Data Privacy Policy

1. Legal basis for processing personal data

• Insofar as we obtain the data subject’s consent for the processing of personal data, the legal basis is as provided by point (a) of Art. 6(1) GDPR.
• Where processing of personal data is required for the performance of a contract to which the data subject is a contracting party, the legal basis is as provided by point (b) of Art. 6(1) GDPR. This also applies to processing required to implement measures prior to entering into a contract.
• Where processing of personal data is required to meet a legal obligation to which our company is subject, the legal basis is as provided by point (c) of Art. 6(1) GDPR.
• Where the processing of personal data is necessary to protect an interest, which is essential to the life of the data subject or that of another natural person, the legal basis is as provided by point (d) of Art. 6(1) GDPR.
• Where the processing is required to uphold a legitimate interest of our company or a third party, and the data subject’s interests, fundamental rights and freedoms do not outweigh the aforementioned interest, the legal basis for the processing is as provided by point (f) of Art. 6(1) GDPR.

2. Erasure of data and retention periods

The data subject’s personal data shall be erased or made unavailable when the purpose of retention no longer applies. Data may also be retained where stipulated by European or national legislation in EU regulations, laws or other requirements to which the Controller is subject. Data shall also be made unavailable or erased where a retention period stipulated by the standards referred to above expires, unless further retention of the data is necessary to conclude or fulfill a contract.

If your personal data is processed, you are a Data Subject as defined in the GDPR and you have the following rights:

• Right of access (Art. 15 GDPR): You can obtain from us confirmation as to whether or not personal data concerning you is being processed by us. Where that is the case, you can obtain from us access to the following information: the purposes of the processing; the categories of personal data concerned; the categories of recipients to whom your personal data has been or will be disclosed; the envisaged period for which the personal data will be stored; the existence of the right to rectification, erasure, restriction of processing or to object to such processing; the existence of the right to lodge a complaint; the source of your data if it is not collected by us; the existence of automated decision-making, including profiling and if applicable, meaningful information about its details.
• Right to rectification (Art. 16 GDPR): You have the right to have inaccurate personal data concerning you rectified, or to have incomplete personal data completed.
• Right to erasure (Art. 17 GDPR): You can obtain from us the erasure of your personal data stored by us, where one of the following grounds applies: the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed; you withdraw your consent and there is no other legal ground for the processing; you object to the processing pursuant to Articles 21(1) or 21(2) GDPR; the personal data has been unlawfully processed; the personal data must to be erased to comply with a legal obligation to which the Controller is subject; the personal data has been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.
• Right to restriction of processing (Art. 18 GDPR): You can obtain from us restriction of processing of the personal data concerning you where the conditions listed in Art. 18(1) GDPR apply. Where processing has been restricted, such data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.
• Right to notification (Art. 19 GDPR): Where you have exercised your right to rectification or erasure of personal data, or restriction of processing, we are obliged to communicate this rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
• Right to data portability (Art. 20 GDPR): You have the right (i) to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, and (ii) to transmit those data to another Controller without hindrance from us, where the processing is based on consent (point (a) of Art. 6(1) or point (a) of Art. 9(2) GDPR) or on a contract (point (b) of Article 6(1) GDPR) and processing is carried out by automated means.
• Right to object (Art. 21 GDPR): You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you, which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions. We shall no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms or if processing is used for the establishment, exercise, or defense of legal claims. Where the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where you object to processing for direct marketing purposes, the personal data concerning you shall no longer be processed for such purposes. In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means that use technical specifications.
• Right to withdraw consent (Art. 7(3) GDPR): You have the right to withdraw your data use consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
• Subject to the conditions set out in Art. 22 GDPR, you have the right to not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
• Right to lodge a complaint (Art. 77 GDPR): Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement if you consider that the processing of personal data relating to you infringes on the GDPR.

We use the marketing automation and web tracking solution provided by ClickDimensions LLC, 6849 Peachtree Dunwoody Road, Building B-1, Suite 200, Sandy Springs, GA 30328, United States of America (“ClickDimensions”) on our website. This uses cookies (see Cookies), which are stored on your computer and which enable analysis of the use of the website.

ClickDimensions uses first-party HTML browser cookies in its web tracking technology. This means that visitors to our websites are easily able to set their browsers to reject cookies and are easily able to delete cookies set by us and others.

For example, to set the Internet Explorer browser to reject cookies, go to Tools > Internet Options > Privacy > and under Settings select (with the slider) the level of privacy you want. To delete cookies in Internet Explorer, click on Tools > Internet Options > General >, click on the Delete button in the browsing history and activate the Cookies option in the drop-down dialog box.

If you do not want the page to set a cookie, you can enable the private mode in your browser. The private modes in each browser are as follows:

• InPrivate mode in Microsoft Edge
• InPrivate mode in Microsoft Internet Explorer
• Incognito mode in Google Chrome
• Private browsing mode in Mozilla Firefox
• Private browsing mode in Apple Safari

ClickDimensions never stores any information in your computer’s LSO area, i.e. we never use “flash cookies” (local shared objects, LSO for short).
ClickDimensions does not use any visitor identification methods in which information provided by you is shared with other websites.

You can use the comment function to comment on blog posts. To use the comment function, you must enter a name, which you can also use as a pseudonym, and your e-mail address. It is necessary to enter your e-mail address so that we can forward any complaints about your comments in the blog back to you and request you to state your opinion. When your comment is published, the name or pseudonym you provided will be displayed, but not your e-mail address. Your details will be stored until none of your comments are held and the respective conversation about any complaints with you has ended.

If you contact us via a form available on our website (e.g. contact form or registration for a download) or register for a webinar via our service provider LogMeIn, Inc. (see section “Webinars with GoToWebinar”) or submit your data via a form on LinkedIn (see paragraph “LinkedIn Forms”), your details, including the contact details you provide, will be stored by us to process the request and in the event of follow-up questions. Depending on the nature of your request, we may share your information and contact details with one of our resellers. Further information on this can be found in the paragraph “Data transfer to sales partners”. If you apply to us online via our career portal, we process your data as described in the section “Online applications”. If you use the comment feature to comment on blog posts, we will process your data as described in the “Comment feature” section.

In order to be able to process your request (see “Contact forms”) as effectively as possible and in line with your requirements, we may pass on the information you provide in the respective contact form to one of our sales partners, depending on the type of request, who will then take over further processing. The sales partner is obliged to use your data only for the purpose of processing your request and not to pass them on to third parties. In this case, your data will also be processed exclusively in a member state of the European Union or in another contracting state of the Agreement on the European Economic Area. You can prohibit the sales partner or us from contacting you again at any time as well as exercise your rights listed under “Data Subjects’ Rights” (see above) against the sales partner or us.

Retarus uses the online advertising program Google AdWords and the conversion tracking option available in Google AdWords. Google Conversion Tracking is an analytical tool provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”).

A cookie for conversion tracking is created on your computer when you click on an ad placed by Google (see Cookies). These cookies expire after 30 days and are not used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, Google and we can detect that you clicked on the ad and were redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot therefore be tracked through the websites of AdWords customers.

The information collected by the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. This allows customers to see the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they will not receive any information that personally identifies users.
If you do not wish to participate in tracking, you can withdraw consent to this use by configuring your browser software to prevent cookies from being installed (disable option). You will no longer be recorded in the conversion tracking statistics.

More information and Google’s privacy policy is available at https://www.google.com/policies/technologies/ads/ and https://www.google.de/policies/privacy/.

This website uses Google Analytics, a web analytics service provided by Google, Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (“Google”).

Google uses cookies. The information generated by the cookie about your use of this website is transmitted and stored by a Google server in the USA. Google will use this information on our behalf to analyze users’ use of the website, compile reports on website activities and provide additional services to the website operator in connection with use of the website and Internet usage.

We use Google Analytics only with IP anonymization activated. This means that users’ IP addresses will be truncated by Google within member states of the European Union or in other states that are party to the Agreement on the European Economic Area. The IP address that is transmitted by the user’s browser is not merged with other data held by Google.

You can prevent these cookies from being stored by enabling the relevant setting in your browser software. Please note, however, that this may prevent you from using all the functions available on this website. In addition, you can prevent the information about your use of the website that is generated by the cookie (including your IP address) from being passed on to Google and from being processed by Google by downloading and installing the browser plug-in available at https://tools.google.com/dlpage/gaoptout?hl=de.

You can prevent your data from being tracked by Google Analytics by clicking on the following link. An opt-out cookie is set, which will prevent your data from being collected during future visits to this website: Disable Google Analytics.

More information on how Google uses data for advertising purposes, settings, and declining consent options is available on Google’s websites:

• https://www.google.com/intl/de/policies/privacy/partners/ (“How Google uses data when you use our partners’ sites or apps”)
• https://www.google.com/policies/technologies/ads (“How we use data in advertising”)
• https://www.google.de/settings/ads (“Manage the information Google uses to show you ads”)
• https://www.google.com/ads/preferences/ (“Decide which ads Google shows you”)

More information on how use data is handled by Google Analytics is available in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

This website uses Google Analytics reports on demographic features based on data from interest-based Google ads as well as third-party visitor data (for example, age, gender and interests). This data cannot be used to identify a specific person and can be disabled at any time in the display settings.

We also use Google Analytics to analyze data from Google Adwords for statistical purposes. If you prefer, you can disable this function via the Ads Preference Manager (https://www.google.de/settings/ads).

In order to display our content correctly in all browsers and make it graphically appealing, we use script and font libraries such as Google Fonts or Google Charts. Google Fonts are transferred to your browser’s cache to avoid loading multiple times. If your browser does not support Google Fonts or prevents access, content is displayed in a standard font. Executing script or font libraries automatically triggers a connection to the library’s operator. It is theoretically possible that operators of these libraries may collect data. The Google library operator’s privacy policy is available at https://www.google.com/policies/privacy/.

This website uses Google Maps API to depict maps and create route maps. Google Maps is operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). Google Maps uses cookies (see Cookies). By using a web page with Google Maps functionality on our website, you consent to the collection, processing and use of data entered by you and automatically collected by Google, its representatives, and third parties. You can view the terms of service for Google Maps at https://www.google.com/intl/de_de/help/terms_maps.html. You can find more details at the google.de privacy center: Transparency, choices and privacy policy.

Retarus uses the Remarketing or Similar Audiences function provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”).

This function is used to display interest-based ads to visitors to the website from within the Google Network. Google uses cookies to analyze the behavior of users when they visit the website (see Cookies). For these purposes Google stores a small file with a numerical sequence in the website users’ browsers. Interest-based ads are then displayed based on the analysis of user behavior. If you then visit another website in the Google Ad network, ad pop-ups are displayed, which will most likely refer to product and information you have accessed previously.

You can permanently disable the use of cookies by following the link below and downloading and installing the plug-in provided: https://www.google.com/settings/ads/plugin. Alternatively, you can disable the use of cookies by third parties by visiting the Network Advertising Initiative deactivation page at https://www.networkadvertising.org/choices/ and by following the instructions on opting out. More information on Google Remarketing and Google’s privacy policy is available at https://policies.google.com/technologies/ads.

This website uses Google Tag Manager. This service allows website tags to be managed using an interface. Google Tag Manager implements tags only. No personal data is recorded. Google Tag Manager triggers other tags which, in turn, may record data. Google Tag Manager does not access this data. If disabled at domain or cookie level, this setting still applies to all tracking tags provided that they are implemented using Google Tag Manager.

Our website uses the leadlab pixel tracking technology provided by wiredminds GmbH, Lindenspürstr. 32, 70176 Stuttgart (“wiredminds”) to analyze visitor behavior.

It collects, processes and stores data that is used to create usage profiles under a pseudonym. The usage profiles are fully anonymized where possible and appropriate. Cookies may be used for this (see Cookies). The data collected, which may also contain personal data, is transferred to wiredminds or collected directly by wiredminds. wiredminds may use information that you leave behind by visiting the websites to create anonymized usage profiles. The data obtained in this way is not used to personally identify the visitor to this website without the data subject’s explicit consent and it is not merged with personal data about the bearer of the pseudonym. Any IP addresses recorded are anonymized immediately by deleting the last number block. You can rescind consent to data being collected, processed, and stored in the future at any time.
If you wish to rescind consent to data being collected, processed, and stored, please click on the following link: Exclude from tracking. This function is cookie-based and therefore browser-dependent.

If you contact us via a form on LinkedIn, your data will be transmitted to us by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (hereinafter “LinkedIn”). The privacy policy of LinkedIn Corporation can be found here: https://www.linkedin.com/legal/privacy-policy

We use the conversion tracking technology and retargeting feature of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (hereinafter “LinkedIn”) on our website. This technology allows us to serve personalized advertisements to visitors to our website on LinkedIn. It also provides the ability to generate anonymous reports on the performance of the advertisements and information on website interaction. LinkedIn Insight tag is embedded in our website, which connects to the LinkedIn server when you visit our website and are logged into your LinkedIn account. This allows us to collect information about the visits to our website, including URL, referrer URL, IP address, device and browser characteristics and timestamps. This data is encrypted at LinkedIn, anonymized within seven days, and the anonymized data is deleted within 180 days. LinkedIn does not share any personally identifiable information with us, but only provides summary reports of display performance or information about website interaction. LinkedIn’s privacy policy provides more information about data collection and use, and the choices and rights you can make about the way your privacy is protected. If you are logged in to LinkedIn, you can opt-out of the collection of information at any time by clicking on the following link: https://www.linkedin.com/psettings/enhanced-advertising.

If you visit our website, the data that your browser automatically sends us is logged in “log files”. This data includes information on the browser and operating system used by you, the website from which you are visiting us, the web pages that you visit on our site, the date of the visit and the IP address assigned to you by your internet service provider. This data is temporarily saved by us for security reasons (for example, to identify attacks on our website). This data is not saved together with any other personal data of yours. Nor is the data analyzed for marketing purposes.

You need only to give your email address when you subscribe to our newsletter. Our newsletters contain information about our company, our services, notifications of events, and market trends. You subscribe to the newsletters using the double opt-in method. This means that after sending us your details you will receive an email asking you to confirm your subscription. We will not pass on your email address to third parties without your consent. You can unsubscribe from the newsletter at any time. You will find a link for unsubscribing at the end of every newsletter.
When you download images in a Retarus newsletter or click on a link in one of these emails, this action is logged automatically via the email service provided by ClickDimensions LLC, 6849 Peachtree Dunwoody Road, Building B-1, Suite 200, Sandy Springs, GA 30328, USA (“ClickDimensions”). The usage information generated is stored by the ClickDimensions servers in the Netherlands on our server in Germany and used for statistical usage analysis. The results help us to continuously improve the contents of our newsletters and to make the information displayed on our website more interesting for you. If you do not agree with the storage and analysis of this data, you can unsubscribe using the link at the end of each newsletter.

If you apply for a position with us via our Career Portal, your application, contact details, documents, and other provided data (“your data”) will be sent to us electronically using encryption. Your Data will be processed by us solely for this purpose, i.e. only for recruiting within retarus GmbH or affiliates as defined in Section 15 et seq. of the German Stock Corporation Act (AktG). Your data will only be passed on to internal departments responsible for recruitment. If your application concerns an affiliate, your data will also be passed on to that affiliate’s offices. For unsolicited applications, your data may be passed on to affiliates, as well. Your data is not passed on to third parties for any other purposes.

Your data will be stored in our Career Portal, which is operated by Cornerstone OnDemand Germany GmbH as processor pursuant to Art. 28 GDPR in a data center in Germany. Cornerstone is bound by detailed contractual guarantees to use technical and organizational measures to ensure the protection of your data. Data will be stored for a maximum of six months after the end of the selection process. Your data will then be deleted irretrievably unless you have given consent for your data to remain in our pool of applicants to consider for other current and future vacancies, where it will stay for a maximum of two years and deleted irretrievably afterwards.

You can withdraw your consent to processing or use of your data at any time (please see paragraph Data subjects’ rights).

The social networks listed below are embedded on our website.

• LinkedIn
• XING
• Facebook
• Twitter
• Pinterest
• Pocket
• AddThis

We embed them using Shariff. Shariff replaces social network Share buttons on our website with graphics containing a link to the relevant social network. Clicking on a graphic redirects you to the service of the relevant network. The Shariff button does not establish direct contact between the social network and our visitors until the visitor actively clicks on the Share button. Your data is then passed on to that social network. However, if you do not click on the Shariff button, no information is exchanged between you and the social networks.

This website uses SSL encryption for security reasons and to protect confidential information, e.g. requests you send us as the website operator. You can know a connection is encrypted when the browser address bar switches from “http://” to “https://” and a green padlock icon appears in the browser bar.

We use components offered by Vimeo, LLC with headquarters at 555 West 18th Street, New York, New York 10011 to integrate videos on our website.
If you access a page with an embedded Vimeo video, a connection is established with the Vimeo servers and the content is displayed on the web page by communication with your browser. The Vimeo server is given information about which of our web pages you visited. If you are simultaneously logged in as a Vimeo member, Vimeo links this information to your user account. If the Vimeo plugin is used, for example, when a video’s start button is clicked, this information is also linked to your user account. You can prevent a link from being created by logging out of your Vimeo user account before accessing our website and by deleting the relevant Vimeo cookies.
For more information about Vimeo data processing and data privacy, visit https://vimeo.com/privacy.

Retarus uses the GoToWebinar service from GoTo Technologies Ireland Unlimited Company, 77 Sir John Rogerson’s Quay, Block C, Suite 207, Grand Canal Docklands, Dublin 2, D02 VK60 Ireland, to conduct webinars via the Internet. GoTo Technologies Ireland Unlimited Company’s privacy policy can be found here: https://www.goto.com/company/legal/privacy

Retarus uses the Zoom Webinars service from Zoom Communications, Inc., 55 Almaden Blvd, San Jose, CA, 95113, Suite 600, USA, to conduct webinars via the Internet. Zoom Communications’ privacy policy can be found here: https://www.zoom.com/en/trust/privacy/

We use components provided by the company YouTube, LLC 901 Cherry Ave., 94066 San Bruno, CA, USA (“YouTube”), a company owned by Google Inc., Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”) on our website. We use the privacy-enhanced mode option provided by YouTube.

If you access a page with an embedded YouTube video, a connection is established with the YouTube servers and the content is displayed on the Internet page by communication with your browser.

According to YouTube’s policy, when you turn on privacy-enhanced mode, data will not be sent to the YouTube server (in particular the Internet sites you have visited) unless you play the video. If you are logged in to YouTube at the same time, this information is assigned to your YouTube member account. You can prevent this by logging out of your member account before visiting our website. More information on YouTube’s privacy policy is provided by Google at https://www.google.de/intl/de/policies/privacy/.

Our website uses cookies set by ZoomInfo, a market data software. It is operated by ZoomInfo Technologies, LLC, 805 Broadway, Suite 900, Vancouver, WA, 98660, USA. ZoomInfo sets “Websights” cookies when you browse our website, which collect information about your IP address, geolocation, web browser, referring/exit pages and URLs, page loads and clicks, domain names, pages viewed, time and date of use, and other information. ZoomInfo ties your IP address to specific company profiles by matching IP address to other email, form, or content data in its database. ZoomInfo “Websights” cookies do not share personal data with Retarus, only report about the website audience, including company, number of page views, office location, employee count, and company revenue.

This website classifies ZoomInfo cookies as “Marketing” cookies. You may opt out of the use of these cookies under Cookies. You can prevent these cookies being stored by selecting the appropriate settings in your browser, our Consent Manager (see Cookies) or by opting out and requesting removal of data in ZoomInfo’s Privacy Center: https://www.zoominfo.com/privacy-center/manage-profile. The ZoomInfo’s Privacy Policy can be found here: https://www.zoominfo.com/about-zoominfo/privacy-policy.