve the user experience.

The legal basis is your consent within the meaning of Art. 6(1)(a) GDPR, which you have given via our consent banner. You can withdraw your consent at any time with effect for the future.

Data processing takes place in the EU or the European Economic Area (EEA). Personal data processed via server-side tracking is automatically deleted 30 days after collection.

b) External content

We use dynamic content from third parties to optimise the presentation and offering of our website. When you visit the website, a request is automatically sent via an interface to the server of the respective content provider, transmitting certain log data (e.g. the user’s IP address). The dynamic content is then transmitted to our website and displayed there.

We use external content in connection with the following functionalities:

aa) Embedding YouTube videos

We have embedded videos from the “YouTube” platform of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) on our website. Google does not store any cookies in your browser in this context.

The legal basis for the processing is your prior consent pursuant to Art. 6(1)(a) GDPR.

Data may be transferred to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google is certified under the EU-US Data Privacy Framework and is therefore covered by the EU adequacy decision for the USA.

bb) Supademo

This website uses the services of Supademo, a tool for the interactive presentation of software demos. The provider is Supademo Inc., New York, USA.

We use Supademo via embed code to provide you with an interactive and visual experience of our platform. This allows you to use software demos directly on our website without being redirected to external pages.

When the embedded Supademo content is loaded, the following data may be transmitted to Supademo:

your IP address,
browser type and browser version.

Supademo is used in the interest of an appealing presentation of our online offering. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.

Supademo Inc. stores personal data, including IP addresses, only for as long as necessary to provide its services. According to Supademo, data transfers outside the EEA are based on the Standard Contractual Clauses of the European Commission: “We ensure that any transfer of personal data from countries in the European Economic Area (EEA) to countries outside the EEA is protected by appropriate safeguards, for example through the use of standard data protection clauses approved by the European Commission, the use of binding corporate rules or other legally recognised means.”

Further information on the handling of user data can be found in Supademo’s privacy policy at: https://supademo.com/privacy-policy

cc) Videos via Bunny.net

To provide and play videos on our website, we use the “Bunny Stream” service and the content delivery network of BunnyWay d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia (“Bunny.net”). When a video is played, a connection to Bunny.net’s servers is established. In particular, your IP address, browser and device information, the page accessed and the date and time of access are processed in order to deliver the video technically. Bunny.net processes the data on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR. Processing takes place within the EU.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the fast, stable and privacy-friendly delivery of our video content.

5. Duration of data storage

We store personal data only for as long as necessary for the purposes for which it is processed, or until you withdraw any consent you have given. Where statutory retention obligations apply (e.g. under Section 147 of the German Fiscal Code (AO) or Section 257 of the German Commercial Code (HGB)), the storage period may be up to 10 years.

6. Your rights as a data subject

a) Access

Upon request, you can obtain information free of charge at any time about all personal data we have stored about you.

b) Rectification, erasure, restriction of processing (blocking), objection

If you no longer agree to the storage of your personal data or if it has become inaccurate, we will, upon your instruction, arrange for the erasure or blocking of your data or make the necessary corrections (to the extent possible under applicable law). The same applies if we are to process data only in a restricted manner in future. You have a right to object in particular in cases where your data is processed because it is necessary for the performance of a task carried out in the public interest or on the basis of our legitimate interest, as well as profiling based thereon. You also have such a right to object in the case of data processing for direct marketing purposes.

c) Right to withdraw consent with effect for the future

You can withdraw any consent you have given at any time with effect for the future. The withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

d) Data portability

Where data processing is based on a contract, pre-contractual negotiations, consent or carried out by automated means, you have the right to data portability. Upon request, we will provide your data in a commonly used, structured and machine-readable format so that you can transmit it to another controller if you wish.

e) Restriction of processing

Data for which we are unable to identify the data subject, e.g. because it has been anonymised for analytics purposes, is not covered by the above rights. Access, erasure, blocking, rectification or transfer to another company may be possible in respect of such data if you provide us with additional information that allows us to identify you.

f) No automated decision-making

Data subjects are not subject to any automated decision-making within the meaning of Art. 22 GDPR by the controllers. Should this occur in individual cases, data subjects will be informed separately.

g) Exercising your rights and right to lodge a complaint

If you have questions about the processing of your personal data, or wish to request access, rectification, blocking, objection or erasure of data, or the transfer of data to another company, please contact datenschutz@keeunit.de.

You also have the right to lodge a complaint with a supervisory authority regarding your rights as a data subject.

‍