Data protection
As of June 30, 2026
1. An overview of data protection
General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. Detailed information on data protection can be found in the privacy policy below.
Data recording on this website
Who is the responsible party for the recording of data on this website (i.e., the “controller”)?
Data processing on this website is carried out by the website operator. Their contact details can be found in the section "Information on the responsible party" of this privacy policy.
How do we record your data?
Your data is collected, firstly, because you provide it to us. This could include, for example, data that you enter into a contact form or send to us via email, telephone, fax or WhatsApp.
Other data is collected automatically or with your consent by our IT systems when you visit this website. This is primarily technical data, such as internet browser, operating system, time of page access, referrer URL, or IP address.
What are the purposes we use your data for?
Some data is collected to ensure the website functions correctly, securely, and is technically stable. Other data may be used – provided you have given your consent – to analyze user behavior and measure the effectiveness of our Google Ads campaigns.
What rights do you have as far as your information is concerned?
You have the right to obtain information free of charge at any time regarding the origin, recipients, and purpose of your stored personal data. You also have the right to rectification or erasure of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future.
Furthermore, under certain conditions, you have the right to request the restriction of the processing of your personal data. You also have the right to lodge a complaint with the competent supervisory authority.
Please do not hesitate to contact us at any time if you have questions about this or any other data protection related issues.
Analysis tools and tools provided by third parties
When you visit this website, your browsing behavior may be statistically analyzed. This is done primarily through analytics programs and marketing technologies, provided you have given your consent. Detailed information can be found in the following sections.
2. Hosting and Content Delivery Networks (CDN)
We host the content of our website with the following providers:
DomainFactory
The provider is DomainFactory GmbH, c/o WeWork, Neuturmstraße 5, 80331 MunichWhen you visit our website, DomainFactory may collect various log files, including your IP address.
Details can be found in DomainFactory's privacy policy:
https://www.df.eu/de/datenschutz/.
The use of DomainFactory is based on Article 6(1)(f) GDPR. We have a legitimate interest in ensuring the most reliable presentation of our website. Where consent is required, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent can be withdrawn at any time.
Data processing
We have concluded a data processing agreement with DomainFactory. This is a legally required contract under data protection law, which ensures that the personal data of our website visitors is processed only according to our instructions and in compliance with the GDPR.
External hosting
This website is hosted externally. The personal data collected on this website is stored on the host's servers. This may include, in particular, IP addresses, contact requests, metadata and communication data, contract data, contact information, names, website access data, and other data generated via a website.
External hosting is used for the purpose of fulfilling our contractual obligations to our potential and existing customers in accordance with Art. 6 para. 1 lit. b GDPR and in the interest of a secure, fast and efficient provision of our online services by a professional provider in accordance with Art. 6 para. 1 lit. f GDPR.
Where consent is required, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent can be withdrawn at any time.
We use the following hoster:
RAIDBOXES GmbH
Friedrich-Ebert-Strasse 7
48153 Munster
Germany
Data processing
We have concluded a data processing agreement with RAIDBOXES. This ensures that personal data of our website visitors is processed only according to our instructions and in compliance with the GDPR.
Cloudflare
We use the service "Cloudflare". The provider is Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA.
Cloudflare offers a globally distributed Content Delivery Network (CDN) with DNS functionality. Technically, the transfer of information between your browser and our website can be routed through the Cloudflare network. This allows Cloudflare to analyze traffic and act as a security filter between our servers and potentially harmful traffic from the internet.
Cloudflare may use cookies or similar technologies to recognize internet users, insofar as this is necessary for the security and provisioning purposes described.
The use of Cloudflare is based on our legitimate interest in providing our website in the most error-free, secure and efficient way possible, in accordance with Art. 6 para. 1 lit. f GDPR.
Data transfers to the USA are based on the European Commission's Standard Contractual Clauses. Further information can be found at:
https://www.cloudflare.com/privacypolicy/.
Data processing
We have entered into a data processing agreement with Cloudflare. This ensures that personal data of our website visitors is processed only according to our instructions and in compliance with the GDPR.
3. General information and mandatory information
Privacy Policy
The operators of this website and its pages take the protection of your personal data very seriously. Hence, we handle your personal data as confidential information and in compliance with the statutory data protection regulations and this Data Protection Declaration.
When you use this website, various personal data are collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect, what we use it for, and how this is done.
Please note that data transmission over the internet, for example when communicating via email, can have security vulnerabilities. Complete protection of data against access by third parties is not possible.
Information about the responsible party (referred to as the “controller” in the GDPR)
The data processing controller on this website is:
LB Detectives GmbH
Boschstrasse 10
73734 Esslingen
Germany
Telephone: 0711 988 09 339
Email: datenschutz@lb-detektei.de
The responsible body is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.
Storage duration
Unless a more specific storage period is stated within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies.
If you submit a legitimate request for erasure or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible grounds for storing it, such as tax or commercial law retention periods. In the latter case, the data will be deleted once these grounds no longer apply.
General information on the legal basis for data processing
If you have consented to data processing, we process your personal data on the basis of Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR if special categories of personal data are processed.
In the case of explicit consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49 para. 1 lit. a GDPR.
If you have consented to the storage of cookies or access to information on your device, processing is also carried out on the basis of Section 25 Paragraph 1 of the German Telemedia Act (TMG). This consent can be revoked at any time.
If your data is required for the performance of the contract or for taking steps prior to entering into a contract, we process your data on the basis of Article 6(1)(b) GDPR. Insofar as the processing is necessary for compliance with a legal obligation, it is carried out on the basis of Article 6(1)(c) GDPR.
Data processing may also be based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. We provide information on the applicable legal bases in each individual case in the following sections.
Note on data transfer to the USA and other third countries
We use tools from companies based in the USA or other third countries that do not offer adequate data protection. When these tools are active, your personal data may be transferred to and processed in these third countries.
Please note that a level of data protection comparable to that of the European Union may not be guaranteed in these countries. For example, US companies may be obligated to disclose personal data to security authorities without you, as the data subject, having effective legal recourse against this.
It therefore cannot be ruled out that US authorities process, analyze, or store personal data located on US servers for surveillance purposes. We have no control over these processing operations.
Revocation of your consent to the processing of data
Many data processing operations are only possible with your explicit consent. You can revoke your consent at any time with effect for the future. The lawfulness of the processing carried out before the revocation remains unaffected.
Right to object to data collection in special cases and to direct advertising
Insofar as data processing is based on Article 6(1)(e) or (f) of the GDPR, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you. This also applies to profiling based on these provisions.
The specific legal basis for each processing activity is set out in this privacy policy. If you object to the processing of your personal data, we will no longer process it unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of establishing, exercising or defending legal claims.
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing. This also applies to profiling insofar as it is related to such direct marketing.
Right to log a complaint with the competent supervisory agency
In the event of violations of the GDPR, you have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible is, in particular, the one in your place of habitual residence, your place of work, or the place of the alleged violation.
Right to data portability
You have the right to receive the data that we process automatically based on your consent or in fulfillment of a contract, either for yourself or for a third party, in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done if technically feasible.
Information about, rectification and eradication of data
Under applicable law, you have the right to request information, free of charge, about your stored personal data, its origin and recipients, and the purpose of the data processing. Where applicable, you also have the right to rectification or erasure of this data.
You can contact us at any time with regard to this and other questions concerning personal data.
Right to demand processing restrictions
You have the right to request that the processing of your personal data be restricted.
You can contact us at any time regarding this. The right to restrict processing exists in particular in the following cases:
- If you dispute the accuracy of your personal data stored with us, we generally need time to verify this. For the duration of the verification process, you have the right to request the restriction of processing.
- If the processing of your personal data is unlawful, you can request the restriction of data processing instead of deletion.
- If we no longer need your personal data, but you require it for the establishment, exercise or defense of legal claims, you have the right to request restriction of processing instead of erasure.
- If you have objected to processing pursuant to Article 21(1) GDPR, a balancing of interests between your interests and ours must take place. Until it is determined whose interests prevail, you have the right to request the restriction of processing.
If you have restricted the processing of your personal data, this data – apart from its storage – may only be processed with your consent, for the establishment, exercise or defense of legal claims, for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.
SSL or TLS encryption
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as inquiries or orders.
You can recognize an encrypted connection by the fact that the address bar of your browser changes from "http://" to "https://" and a padlock icon is displayed. When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.
Encrypted payment transactions on this website
If, after concluding a paid contract, there is an obligation to provide us with payment data, for example account numbers in the case of a direct debit authorization, this data is required for payment processing.
Payment transactions using common payment methods, such as Visa, Mastercard or direct debit, are exclusively processed via an encrypted SSL or TLS connection.
Opposition to advertising emails
The use of contact details published as part of the legal notice for sending unsolicited advertising and informational materials is hereby prohibited. The operators of these pages expressly reserve the right to take legal action in the event of unsolicited advertising, such as spam emails.
4. Recording of data on this website
Cookie policy
Our websites use cookies and similar technologies. Cookies are small data packets and do not harm your device. They are stored on your device either temporarily for the duration of a session as session cookies or permanently as persistent cookies.
Session cookies are automatically deleted after your visit ends. Persistent cookies remain stored on your device until you delete them yourself or your browser deletes them automatically.
Cookies can originate from us (first-party cookies) or from third-party companies (third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites, such as cookies for payment processing, analytics, or marketing measurement.
Cookies serve various functions. Many cookies are technically necessary, as certain website functions would not work without them. Other cookies can be used to analyze user behavior or for advertising purposes.
Technically necessary cookies are used on the basis of Art. 6 para. 1 lit. f GDPR and § 25 para. 2 TDDDG, unless another legal basis is specified. The website operator has a legitimate interest in the technically flawless and optimized provision of its services.
Where consent is requested for the storage of cookies and similar recognition technologies, processing is carried out exclusively on the basis of this consent in accordance with Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG. This consent can be revoked at any time.
You have the option to set up your browser in such a manner that you will be notified any time cookies are placed and to permit the acceptance of cookies only in specific cases. You may also exclude the acceptance of cookies in certain cases or in general or activate the delete-function for the automatic eradication of cookies when the browser closes. If cookies are deactivated, the functions of this website may be limited.
Consent management with Cookiebot CMP
Our website uses Cookiebot CMP to obtain, manage and document consents to the storage of certain cookies, the use of similar technologies and the use of analysis or marketing services.
The provider is Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark.
Cookiebot CMP allows us to manage services that are not technically necessary – in particular, statistics and marketing services – according to your preferences. When you visit our website, Cookiebot processes, in particular, the requested website address, technical browser information, language settings, your IP address, and your consent decision.
Cookiebot stores your consent or revocation in a technically necessary cookie. This allows us to prove which selection you have made. The processing is carried out to fulfill our legal obligation to obtain and document consent based on Art. 6 para. 1 lit. c GDPR and § 25 para. 2 no. 2 TDDDG.
You can change or withdraw your consent at any time with effect for the future via the "Cookie settings" function provided on the website.
For more information, please visit:
https://www.cookiebot.com/de/privacy-policy/.
Google Consent Mode v2
We use Google Consent Mode v2 in conjunction with Cookiebot CMP. Cookiebot transmits your selection in the cookie banner to the Google services we use.
This takes into account, in particular, consent signals for analytics cookies, advertising cookies, ad personalization, and the transmission of advertising-relevant user data. The Google services used adapt their behavior to your selection.
With your consent, Google Analytics and Google Ads may use cookies and similar technologies. If you do not consent, no such analytics or marketing cookies will be set.
Depending on the technical consent mode configuration, Google tags can process limited, cookieless signals in this case, such as information about consent status, technical browser information, timestamps, or referrer data.
Server log files
The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This includes, in particular:
- The type and version of browser used.
- The used operating system
- Referrer URL
- The hostname of the accessing computer.
- The time of the server inquiry
- The IP address
This data is not merged with other data sources.
This data is collected on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in the technically flawless presentation, security, and optimization of this website.
Contact form
If you send us inquiries via the contact form, your information from the inquiry form, including the contact details provided therein, will be stored by us for the purpose of processing your inquiry and in case of follow-up questions. We will not share this data without your consent.
The processing of this data is based on Article 6(1)(b) GDPR if your request is related to the performance of a contract or is necessary for taking steps prior to entering into a contract. In all other cases, the processing is based on our legitimate interest in the effective handling of inquiries addressed to us in accordance with Article 6(1)(f) GDPR or on your consent in accordance with Article 6(1)(a) GDPR, insofar as this has been requested.
The data you enter in the contact form will remain with us until you request its deletion, revoke your consent to its storage, or the purpose for data storage no longer applies. Mandatory legal provisions, in particular retention periods, remain unaffected.
Google Ads conversion rate upon successful form submission
After successful submission of the contact form, a Google Ads conversion event can be triggered. This event serves solely to statistically measure the success of a Google ad.
The conversion event is only triggered after successful form submission. The contents of the contact form, in particular name, email address, phone number, and message, are not transmitted to Google Ads by our standard conversion tracking system.
Enhanced conversions, which involve sending hashed contact information to Google, are currently not enabled.
Request by e-mail, telephone, or fax
When you contact us by email, telephone, or fax, your inquiry, including all resulting personal data such as your name and request, will be stored and processed by us for the purpose of handling your request. We will not share this data without your consent.
The processing is based on Article 6(1)(b) GDPR if your request is related to the performance of a contract or is necessary for taking steps prior to entering into a contract. In all other cases, the processing is based on our legitimate interest in the efficient handling of inquiries addressed to us in accordance with Article 6(1)(f) GDPR or on your consent in accordance with Article 6(1)(a) GDPR, insofar as this has been requested.
The data you provide when submitting contact requests will remain with us until you request its deletion, revoke your consent to its storage, or the purpose for data storage no longer applies. Statutory retention periods remain unaffected.
Communication via WhatsApp
We use the WhatsApp instant messaging service to communicate with our customers and other third parties. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Communication is end-to-end encrypted. This means that WhatsApp and other third parties generally do not have access to the content of communications. However, WhatsApp can process metadata generated during the communication process, such as sender, recipient, and time.
According to WhatsApp, it shares personal data of its users with its US-based parent company, Meta.
Further details on data processing can be found in WhatsApp's privacy policy at:
https://www.whatsapp.com/legal/#privacy-policy.
The use of WhatsApp is based on our legitimate interest in communicating with customers, prospective customers, and business and contractual partners as quickly and effectively as possible, in accordance with Article 6(1)(f) GDPR. Where consent has been requested, data processing is carried out exclusively on the basis of this consent. This consent can be revoked at any time with effect for the future.
Communication content exchanged between you and us on WhatsApp will remain with us until you request its deletion, revoke your consent to its storage, or the purpose for data storage no longer applies. Statutory retention periods remain unaffected.
We use WhatsApp in the "WhatsApp Business" version. Data transfers to the USA are based on the European Commission's Standard Contractual Clauses. Details can be found here:
https://www.whatsapp.com/legal/business-data-transfer-addendum.
Our WhatsApp accounts are configured so that no automatic data synchronization with the address book of the smartphones used takes place.
We have concluded a data processing agreement with the aforementioned provider.
The comment function on this website
For the comment function on this website, in addition to your comment, information about the time of creation, your e-mail address and – unless you post anonymously – your chosen username will be stored.
Storage of the IP address
Our comment function stores the IP addresses of users who post comments. Since we do not review comments on this website before publication, we need this data to be able to take action against the author in the event of legal violations, such as insults or propaganda.
Storage period for comments
Comments and their associated data are stored and remain on this website until the commented content has been completely deleted or comments must be deleted for legal reasons.
Legal basis
The storage of comments is based on your consent in accordance with Article 6 Paragraph 1 Letter a of the GDPR. You can withdraw your consent at any time. An informal notification by email is sufficient for this purpose. The lawfulness of the data processing operations already carried out remains unaffected by the withdrawal.
ProvenExpert
We have integrated ProvenExpert rating seals on this website. The provider is Expert Systems AG, Quedlinburger Straße 1, 10589 Berlin.
The ProvenExpert seal allows us to display customer reviews submitted to ProvenExpert about our company on our website. When you visit our website, a connection to ProvenExpert may be established. This allows ProvenExpert to determine that you have visited our website. Furthermore, language preferences may be recorded to display the seal in your chosen language.
The use of ProvenExpert is based on Article 6(1)(f) GDPR. We have a legitimate interest in the transparent presentation of customer reviews. Where consent is required, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent can be withdrawn at any time.
5. Social Media
eRecht24 Safe Sharing Tool
The content on this website can be shared on social networks such as Facebook, Twitter, and other platforms in compliance with data protection regulations. This website uses the eRecht24 Safe Sharing Tool for this purpose.
The tool only establishes a direct connection between the networks and users when the user actively clicks on a corresponding button. Clicking the button constitutes consent within the meaning of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG.
This consent can be revoked at any time with effect for the future. The tool does not automatically transfer user data to social network operators.
If users are logged into a social network, an information window may appear when using social media elements, in which a text can be confirmed before being sent.
Our users can share content from this website on social networks in a privacy-compliant manner, without the operators of these networks creating complete browsing profiles.
This service is used to obtain the legally required consent for certain technologies. The legal basis for this is Article 6(1)(c) GDPR.
This website integrates elements of the social network Facebook. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Meta, the collected data may also be transferred to the USA and other third countries.
An overview of Facebook social media elements can be found at:
https://developers.facebook.com/docs/plugins/?locale=de_DE.
When the Facebook social media element is active, a direct connection is established between your device and a Facebook server. Facebook then receives the information that you have visited this website with your IP address.
If you click the Facebook "Like" button while logged into your Facebook account, content from this website can be linked to your Facebook profile. Facebook can then associate your visit to this website with your user account.
For more information, please see Facebook's privacy policy:
https://de-de.facebook.com/privacy/explanation.
Where consent has been obtained, the service is used on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG. This consent can be revoked at any time. Where no consent has been obtained, the service is used on the basis of our legitimate interest in achieving the broadest possible visibility on social media, in accordance with Article 6(1)(f) GDPR.
To the extent that personal data is collected on our website using the tool described here and forwarded to Facebook, we and Meta Platforms Ireland Limited are jointly responsible for this data processing. This joint responsibility is limited to the collection and transfer of the data to Facebook.
The processing carried out by Facebook after the forwarding is not part of this joint responsibility. Our joint obligations are set out in a joint processing agreement:
https://www.facebook.com/legal/controller_addendum.
We are responsible for data protection information when using the Facebook tool and for its data protection-compliant implementation on our website. Facebook is responsible for the data security of its products.
You can assert your data subject rights regarding data processed by Facebook directly with Facebook. If you assert your data subject rights with us, we are obligated to forward them to Facebook.
Information on data transfers to the USA can be found at:
https://www.facebook.com/legal/EU_data_transfer_addendum.
Functions of the Twitter service are integrated on this website. These features are offered by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.
When the social media element is active, a direct connection is established between your device and the Twitter server. Twitter then receives information about your visit to this website.
By using Twitter and the "Retweet" function, websites you visit can be linked to your Twitter account and made known to other users.
We have no knowledge of the content of the transmitted data or its use by Twitter. Further information can be found in Twitter's privacy policy:
https://twitter.com/de/privacy.
Where consent has been obtained, the service is used on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG. This consent can be revoked at any time. Where no consent has been obtained, the service is used on the basis of our legitimate interest in achieving the broadest possible visibility on social media, in accordance with Article 6(1)(f) GDPR.
Data transfers to the USA are based on the European Commission's Standard Contractual Clauses. Further information can be found at:
https://gdpr.twitter.com/en/controller-to-controller-transfers.html.
You can change your privacy settings on Twitter in your account settings:
https://twitter.com/account/settings.
We have integrated functions of the public media platform Instagram into this website. These functions are being offered by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
When the social media element is active, a direct connection is established between your device and an Instagram server. Instagram then receives information about your visit to this website.
If you are logged into your Instagram account and click the Instagram button, content from this website can be linked to your Instagram profile. Instagram can then associate your visit to this website with your user account.
We have no knowledge of the content of the transmitted data or its use by Instagram.
Where consent has been obtained, the service is used on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG. This consent can be revoked at any time. Where no consent has been obtained, the service is used on the basis of our legitimate interest in achieving the broadest possible visibility on social media, in accordance with Article 6(1)(f) GDPR.
To the extent that personal data is collected on our website using the tool described here and forwarded to Facebook or Instagram, we and Meta Platforms Ireland Limited are jointly responsible for this data processing. This joint responsibility is limited to the collection and transfer of the data to Facebook or Instagram.
The processing carried out by Facebook or Instagram after the forwarding is not part of the joint controllership. Further information on the joint controllership agreement can be found at:
https://www.facebook.com/legal/controller_addendum.
Further information can be found in Instagram's privacy policy:
https://instagram.com/about/legal/privacy/.
This website uses elements of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
Each time you access a page on this website that contains LinkedIn elements, a connection is established to LinkedIn's servers. LinkedIn is thereby informed that you have visited this website with your IP address.
If you click the “Recommend” button on LinkedIn and are logged into your LinkedIn account, LinkedIn can associate your visit to this website with your user account.
We have no knowledge of the content of the transmitted data or its use by LinkedIn.
Where consent has been obtained, the service is used on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG. This consent can be revoked at any time. Where no consent has been obtained, the service is used on the basis of our legitimate interest in achieving the broadest possible visibility on social media, in accordance with Article 6(1)(f) GDPR.
Information on data transfers to the USA can be found at:
https://www.linkedin.com/help/linkedin/answer/62538/datenubertragung-aus-der-eu-dem-ewr-und-der-schweiz?lang=de.
For more information, please see LinkedIn's privacy policy:
https://www.linkedin.com/legal/privacy-policy.
6. Analysis tools and advertising
google analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics allows us to analyze the behavior of website visitors. This includes processing data such as page views, time spent on the site, operating systems used, browser information, referring websites, interactions with the website, and approximate location data.
Google Analytics uses technologies to recognize users and analyze user behavior, such as cookies or similar technologies. The information collected by Google may be transferred to and processed on Google servers.
Google Analytics is technically integrated via the WordPress plugin "Site Kit by Google" and is only activated after you have given your consent in the "Statistics" category.
The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. This consent can be revoked at any time.
Google states that individual IP addresses are not logged or stored in Google Analytics 4. IP addresses can be used technically to derive rough location information and are then discarded.
The retention period for user-related event and session data depends on the settings in the Google Analytics property used. The current setting is 2 months.
Browser plugin
You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=de.
For more information on how Google Analytics handles user data, please see:
https://support.google.com/analytics/answer/6004245?hl=de.
Data processing
We have concluded a data processing agreement with Google and implement the requirements of the data protection authorities when using Google Analytics.
Google Ads
The website operator uses Google Ads. Google Ads is an online advertising program of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
We are currently running Google search ads for our services in the following areas: Counter-surveillance, IT forensicsMobile forensics, industrial espionage and data leakage.
The campaigns are focused on search ads. We are not currently using Google Ads remarketing, personalized remarketing audiences, or enhanced conversions.
Google Ads allows us to display advertisements in the Google search engine when users enter specific search terms. We can then statistically analyze which search terms led to our ads being displayed and how many ads resulted in clicks.
Google Ads is only activated on our website after you have given your consent in the "Marketing" category. Its use is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. You can withdraw your consent at any time.
Information on data transfers to the USA and the guarantees used by Google can be found at:
https://policies.google.com/privacy/frameworks.
Google Ads conversion tracking
This website uses Google Ads conversion tracking. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads conversion tracking allows Google and us to identify whether users perform specific actions relevant to us after clicking on a Google ad. In particular, a successfully submitted contact request via the contact form is recorded as a conversion.
The conversion event is only triggered after successful submission of the contact form. The contents of the contact form, in particular name, email address, telephone number, and message, are not transmitted to Google Ads as part of the standard conversion tracking setup.
Google may use cookies or similar tracking technologies to associate an ad click with a subsequent contact request. We do not receive any information that allows us to personally identify individual users.
The use of Google Ads conversion tracking is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. This consent can be revoked at any time.
Call tracking via Google Ads
We also measure calls made directly through the call feature in our Google ads.
Google may use a Google forwarding number for this purpose, which redirects calls to our actual phone number. This allows Google to process, in particular, the time, duration, connection status, campaign, ad group, and other technical data of the call.
In our Google Ads account, a call is counted as a conversion if the call lasts at least 60 seconds.
The content of phone calls is not recorded for us by Google Ads. Call tracking is used solely for statistical evaluation and optimization of our Google Ads campaigns.
Insofar as processing takes place via the website and the use of cookies or similar technologies, the legal basis is your consent pursuant to Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG. Otherwise, the evaluation is based on our legitimate interest in measuring and optimizing our advertising measures pursuant to Art. 6 para. 1 lit. f GDPR.
For more information about Google Ads, see:
https://policies.google.com/privacy?hl=de.
7. Plug-ins and Tools
YouTube with expanded data protection integration
This website embeds videos from YouTube. The operator of the site is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in enhanced privacy mode. According to YouTube, this mode prevents YouTube from storing information about visitors to this website before they watch a video. However, enhanced privacy mode does not necessarily prevent data from being shared with YouTube partners. For example, YouTube can still connect to the Google DoubleClick network regardless of whether you watch a video.
As soon as you start a YouTube video, a connection is established to YouTube's servers. This informs the YouTube server which of our pages you have visited.
If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.
YouTube may store cookies on your device or use similar tracking technologies after a video starts playing. This allows YouTube to collect information about visitors to this website. This information may be used, among other things, to compile video statistics, improve user experience, and prevent fraud.
Under certain circumstances, additional data processing transactions may be triggered after you have started to play a YouTube video, which are beyond our control.
The use of YouTube is in our legitimate interest in presenting our online content in an appealing way, pursuant to Art. 6 para. 1 lit. f GDPR. Where consent is required, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG. Consent can be withdrawn at any time.
Further information about data protection at YouTube can be found here:
https://policies.google.com/privacy?hl=de.
Google Fonts – local hosting
This website uses Google Fonts for consistent font display. The Google Fonts are installed locally. No connection to Google servers is established.
For more information about Google Fonts, please visit:
https://developers.google.com/fonts/faq.
Google Maps
This page uses the Google Maps service. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
To use the functions of Google Maps, it is necessary to process your IP address. This information is generally transmitted to and stored on a Google server in the USA. The provider of this website has no influence on this data transfer.
When Google Maps is enabled, Google may use Google Fonts for the purpose of consistent font display. When you access Google Maps, your browser loads the necessary web fonts into its browser cache to display text and fonts correctly.
The use of Google Maps is in our legitimate interest in presenting our online services in an appealing manner and ensuring that the locations we specify are easy to find. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR.
Where consent is required, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent can be withdrawn at any time.
Information on data transfers to the USA can be found at:
https://privacy.google.com/businesses/gdprcontrollerterms/.
For more information on the handling of user data, please review Google’s Data Privacy Declaration under:
https://policies.google.com/privacy?hl=de.
Google reCAPTCHA
We use “Google reCAPTCHA” on this website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
reCAPTCHA is used to verify whether data entry on this website, for example in a contact form, is done by a human or by an automated program.
To this end, reCAPTCHA analyzes the behavior of website visitors based on various characteristics. This analysis begins automatically as soon as a visitor enters the website. For the analysis, reCAPTCHA evaluates various pieces of information, such as IP address, time spent on the website, and mouse movements made by the user. The data collected during the analysis is forwarded to Google.
The reCAPTCHA analysis runs entirely in the background. Website visitors are not specifically notified that an analysis is taking place.
The data is stored and analyzed on the basis of Article 6(1)(f) GDPR. We have a legitimate interest in protecting our website from abusive automated data scraping and spam.
Where consent is required, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent can be withdrawn at any time.
For more information about Google reCAPTCHA, please visit:
https://policies.google.com/privacy?hl=de
and
https://policies.google.com/terms?hl=de.
8. eCommerce and payment service providers
Processing of Customer and Contract Data
We collect, process and use personal customer and contract data to establish, define the content of and modify our contractual relationships.
We collect, process and use personal data relating to the use of this website, so-called usage data, only to the extent necessary to enable the user to use the service or for billing purposes.
The legal basis for this is Article 6(1)(b) GDPR. The collected customer data will be deleted after completion of the order or termination of the business relationship, as well as after the expiry of any applicable statutory retention periods.
Data transfer upon closing of contracts for services and digital content
We only transfer personal data to third parties if this is necessary for the execution of the contract, for example to a credit institution commissioned with payment processing.
Your data will not be transmitted further, or only if you have expressly consented to such transmission. Your data will not be shared with third parties without your explicit consent, for example for advertising purposes.
The basis for the processing of data is Art. 6(1)(b) GDPR, which permits the processing of data for the fulfilment of a contract or for pre-contractual actions.
Payment services
We integrate payment services from third-party companies into our website. When you make a purchase with us, your payment data, such as name, payment amount, bank account details or credit card number, will be processed by the respective payment service provider for the purpose of payment processing.
These transactions are subject to the respective terms and conditions and data protection regulations of the providers. The use of payment service providers is based on Article 6(1)(b) GDPR and, in the interest of ensuring the smoothest, most convenient, and most secure payment process possible, pursuant to Article 6(1)(f) GDPR.
Where your consent is requested for certain actions, Article 6(1)(a) GDPR serves as the legal basis for data processing. Consent can be withdrawn at any time for the future.
We use the following payment services or payment service providers:
PayPal
The provider of this payment service is PayPal (Europe) S.à rl et Cie, SCA, 22–24 Boulevard Royal, L-2449 Luxembourg.
Data transfers to the USA are based on the European Commission's Standard Contractual Clauses. Details can be found at:
https://www.paypal.com/de/webapps/mpp/ua/pocpsa-full.
Details can be found in PayPal’s privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Paydirekt
The provider of this payment service is Paydirekt GmbH, Hamburger Allee 26–28, 60486 Frankfurt on the Main River, Germany.
When you make a payment using Paydirekt, Paydirekt collects various transaction data and forwards it to the bank where you are registered with Paydirekt. In addition to the data required for the payment, Paydirekt may process further data as part of the transaction processing, such as the delivery address or individual items in the shopping cart.
Paydirekt authenticates the transaction using the authentication method registered with your bank. The payment amount is then transferred from your account to ours. Neither we nor any third party has access to your account details.
For details on payment with Paydirekt, please refer to Paydirekt's terms and conditions and privacy policy:
https://www.paydirekt.de/agb/index.html.
Mastercard
The provider of this payment service is Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium.
Mastercard may transfer data to its parent company in the USA. Data transfers to the USA are governed by Mastercard's Binding Corporate Rules. Details can be found at:
https://www.mastercard.de/de-de/datenschutz.html.
Visa
The provider of this payment service is Visa Europe Services Inc., London Branch, 1 Sheldon Square, London W2 6TT, United Kingdom.
The UK is considered a safe third country with regard to data protection. VISA can transfer data to its parent company in the USA. Data transfers to the USA are based on the European Commission's Standard Contractual Clauses.
For more information, please visit:
https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html.
9. Online-based Audio and Video Conferences (Conference tools)
Data Processing:
We use online conferencing tools, among other methods, to communicate with our customers. When you communicate with us via video or audio conference over the internet, your personal data is collected and processed by us and the provider of the respective conferencing tool.
The conference tools collect all data that you provide or use to access the tools, such as your email address and/or telephone number. Furthermore, the conference tools process the duration of the conference, the start and end times of participation, the number of participants, and other contextual information related to the communication process.
Furthermore, the provider processes all technical data necessary for handling online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speaker, and the type of connection.
To the extent that content is exchanged, uploaded, or otherwise made available within the tool, this content may also be stored on the tool provider's servers. This includes, in particular, cloud recordings, chat or instant messages, voicemails, uploaded photos and videos, files, whiteboards, and other information shared during use.
Please note that we do not have full control over the data processing operations of the tools used. Our options are largely determined by the respective provider's company policy.
Purpose and legal bases
The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers. The legal basis for this is Article 6(1)(b) GDPR.
Furthermore, the use of these tools serves to generally simplify and accelerate communication with us or our company. This is done on the basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.
Where consent has been requested, the use of the relevant tools is based on this consent. This consent can be revoked at any time with effect for the future.
Storage duration
The data we collect directly via video and conference tools will be deleted from our systems as soon as you request its deletion, withdraw your consent to its storage, or the purpose for data storage no longer applies.
Stored cookies remain on your device until you delete them. Mandatory legal retention periods remain unaffected.
We have no control over how long your data is stored by the operators of the conference tools for their own purposes. For details, please contact the operators of the conference tools directly.
Conference tools used
Zoom
We use Zoom. The provider is Zoom Communications Inc., 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA.
Details regarding data processing can be found in Zoom's privacy policy:
https://zoom.us/de-de/privacy.html.
Data transfers to the USA are based on the standard contractual clauses of the European Commission.
Data processing
We have entered into a data processing agreement with Zoom. This ensures that personal data of our website visitors is processed only according to our instructions and in compliance with the GDPR.
Microsoft Teams
We use Microsoft Teams. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
Details regarding data processing can be found in Microsoft's privacy statement:
https://privacy.microsoft.com/de-de/privacystatement.
Data processing
We have entered into a data processing agreement with Microsoft. This ensures that personal data of our website visitors is processed only according to our instructions and in compliance with the GDPR.
10. Custom Services
Handling applicant data
We offer you the opportunity to apply to us, for example by email, post, or via an online application form. Below, we provide information about the scope, purpose, and use of the personal data collected during the application process.
Your data will be collected, processed, and used in accordance with applicable data protection law and all other legal provisions. Your data will be treated with strict confidentiality.
Scope and purpose of the data collection
When you send us an application, we process the associated personal data, such as contact and communication data, application documents and notes from job interviews, insofar as this is necessary for deciding on the establishment of an employment relationship.
The legal basis for this is Section 26 of the German Federal Data Protection Act (BDSG), Article 6 Paragraph 1 Letter b of the GDPR and – if you have given your consent – Article 6 Paragraph 1 Letter a of the GDPR. You can withdraw your consent at any time.
Within our company, your personal data will only be shared with individuals involved in processing your application.
If your application is successful, the data you have submitted will be stored in our data processing systems on the basis of Section 26 BDSG and Article 6 Paragraph 1 Letter b GDPR for the purpose of carrying out the employment relationship.
Data Archiving Period
If we are unable to offer you a position, you decline a job offer, or you withdraw your application, we reserve the right to retain the data you have submitted for up to six months from the end of the application process, based on our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR.
The data will then be deleted and physical application documents destroyed. Retention serves primarily as evidence in the event of legal proceedings.
If it is apparent that the data will be required after the six-month period, for example due to threatened or pending legal proceedings, deletion will only take place after the purpose for the further retention has ceased to exist.
Longer storage may also take place if you have given your consent in accordance with Art. 6 para. 1 lit. a GDPR or if statutory retention obligations preclude deletion.
11. Management, organization and support tools
We use services, platforms and software from other providers, hereinafter referred to as third-party providers, for the purposes of organizing, managing, planning and delivering our services.
When selecting third-party providers and their services, we comply with legal requirements. Within this framework, personal data may be processed and stored on the third-party providers' servers.
This may involve various types of data, which we process in accordance with this privacy policy. This may include, in particular, users' basic and contact information, data relating to transactions, contracts, other processes and their content.
If users are referred to third-party providers, their software, or platforms in the course of communication, business, or other relationships with us, these third-party providers may process usage data and metadata for security, service optimization, or marketing purposes. We therefore ask you to review the privacy policies of the respective third-party providers.
Types of Data Processed
Content data, such as entries in online forms; usage data, such as websites visited, interest in content and access times; meta, communication and procedural data, such as IP addresses, timestamps, identification numbers and consent status; contact data, such as email addresses and telephone numbers; inventory data, such as names and addresses; payment data, such as bank details, invoices and payment history; contract data, such as subject matter of the contract, term and customer category.
Affected people
Communication partners; users, for example website visitors and users of online services; customers; business and contractual partners; employees, for example current employees, applicants and former employees.
Purposes of Processing
Contact requests and communication; provision of contractual services and customer service; office and organizational procedures.
Legal basis
Legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR; consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.
Further information on processing procedures, methods and services
Calendly
We use Calendly for online appointment scheduling and management. The service provider is Calendly LLC, 271 17th St NW, Ste 1000, Atlanta, Georgia 30363, USA.
The legal basis is our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. Further information can be found at:
https://calendly.com/de
and
https://calendly.com/pages/privacy.
Information on the data processing agreement and standard contractual clauses can be found at:
https://calendly.com/dpa.
WeTransfer
We use WeTransfer to transfer files over the internet. The service provider is WeTransfer BV, Oostelijke Handelskade 751, 1019 BW Amsterdam, Netherlands.
The legal basis is our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. Further information can be found at:
https://wetransfer.com
and
https://wetransfer.com/legal/privacy.
