Programs
Why Spiced?
Blog
Events
For case workers
de|en
Apply Now
Apply Now

Privacy Policy

§ 1 Information on the Collection of Personal Data

(1) The following provides information on the collection of personal data when using our website and other presences, as well as in the context of our services and offerings. Personal data refers to all information that can be related to you personally, such as name, address, email addresses, and user behavior. This privacy policy applies to the presences and offerings through which it is provided. For our other presences and services, different privacy policies may apply, which you can view there.
(2) The responsible party according to Article 4(7) of the EU General Data Protection Regulation (GDPR) is:

neuefische GmbH
Gasstraße 6a
22761 Hamburg

Further contact details can be found in our provider identification ("Impressum").
You can reach our Data Protection Officer at the above contact details with the addition "Data Protection Officer" or by email at datenschutz@neuefische.de.

(3) When you contact us via email or a contact form, the data you provide (your email address, possibly your name and phone number) will be stored by us in order to answer your inquiries. We will delete the data collected in this context once storage is no longer necessary or restrict the processing if there are legal retention obligations. The legal basis for processing your data in the context of communication with you is, if consent is given, Article 6(1)(a) GDPR. If the communication serves the performance of a contract with you or the execution of pre-contractual measures, the legal basis for processing your data is Article 6(1)(b) GDPR.
In all other cases, the legal basis is our legitimate interest in efficiently, customer-friendly, and purposefully processing your request in conjunction with Article 6(1)(f) GDPR or any legal obligation we have that requires the storage and processing of your data in conjunction with Article 6(1)(c) GDPR.

§ 2 Your Rights

(1) You have the following rights regarding your personal data that we process:

  • Right to access,

  • Right to rectification or erasure,

  • Right to restriction of processing,

  • Right to object to processing,

  • Right to data portability.

(2) You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data by us.

§ 3 Collection of Personal Data When Visiting Our Website

(1) When using the website for informational purposes only, i.e., when you do not register or provide us with any other information, we only collect the personal data that your browser transmits to our server. When you visit our website, we collect the following data, which is technically necessary for us to display our website and ensure its stability and security (the legal basis is Article 6(1) sentence 1 lit. f GDPR):

  • IP address

  • Date and time of the request

  • Time zone difference to Greenwich Mean Time (GMT)

  • Content of the request (specific page)

  • Access status/HTTP status code

  • Volume of data transferred

  • Website from which the request comes

  • Browser

  • Operating system and its interface

  • Language and version of browser software.

(2) Use of Cookies:
Our websites use cookies and similar technologies. Cookies are small text files that are stored on the user's device by the web browser. A cookie typically contains a unique string of characters that enables the browser to be uniquely identified when the website is accessed again. Cookies are used to make the website more user-friendly, optimize its functions and services, and provide content tailored to you.

The purpose of using technically necessary cookies is to enable and simplify the use of the website and its functions. Some functions of this website cannot be offered without the use of cookies. The data collected by technically necessary cookies is not used to create user profiles.

Additionally, with your separate consent, cookies may be used for providing external media such as videos and maps, as well as for analyzing the use of the website and other functions.

By changing the settings in your web browser, you can disable or restrict the use of cookies. Already stored cookies can be deleted at any time, which can also be done automatically. If cookies are disabled for the website, it is possible that not all features of the website may be fully available.

The legal basis for processing personal data using technically necessary cookies is Article 6(1)(f) GDPR, with the legitimate interest of the controller being the secure, stable, and efficient provision of the website’s functions and the information accessible through it. If the controller fulfills a contractual obligation towards you with the respective function, the legal basis is Article 6(1)(b) GDPR.

The legal basis for processing personal data using cookies for analytical purposes and other non-technically necessary processing purposes is, where applicable, the user’s consent pursuant to Article 6(1)(a) GDPR in conjunction with § 25 TDDG (Telecommunications-Telemedia Data Protection Act).

§ 4 Additional Functions and Services

(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. For this, you will generally need to provide additional personal data, which we use to provide the respective service, and for which the principles of data processing mentioned earlier apply.

(2) We may share your personal data with third parties if participation in actions, contests, contract conclusions, or similar services is offered by us together with partners, and the sharing of data is necessary for the respective purpose. You will receive more detailed information when providing your personal data or below in the description of the offer.

(3) To properly provide the content of this website, we use the Contentful CDN (Content Delivery Network) from Contentful GmbH, Max-Urich-Str. 3, 13355 Berlin (Contentful). The Contentful CDN helps deliver content, particularly files like graphics or videos, faster through regionally or internationally distributed servers.
When you use our website, Contentful processes, in particular, the IP address, user agent, and browser information.
Your data will be stored by Contentful for a maximum of 90 days. The storage and processing take place on servers in the EU, the United States of America, or other third countries in compliance with the GDPR based on EU Standard Contractual Clauses (SCC). Personal data may be passed on to service providers and their subsidiaries who provide technologies or auxiliary services to support, operate, and maintain Contentful services. The legal basis for the processing of data is our legitimate interest according to Article 6(1)(f) GDPR.
You may object to the data collection and storage at any time with effect for the future. To object to the collection and storage of your data for the future, you can click on the following link:
https://www.contentful.com/legal/privacy-at-contentful/do-not-sell-data-access-request/Please note that doing so may result in content not being displayed correctly or at all, and the functionality of the website may be limited.
For more details on data processing, please refer to Contentful's privacy policy:
https://www.contentful.com/legal/privacy-at-contentful/privacy-notice/

(4) To process user inquiries and for customer communication via live chat systems, we use the technical solution Userlike (hereinafter "Userlike"). The provider is Userlike UG (limited liability), Probsteigasse 44–46, 50670 Cologne. Userlike is a live chat and communication solution that allows live chats to be conducted during your visit to our website. Personal data is also processed during this process, particularly the contents of messages as well as technical information required to process communication and the technical operation of the communication solution.
Messages you send to us may be stored in the Userlike ticket system or answered by our employees in the live chat. When you communicate with us via Userlike, we and Userlike store, among other things, your name and email address, if provided, and your chat histories. This data is compiled into a profile.
Messages directed to us remain with us until you request deletion or the purpose of data storage no longer applies (e.g., after your inquiry has been processed or associated business transactions have been completed; for information necessary for potential legal evidence, deletion will occur after the expiration of statutory limitation periods). Mandatory legal provisions—particularly statutory retention periods—remain unaffected.
The use of Userlike is based on Article 6(1)(f) GDPR. We have a legitimate interest in processing your inquiries as quickly, directly, reliably, and efficiently as possible. If consent has been obtained, processing will be based solely on Article 6(1)(a) GDPR and § 25(1) TDDDG (Telecommunications-Telemedia Data Protection Act), insofar as consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) under the TDDDG. Consent can be revoked at any time.
For more information, please refer to Userlike's privacy policy:
https://www.userlike.com/de/data-privacy and https://www.userlike.com/de/blog/live-chat-software-datenschutz-dsgvo.

(5) On our website and in other presences, we offer users the possibility to register by providing personal data. The data is entered into a form and transmitted and stored with us. There is no transfer of data to third parties. As part of the registration process, the information resulting from the registration form will be queried and stored by us. The legal basis for processing the data is the user’s consent according to Article 6(1)(a) GDPR. If the registration serves the performance of a contract to which the data subject is a party or the execution of pre-contractual measures, the additional legal basis for processing the data is Article 6(1)(b) GDPR.

(6) Hubspot CRM
On this website and within our company, we use Hubspot CRM. The provider of this software solution for customer relationship management is Hubspot Inc., 25 1st Street, Ste 100, Cambridge, MA 02141 USA (hereinafter referred to as Hubspot CRM). Hubspot CRM allows us to manage existing and potential customers as well as customer contacts. With the help of Hubspot CRM, we can capture, sort, and analyze customer interactions via email, social media, or phone across various channels. The personal data collected can be evaluated and used for communication with prospects or for marketing activities (e.g., newsletter mailings). Hubspot CRM also enables us to capture and analyze the behavior of our contacts on our website.
The use of Hubspot CRM is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in efficient customer management and communication. If consent has been obtained, processing will be based solely on Article 6(1)(a) GDPR and § 25(1) TDDDG, insofar as consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) under the TDDDG. Consent can be revoked at any time. For more details, refer to the provider’s privacy policy:
https://legal.hubspot.com/de/privacy-policy
Data transfer to the USA is based on the EU Commission's standard contractual clauses. More details can be found here:
https://www.hubspot.de/data-privacy/privacy-shield

The used standard contractual clauses can be viewed through this link:
https://legal.hubspot.com/de/dpa

Hubspot is also certified under the EU-US Data Privacy Framework (“DPF”). The DPF is an agreement between the European Union and the United States that ensures compliance with European data protection standards when processing data in the United States. Any company certified under the DPF commits to adhering to these data protection standards and ensuring an adequate level of data protection. More information on Hubspot’s status under the DPF can be found here:
https://www.privacyshield.gov/ps/participant?id=a2zt0000000TN8pAAG

For the use of the above service, we have concluded a Data Processing Agreement (DPA). This is a legally required contract ensuring that Hubspot processes personal data only according to our instructions and in compliance with the GDPR.

(7) On our website, you have the option to schedule an appointment with us. For scheduling, we use the tool “Calendly.” The provider is Calendly LLC, 271 17th St NW, 10th Floor, Atlanta, Georgia 30363, USA (hereinafter referred to as "Calendly"). To book an appointment, you enter the requested data and desired time in the provided form. The entered data is used for planning, conducting, and possibly following up on the appointment. The appointment data is stored for us on Calendly's servers, whose privacy policy you can view here:
https://calendly.com/de/pages/privacy.

The data you enter will remain with us until you request deletion, revoke your consent for storage, or the purpose for data storage no longer applies. Mandatory legal provisions—particularly retention periods—remain unaffected.
The legal basis for data processing is Article 6(1)(f) GDPR. The website operator has a legitimate interest in facilitating uncomplicated appointment scheduling with prospects and customers. If consent has been obtained, processing will be based solely on Article 6(1)(a) GDPR and § 25(1) TDDDG, insofar as consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) under the TDDDG. Consent can be revoked at any time.
Data transfer to the USA is based on the EU Commission's standard contractual clauses. More details can be found here:
https://calendly.com/pages/dpa.

The service provider Calendly LLC is also certified under the EU-US Data Privacy Framework for the transfer of personal data to the United States.

§ 5 Objection or Revocation of the Processing of Your Data

(1) If you have given consent to the processing of your data, you can revoke it at any time. Such a revocation will not affect the legality of the processing of your personal data prior to your revocation.

(2) If we base the processing of your personal data on a legitimate interest, you may object to the processing. This is the case, for example, when the processing is not necessary for the performance of a contract with you, which is explained in detail in the subsequent description of the functions. If you exercise such an objection, we kindly ask you to provide the reasons why your personal data should not be processed as carried out by us. In case of a well-founded objection, we will review the situation and either stop or adjust the data processing, or we will provide you with our compelling legitimate reasons for continuing the processing.

(3) Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us about your objection to advertising through the contact details provided above.

§ 6 Web Tracking

Google Analytics

(1) This website uses Google Analytics, a web analytics service provided by Google Ireland Ltd ("Google"). Google Analytics uses so-called "cookies," text files that are stored on your computer and allow an analysis of your use of the website. The information generated about your use of this website is typically transferred to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities, and to provide additional services related to website and internet usage to the website operator.

(2) The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other data from Google.

(3) You can prevent the storage of cookies by adjusting your browser software accordingly; however, we point out that in this case, you may not be able to use all features of this website to their full extent. Furthermore, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link:
http://tools.google.com/dlpage/gaoptout?hl=de.

(4) This website uses Google Analytics with the "_anonymizeIp()" extension. As a result, IP addresses are shortened and further processed in a way that excludes any personal reference. In cases where personal data is collected about you, it will be immediately anonymized, and the personal data will be deleted promptly.

(5) We use Google Analytics to analyze the usage of our website and improve it regularly. Through the statistics obtained, we can improve our offerings and make them more interesting for you as a user.

(6) Information about the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
Terms of use: http://www.google.com/analytics/terms/de.html

Overview of privacy: http://www.google.com/intl/de/analytics/learn/privacy.html, and the privacy policy: http://www.google.de/intl/de/policies/privacy. In cases where personal data may be transferred to the USA, Google adheres to the data protection regulations for data transfers to third countries under Articles 44 et seq. of the GDPR. For this purpose, Google has entered into EU Standard Contractual Clauses. These can be viewed here:
https://policies.google.com/privacy/frameworks?hl=de

(7) Web Analysis and Optimization Using the Hotjar Service

This website also uses the Hotjar service, provided by Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe. With Hotjar, we can track movements on the website (so-called heatmaps). This allows us to see how far users scroll and which buttons they click most frequently. Additionally, technical data like selected language, system, screen resolution, and browser type is captured. This can result in the creation of user profiles, at least temporarily during the visit to our website. Furthermore, Hotjar allows us to gather direct feedback from users, providing us with valuable insights to improve the speed and user-friendliness of our websites. This constitutes our legitimate interest under the legal basis of Article 6(1)(f) GDPR.
Privacy policy: www.hotjar.com/privacy.
Opt-out: www.hotjar.com/opt-out.

Google Tag Manager

This website uses the Google Tag Manager service. This tool allows us to manage website tags through a single interface. The Google Tag Manager only implements tags. It does not use cookies and, in most cases, does not collect personal data. However, it may trigger other tags that could potentially collect data. The Google Tag Manager does not access these data. If a deactivation has been made at the domain or cookie level, it will remain in effect for all tracking tags implemented through Google Tag Manager.

§ 7 Usage-Based and Advertising Content

Google Ads

We use "Google Ads" (formerly Google AdWords) on our website, a service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as "Google"). Google Ads allows us to use advertising materials on external websites to draw attention to our attractive offers. This helps us determine how successful individual advertising measures are. These advertisements are delivered by Google via so-called "AdServers." We use AdServer cookies for this purpose, which measure certain parameters related to success measurement, such as ad impressions or user clicks. If you arrive on our website via a Google advertisement, a cookie will be stored on your PC by Google Ads. These cookies usually expire after 30 days and are not intended to personally identify you. Typically, the following information is stored in these cookies: unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), and opt-out information (marking that the user no longer wants to be targeted). These cookies enable Google to recognize your web browser. If a user visits specific pages of an Ads customer’s website and the cookie stored on their computer has not expired, Google and the customer can recognize that the user clicked on the advertisement and was directed to the page. Each Ads customer is assigned a different cookie. Thus, cookies cannot be tracked across the websites of Ads customers. We do not collect or process any personal data in the advertising campaigns mentioned. Google only provides us with statistical evaluations. With these evaluations, we can recognize which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising materials, and in particular, we cannot identify users based on this information. Due to the marketing tools used, your browser automatically establishes a direct connection to Google's server. We have no influence on the scope and further use of the data collected by Google Ads. To the best of our knowledge, Google receives the information that you have visited the relevant part of our website or clicked on one of our ads. If you have a user account with Google and are logged in, Google can associate the visit with your user account. Even if you are not registered with Google or logged in, it is possible that Google will learn and store your IP address.

We use Google Ads for marketing and optimization purposes, particularly to display relevant and interesting ads to you, improve campaign performance reports, and ensure accurate calculation of advertising costs. This also constitutes our legitimate interest in the processing of the above data by the third-party provider. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f) GDPR and, where we obtain your consent, Art. 6 para. 1 lit. a) GDPR.

You can prevent the installation of cookies by deleting existing cookies and deactivating cookie storage in your browser settings. Please note that in this case, you may not be able to use all features of our website to their full extent. You can also prevent the storage of cookies by setting your web browser to block cookies from the domain "www.googleadservices.com"
(https://www.google.de/settings/ads). Please note that this setting will be deleted if you delete your cookies. Additionally, you can opt-out of interest-based ads via the following link:
https://optout.aboutads.info. Again, this setting will be deleted if you delete your cookies.

Third-party information: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland.
For more information about data usage by Google, options for settings and objections, and privacy, you can consult the following Google websites:
Privacy Policy: https://policies.google.com/privacy?hl=de&gl=deGoogle Website Statistics: https://services.google.com/sitestats/de.html

Facebook Pixel

This website uses the Facebook Pixel for conversion tracking of visitor actions. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, the collected data may also be transferred to the USA and other third countries.
This allows for tracking the behavior of visitors to the site after they have been redirected to the provider’s website by clicking on a Facebook advertisement. This enables the effectiveness of Facebook advertisements to be evaluated for statistical and market research purposes and to optimize future advertising efforts. The data collected is anonymous for us as the operator of this website, and we cannot draw conclusions about the identity of the users. However, the data is stored and processed by Facebook, allowing it to link the data to the respective user profile, and Facebook can use the data for its own advertising purposes according to the Facebook Data Usage Policy. This enables Facebook to display advertisements on Facebook as well as outside of Facebook. We, as the site operator, have no influence over this use of the data.

The use of Facebook Pixel is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in effective advertising measures, including social media. If consent has been obtained (e.g., consent to store cookies), processing is carried out exclusively based on Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time. The data transfer to the USA is based on the EU Commission's Standard Contractual Clauses. Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum and
https://de-de.facebook.com/help/566994660333381.

For more privacy protection information, visit: https://de-de.facebook.com/about/privacy/.
You can also deactivate the "Custom Audiences" remarketing feature in the ad settings at
https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You need to be logged in to Facebook.
If you do not have a Facebook account, you can opt-out of Facebook's interest-based advertising on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.

Facebook Custom Audience

We use the "Custom Audiences" service from Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, 2 Dublin, Ireland, email: impressum-support@support.facebook.com, website: facebook.com.
The data transfer to the USA is based on the EU Commission's Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework. Details can be found here:
https://www.facebook.com/legal/terms/customaudience and
https://www.facebook.com/legal/terms/dataprocessing.

The legal basis for the transfer of personal data is your consent according to Art. 6 para. 1 lit. a GDPR, which you can withdraw at any time via the cookie settings of this website.
Facebook Custom Audience is an advertising tool that allows targeted advertising campaigns to be placed to website visitors. You can withdraw your consent at any time. For more information on withdrawing your consent, refer to either the consent itself or the end of this privacy policy.
For further information on how your data is handled, visit Facebook's privacy policy at www.facebook.com/about/privacy. The provider also offers an opt-out option at www.facebook.com/about/privacy.

DoubleClick

This website uses the web analytics service DoubleClick as part of Google Analytics, which allows for the recognition of the user's browser when visiting other websites. The collected data is only analyzed for statistical purposes and in anonymized form. The information generated by the cookie about the visit to the website is transferred to a Google server in the USA and stored there. The IP address is truncated before transmission within the member states of the European Union or in other contracting states of the European Economic Area by activating IP anonymization.
Only in exceptional cases is the full IP address transferred to a Google server in the USA before it is truncated. The anonymized IP address transmitted by the user's browser within the scope of Google Analytics is not merged with other data from Google. DoubleClick cookies do not contain personal data.
The information generated is used to compile reports on the activities on this website and to provide additional services related to the use of this website. If required by law, Google may transfer this information to third parties or process the data on behalf of Google.
The legal basis for the processing of personal data is the user's consent pursuant to Art. 6 para. 1 lit. a GDPR. The user can opt-out of tracking web analytics in the future or deactivate the DoubleClick cookie. The necessary extension for the browser can be downloaded and installed from Google's website. If multiple devices or browsers are used, the opt-out must be applied on each device or browser. To do so, the user can click the following link:
http://google.com/ads/preferences/html/opt-out.html.

Sleeknote

To offer you a user-friendly experience tailored to your use of our website and quick access to specific content (such as downloads, feedback options, and newsletter registrations), we use the Sleeknote service on this website, provided you give your consent. This service is operated by Sleeknote ApS, Jens Baggesens Vej 90A, 8200 Aarhus, Denmark ("Sleeknote"). The Sleeknote service displays certain additional content depending on which parts of our website you visit and how you use our website, with the aim of making your visit as pleasant and efficient as possible. Sleeknote collects and stores data on how you use our website, creating pseudonymized user profiles to evaluate the acceptance of the displayed content and continuously improve and optimize it to better meet user needs.
For this purpose, Sleeknote also uses cookies on your computer. These are small text files that are locally stored on your computer. The cookies remain stored for up to 2 years. Pseudonymized user profiles are not merged with any other personal data without the explicit consent of the affected person. Your personal data will also not be shared with third parties. Sleeknote stores the data collected via the Sleeknote service for a maximum of 3 months and then deletes it.
We have concluded a data processing agreement with Sleeknote. The transfer of your personal data is therefore based on Art. 28 GDPR. For more information on the protection of your personal data by Sleeknote, please consult their privacy policy:
https://sleeknote.com/privacy-policy.
We use the Sleeknote service with your consent. The legal basis for using the Sleeknote service is therefore Art. 6 para. 1 sentence 1 lit. a) GDPR in conjunction with § 25 TTDSG.

§ 8 Social Networks

Facebook

This section applies to the processing of personal data through our Facebook presence: For the collection and further processing of personal user data on Facebook's websites, Meta Platforms Ireland Limited Facebook Ireland Limited ("Facebook") is primarily responsible. Please note that Facebook collects and processes certain information about your visit to our Facebook page, even if you do not have a Facebook account or are not logged into Facebook. Information about Facebook's processing of personal data can be found in Facebook's privacy policy:
https://www.facebook.com/about/privacy/.

As the operator of this Facebook page, we only have access to your public Facebook profile. What information is visible depends on the settings in your profile. In addition, we process your personal data (such as your name and the content of your messages, inquiries, or other posts to us) when you contact us through our Facebook page or when you publish content on our Facebook presence, such as a comment. We process this data for the purpose of processing your contributions and, if necessary, responding to them. Our legitimate interests under Article 6(1)(f) of the EU General Data Protection Regulation (GDPR) form the legal basis for this processing.

We store your personal data on our systems, i.e., outside of Facebook, for as long as it is necessary for the purposes of collection or as required by legal retention obligations.

Instagram

This privacy policy also applies to our Instagram presence. Instagram is part of the Facebook group and shares infrastructure, systems, and technology with Facebook and other Facebook companies.
We explicitly point out that Facebook stores user data (e.g., personal information, IP address, etc.) and may also use it for commercial purposes. For more information about Facebook's data processing on Instagram, please refer to Instagram's privacy policy at:
https://help.instagram.com/519522125107875?helpref=page_content.

We have no influence over the data collection and further processing by Facebook/Instagram. Therefore, we cannot determine the extent, location, or duration of data storage, the compliance with deletion obligations, what analyses or links are made with the data, or to whom the data is shared. Meta Platforms Ireland Limited (also "Facebook/Instagram"), 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, is solely responsible for the processing of personal data in connection with our Instagram page.

The Instagram privacy policy can be found here:
http://instagram.com/legal/privacy/.
It also explains how you can exercise your rights to access, correction, portability, and deletion with Facebook. Additionally, the policy provides information about your right to object to certain processing of personal data.

LinkedIn

We use the platform "LinkedIn" to present our company and our bootcamps, as well as other products, and to inform you about current trends, products, and services through posts, videos, and advertising materials such as banners and sponsored links.

The services for the EU are provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. LinkedIn is owned by Microsoft, and LinkedIn Inc.'s headquarters are in Sunnyvale, California, USA.

When you access LinkedIn services, LinkedIn may collect personal data about you. Details can be found in LinkedIn's privacy policy at:
https://www.linkedin.com/legal/privacy-policy.
The LinkedIn cookie policy is available here:
https://www.linkedin.com/legal/cookie-policy.

In the course of maintaining our company profile and conducting our LinkedIn advertising campaigns, we have limited access to statistical evaluations from LinkedIn, such as the number of page views on our online presence. However, these data are provided in aggregated and anonymized form for specific periods, so no conclusions can be drawn about identifiable visitors to our company page.

We have no influence over the means and purposes of LinkedIn’s processing of personal data when such data is collected in connection with visiting LinkedIn or our LinkedIn online presence. If we communicate with you via LinkedIn and it serves the preparation or execution of a contractual relationship, the processing of your data is based on Article 6(1)(b) GDPR.

Targeted Advertising

We occasionally use the described social media platforms for targeted advertising.
For this purpose, we use audience definitions provided by the social media provider. These definitions are anonymous, meaning we define characteristics based on general demographic information, behaviors, interests, and connections. The social media platform operator uses these to display targeted ads to its users. The legal basis for this processing is the consent obtained by the platform operator from its users. If you wish to withdraw this consent, please use the opt-out options provided by the social media provider.

We do not use audience definitions based on location data and do not share personal data for audience definitions with the social media platform operator.

Occasionally, we use information about visits to or interactions with other sites (so-called remarketing). In such cases, we also use cookies. However, before this data processing occurs, we obtain user consent via a consent banner on the respective websites and inform users about the data processing. You can withdraw your consent at any time by revisiting the consent banner on the respective site.

§ 9 Newsletter and Email Messages

(1) With your consent, you can subscribe to our newsletter (if offered), through which we inform you about our current interesting offers. The promoted services and products are named in the consent declaration.

(2) For subscribing to our newsletter, we use the so-called double opt-in procedure. This means that after your registration, we will send you an email to the provided email address asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. Additionally, we store the IP addresses used for registration and confirmation, as well as the times of registration and confirmation. The purpose of this procedure is to verify your registration and, if necessary, clarify any potential misuse of your personal data.

(3) The mandatory information for sending the newsletter is solely your email address. Providing further data, marked as optional, is voluntary and will be used to address you personally. After your confirmation, we store your email address for the purpose of sending the newsletter. The legal basis for this processing is Article 6(1) sentence 1 lit. a GDPR.

(4) You can withdraw your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can withdraw your consent by clicking the link provided in every newsletter email or by sending a message to the contact details provided in the imprint.

(5) We would like to point out that when sending the newsletter, we may evaluate your user behavior. For this evaluation, the sent emails include so-called web beacons or tracking pixels, which are 1-pixel image files stored on our website. For the evaluations, we link the data mentioned in § 3 and the web beacons with your email address and a unique ID. Links included in the newsletter also contain this ID. With the data obtained, we create a user profile to tailor the newsletter to your individual interests. We track when you read our newsletters, which links you click, and from this, we deduce your personal interests. We also link this data with actions you take on our website.

You can object to this tracking at any time by clicking the separate link provided in each email or by informing us through another contact method. The information will be stored as long as you remain subscribed to the newsletter. After unsubscribing, the data will be stored only statistically and anonymously. This type of tracking is not possible if you have disabled image display in your email program by default. In this case, the newsletter will not be displayed completely, and you may not be able to use all functions. If you manually enable the display of images, the aforementioned tracking will occur.

(6) The sending of newsletters and other emails from the communication flow initiated through the forms on our website is done via "MailChimp," a messaging service platform of the U.S. provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. In this context, there may be processing of email dispatch data and the personal data contained within it in the USA, as mailing services from the USA are involved in email dispatch. The data protection standards in the USA differ from the European level of data protection. The European Commission has not issued an adequacy decision for the USA, which would recognize an equivalent level of data protection. Therefore, we have entered into European Standard Contractual Clauses with all U.S.-based service providers. You can view MailChimp's privacy policy here.

(7) The email addresses of our newsletter recipients, as well as the other data described in these instructions, are stored on MailChimp's servers in the USA. MailChimp uses this information to send and evaluate the newsletters on our behalf. Additionally, MailChimp may use this data for its own purposes, such as optimizing the delivery and presentation of the newsletters or for economic purposes, such as determining which countries the recipients are from. However, MailChimp does not use our newsletter recipients' data to contact them directly or pass it on to third parties.

§ 10 Linked Content / Sharing Functions

Our website contains links to third-party websites. The respective privacy policies and privacy notices of the operators of the linked websites apply. We would like to point out that we are not responsible for the data processing practices on platforms of third parties outside of our own sphere of influence.

§ 11 Data Protection in the Application Process

The data controller collects and processes the personal data of applicants for the purpose of managing the application process. This includes applications for employment and other activities with the data controller, as well as applications for the programs, workshops, and bootcamps offered by the data controller.

For Employment and Other Activities with the Data Controller: If the data controller enters into an employment contract with an applicant, the transmitted data will be stored for the purpose of managing the employment relationship, in compliance with legal requirements. If the data controller does not enter into an employment contract with the applicant, the application documents will be automatically deleted four months after the rejection decision, unless there are other legitimate interests of the data controller that prevent deletion. A legitimate interest in this sense could, for example, be the obligation to provide evidence in a procedure under the General Equal Treatment Act (AGG). The legal basis for the processing of applicants' personal data for the purpose of contract performance is Article 6(1) lit. b, 88 GDPR in conjunction with Section 26 of the Federal Data Protection Act (BDSG). In addition, where processing is required to fulfill legal obligations, Article 6(1) lit. c GDPR applies, and where the processing is based on the consent of the data subject, Article 6(1) lit. a GDPR in conjunction with Section 26 BDSG applies. In all other cases, Article 6(1) lit. f GDPR in connection with our legitimate interests in the appropriate, secure, efficient, and fair design of our business processes, appropriate documentation, and evidence provision in legal proceedings in conjunction with Section 26 BDSG applies.

For Programs, Workshops, and Bootcamps: If the application is successful, a contractual relationship will be established regarding the services of the data controller for the applicant and the counter-performance to be provided by the applicant. The personal data processed in this context will be stored for the duration of the contractual relationship and beyond, until the expiration of the regular legal limitation periods, unless statutory obligations, especially tax and commercial retention obligations, require a longer storage period. If the application is unsuccessful, the personal data will be deleted after a period of four months. With separately obtained consent from the data subject, storage can be extended for an additional twelve months to allow for reconsideration in case a course place or other offers that may be of interest to the applicant become available.

The legal basis for processing is Article 6(1) lit. b GDPR, as far as the processing is for the purpose of initiating, executing, and completing the contractual relationship, Article 6(1) lit. f GDPR, as far as the legitimate interests of the data controller in proper documentation of its business transactions, evidence provision in the context of any disputes, and the management, maintenance, and expansion of the business relationship between the data controller and the contract partner are involved, and Article 6(1) lit. c GDPR, as far as the processing is required to comply with legal obligations. If the processing is based on the consent of the data subject, Article 6(1) lit. a GDPR applies as the legal basis.

For the application process, we use the services of Teamtailor AB, Östgötagatan 16, SE-116 25 Stockholm, which provides platform services for managing and conducting the application process on our behalf, with personal data being processed exclusively within the European Union.

§ 12 Service Providers

We occasionally use external service providers (processors) for the processing of your data. These service providers have been carefully selected and commissioned by us, are bound by our instructions, and are regularly monitored.

If our service providers or partners are located in a country outside the EU and the European Economic Area (EEA), we will inform you about the consequences of this fact in the description of the offer.

§ 13 Deletion

Unless otherwise specified in the individual information, the data controller processes personal data in accordance with legal requirements for the purposes outlined here and only for as long as personal identification of the data subject is necessary for the respective purpose. After that, the data will either be deleted or neutralized/anonymized in accordance with data protection regulations.