Privacy policy of Gedys Intraware GmbH

1. privacy policy for our websites

1.1 Relevant legal bases

In accordance with Art. 13 GDPR, we inform you of the legal basis of our data processing. If the legal basis is not stated in the privacy policy, the following applies The legal basis for obtaining consent is Art. 6 para. 1 lit. a and Art. 7 GDPR, the legal basis for processing for the performance of our services and implementation of contractual measures as well as responding to inquiries is Art. 6 para. 1 lit. b GDPR, the legal basis for processing to fulfill our legal obligations is Art. 6 para. 1 lit. c GDPR, and the legal basis for processing to protect our legitimate interests is Art. 6 para. 1 lit. f GDPR. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

1.2 Changes and updates to the privacy policy

We ask you to inform yourself regularly about the content of our privacy policy. We will adapt the privacy policy as soon as changes to the data processing carried out by us make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g. consent) or other individual notification.

1.3 Security measures

1. We take appropriate technical (SSL encryption) and organizational measures in accordance with Art. 32 GDPR, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, in order to ensure a level of security appropriate to the risk. The measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical access to the data, as well as the access, input, disclosure, safeguarding of availability and its separation.
   Furthermore, we have established procedures that guarantee the exercise of data subject rights, deletion of data and reaction to data threats.
   Furthermore, we take the protection of personal data into account as early as the development or selection of hardware, software and procedures, in accordance with the principle of data protection through technology design and data protection-friendly default settings (Art. 25 GDPR).
2. The security measures include, in particular, the encrypted transmission of data between your browser and our server.

1.4 Cooperation with processors and third parties

1. If we disclose data to other persons and companies (processors or third parties) in the course of our processing, transfer it to them or otherwise grant them access to the data, this will only be done on the basis of legal permission (e.g. if the transfer of data to third parties, such as payment service providers, is necessary for the performance of a contract pursuant to Art. 6 para. 1 lit. b GDPR), you have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
2. If we commission third parties with the processing of data on the basis of a so-called "order processing contract", this is done on the basis of Art. 28 GDPR.

1.5 Transfers to third countries

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs in the context of the use of third-party services or disclosure or transfer of data to third parties, this will only take place if it is done to fulfill our (pre)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we only process or have the data processed in a third country if the special requirements of Art. 44 et seq. GDPR are met. This means, for example, that the processing takes place on the basis of special guarantees, such as the officially recognized determination of a level of data protection corresponding to the EU or compliance with officially recognized special contractual obligations (so-called "standard contractual clauses").

1.6 Rights of the data subjects

1. Definition of "data subject" (Art. 4 para. 1 GDPR):
   "personal data" means any information relating to an identified or identifiable natural person (hereinafter "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
2. You have the right to request confirmation as to whether the data in question is being processed and to request information about this data as well as further information and a copy of the data in accordance with Art. 15 GDPR.
3. You have accordingly. Art. 16 GDPR, you have the right to request the completion of data concerning you or the rectification of inaccurate data concerning you.
4. In accordance with Art. 17 GDPR, you have the right to demand that the data in question be deleted immediately or, alternatively, to demand that the processing of the data be restricted in accordance with Art. 18 GDPR.
5. You have the right to request to receive the data concerning you that you have provided to us in accordance with Art. 20 GDPR and to request its transfer to other controllers.
6. You also have the right to lodge a complaint with the competent supervisory authority in accordance with Art. 77 GDPR.

1.7 Right of revocation

You have the right to withdraw your consent in accordance with Art. 7 para. 3 GDPR with effect for the future.

1.8 Right to object

You can object to the future processing of data concerning you at any time in accordance with Art. 21 GDPR. In particular, you may object to processing for direct marketing purposes.

1.9 Deletion of data

1. The data processed by us will be deleted or its processing restricted in accordance with Art. 17 and 18 GDPR. Unless expressly stated in this privacy policy, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be stored for commercial or tax law reasons.
2. According to legal requirements, data is stored in particular for 6 years in accordance with Section 257 (1) HGB (trading books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting vouchers, etc.) and for 10 years in accordance with Section 147 (1) AO (books, records, management reports, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.).

1.10 Provision of contractual services

1. We process inventory data (e.g. names and addresses as well as contact data of users), contract data (e.g. services used, names of contact persons, payment information) for the purpose of fulfilling our contractual obligations and services in accordance with Art. 6 para. 1 lit b. GDPR. The entries marked as mandatory in online forms are required for the conclusion of the contract.
2. We process usage data (e.g. the websites visited on our online offering, interest in our products) and content data (e.g. entries in the contact form or user profile) for advertising purposes in a user profile, e.g. to display product information to users based on the services they have used to date.
3. The deletion takes place after the expiry of statutory warranty and comparable obligations, the necessity of storing the data is reviewed every three years; in the case of statutory archiving obligations, the deletion takes place after their expiry (end of commercial law (6 years) and tax law (10 years) retention obligation); information in the customer account remains until its deletion.

1.11 Download product brochures

Your e-mail address is stored in our CRM system and the contact is determined on the basis of the e-mail address in order to inform them by telephone or e-mail about products, offers, events and promotions of GEDYS IntraWare GmbH. We provide product brochures for download on our website. By entering your e-mail address, a link will be sent to you, which you can use to download the brochure.

1.12 Making contact

1. When contacting us (via contact form or e-mail), the user's details are processed to process the contact request and its handling in accordance with Art. 6 para. 1 lit. b) GDPR.
2. The user's details are stored and processed in our customer relationship management system ("CRM system").
3. We stand for innovative solutions and services that are geared towards the market. A permanent increase in product quality and very good customer service are indicators of good business relationships. In order to do justice to these points, it is necessary to use market and industry-standard software tools. With regard to the collection, use and storage of personal data that is transferred from the European Union or the European Economic Area to the USA, for example, the contractor shall ensure that the providers undertake to comply with the provisions of the EU standard contractual clauses. Compliance with the EU standard contractual clauses ensures that an organization provides adequate data protection in accordance with the EU Data Protection Directive. When transferring to a third country, this is done under the conditions contained in Chapter V of the General Data Protection Regulation (see section 5 Transfers to third countries).
4. We delete the requests if they are no longer necessary. We review the necessity every year. In the case of legal requirements, storage is carried out in particular for 6 years in accordance with Section 257 (1) HGB (trading books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting vouchers, etc.) and for 10 years in accordance with Section 147 (1) AO (books, records, management reports, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.).

1.13 Cookies and right to object to direct advertising

We use temporary and permanent cookies, i.e. small files that are stored on users' devices (for an explanation of the term and function, see the last section of this privacy policy). Some of the cookies are used for security purposes or are required to operate our online offering (e.g. to display the website) or to save the user's decision when confirming the cookie banner. In addition, we or our technology partners use cookies to measure reach and for marketing purposes, about which users are informed in the course of the privacy policy. A general objection to the use of cookies used for online marketing purposes can be declared for a large number of services, especially in the case of tracking, via the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be achieved by deactivating them in the browser settings. Please note that you may then not be able to use all the functions of this website.

1.14 Newsletter

1. With the following information, we inform you about the contents of our newsletter as well as the registration, dispatch and statistical evaluation procedure and your rights of objection. By subscribing to our newsletter, you agree to receive it and to the procedures described.
2. Content of the newsletter: We only send newsletters, emails and other electronic notifications with advertising information (hereinafter "newsletter") with the consent of the recipient or with legal permission. If the content of the newsletter is specifically described when registering for the newsletter, it is decisive for the user's consent. Our newsletters also contain information about our products, offers, promotions, events and our company. We reserve the right to contact you by telephone when you register for our newsletter in order to clarify your concerns with you personally and provide you with individual advice.
3. Double opt-in and logging: Registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registering, you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that no-one can register with other people's e-mail addresses. Subscriptions to the newsletter are logged in order to be able to prove the registration process in accordance with legal requirements. This includes storing the time of registration and confirmation as well as the IP address. Changes to your data stored by the mailing service provider are also logged.
4. Mailing service provider: The newsletter is sent by CleverReach GmbH & Co KG, Mühlenstr. 43, 26180 Rastede, hereinafter referred to as the "mailing service provider". You can view the data protection provisions of the dispatch service provider here: https://www.cleverreach.com/de/datenschutz/.
5. Furthermore, according to its own information, the mailing service provider may use this data in pseudonymous form, i.e. without allocation to a user, to optimize or improve its own services, e.g. for the technical optimization of the mailing and presentation of the newsletter or for statistical purposes to determine from which countries the recipients come. However, the mailing service provider does not use the data of our newsletter recipients to write to them itself or pass it on to third parties.
6. Registration data: To register for the newsletter, it is not sufficient to enter your e-mail address; we ask you to enter your title, name and company for the purpose of addressing you personally in the newsletter.
7. Performance measurement: The newsletters contain a so-called "web-beacon", i.e. a pixel-sized file that is retrieved from the server of the mailing service provider when the newsletter is opened. As part of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and time of retrieval, is initially collected. This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined with the help of the IP address) or the access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor that of the mailing service provider to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.
8. The newsletter is sent and success is measured on the basis of the consent of the recipient in accordance with 6 para. 1 lit. a, Art. 7 GDPR in conjunction with Section 7 para. 2 no. 3 UWG or on the basis of legal permission in accordance with Section 7 para. 3 UWG.
9. The registration process is logged on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR and serves as proof of consent to receive the newsletter. Cancellation/revocation - You can cancel the receipt of our newsletter at any time, i.e. revoke your consent. You will find a link to unsubscribe from the newsletter at the end of each newsletter. If users have only registered for the newsletter and have canceled this registration, their personal data will be deleted.

1.15 Collection of access data and log files

1. We collect on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. GDPR, we collect data about every access to the server on which this service is located (so-called server log files). The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.
2. Log file information is stored for a maximum of seven days for security reasons (e.g. to investigate misuse or fraud) and then deleted. Data whose further storage is required for evidence purposes is excluded from deletion until the respective incident has been finally clarified.

1.16 Cookies & reach measurement

1. Cookies are pieces of information that are transferred from our web server or third-party web servers to the user's web browser and stored there for later retrieval. Cookies can be small files or other types of information storage.
2. Users are informed about the use of cookies in the context of pseudonymous reach measurement in this privacy policy.
3. If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online offer.
4. You can object to the use of cookies for reach measurement and advertising purposes via the deactivation page of the network advertising initiative(http://optout.networkadvertising.org/) and also via the US website(http://www.aboutads.info/choices) or the European website(http://www.youronlinechoices.com/uk/your-ad-choices/).
5. Videos from the "YouTube" platform of the third-party provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA are embedded on our website. By embedding YouTube videos, various connections to Google servers are established, through which cookies are stored in the reader's browser and personal data is sent to YouTube and Google's DoubleClick advertising service. This takes place before the website visitor clicks on the video.

1.17 Google Analytics

1. On the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR), we use Google Analytics, a web analytics service. GDPR) Google Analytics, a web analysis service of Google LLC ("Google"). Google uses cookies. The information generated by the cookie about the use of the online offer by the user is usually transmitted to a Google server in the USA and stored there.
2. Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with further services associated with the use of this online offer and the use of the Internet. Pseudonymous user profiles can be created from the processed data.
3. We use Google Analytics to display the ads placed by Google and its partners within advertising services only to those users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Google (so-called "remarketing" or "Google Analytics audiences"). With the help of remarketing audiences, we also want to ensure that our ads correspond to the potential interest of users and are not annoying.
4. We only use Google Analytics with activated IP anonymization. This means that the IP address of users is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.
5. The IP address transmitted by the user's browser will not be merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly; users can also prevent Google from collecting the data generated by the cookie and relating to their use of the online offer and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
6. You can find more information on data use by Google, setting and objection options on Google's websites: https://www.google.com/intl/de/policies/privacy/partners("Data use by Google when you use our partners' websites or apps"), https://policies.google.com/technologies/ads ("Data use for advertising purposes"), https://adssettings.google.com/authenticated ("Manage information that Google uses to show you advertising").

1.18 Google reCAPTCHA

1. On the basis of our legitimate interests (i.e. legitimate interest in determining personal responsibility on the Internet and the prevention of misuse and/or spam within the meaning of Art. 6 para. 1 lit. f. GDPR) Google reCAPTCHA (website: https://www.google.com/recaptcha/) from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland to recognize bots. The tool is used to differentiate whether the input - for example in forms - has been made by a natural person or abusively by machine and automated processing. The analysis begins as soon as the user enters our website. Google reCAPTCHA analyzes various information, such as IP address, time spent on the website or mouse movements made by the user. In the context of the use of Google reCAPTCHA, it is possible that personal data may also be transmitted to Google LLC. in the USA.
2. Privacy Policy: https://policies.google.com/privacy Opt-Out: Opt-out plugin:
   http://tools.google.com/dlpage/gaoptout?hl=de Manage information that Google uses to show you advertising: https://adssettings.google.com/authenticated

1.19 Facebook social plugins

1. On the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR) social plugins ("plugins") of the social network facebook.com, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). The plugins can display interaction elements or content (e.g. videos, graphics or text contributions) and are recognizable by one of the Facebook logos (white "f" on a blue tile, the terms "Like", "Gefällt mir" or a "thumbs up" sign) or are marked with the addition "Facebook Social Plugin". The list and appearance of Facebook social plugins can be viewed here: https://developers.facebook.com/docs/plugins/.
2. When a user accesses a function of this online offering that contains such a plugin, their device establishes a direct connection with the Facebook servers. The content of the plugin is transmitted by Facebook directly to the user's device and integrated into the online offering. User profiles can be created from the processed data. We therefore have no influence on the scope of the data that Facebook collects with the help of this plugin and therefore inform users according to our level of knowledge.
3. By integrating the plugins, Facebook receives the information that a user has accessed the corresponding page of the online offer. If the user is logged in to Facebook, Facebook can assign the visit to their Facebook account. If users interact with the plugins, for example by clicking the Like button or posting a comment, the corresponding information is transmitted directly from your device to Facebook and stored there. If a user is not a member of Facebook, it is still possible for Facebook to find out their IP address and store it. According to Facebook, only an anonymized IP address is stored in Germany.
4. The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as the relevant rights and setting options for protecting the privacy of users can be found in Facebook's data protection information: https://www.facebook.com/about/privacy/.
5. If a user is a Facebook member and does not want Facebook to collect data about them via this online service and link it to their membership data stored on Facebook, they must log out of Facebook and delete their cookies before using our online service. Further settings and objections to the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/.
   The settings are platform-independent, i.e. they are adopted for all devices, such as desktop computers or mobile devices.

1.20 Jetpack (WordPress Stats)

1. On the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR), we use the Jetpack plugin. GDPR) the Jetpack plugin (here the sub-function "Wordpress Stats"), which integrates a tool for the statistical evaluation of visitor access and is provided by Automattic, Inc. 132 Hawthorne Street San Francisco, CA 94107, USA. Jetpack uses so-called "cookies", text files that are stored on your computer and enable your use of the website to be analyzed.
2. The information generated by the cookie about your use of this online offer is stored on a server in the USA. User profiles can be created from the processed data, whereby these are only used for analysis and not for advertising purposes. Further information can be found in Automattic's privacy policy: https://automattic.com/privacy/ and information on Jetpack cookies: https://jetpack.com/support/cookies/.

1.21 SalesViewer, Leadinfo

• This website uses SalesViewer® technology from SalesViewer® GmbH to collect and store data for marketing, market research and optimization purposes on the basis of the website operator's legitimate interests (Art. 6 para. 1 lit. f GDPR). For this purpose, a javascript-based code is used to collect company-related data and the corresponding use. The data collected using this technology is encrypted using a non-reversible one-way function (known as hashing).
• The data is immediately pseudonymized and is not used to personally identify the visitor to this website. The data stored by Salesviewer is deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations. You can object to the collection and storage of data at any time with effect for the future by clicking on this link https://www.salesviewer.com/opt-out to prevent SalesViewer® from collecting data on this website in the future. An opt-out cookie for this website will be stored on your device. If you delete your cookies in this browser, you will need to click this link again. We reserve the right to contact you by telephone after you have visited our website in order to clarify your concerns with you personally and provide you with individual advice.

1.21.2 Leadinfo
Based on the legitimate interest of the website operator (Art. 6 para. 1 lit. f GDPR), we use the lead generation service of Leadinfo B.V., Rotterdam, Netherlands. This recognizes visits from companies to our website based on IP addresses and shows us publicly available information, such as company names or addresses. In addition, Leadinfo sets two first-party cookies to evaluate user behavior on our website and processes domains from form entries (e.g. "leadinfo.com") in order to correlate IP addresses with companies and improve the services. Further information can be found at www.leadinfo.com. On this page: www.leadinfo.com/en/opt-out you have an opt-out option. If you opt out, your data will no longer be collected by Leadinfo. We reserve the right to contact you by telephone after you have visited our website in order to clarify your concerns with you personally and provide you with individual advice.

1.22 Website hosting

• Browser type
• operating system
• Referrer URL (previously visited page)
• Host name (IP address)

RAIDBOXES GmbH cannot assign this data to specific persons. This data is not merged with other data sources. The data is deleted after a statistical evaluation after 7 days at the latest. Further information can be found in the data protection regulations of RAIDBOXES GmbH. These can be viewed here: https://raidboxes.io/datenschutzerklaerung/.

1.23 Integration of third-party services and content

• External fonts from Google, LLC, https://www.google.com/fonts ("Google Fonts"). The integration of Google Fonts takes place via a server call at Google (usually in the USA). Privacy policy: https://policies.google.com/privacy,
  Opt-out: https://adssettings.google.com/authenticated.
• Maps provided by the "Google Maps" service of the third-party provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, opt-out: https://www.google.com/settings/ads/.
• Videos from the "YouTube" platform of the third-party provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
  Privacy policy: https://policies.google.com/privacy, opt-out: https://adssettings.google.com/authenticated.
• Functions of the Google+ service are integrated into our online offering. These functions are offered by the third-party provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you are logged into your Google+ account, you can link the content of our pages to your Google+ profile by clicking on the Google+ button. This allows Google to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Google+.
  Privacy policy: https://policies.google.com/privacy, opt-out: https://adssettings.google.com/authenticated.
• Within our online offer, we use the marketing functions (so-called "LinkedIn Insight Tag") of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Each time one of our pages containing LinkedIn functions is accessed, a connection to LinkedIn servers is established. LinkedIn is informed that you have visited our website with your IP address. With the help of the LinkedIn Insight Tag, we can in particular analyze the success of our campaigns within LinkedIn or determine target groups for them based on the interaction of users with our online offer. If you are registered with LinkedIn, LinkedIn is able to assign your interaction with our online offering to your user account. Even if you click on the LinkedIn "Recommend" button and are logged into your LinkedIn account, LinkedIn is able to associate your visit to our website with you and your user account. Privacy policy: https://www.linkedin.com/legal/privacy-policy, opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
• We use functions of the XING network. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. Each time one of our pages containing Xing functions is accessed, a connection to Xing servers is established. To the best of our knowledge, no personal data is stored in the process. In particular, no IP addresses are stored or usage behavior evaluated. Privacy policy: https://www.xing.com/app/share?op=data_protection.
• External code of the JavaScript framework "jQuery", provided by the third-party provider jQuery Foundation, https://jquery.org.

1.24 Updating this privacy policy

From time to time, it may be necessary to update this privacy policy, for example due to new offers on our website. We will then inform you here. This statement was last updated on 27.09.2023.

2. privacy policy for our social media profiles

2.1 Data processing through social networks

• If you are logged in with your social media account and are on our social media presence, the operator of the social media portal (e.g. Meta) can assign this visit to your user account.
• Under various circumstances, your personal data may be collected by the operator of the social media portal even if you are not logged into the respective portal or do not have an account. In this case, data may be collected via cookies that are stored on your end device (smartphone, PC, etc.) or via the collection of your IP address.
• The operators of social media portals can use the data collected in this way to create user profiles in which your preferences and interests are stored for further processing. Based on this knowledge, personalized/interest-based advertising can be displayed to you both within and outside the respective social media presence. If you have a user account with the respective social media provider, the personalized/interest-based advertising can be displayed to you on all devices on which you are logged in or were logged in.

We would like to politely point out that GEDYS IntraWare GmbH is not in a position to track all processing operations within the social media platforms. Depending on the platform, it is possible that further processing operations may be carried out by the operators. You can find further details on this in the terms of use and data protection provisions of the respective social media portals.

2.2 Legal basis

GEDYS IntraWare GmbH would like to ensure as comprehensive a presence as possible on the Internet with its social media presence. This is a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. The analysis processes initiated by the social media portals may be based on other legal bases, which must be specified by the operators of the portals. (e.g. consent within the meaning of Art. 6 para. 1 lit. A GDPR).

2.3 Controller and assertion of rights

GEDYS IntraWare GmbH is jointly responsible with the operators of social media platforms for the data processing operations triggered during your visit. Your rights as a data subject (right of access [Art. 15 EU GDPR], right to rectification [Art. 16 EU GDPR], right to erasure [Art. 17 EU GDPR], right to restriction of processing [Art. 18 EU-GDPR], right to data portability [Art. 20 EU-GDPR] and right to lodge a complaint [Art. 77 EU-GDPR]) can be asserted against GEDYS IntraWare GmbH and the operator of the social media portal (e.g. Meta). We would like to inform you that, despite the existing joint responsibility with the operators of the social media platforms, GEDYS IntraWare GmbH has no full influence on the data processing operations carried out by the platform operators. The options available to GEDYS IntraWare GmbH are largely tied to the corporate policy of the respective provider.

2.4 Storage period

The data collected directly by GEDYS IntraWare GmbH via the social media platforms will be deleted from our systems if you request us to delete it in accordance with Art. 17 EU GDPR, revoke your consent to storage in accordance with Art. 21 EU GDPR or the purpose for data storage no longer applies. Cookies that have been stored on the end devices remain there until they are actively deleted by you as the user. Statutory provisions remain unaffected by these regulations, including retention periods. In this respect, GEDYS IntraWare GmbH has no influence on the storage period of your data, which is stored by the operators of the social media platforms for their own purposes. You can obtain details directly from the social media providers. The corresponding data protection declarations are available from the various providers (see below).

2.5 Our profiles on social networks

2.5.1 Instagram and Facebook
GEDYS IntraWare GmbH has a social media profile on Instagram and Facebook. The provider of these platforms is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
The provider bases the data transfer to the USA on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/ EU_data_transfer_addendum, https://privacycenter.instagram.com/policy/ and https://de-de.facebook.com/help/566994660333381. Details on the handling of your personal data can be found in Instagram's privacy policy: https://privacycenter.instagram.com/policy/sowieFacebook's privacy policy: https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0

2.5.2 Facebook
GEDYS IntraWare GmbH has a social media profile on Facebook. The provider of this platform is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, the data collected is also transferred to the USA and other third countries. GEDYS IntraWare GmbH has concluded an agreement with Facebook on joint processing (Controller Addendum). This agreement regulates which data processing operations GEDYS IntraWare GmbH and Facebook are responsible for when you visit our Facebook page as a user. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum You can adjust your advertising settings yourself in your user account. To do this, click on the following link and log in: https://www.facebook.com/settings?tab=ads. Details can be found in Facebook's privacy policy: https://www.facebook.com/about/privacy/.

2.5.3 Instagram
GEDYS IntraWare GmbH has a social media profile on Instagram. The provider of this platform is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
The provider bases the data transfer to the USA on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/ EU_data_transfer_addendum, https://privacycenter.instagram.com/policy/ and https://de-de.facebook.com/help/566994660333381. Details on the handling of your personal data can be found in Instagram's privacy policy: https://privacycenter.instagram.com/policy/

2.5.4 Xing
GEDYS IntraWare GmbH has a social media profile on Xing. The provider of this platform is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany. Details on the handling of your personal data can be found in Xing's privacy policy: https://privacy.xing.com/de/datenschutzerklaerung.

2.5.5 Linkedin
GEDYS IntraWare GmbH has a social media profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. Linkedin uses advertising cookies on its platform. If you wish to deactivate the Linkedin advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
The provider bases the data transfer to the USA on the standard contractual clauses of the EU Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs. Details on the handling of the personal data collected from you can be found in Linkedin's privacy policy: https://www.linkedin.com/legal/privacy-policy.

2.5.6 YouTube
GEDYS IntraWare GmbH has a social media profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details on the handling of your personal data can be found in YouTube's privacy policy: https://policies.google.com/privacy?hl=de.

2.6 Updating this privacy policy

It may be necessary to update this privacy policy from time to time, for example due to new offers on our website. We will then inform you here. This statement was last updated on 27.09.2023.