Data Privacy

Contact details of the responsible person

INTEGRTR GmbH
Authorized representatives: Jörg Schreiber, Girish Bangalore
Phone: +49(0)6205-3619995
E-mail: info@integrtr.com

Name and contact details of the data privacy officer

PROLIANCE GmbH
www.datenschutzexperte.de
Leopoldstr. 21
80802 Munich
datenschutzbeauftragter@datenschutzexperte.de

We welcome you to our website. The protection of your data is very important to us. Therefore, we will show you below how we process your personal data.

Data categories; data sources

In principle, we process the personal data that you provide to us in the context of an inquiry, a pre-contractual legal relationship or a contractual relationship. In individual cases and insofar as this is necessary in the context of the performance of the contract, we also process personal data that has been permissibly taken from publicly accessible sources (e.g. commercial registers, debtor directories, Internet) or permissibly transmitted to us by third parties (e.g. credit agencies).

This may include personal data (name, birthday, legal representative), address data (address, e-mail address, contact person), financial data (name of account holder, IBAN, BIC), contract data (contract term, purchased services, cancellations), communication data (correspondence, e-mail traffic), advertising data (advertising letters) and other comparable categories of personal data.

General processing of visitor data

The use of our website is generally possible without providing personal data.

However, we would like to point out that access data is also collected in this case and stored in the server log files. In particular, this involves the following data:

• Browser type / your browser version,
• operating system,
• Date and time of your visit,
• your IP address.

We generally evaluate this information in an anonymized form, also to defend against attacks and to improve our offering (processing of personal data in the context of a balancing of interests pursuant to Art. 6 para. 1 p. 1 lit. f) DSGVO) and subsequently delete it. The data is regularly not traceable to your person and is not merged with other data.

However, in the event of concrete indications of unlawful use, we reserve the right to subsequently evaluate the data.

Processing of personal data after consent (Art. 6 para. 1 p. 1 lit. a) DSGVO)

We obtain consent from you in individual cases for certain purposes expressly designated in connection with the collection of data (e.g. contacting us, using a contact form).

Data processing only takes place if you give us your consent. It may be that the processing of your request is not possible without your consent and must therefore be made dependent on it. The data will be processed exclusively for the purpose(s) expressly stated.

You can revoke the consent you have given at any time with effect for the future. The revocation has no influence on the lawfulness of the processing until the time of revocation.

Consents obtained specifically

Within the scope of our Internet presence, you may have given us the following consents:

– In the context of the general contact form:

„I consent to the storage of my data for the electronic processing of my inquiry and accept the provisions of the privacy policy. I can revoke this consent at any time with effect for the future.“

Processing of personal data in the context of a balancing of interests (Art. 6 para. 1 p. 1 lit. f) DSGVO).

We process personal data after weighing interests, insofar as this is necessary to protect our interests or the interests of third parties.

Examples of such purposes are:

• Ensuring the IT security and integrity of our systems,
• Prevention or investigation of criminal offences,
• Assertion of or defense against legal claims.

Contacting

If you contact us by e-mail or telephone, we process the personal data you provide in order to respond to your inquiry. We delete the data after the final processing of your inquiry, unless there is a contractual or legal obligation to retain the data.

Contact form

If you send us an inquiry via our contact form, we process the data you provide based on your consent pursuant to Art. 6 para. 1 p. 1 lit. a) DSGVO in order to process your inquiry. In principle, your data will be deleted after processing the request, unless there is a contractual or legal obligation to retain it. If you provide us with contractually relevant information, we will transfer it to our inventory system.

You can revoke your consent at any time with effect for the future using any of the contact details provided.

Processing of personal data for contract execution or contract initiation (Art. 6 para. 1 p. 1 lit. b) DSGVO).

If a contract is concluded with us, we use personal data insofar as this is necessary for the performance of the contract or for the implementation of pre-contractual measures. The purposes of the data processing depend on the concrete contents of the contract, which you can find in the contract documents.

If a contract already exists with us, we process your data in order to verify that you are our contractual partner and in order to properly provide the contractual service owed.

Newsletter

If you have registered for our newsletter, we process the data you have provided based on your consent pursuant to Art. 6 (1) p. 1 lit. a) DSGVO in order to send you our newsletter on a regular basis. To register, it is sufficient to provide an e-mail address. The other information is provided voluntarily.

We use the so-called double opt-in procedure for registration, in which you must explicitly confirm your e-mail address again in a second step after you have agreed to receive the newsletter. Only then will the service be activated.

For legal reasons, we also store the IP address and the date of registration.

Our newsletter is sent using the Hubspot service, a service provided by HubSpot, Inc., 25 First Street, Cambridge, MA 02141 USA („Hubspot“). We have concluded an order processing agreement with the provider. The data transfer to the USA is legitimized based on your consent according to Art. 49 (1) a) DSGVO. When registering, we use the so-called double opt-in procedure, which requires you to explicitly confirm your e-mail address again in a second step after you have given your consent to receive the newsletter. Only then will the service be activated.

The data you provide during registration is transferred to Hubspot and stored there. We do this to increase the attractiveness of our newsletter and to check our marketing measures. This data processing is based on your consent.

You can find more detailed information on data protection at Hubspot at

https://legal.hubspot.com/de/privacy-policy

You can also revoke your consent at any time with effect for the future. A link for revocation can be found at the end of each newsletter email. Of course, you can also revoke your consent via the other contact options offered.

Use of cookies

Our website does not set any cookies for analysis, advertising or tracking purposes, and it does not create usage profiles.

To obtain and document your consent choices, we use the consent management platform of consentmanager AB, Håltegelvägen 1b, 72348 Västerås, Sweden ("consentmanager"), an EU provider. On your first visit, its banner asks which services you want to allow. consentmanager sets a small number of strictly necessary first-party cookies (their names begin with __cmp) whose sole purpose is to remember whether you have already been asked and what you chose; such consent-management cookies are technically necessary (Section 25 (2) TDDDG) and therefore do not themselves require consent. Your choices are additionally logged by consentmanager on our behalf so that we can demonstrate given consent (Art. 7 (1) DSGVO), on the basis of a data processing agreement.

Beyond that, cookies only come into play if you actively allow an external HubSpot element (see "External HubSpot elements" below). You can change or withdraw your choices at any time via the "Cookie settings" link in the footer, which reopens the consent settings.

One further entry is stored in your browser's local storage (not a cookie): integrtr-annc-dismissed records that you have closed the announcement bar at the top of the page. It remains on your device, is never transmitted to us, contains no identifier by which you could be recognised, and can be deleted at any time in your browser settings.

Website analysis

We use Vercel Web Analytics, a reach measurement service provided by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA, the hosting provider of this website.

Vercel Web Analytics works without cookies and without persistent identifiers: nothing is set or read on your device, and you are not tracked across websites. When you view a page, aggregate information is recorded: the page viewed, the referring page, the country you are visiting from (derived from your IP address, which is not stored for this purpose), and coarse browser, operating system and device-type information. To count unique visitors, a hash value is calculated from the incoming request; this hash cannot be traced back to you and changes daily, so recognition beyond a single day is not possible. No usage profile of you is created.

The legal basis is Art. 6 para. 1 p. 1 lit. f) DSGVO; our legitimate interest lies in measuring the reach of our website in aggregate form and improving our offering. Vercel processes this data on our behalf on the basis of a data processing agreement (see "Data transfer").

We additionally use Cloudflare Web Analytics, a comparable cookieless reach measurement service provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. It also sets no cookies and stores nothing on your device: it records the page viewed, the referring page and coarse browser and device information in aggregate form, and measures the technical loading performance of our pages (Core Web Vitals) as experienced by real visitors. Visitor counts are likewise derived without any persistent identifier, so no usage profile is created. The legal basis is again Art. 6 para. 1 p. 1 lit. f) DSGVO; our legitimate interest lies in aggregate reach measurement and in monitoring the technical performance of our website. Cloudflare processes this data on our behalf on the basis of a data processing agreement.

Beyond these two services, we do not use any other web analytics tool: there is no Google Analytics, no Google Tag Manager, no Google Ads or remarketing tag, and no comparable tracking tool.

External HubSpot elements

On our contact page and on the pages where a whitepaper can be requested, we use forms provided by HubSpot, Inc. On the DSAG appointment pages we additionally offer HubSpot's appointment scheduler.

These elements are not loaded automatically. We instead display a placeholder with a note and a button. Only when you actively click that button is a connection to HubSpot established and are files retrieved from HubSpot. Until you do so, no data at all is transmitted to HubSpot; in particular your IP address is not disclosed to HubSpot.

By clicking the button you consent to this transmission pursuant to Art. 6 para. 1 p. 1 lit. a) DSGVO and, insofar as data is transferred to the USA, pursuant to Art. 49 para. 1 p. 1 lit. a) DSGVO. If you then submit a form, the data you have entered is processed by HubSpot on our behalf in order to handle your enquiry. We have concluded a data processing agreement with HubSpot.

You can withdraw this consent at any time with effect for the future via the "Cookie settings" link in the footer, which reopens the consent settings.

Further information from the provider: https://legal.hubspot.com/privacy-policy

Fonts

The fonts used on this website are delivered from our own servers together with the rest of the page. No connection is made to Google Fonts or to any other external font provider, so no data is transmitted to such a provider when you visit our pages.

Links to other websites

Our website contains links to external websites and to our own subdomains. These are plain hyperlinks and not social plugins: nothing is loaded from these providers until you click a link and thereby leave our website.

Insofar as we process your data on these external websites (for example, by you contacting us via these websites), our data protection provisions apply.

In addition, the linked websites process your personal data for their own purposes. We cannot make any statement about the manner of processing, the purposes or the storage period of your personal data by these providers. Please refer to the data protection provisions of the respective provider to obtain further information. You can find these at:

– LinkedIn: https://www.linkedin.com/legal/privacy-policy

– X (formerly Twitter): https://x.com/en/privacy

– YouTube: https://policies.google.com/privacy

– Instagram and Facebook: https://www.facebook.com/privacy/policy

– Our merchandise shop, operated by sprd.net AG: https://www.spreadshirt.de/datenschutz

Data transfer

We pass on data to other third parties if and to the extent that we have delegated the performance of tasks to them. The data is only passed on if this is necessary for the fulfillment of the assigned tasks.

We work together with the following companies:

nullacht15 GmbH
Opelstrasse 29
68789 St. Leon-Rot
Germany

Vercel Inc.
340 S Lemon Ave #4133
Walnut, CA 91789
USA

consentmanager AB
Håltegelvägen 1b
72348 Västerås
Sweden

consentmanager provides the consent management platform described under "Use of cookies" and stores our visitors' consent records on our behalf within the EU, on the basis of a data processing agreement.

Vercel hosts and delivers this website. Server-side processing of requests takes place in Vercel's Frankfurt am Main region; the static content of our pages is additionally delivered from the Vercel location closest to you, which for visitors in Europe is a European location. Access data in server log files (see "General processing of visitor data") is processed by Vercel on our behalf on the basis of a data processing agreement.

Furthermore, service providers may be entrusted with tasks in the following areas, for example:

• IT maintenance
• IT development
• IT provision
• Lawyers

The data transfer always takes place on the basis of a legal standard or a suitable contract in accordance with Art. 26 or 28 DS-GVO, which ensures compliance with all data protection requirements.

Apart from that, data will only be forwarded in the cases provided for by law, for example in the case of a legal obligation to provide information to law enforcement authorities. In these cases, the data transfer is legitimized according to Art. 6 para. 1 p. 1 lit. c) DSGVO.

Data transfer to a third country

A data transfer to the USA takes place with the following recipients:

HubSpot, Inc, 25 First Street, Cambridge, MA 02141 USA: only after you have actively loaded a HubSpot element or submitted a HubSpot form (see "External HubSpot elements"), on the basis of the consent you have given.

Vercel Inc, 340 S Lemon Ave #4133, Walnut, CA 91789, USA: as the hosting provider of this website, on the basis of a data processing agreement. Server-side processing takes place in Vercel's Frankfurt am Main region; the analytics data described under "Website analysis" contains no personal identifiers.

Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA: as provider of the DNS name resolution for our domain and of the cookieless reach measurement described under "Website analysis", on the basis of a data processing agreement.

All three companies are certified under the EU-US Data Privacy Framework (DPF), for which the European Commission has issued an adequacy decision pursuant to Art. 45 DSGVO. For transfers to DPF-certified companies, an adequate level of data protection is therefore legally ensured. In addition, the data processing agreements concluded with these providers incorporate the EU standard contractual clauses as a supplementary safeguard.

Duration of data storage

Your personal data will be deleted by us immediately as soon as the data is no longer required for the fulfillment of contractual and legal obligations.

Personal data will be stored at least as long as necessary for the fulfillment of contractual obligations and the exercise of contractual rights. This period may extend beyond the actual contractual period, as the data may still be relevant after the end of the contract within the framework of the limitation periods. In addition, deletion can only take place once any retention periods under tax and commercial law have expired.

Data subject rights

As a person affected by the processing of personal data, you have the following rights:

You have the right to request confirmation as to whether personal data is being processed. If this is the case, you have a right to information about the personal data and to the information listed in detail in Article 15 of the GDPR.

You have the right to request from the controller without undue delay the rectification of any inaccurate personal data concerning you and, where applicable, the completion of any incomplete personal data (Art. 16 GDPR).

You have the right to demand from the controller that personal data concerning you be deleted without undue delay, provided that one of the reasons listed in detail in paragraph 17 of the GDPR applies, e.g. if the data is no longer needed for the purposes pursued (right to erasure).

You have the right to request the controller to restrict processing if one of the conditions listed in Art. 18 DSGVO applies, e.g. if you have objected to the processing, for the duration of the controller’s review.

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transfer this data to another controller without hindrance from us, provided that the processing of this data is based on your consent or on a contract and the processing is carried out with the help of automated procedures (Art. 20 DSGVO). When exercising the right to data portability, you have the right to obtain that the personal data be transferred directly from us to another controller, insofar as this is technically feasible (right to data portability).

You have the right to object to the processing of personal data concerning you at any time on grounds relating to your particular situation. The controller will then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims (Article 21 DSGVO).

Regarding the exercise of your rights, you can contact us at any time via the contact options provided on our website.

Right of objection in the case of direct advertising

In individual cases, we process personal data in order to conduct direct advertising. In this case, you have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising (Article 21 DSGVO).

If you object to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes.

The objection can be made form-free at any time via one of the contact options provided in this privacy policy or in our imprint.

Right of appeal

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes the GDPR (Article 77 GDPR). You can assert this right at a supervisory authority in the member state of your residence, workplace or the place of the alleged infringement. In Baden-Württemberg, the competent supervisory authority is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg.

You can obtain more information at the following link:

https://www.baden-wuerttemberg.datenschutz.de/

However, you can of course also contact us directly if you are dissatisfied or have questions about data protection. The quickest way to reach our internal contact person on the subject of data protection is to use the following contact details:

INTEGRTR GmbH
Phone: +49(0)6205-3619995
E-mail: info@integrtr.com

Obligation to provide data

In principle, there is no obligation to provide data. However, the provision of data may be necessary for the use of certain functions or for the conclusion of a contract. If you do not provide the required data, you will not be able to use certain functions or services or a contract cannot be concluded.