We appreciate your visit to our website https://www.foodji.com/ or your use of our app. In the course of your use of our services, your personal data may be processed. The protection of your data is always an important concern for us. This privacy policy explains how we process personal data and what rights you have. This declaration applies to all processing of personal data carried out by us, both in the context of providing our services via our website and mobile application (hereinafter also referred to as "app"). This privacy policy can be accessed and printed out at any time on our website as well as in our app.

‍

I. General information

This privacy policy informs you about the handling of your personal data when using our website and the app. In particular, it explains which data we collect for which purposes and on what legal basis.
Personal data ("data") is any information relating to an identified or identifiable individual. "Processing" of data means any operation performed with or without the aid of automated procedures in relation to personal data, such as collection, recording, organization, arrangement, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. We treat personal data confidentially and in accordance with the legal data protection regulations. The legal basis for data protection can be found in particular in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data, on the free movement of such data and repealing Directive 95/46/EC ("General Data Protection Regulation", DSGVO) as well as in the German Federal Data Protection Act (BDSG) the German Telemedia Act (TMG) and the German Telecommunications and Telemedia Data Protection Act (TTDSG).

II. responsible person

Responsible for the processing of your data is the

‍
Foodji GmbH
Auenstr. 5
80469 Munich
Germany
+49 89 552 09 468
Email: hello@foodji.com

‍
Controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

III. contact details of the data protection officer

‍
Our data protection officer is available at all times to answer any questions you may have and to act as your contact person on the subject of data protection at our company. The contact details of the data protection officer are:
PROLIANCE GmbH
http://www.datenschutzexperte.de
Leopoldstr. 21
80802 Munich
E-mail: datenschutzbeauftragter@datenschutzexperte.de

IV. scope of data processing

We process your data only as necessary for the purpose of providing a functional and user-friendly website and app and for the provision of our content and services. Failure to provide the data may have legal disadvantages, such as the impracticability of a contract. As part of our data processing, we use various third-party providers in the areas of hosting, online marketing, mailing services and customer/data management (CRM), each of which processes data on our behalf. We have concluded corresponding order processing agreements with these third-party providers, insofar as the third parties are order processors, which ensure that an adequate level of data protection is also guaranteed at our order processors (Art. 28 DSGVO).

V. Data security

We have taken technical and organizational measures to ensure that the regulations on data protection are observed both by us and by external service providers. For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses SSL or TLS encryption.

VI. processing of personal data

The following overview lists all types of data we process, the purposes of their processing, as well as the legal basis for their processing.

1. use of the website

If you use our website without transmitting data to us in any other way (e.g. by registering or using the contact form), we collect the following data on our web server temporarily and anonymously via server log files:
- Website from which our website was requested (so-called. Referrer URL)
- Name and URL of the requested website
- Date and time of access to the website
- Description of the type, language and version of the web browser used
- IP address of the requesting computer, which is shortened so that a personal reference can no longer be established
- Message, whether access was successful (access status/ HTTP status code)
- Internet service provider of the accessing system
- the amount of data transferred
- the operating system used and its interface
- the GMT time zone difference
This processing is technically necessary in order to be able to display our website to you. We also use the data for statistical evaluations to ensure the operational security and stability of our website. The legal basis for this processing is Art. 6 para. 1 lit. f) DS-GVO. The processing of the aforementioned data is necessary for the provision of the website and to ensure the stability and operational security of the website and thus serves to protect a legitimate interest of our company. We also use the data to fulfill our legal obligations for reasons of data security. The legal basis for this processing is Art. 6 para. 1 p. 1 lit. c DSGVO.

2. use of the app

When you use our app, we process the following data:
- Registration data (name, user name, telephone number, email address, usual place of residence)
- GPS location data
- Content data voluntarily entered by the user (photos, videos, etc.) - Information voluntarily shared by the user about their purchases - IP address - Date and time of access to the app - Time difference to Greenwich Mean Time (GMT)
- information voluntarily shared by the user about their purchases
- IP address
- date and time of access to the app
- time zone difference to Greenwich Mean Time (GMT)
- content of the request
- access status/HTTP status code,
- amount of data transferred
- client from which the request originates, app, version, operating system, environment language and version of the operating system
- your device identification
The processing purposes are based on the following legal bases:
Purpose of processing Legal basis
- statistical evaluations for the purpose of optimizing our app,
- ensuring the stability and operational security of the app Art. 6 para. 1 sentence 1 lit. f GDPR due to our legitimate interest in fraud prevention and quality assurance
Compliance with legal obligations for reasons of data security Art. 6 para. 1 sentence 1 lit. c GDPR
- Account creation and management;
- Processing of inquiries,
- Use of the functions of the app
- Order processing/history; payment data; receivables management; subsidy Art. 6 para. 1 sentence 1 lit. b GDPR lit. b GDPR
Voluntary sharing of content data as part of app usage as well as purchase data for the purpose of usage analysis for the personalization of offers. Art. 6 para. 1 p. 1 lit. a GDPR
- Identification of the user account for push messages,
- Deactivation of the app on stolen or lost smartphones and/or end devices.
- Processing and linking of payment information and transactions Art. 6 para. 1 p.1 lit. f GDPR due to our legitimate interest in fraud prevention, fraud detection and quality assurance.

3. contact

If you write to us, e.g. by sending us an e-mail or contacting us via the contact form, we store the contact data provided by you, such as name, address, cell phone number, e-mail and the information provided in your inquiry.
If you contact us within the scope of an existing contractual relationship or contact us in advance for information about our range of services or our other services, the data and information you provide will be processed for the purpose of processing and responding to your contact inquiry on the legal basis of Art. 6 (1) sentence 1 lit. b DS-GVO. Insofar as you have consented to the processing for the purpose of answering your inquiry, the legal basis is Art. 6 para. 1 p. 1 lit. a. DSGVO. Otherwise, we process your data to protect our legitimate interests pursuant to Art. 6 para. 1 p. 1 lit. f DS-GVO for the proper response to customer/contact inquiries.

‍

We use Salesforce (Salesforce Inc, Salesforce Tower, 415 Mission St, 3rd Floor
San Francisco, CA 94105, USA), a customer relationship management system (CRM), to manage and maintain our customer relationships. When using Salesforce, we process the following categories of personal data:

• - Contact data: e.g. name, address, e-mail address, telephone number.
  - Communication data: e.g. content of emails, conversation notes.
  - Contract data: e.g. contract number, contract content, service data.
  - Interaction data: e.g. information about the use of our products or services.

We use Salesforce for the purpose of managing our customer relationships and communication as well as processing inquiries and orders and, if necessary, for analyzing and improving our services. The legal basis for the processing is consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR, provided that you have transmitted your data to us for the purpose of contacting us, as well as for the implementation of pre-contractual measures and fulfillment of contracts pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR.

4. registration

No registration is required to use the app. However, to use the Services, in particular to order goods in the App, you must create a customer account ("User Account") by following the registration instructions in the App. When registering for a User Account, you must provide a password and submit to foodji certain personal data, such as name, address, email address, mobile phone number, and - unless it is a free order (e.g., as part of a promo with a coupon code) - at least one valid payment method, which we need for the purpose of processing your order. We process the data of our customers to enable them to select, purchase or order the selected products, goods and related services, as well as their payment and delivery, or execution. The mandatory data required for the processing of contracts are marked separately, other data are voluntary. In this respect, we process, for example, inventory data (e.g. names, addresses); payment data (e.g. bank details, invoices, payment history); contact data (e.g. e-mail, telephone numbers); contract data (e.g. subject matter of the contract, term, customer category). The processing of customer data is carried out for the fulfillment of contracts concluded via the app on the legal basis of Art. 6 para. 1 p. 1 lit. b DSGVO.

Social Media Login

For the registration and login to the user account, you also have the option to authenticate with your existing profile with one of the following social networks, Facebook, Google or Apple and finally register or log in.
For this purpose, you will find the corresponding icons of the respective providers of the social networks supported by our app on the registration page or login page. Before a connection to the providers is established, you must expressly agree to the process and data transfer described below: Your click on the respective icon opens a new window where you have to log in with your login data for the social network. After you have successfully logged in, the social network will tell you which data (name and e-mail address) will be transmitted to us for authentication as part of the registration or login process. If you have agreed to this data transmission, the fields required by us for registration will be filled with the transmitted data. The information required by us for registration or login is your e-mail address. Only after your explicit consent to the use of the transmitted and required data, your data will be stored by us and used for the purposes stated in this privacy policy. In order to be able to carry out the authentication process for registration and login, your IP address is transmitted to the providers of the social network. We have no influence on the purpose and scope of the data collection and on the further processing of the data by the social network providers. For more information, please read the privacy policy of the respective provider.

Auth0

We use the external authentication service Auth0 for registration in the app. During registration, name, email, profile picture and ID are transmitted to Auth0.
Auth0: Auth0 Inc (a wholly owned subsidiary of Okta, Inc., 10800 NE 8th Street, Suite 700, Bellevue, WA 98004, USA) and/or the relevant Okta subsidiaries that process personal data on the basis of a data processing agreement. Okta UK Limited is registered with the Information Commissioner's Office ("ICO") under registration number ZA286587.

‍

Basis for third country transfers (Art. 44ff GDPR): EU-US Data Privacy Framework (DPF).
Privacy policy: https://auth0.com/privacy/;

Terms of service: https://auth0.com/de/web-terms

‍

5. payment and payment service provider

During the ordering process in our online store, you can choose between payment by credit card or payment via SEPA direct debit. Payments are processed via the payment service providers Adyen (Adyen N.V., Simon Carmiggeltstraat 6-50, 1011 DJ Amsterdam, Netherlands), Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, Ireland) or Apple Pay (Apple Distribution International, Hollyhill Industrial Estate, Hollyhill, Cork, Ireland). In this case, your IP address, information about your order such as invoice amount, customer number, your email address and a payment IDs as well as the credit card or account data you entered will be forwarded to the payment service provider for the purpose of further processing the payment transaction. The payment service provider will also transmit this information to other third parties if this is necessary for the payment process (e.g. banking institution, credit card institution). The selected payment service provider is solely responsible for the processing of the payment data that takes place in the course of the subsequent payment transaction. The data collection and transmission is encrypted and we have no access to this information. We therefore also do not store any payment data, but only receive a reference from the payment service provider for payment processing.

The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. b GDPR (fulfillment of a contract).

6. subsidy program

Subsidy programs ("Subsidy Program") allow participating customers to purchase goods at discounted prices from the respective food vending machine. Customers who have been authorized by the respective site operator of the food vending machine (e.g. employer) ("Site Operator") by means of a code provided or by validating an e-mail address assigned by the Site Operator may participate in such a Subsidy Program. Foodji is entitled to pass on the data of all customers participating in a subsidy program to the location operator. This serves to fulfill the obligations of the location operator and the legal requirements for subsidizing employee catering. The data transmitted serves to identify the participating customer and all purchases made via the subsidy program. The customer participating in the subsidy program can also opt out of the subsidy program by contacting Foodji directly.

The legal basis for the transfer of data is Art. 6 para. 1 sentence 1 lit. c GDPR (fulfillment of a legal obligation) and Art. 6 para. 1 sentence 1 lit. b GDPR (execution of a contract / pre-contractual measures).

7. support tools

In our app, we use the support tool Intercom (INTERCOM, INC., 552nd St, 4th Fl., San Francisco, CA 94105 USA). This is a communication platform for direct interaction via chat with the users of the app. If you have any questions, we can use this communication option to provide you with prompt assistance. If you have registered, certain personal data will be collected and passed on at regular intervals. Your details (browser type/version, operating system used, time of server entry, first name, surname, telephone number, email address, company name) are collected in this context when you register on the portal and transmitted to Intercom securely using SSL encryption. Intercom is also used to analyze and evaluate website usage (e.g. usage data. The legal basis for the use of Intercom is our legitimate interest in responding to your request and providing individual support in the use of the website, optimizing the use of our website in terms of user-friendliness and our service in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. If your request is aimed at concluding a contract (e.g. purchase of goods), the legal basis for the processing of the data provided is also the necessity for the provision of (pre)contractual services, in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.

Intercom is a processor. You can find Intercom's privacy policy here: https://www.intercom.com/legal/privacy.

Basis for third country transfers (Art. 44ff GDPR): EU-US Data Privacy Framework (DPF) and EU standard contractual clauses

We also use the Front tool (FrontApp Inc., 525 Brannan St. 300, San Francisco, CA 94107, USA) for our customer inquiries and to bundle our support channels. FrontApp channels all customer inquiries in one application and helps us to organize customer inquiries. We also use Front to collect customer feedback in order to improve our support service. The legal basis for the use of Front for the aforementioned purposes is our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. If your request is aimed at the conclusion of a contract (e.g. purchase of goods), the legal basis for the processing of the data provided is also the necessity for the provision of (pre)contractual services, in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.

Front is a processor. You can find Front's privacy policy here: https://front.com/privacy-policy.

Basis for third country transfer (Art. 44ff GDPR): 

EU-US Data Privacy Framework (DPF) and EU standard contractual clauses.

8. push messages

When installing the app on your device, you can decide whether you want to receive push messages. To send the push messages, we collect, store and use various personal data that are required to ensure device-specific delivery of the push messages according to the push configuration in the app. The legal basis for the processing of this data is your consent, Art. 6 (1) a) DS-GVO. You can deactivate the push message function at any time by either switching off the push function in the settings of the installed app or by selecting the corresponding app in the settings of your smartphone under "Apps" and configuring the notification function there as desired.

9. newsletters and direct marketing

With our newsletter we inform you about us and our offers. To register for the newsletter, only your e-mail address and your name are required. If you register for the newsletter, your e-mail address will be transmitted to us (or our mail provider) and stored there. After registration, you will receive an e-mail to confirm the registration ("double opt-in"). In this context, we (or our mail provider) process the following data:
- Contact data (email address, name)
- Device data (device name, country code if applicable, language, operating system name and version)
- Connection data (IP address, mail provider)
- Date and time of registration and confirmation
Our newsletter is sent on the basis of your prior express consent, Art. 6 para. 1 p. 1 lit. a. DSGVO. Insofar as we commission a service provider to send e-mails, this is done on the basis of our legitimate interests in efficient and secure dispatch. The legal basis in this respect is Art. 6 para. 1 p. 1 lit. f. DSGVO.
You can revoke your consent to the processing of data for the purpose of sending the newsletter or the evaluation of the associated data at any time. The revocation can be made via a link contained in each newsletter or by sending a separate message to us. In doing so, you will not incur any costs other than the transmission costs according to the prime rates.

We use the e-mail address collected when registering a Foodji account via the Foodji app in accordance with Section 7 (3) UWG for direct advertising for our own and similar products and services. If you no longer wish to receive direct advertising, you can object to the use of your e-mail address at any time. This will not incur any costs other than the transmission costs according to the basic rates. You will find the unsubscribe link at the end of every e-mail. Alternatively, you can send us an email to info@foodji.com. We also analyze the success or failure of our marketing campaigns by analyzing whether our e-mail message was opened and which links were clicked on. This information helps us to improve our messages to you

The emails are sent on the basis of our legitimate interest in direct marketing in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR and Section 7 para. 3 UWG. The analysis of opening and click rates is based on our legitimate interest in direct marketing and the improvement of our marketing campaigns in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

We use Brevo (Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin) as our email service provider for sending emails. Brevo stores the data on a server in Germany, where it is deleted no later than two years after termination of the contractual relationship. You can find Brevo's privacy policy here.

To send emails, we also use HubSpot (Hubspot Inc, 25 First Floor, 2nd Floor Cambridge, MA, USA and Ground Floor, Two Dockland Central Guild Street, Dublin 1, Ireland) as an email delivery service provider. HubSpot also processes data in the USA, among other places. As a guarantee in accordance with Art. 44 ff GDPR, HubSpot has the so-called EU standard contractual clauses and is certified in accordance with the EU-US Data Privacy Framework (DPF). You can find HubSpot's privacy policy here.

‍

10. cookies

We use cookies on our website, which are either provided by us or by third parties.
Cookies are small text files that are stored on the device you are using and saved by the browser. Cookies are used to make our website more user-friendly, effective and secure. There are different types of cookies that are used for different purposes. Some cookies ensure that our offers function correctly or that you are recognized on your device after successful registration ("necessary" cookies). By placing these necessary cookies, for example, we make it easier for you to visit our website and use the services available there. Other cookies are placed to analyze user preferences and thus improve our offers ("extended cookies"). We use these for purposes such as tracking (e.g. interest/behavioral profiling), remarketing, visitor action evaluation, conversion measurement, reach measurement (e.g. access statistics, recognition of returning visitors), target group formation and cross-device tracking. We only set non-essential cookies with your consent. When you visit our website for the first time, a pop-up is displayed ("cookie banner") in which the individual cookies are described in more detail. There you have the option of accepting or rejecting cookies according to your preferences. You can change your settings at any time. Please note that the functionality of this website may be restricted if cookies are deactivated.
When cookies are used, the following data is processed - depending on the browser settings:
- usage data (e.g. websites visited, interest in content, access times),
- meta/communication data (e.g. device information, IP addresses).e.g. device information, IP addresses)
- Location data (data indicating the location of an end user's end device)
If personal data is processed when "necessary" cookies are used, this is based on Art. 6 para. 1 sentence 1 lit. f. GDPR due to the legitimate interests of quality assurance. GDPR due to legitimate interests of quality assurance and a technically flawless presentation of the website. The processing of personal data when using so-called "extended cookies" is based on your consent (Art. 6 para. 1 sentence 1 lit. a. GDPR).

‍

11. plug-ins and similar techniques

On our website, we use so-called pixel tags (invisible graphics, also known as "web beacons") and other technologies from the third-party providers listed below for marketing purposes and to provide our content. Pixel tags can be used to analyze information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may contain, among other things, technical information about the browser and operating system, referring websites, time of visit and other information about the use of our online offer, as well as being linked to such information from other sources.
When pixel tags are used, usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses) and location data are processed. We process this data for the purpose of displaying fonts, direct marketing (e.g. by email or post), tracking (e.g. interest/behavioral profiling, use of cookies), social plugins (integration of content and sharing functionality of the respective social media platform) and interest-based and behavioral marketing. The processing of this data is based on your consent; the legal basis is Art. 6 para. 1 sentence 1 lit. a. GDPR.

● LinkedIn, LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland; Website: https://de.linkedin.com/, Privacy Policy: https://www.linkedin.com/legal/privacy-policy, Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
● Xing or Kununu (New Work SE, Am Strandkai 1, 20457 Hamburg, Germany) Website: https://www.xing.com. Privacy Policy: https://privacy.xing.com/de/datenschutzerklaerung.
● YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Website: https://www.youtube.com/, Privacy Policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated.
● Instagram, Meta Platforms Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA; Website: https://www.instagram.com, Privacy Policy: https://instagram.com/about/legal/privacy.

● Facebook, Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland; https://www.facebook.com; Privacy Policy: https://www.facebook.com/about/privacy; Additional information on data protection: Agreement on joint processing of personal data on Facebook pages: https://www.facebook.com/legal/terms/page_controller_addendum, Data protection information for Facebook pages: https://www.facebook.com/legal/terms/information_about_page_insights_data.

Note: Our website uses social plugins on Facebook that enable interactions with Facebook content. Data can be transmitted to Meta (Facebook) via the plugin - even without active clicking.

‍

We use the Facebook pixel from Meta Platforms Inc (Menlo Park, California) on our website. This allows us to track the behavior of users who have been redirected to our website by clicking on a Facebook ad. This enables us to analyze the effectiveness of our Facebook ads for statistical and market research purposes. The data collected in this way remains anonymous to us, so that we cannot draw any conclusions about the identity of individual users. However, Facebook stores and processes this data, which is why we would like to inform you about this. Facebook can assign the data to your Facebook profile and use it for its own advertising purposes in accordance with Facebook's privacy policy. In addition, a cookie may be stored on your device to enable this. If you wish to object to the collection of your data by the Facebook pixel or its use for Facebook advertising, you can object here .

The legal basis for the use of this service is § 25 para. 1 TTDSG and for the subsequent processing of personal data Art. 6 para. 1 letter a GDPR.

Basis for third country transfers (Art. 44ff GDPR):
EU-US Data Privacy Framework (DPF) and EU standard contractual clauses

‍

Meta Custom Audience

On our website, we use the "Custom Audiences" product from Facebook (Meta Platforms Inc., 1601 S. California Avenue, Palo Alto, CA, 94304) as part of usage-based online advertising. Essentially, a hash value (checksum) is created from your usage data and transmitted to Facebook for analysis and marketing purposes. This is done either by embedding a Facebook tracking pixel on our website or by providing a customer list containing your name and email address, which you have provided to us via a contact form, for example. Data about your activities on our website, such as your surfing behavior and subpages visited, are recorded. This allows Facebook to create a profile of your usage behavior. In addition, your IP address is stored and used for the targeted display of advertising according to geographical criteria.

The legal basis for the use of this service after setting a Facebook tracking pixel is Section 25 (1) TTDSG and for the subsequent processing of personal data Art. 6 (1) sentence 1 lit. a GDPR. In the case of the provision of customer lists, the legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR. Of course, you can revoke your declarations of consent at any time with effect for the future.

Please note in this context that Facebook may also use the data provided by us for its own purposes. Here you have the option of objecting to Facebook targeting.

Basis for third country transfers (Art. 44ff GDPR):
EU-US Data Privacy Framework (DPF) and EU standard contractual clauses

‍

12. web hosting & content delivery

We use the services of the following service providers in the area of web hosting and content delivery. The purpose of their use is to provide our website content securely and efficiently in multiple languages (including through the provision of interactive forms and external content), to improve the user experience (e.g. by optimizing the loading speed), and to host our website.

The following data is processed

- IP address and technical access data / log data

- Usage data and, if applicable, personal data

The processing of this data is based on our legitimate interest; the legal basis is Art. 6 para. 1 sentence 1 lit. f. GDPR. Basis for third country transfer (Art. 44ff GDPR): EU-US Data Privacy Framework (DPF) and EU standard contractual clauses

Amazon CloudFront (Amazon Web Services Inc., 410 Terry Avenue North, Seattle WA 98109, USA) as hosting service; Website: https://aws.amazon.com/de/cloudfront/; General privacy policy of Amazon Web Services (AWS): https://aws.amazon.com/de/privacy/; Specific data protection information on Amazon CloudFront: https://docs.aws.amazon.com/de_de/AmazonCloudFront/latest/DeveloperGuide/data-protection-summary.html

Webflow (Webflow Inc. 398 11th St., Floor 2, San Francisco, CA 94103) as hosting service; Website: https://webflow.com; Privacy Policy: https://webflow.com/legal/privacy

Heyflow (Heyflow GmbH, Jungfernstieg 49, 20354 Hamburg, Germany); Website https://heyflow.comHeyflow+4Heyflow+4Heyflow+4; Privacy Policy: https://heyflow.com/de/datenschutz/

Weglot (Weglot; 7 Cité Paradis, 75010 Paris, France) as a translation service provider; Website: https://weglot.com; Privacy policy: https://www.weglot.com/privacy

We also use the Cookiebot service (Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark ) for the purpose of managing consents to the use of cookies and similar tracking technologies. The official Cookiebot website can be found at https://www.cookiebot.com/de/ The provider's privacy policy can be found at the following link https://www.cookiebot.com/de/privacy-policy/. The purposes, types of data processing and data protection responsibilities are explained in detail there.

This data is processed on the basis of a legal obligation; the legal basis is Art. 6 para. 1 sentence 1 lit. c. GDPR.

‍

13. analysis tools and advertising

Google Analytics and Google Ads

We use Google Analytics on our websites, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In this context, pseudonymized usage profiles are created and cookies are used (see "Cookies" above). The information generated by cookies about your use of this website, such as browser type/version, operating system used, referrer URL (the previously visited page), host name of the accessing computer (IP address), time of server request, is transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website and internet use for the purposes of market research and demand-oriented design of these web pages. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized so that an assignment is not possible (IP masking). For advertising purposes, we also use the Google Ads service (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, Mountain View, CA, USA).
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. These processing operations will only be carried out if you have given your express consent in accordance with Art. 6 (1) a) DS-GVO.
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (http://tools.google.com/dlpage/gaoptout?hl=en).
Google's privacy policy can be found here: https://policies.google.com/privacy; Further information: Types of processing as well as data processed: https://business.safety.google/adsservices/; Data processing conditions for Google advertising products and standard contractual clauses for third country transfers of data: https://business.safety.google/adsprocessorterms/.

Basis for third country transfer (Art. 44ff GDPR): 

EU-US Data Privacy Framework (DPF) and EU standard contractual clauses

Google Tag Manager

We use Google Tag Manager on our website, a service provided by Google "Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google Tag Manager allows us to integrate various codes and services on our website in an organized and simplified manner. The Google Tag Manager implements the tags or "triggers" the integrated tags. When a tag is triggered, Google may process information (including personal data) and process it. It cannot be ruled out that Google may also transmit the information to a server in a third country. In particular, the following personal data is processed by the Google Tag Manager:

Online identifiers (including cookie identifiers)

IP address

In addition, you can find more detailed information about Google Tag Manager on the website https://www.google.de/tagmanager/use-policy.html and at https://www.google.com/intl/de/policies/privacy/index.html in the section "Data we receive based on your use of our services".

Furthermore, we have concluded an order processing contract with Google for the use of the Google Tag Manager (Art. 28 GDPR). Google processes the data on our behalf in order to trigger the stored tags and display the services on our website. Google may transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google.

If you have deactivated individual tracking services (e.g. by setting an opt-out cookie), the deactivation remains in place for all affected tracking tags that are integrated by the Google Tag Manager. By integrating Google Tag Manager, we are pursuing the purpose of being able to integrate various services in a simplified and clear manner. In addition, the integration of the Google Tag Manager optimizes the loading times of the various services.

The legal basis for the processing of personal data described here is Art. 6 para. 1 sentence 1 lit. f GDPR. Our necessary legitimate interest lies in the great benefit of integrating various services via the Google Tag Manager. By integrating the Google Tag Manager, we reduce our maintenance costs and the loading effort of the website and the servers as well as the traffic load. Google also has a legitimate interest in the (personal) data collected in order to improve its own services.

 You have the right to object. You have the option of preventing all Google Tag Manager tags from being sent. All you have to do is click on this opt-out link to place the Google Tag Manager deactivation cookie in your browser. However, we would like to point out that deactivation may result in you not being able to use our website or not being able to use it to its full extent.

The processed information is only stored for as long as necessary for the intended purpose or as required by law. The provision of personal data is not required by law or contract and is not necessary for the conclusion of a contract. You are also not obliged to provide the personal data. However, failure to provide it may mean that you will not be able to use our website or will not be able to use it to its full extent.

 Basis for third country transfers (Art. 44ff GDPR): EU-US Data Privacy Framework (DPF) and EU standard contractual clauses

HubSpot Analytics

We use the "HubSpot Analytics" service to analyze user behavior on our website. The provider is HubSpot, Inc, 25 First Street, Cambridge, MA 02141, USA. HubSpot uses cookies to collect information about visitor behavior and to evaluate the use of our website. The processing takes place exclusively on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. Further information on data protection at HubSpot can be found at https://legal.hubspot.com/de/privacy-policy. HubSpot offers a Data Processing Agreement with EU standard contractual clauses, which can be viewed at https://legal.hubspot.com/de/dpa. The provider thus provides suitable guarantees in accordance with Art. 44 et seq. GDPR for data transfers to third countries.

LinkedIn Analytics

We use LinkedIn Analytics on our website to analyze visitor interactions via LinkedIn. The service provider is LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA. The data processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. Further information on data processing by LinkedIn can be found at https://de.linkedin.com/legal/privacy-policy. LinkedIn uses EU standard contractual clauses as part of its business services to ensure an adequate level of data protection when transferring data to third countries.

Microsoft Clarity

We use Microsoft Clarity, an analysis tool from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Clarity helps us to better understand user behavior on our website, e.g. by recording clicks, scrolling movements or interactions. The use is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can find Microsoft's privacy policy at https://privacy.microsoft.com/de-de/privacystatement. Microsoft offers a Data Processing Agreement based on the EU standard contractual clauses to ensure compliance with the requirements of Art. 44 et seq. GDPR for data transfers to the USA

Matomo

We use Matomo, a web analytics service provided by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, NZBN, on our websites and apps. In this context, pseudonymized usage profiles are created and cookies are used (see "Cookies" above). The information generated by cookies about your use of this website, such as browser type/version, operating system used, referrer URL (the page previously visited), host name of the accessing computer (IP address), time of server request, is transmitted to and stored by InnoCraft on servers in Germany and Ireland. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to the use of the website and the Internet for the purposes of market research and demand-oriented design of these Internet pages. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. The IP addresses are anonymized so that an assignment is not possible (IP masking).
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. These processing operations will only be carried out if you have given your express consent in accordance with Art. 6 (1) a) DS-GVO.
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Matomo by removing the check mark below (website) or in the settings of the foodji app.
The privacy policy of Matomo can be found here: https://matomo.org/privacy-policy

Use of SalesViewer® technology

On this website, data is collected and stored for marketing, market research and optimization purposes using the SalesViewer® technology of SalesViewer® GmbH on the basis of legitimate interests of the website operator (Art. 6 para.1 lit.f DSGVO).

For this purpose, a javascript-based code is used to collect company-related data and the corresponding usage. The data collected using this technology is encrypted using a non-reversible one-way function (known as hashing). The data is immediately pseudonymized and not used to personally identify the visitor to this website.

The data stored as part of Salesviewer will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations.

You can object to the collection and storage of data at any time with effect for the future by clicking on this link https://www.salesviewer.com/opt-out to prevent the collection by SalesViewer® within this website in the future. In doing so, an opt-out cookie for this website will be placed on your device. If you delete your cookies in this browser, you must click this link again.

Hotjar

We use Hotjar (Hotjar Ltd., 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta) to better understand the needs of our users and to optimize the offer and experience on this website. Hotjar's technology helps us to get a better understanding of our users' experiences (e.g. how much time users spend on which pages, which links they click on, what they like and dislike, etc.) and this helps us to tailor our offering to our users' feedback. Hotjar works with cookies and other technologies to collect data about the behavior of our users and their end devices, in particular IP address of the device (is only recorded and stored in anonymized form during your website use), screen size, device type (unique device identifiers), information about the browser used, location (country only), preferred language for displaying our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually prohibited from selling the data collected on our behalf.

For further details, please see the ‘about Hotjar’ section of Hotjar's support page .

The legal basis for the use of Hotjar is your consent, pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR. You can withdraw your consent at any time by changing your cookie settings via the link in the footer of our website or by following Hotjar's instructions at the following link:  https://www.hotjar.com/legal/compliance/opt-out

You can find Hotjar's privacy policy here.

Dealfront

Our website uses the technologies of Dealfront (Liidio Oy as part of Dealfront Group GmbH, Durlacher Allee 73, D-76131 Karlsruhe, Germany) (“Dealfront”) to analyze visitor behavior.In this process, the IP address of a visitor is processed. This processing has the purpose of helping us understand which businesses (B2B) are visiting our site, by enriching IPs with associated information such as the company name or industry code. To do this, at the beginning of the visitor’s session, their IP address and corresponding session data is matched against a large whitelist of known companies.

To increase data protection of our visitors we have turned on “IP address anonymisation”, so that only shortened values instead of the actual IP<br>addresses will be stored. If the feature is on, we will not store the actual IP address anywhere in our systems, including logs. This anonymisation makes it impossible to connect outside IP address information later, preventing identification of an individual person.To prevent this processing activity, you (website visitor) may install and configure appropriate ad-blockers or use no-script-plugins in your browser. The data will be deleted as soon as it is no longer required for its intended purposes. Statutory<br>retention obligations can lead to a longer retention period of the data in question.

To prevent this processing, website visitors can install and configure appropriate ad blockers or use no-script plug-ins in their browser. The data is deleted as soon as it is no longer required for the intended purposes. However, statutory retention obligations may lead to a longer retention period for the data concerned.

 We have concluded a data processing agreement with Dealfront in order to ensure compliance with applicable data protection standards.

We have signed a data processing agreement with Dealfront to ensure compliance with the applicable data protection standards. You can find Dealfront's privacy policy here.

Bing Ads

We use "Bing Ads", a re-marketing activity of Microsoft Corporation One (Microsoft Way, Redmond, WA 98052-6399, USA). If you access our website via a Microsoft Bing Ads ad, Microsoft Bing places a cookie on your device. This allows Microsoft Bing and us to recognize that someone has clicked on an ad, has been redirected to our website and has reached a specific landing page (conversion page). However, we only see the total number of users who clicked on a Bing ad and were then redirected to the conversion page and no personal information about the identity of individual users.

The legal basis for the use is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. If you do not want Microsoft to use your data as described , you can generally deactivate the setting of cookies in your browser settings. Alternatively, data collection by Microsoft Bing Ads can also be prevented directly at the following link: http://choice.microsoft.com/de-DE/opt-out

Further information on data protection and cookies at Microsoft and Bing Ads can be found on the Microsoft website: https://privacy.microsoft.com/de-de/privacystatement

Basis for third country transfers (Art. 44ff GDPR):
EU-US Data Privacy Framework (DPF) and EU standard contractual clauses

Meta Custom Audience

As part of usage-based online advertising, the Custom Audiences product from Facebook (Meta Platforms Inc., 1601 S. California Avenue, Palo Alto, CA, 94304) is also used on the website. Basically, a checksum (hash value) is generated from your usage data, which can be transmitted to Facebook for analysis and marketing purposes. For this purpose, either a Facebook tracking pixel is placed on our website or your usage behavior in our app is recorded using the Facebook SDK (see section above for a detailed description of these two Facebook services). Alternatively, we can provide Facebook with a customer list that contains your email address that you provided to us when you registered. This collects information about your activities on the website (e.g. surfing behavior, subpages visited, etc.). This enables Facebook to create a profile of your usage behavior in our app and on our website. Your IP address is stored and used for the geographical targeting of advertising.

Facebook has signed the EU standard contractual clauses as a guarantee in accordance with Art. 44ff GDPR.

The legal basis for the use of this service after setting a Facebook tracking pixel is Section 25 (1) TTDSG and for the subsequent processing of personal data Art. 6 (1) (a) GDPR. In the case of the provision of customer lists, the legal basis is Art. 6(1)(a) GDPR. Of course, you can revoke your declarations of consent at any time with effect for the future.

If you no longer agree to us sharing your data with Facebook, you can log out in our app settings.

In this context, please note that Facebook may also use the data we provide about your usage behavior and your email address for its own purposes. On this page, you have the option to object to Facebook targeting. Alternatively, you can contact us directly by email.

Further information about the purpose and scope of data collection and the further processing and use of the data, as well as the privacy settings, can be found in Facebook's privacy policy

‍

14. applications

When you apply for a job with us, we process the information and personal data you provide for the purpose of handling the application process. This data includes your name, email address, address and telephone number, age, employment history, qualifications, country of residence, language skills and any other personal information you provide as part of your interaction with us. We may also ask you for additional information to assist us in our recruitment process and if you are offered a job, such as your date of birth and employment records. Processing may also take place electronically. This is particularly the case if an applicant submits relevant application documents to us electronically, for example by e-mail.
We process your personal data in order to fulfill our contractual or pre-contractual obligations (on the legal basis of Art. 6 (1) p. 1 lit b) DSGVO or, if applicable, for the purpose of implementing the employment relationship with you (Section 26 BDSG). Insofar as you have consented to processing for the purpose of processing your application, the legal basis is Art. 6 para. 1 p. 1 lit. a. DSGVO
In the event that we do not conclude an employment contract with the applicant, the application documents will be automatically deleted two months after notification of the rejection decision, provided that no other legitimate interests prevent deletion. Another legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).

15. social media

We are represented on the following social media platform and process user data in this context in order to communicate with the users active there or to offer information about us:
- Facebook, Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland; https://www.facebook.com; Privacy Policy: https://www.facebook.com/about/privacy; Additional information on data protection: Agreement on joint processing of personal data on Facebook pages: https://www.facebook.com/legal/terms/page_controller_addendum, Privacy Policy for Facebook pages: https://www.facebook.com/legal/terms/information_about_page_insights_data.
- Instagram, Meta Platforms Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA; Website: https://www.instagram.com, Privacy Policy: https://instagram.com/about/legal/privacy.
- LinkedIn, LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland; Website: https://de.linkedin.com/, Privacy Policy: https://www.linkedin.com/legal/privacy-policy, Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
- Xing or Kununu (New Work SE, Am Strandkai 1, 20457 Hamburg) Website: https://www.xing.com. Privacy Policy: https://privacy.xing.com/de/datenschutzerklaerung.
- YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Website: https://www.youtube.com/, Privacy Policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated.
- Instagram, Meta Platforms Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA; Website: https://www.instagram.com, Privacy Policy: https://instagram.com/about/legal/privacy.
We would like to point out that user data may be processed within social networks for market research and advertising purposes. For example, user profiles can be created based on user behavior and the resulting interests of users. The user profiles can in turn be used, for example, to place advertisements within and outside the networks that presumably correspond to the interests of the users. For these purposes, cookies are generally stored on the user's computer, in which the user's usage behavior and interests are stored. Furthermore, data can also be stored in the user profiles independently of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them). For a detailed description of the respective forms of processing and the opt-out options, please refer to the privacy policies and information provided by the operators of the respective social media providers. In the case of requests for information and the assertion of data subject rights, we would also like to point out that these can be asserted most effectively with the providers. Only the providers have access to the user's data and can take appropriate measures and provide information directly. If you still need help, you can contact us.

VII. storage and deletion of data

The data processed by us will be deleted in accordance with legal requirements as soon as their consents permitted for processing are revoked or other permissions cease to apply (e.g. if the purpose of processing this data has ceased to apply or it is not required for the purpose). This means that we only store your personal data for as long as it is required for the respective processing purpose and limit the storage period to the minimum necessary. In addition, we only store your data if we are entitled or obliged to do so in accordance with statutory retention periods (for example, under the German Commercial Code (HGB) or the German Fiscal Code (AO)).
Our data protection information may also contain further details on the retention and deletion of data, which have priority for the respective processing.
VIII. your rights
You are entitled to the following rights:
- the right to information,
- the right to rectification or erasure,
- the right to restriction of processing,
- the right to data portability,
- the right to withdraw consent you have given with effect for the future.
- the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6 (1) sentence 1 lit. e or f DSGVO; this also applies to profiling based on these provisions.
To exercise your above rights, you can send an email to datenschutzbeauftragter@datenschutzexperte.de. You also have the right to complain to a data protection supervisory authority about the processing of your personal data.

IX. Data Transfer / Third Country Transfers

As a matter of principle, we only pass on your data to third parties if you have consented to this or if there is another legal basis. If we use third-party tools that process your data outside the EU/EEA, we ensure that the legal requirements of Art. 44 et seq. DSGVO for such a third country transfer are met and that your data is processed in the relevant third country in accordance with the European data protection standard. As a rule, we use the so-called EU standard contractual clauses (SCC) for this purpose, which we conclude with the respective provider. In addition, in accordance with the requirements of the ECJ ("Schrems II"), a case-by-case risk analysis is carried out with regard to the respective third country transfer in order to ensure that your data is processed lawfully in the third country concerned and, in particular, that access to your data by state authorities is prevented.

X. Data processing when calling up linked content

This privacy policy only refers to the data processing on our website or in our app. Our offers may contain external links or hyperlinks to websites/offers of other providers. They are to be distinguished from our own content. This third-party content does not originate from us, nor do we have any influence on the content of third-party pages. If you are forwarded to other pages via links, please inform yourself there about the respective handling of your data.

XI. Automated decision making/profiling

We do not use automated decision making or profiling (an automated analysis of your personal circumstances).

XII Amendment of this Privacy Policy

Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration.
If you have any questions or suggestions regarding data protection, you can send us an e-mail at datenschutzbeauftragter@datenschutzexperte.de at any time.

Status: April 2025

‍