Privacy Policy
I. General Information
(1) Below, we provide information on the collection of personal data when using our website.
(2) ‘Personal data,’ referring to the definition in Article 4(1) of Regulation (EU) 2016/679 (hereinafter referred to as ‘General Data Protection Regulation’ or ‘GDPR’), includes all data that can be personally related to you. This includes, for example, name, address, email addresses, user behavior. For further terminologies, particularly the terms ‘processing,’ ‘controller,’ ‘processor,’ and ‘consent,’ we refer to the legal definitions of data protection in Article 4 GDPR.
(3) We generally process personal data only as necessary to provide a functional website and our content and services. Personal data processing regularly occurs only if you have given us consent as per Art. 6(1)(a) GDPR or if processing is permitted by legal regulations, especially one of the legal bases mentioned in Art. 6(1)(b) to (f) GDPR.
(4) Your personal data will be deleted or blocked as soon as the purpose for storage is no longer applicable. Storage may also occur if required by national or European regulations we are subject to. In such cases, blocking or deletion of data will occur when the prescribed storage period under these regulations expires, unless further storage is necessary for contract conclusion or fulfillment.
(5) If we use contracted service providers for individual functions of our website or wish to use your data for advertising purposes, we will inform you in detail about the respective processes below.
II. Data Controller
(1) The data controller as per Article 4(7) GDPR, other data protection laws applicable in Member States of the European Union, and other provisions of a data protection character is:
Mimir Mentor UG
Managing Director: Robin Schmitt
Deutschhausplatz 1A
55116 Mainz
Email: info@mimir-mentor.com
(2) Further details regarding the data controller can be found in our Legal Notice section.
II. Data Protection Officer
You can reach and contact our Data Protection Officer at the following address:
Robin Schmitt
Phone: +491726146889
Email: info@mimir-mentor.com
III. Your Rights
(1) With respect to your personal data, you have the following rights against us:
the right to access,
the right to rectification and erasure,
the right to restrict processing,
the right to object to processing,
the right to data portability.
(2) Additionally, you have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data by us.
IV. Processing of personal data when using our website for information purposes
(1) When you visit our website without registering or otherwise transmitting information to us (‘Informational Use’), we only collect the personal data that your web browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security: IP address, date and time of the request, time zone difference to GMT, content of the webpage, access status (HTTP status), referring website, web browser, operating system, language, and version of the browser.
(2) The aforementioned data are also stored in so-called log files on our servers. No storage of these data together with other personal data of yours occurs.
(3) Storing the above data in log files ensures the functionality and optimization of our website and the security of our information technology systems.
(4) This data is not evaluated for marketing purposes. Our legitimate interest in data processing lies in these purposes. The legal basis for the collection and temporary storage of the aforementioned data and log files is Art. 6(1) sentence 1 lit. f) GDPR. The above data for the provision of our website will be deleted at the end of the respective session. The collection of the above data for the provision of our website is mandatory for the operation of our website. There is no possibility of objection.
V. Processing of Personal Data through Cookies
(1) We use so-called cookies on our website. Cookies are small text files that are stored on your device’s storage medium, such as a hard drive, and provide us, the entity that sets the cookie, with certain information. Cookies cannot execute programs or transfer viruses to your device. This website uses the following types of cookies, the scope and functionality of which are explained below.
(2) Cookies stored in association with your web browser:
Transient Cookies: These cookies are automatically deleted when you close your web browser. This includes, in particular, session cookies. They store a so-called session ID, which allows different requests from your web browser to be assigned to the common session. This enables your device to be recognized when you return to our website. Session cookies are deleted as soon as you log out or close the web browser.
Persistent Cookies: These cookies are automatically deleted after a predetermined duration, which can vary depending on the cookie. You can delete these cookies at any time in the settings of your web browser.
(3) The processing of personal data through the aforementioned cookies serves to make the overall offering of our website more user-friendly and effective. Some functions of our website cannot be offered without the use of these cookies. In particular, some functions of our website require that your web browser can be identified even after a page change. If you have an account, we use cookies to identify you for subsequent visits. This avoids the need for you to log in again each time you visit our website. The data processed by cookies, which are necessary for the provision of the functions of our website, are not used to create user profiles. To the extent that cookies are used for analysis purposes, they serve to improve the quality and user-friendliness of our website, its content, and functions. They enable us to understand how the website is used, which functions are used, and how often. This allows us to continuously optimize our offering.
(4) Unless cookies are technically essential, we only set them with your prior declared consent, which you can revoke at any time. The legal basis is Art. 6 Para. 1 lit. a) GDPR.
(5) The aforementioned cookies are stored on your device and transmitted to our server from there. You can therefore configure the processing of data and information by cookies yourself. You can make corresponding configurations in the settings of your web browser, whereby you can reject, for example, third-party cookies or all cookies altogether. In this context, we would like to point out that you may not be able to use all functions of our website properly. In addition, we recommend regular manual deletion of cookies and your browser history.
VI. Additional Functions and Offers on Our Website
(1) Besides the mandatory informational use of our website, we offer various services that you can use if interested. Typically, this requires providing additional personal data, which we need to deliver the respective service. The principles of data processing stated above apply here.
(2) We partially rely on external service providers to process this data, whom we carefully select and commission. These service providers are bound by our instructions and are regularly monitored by us. In cases where personal data is shared with third parties as part of services we offer in collaboration with partners, you can find more details in the descriptions of the individual services. If these third parties are based in a country outside the European Economic Area, you can find more information about the implications of this in the descriptions of the individual services.
VII. Contacting Us
(1) When you contact us via email, the personal data you transmit to us with your email will be stored.
(2) Additionally, we provide a contact form on our website, which you can use to get in touch with us. The data you enter into the input mask of this form will be transmitted and stored by us: salutation, first name, last name, email address.
(3) This data is used exclusively to respond to your inquiries. Unless explicitly stated in this privacy policy, your data will not be shared with third parties. Additionally, we record your IP address and the time of submission.
(4) The processing of the aforementioned personal data is solely for the purpose of handling your inquiries.
(5) The processing of additional personal data, which occurs through the use of the contact form on our website, aims to prevent misuse and ensure the security of our information technology systems.
(6) This also constitutes our legitimate interest in processing your personal data. If you have given consent for this, the legal basis for processing these data is Art. 6 (1) lit. a) GDPR. Otherwise, the legal basis for processing these data is Art. 6 (1) lit. f) GDPR, especially if the data is transmitted to us by sending an email. If your email is intended to initiate the conclusion of a contract, Art. 6 (1) lit. b) GDPR serves as an additional legal basis.
(7) The data will be deleted subject to legal retention periods, once we have fully processed your request. If you contact us via email, you can object to the storage of your personal data at any time. Please note that in this case, we will not be able to process your request further. You can declare the revocation or objection by sending an email to the address provided in our Impressum.
VIII. Newsletter
(1) We offer a newsletter that you can subscribe to on our website. Details about the newsletter, particularly its potential contents, are specified in the consent form. When you subscribe to our newsletter, the data you enter into the subscription form is transmitted to us. To register for the newsletter, you must provide the required data we request: Email address.
(2) Providing additional personal data during registration is voluntary.
(3) For subscribing to our newsletter, we use the double opt-in procedure. After your registration, we will send you an email to the address you provided, asking for your confirmation that you wish to receive our newsletter in the future. If you do not confirm your registration within the time frame specified in the email, the data you provided will be blocked and deleted after one week. Additionally, we store your IP address and the times of your newsletter registration and confirmation. The data is not shared with third parties in connection with the newsletter dispatch and is used exclusively for sending the newsletter.
(4) Unless we use a third-party provider mentioned below for sending the newsletter, your data will not be shared with third parties in connection with the newsletter dispatch.
(5) The data you enter into the subscription form is processed for the purpose of addressing you personally. After your confirmation, we store your email address to send you the newsletter. We store your IP address and the times of registration and confirmation to verify your registration and, if necessary, to investigate any misuse of your personal data. This also represents our legitimate interest. If you have given consent, the legal basis for processing is Art. 6 Para. 1 S. 1 lit. a) GDPR. If the processing is based on our legitimate interests, the legal basis is Art. 6 Para. 1 S. 1 lit. f) GDPR.
(6) The aforementioned data will be deleted as soon as it is no longer required for the purposes stated above. Therefore, we store your data as long as you are subscribed to the newsletter. After unsubscribing from the newsletter, we store the data purely for statistical and anonymous purposes.
(7) You can revoke your consent to receive the newsletter at any time by unsubscribing. You can unsubscribe by clicking on the link provided in every newsletter email we send you.
IX. Blog
(1) On our website, we offer a blog. In this blog, we publish articles on various topics.
(2) If you have given us consent to store data, you may revoke it at any time. You may also object to the storage of the aforementioned data at any time.
X. Online Application
(1) Our website offers the opportunity for online applications. Participation in the application process requires the provision of personal data. This data may include personal basic information such as first name, last name, address, date of birth, contact details like phone number or email address, as well as information related to your educational and/or professional background such as school and work certificates, training, internships, or previous employers. This data may come from an application form to be filled out online on the application platform or from documents provided by you such as a cover letter, CV, application photo, certificates, or other professional qualifications. Data required for participation in the application process are marked as mandatory. Unless a third-party provider is mentioned in this privacy policy, whose service we use to provide the online application function, there is no transfer of data to third parties.
(2) We process the aforementioned data for the purpose of carrying out the application process. If you have given us consent, the legal basis for processing the data is Article 6(1)(a) of the GDPR. Insofar as the processing of the aforementioned data occurs for the initiation of contractual relationships, the legal basis is Article 6(1)(b) of the GDPR.
(3) The data will be deleted as soon as they are no longer necessary for the purpose of their collection. In the event that the application process leads to an employment relationship, training relationship, internship, or other service relationship, the data will initially continue to be stored and transferred to the personnel file. Otherwise, the application process ends with the receipt of a rejection. In this case, the data will be deleted after four weeks. Deletion does not occur if further processing and storage of your personal data are necessary in individual cases for the assertion, exercise, or defense of legal claims. In this case, we have a legitimate interest in the further processing and storage of your personal data. The legal basis is Article 6(1)(f) of the GDPR. Deletion also does not occur if we are obliged to further store your personal data due to legal provisions.
(4) You can revoke consent given to us at any time. You can object to the processing of your personal data at any time. In particular, you have the option to withdraw your application at any time. In the context of the application process, you should only provide us with those personal data that are necessary for participation in and execution of the application process. There is no legal or contractual obligation to provide data. However, we would like to point out that without this data, we cannot carry out the application process and cannot consider your application. The same applies in the event of an objection against the processing of your data. You can have the data stored about you changed at any time.
XI. Registration
(1) To use additional features of our website, we offer the option to register by providing personal data. The data is entered into an input form, transmitted to us, and stored. The data is not shared with third parties. Required fields are marked as such and must be fully completed. Otherwise, we will decline the registration. The following data is collected during the registration process: first name, last name, email address.
(2) At the time of registration, the IP address and the date and time of the registration are also stored. As part of the registration process, the user’s consent to the processing of this data is obtained.
(3) Registration is necessary for accessing certain contents and services on our website. The data entered for this purpose is used only for the use of the respective offer or service for which you have registered. In the event of significant changes to our offers, services, or in case of technically necessary changes, we will use the email address provided at registration to inform you. The legal basis for processing the data is Art. 6 Para. 1 S. 1 lit. a) GDPR. If the registration serves to conclude or perform a contract, Art. 6 Para. 1 S. 1 lit. b) GDPR serves as an additional legal basis.
(4) You can revoke your consent at any time. The legality of the data processing carried out before the revocation remains unaffected.
(5) The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. This is the case when the registration on our website is canceled or modified. You can dissolve the registration at any time. The data stored about you can be amended at any time. Legal retention periods remain unaffected.
(6) We only transfer personal data to third parties if it is necessary for contract processing. Further transfer of data does not take place or only if you have expressly consented to the transfer. Your data is not passed on to third parties without explicit consent, for example for advertising purposes.
(7) As far as you have given us consent, the legal basis for processing the data is Art. 6 Para. 1 S. 1 lit. a) GDPR. Otherwise, the legal basis is Art. 6 Para. 1 S. 1 lit. b) GDPR.
XII. Server Location
We process and/or store your personal data in the EU on a server of an external provider and on internal servers.
XIII. Purchases or Orders
(1) We offer paid services on our website. For this purpose, we process personal data provided by you.
(2) The processing is carried out for the purpose of establishing and executing a contractual relationship with you. If you have given us consent for this, the legal basis for processing is Art. 6 Para. 1 S. 1 lit. a) GDPR. Otherwise, the legal basis for processing is Art. 6 Para. 1 S. 1 lit. b) GDPR.
(3) You can revoke your consent at any time. You can object to the processing of your personal data at any time. However, we would like to point out that without this data, a conclusion of the contract is not possible.
(4) The data will be deleted as soon as they are no longer necessary for the purpose of their collection. This is the case when we no longer need your personal data for the execution of the contractual relationship. Deletion does not occur if we are legally obliged to further store your personal data.
XIV. Payment Service Providers
(1) For the execution of payment processing, we transmit the payment data provided by you to Stripe, Inc., 510 Townsend Street, San Francisco, CA 94103, USA.
(2) The transmission of payment data and processing by the aforementioned payment service providers are for the purpose of handling payments. The use of external payment service providers enables us to offer you a variety of payment methods, thereby making payment processing more flexible for both you and us. This also constitutes our legitimate interest. Insofar as you have given us consent, the legal basis for processing data is Article 6(1)(a) of the GDPR. Insofar as the processing of the aforementioned data is for the execution and implementation of the contractual relationship, the legal basis is Article 6(1)(b) of the GDPR. Otherwise, the legal basis is Article 6(1)(f) of the GDPR.
(3) You can revoke consent given at any time. You can object to the processing of your personal data at any time. However, we would like to inform you that without the transmission of payment data and/or processing by the payment service provider, it may not be possible to provide you with all or any payment methods, and contract execution may not be feasible.
(4) Your payment data is transmitted to and processed on servers of our payment service provider in the USA. The payment service provider is subject to the Privacy Shield Agreement between the European Union and the USA, is certified, and thereby commits to comply with European data protection standards and regulations.
XV. Facebook Pixel
We use this service on our website.
The service allows the provider to display our ads on Facebook, so-called “Facebook Ads”, exclusively to Facebook users who have visited our website, particularly those who have shown interest in our online offer or in specific topics or products. The service enables the verification of whether a user was redirected to our website after clicking on our Facebook Ads. The service uses, among other things, cookies – small text files that are stored locally in the cache of your web browser on your device. If you are logged into Facebook with your user account, the visit to our online offer is noted in your user account. The data collected about you is anonymous to us, thus providing us no insight into the identity of the users. However, this data can be linked by the provider to your user account there. We have no control over the extent and further use of data collected by the use of the service by the provider. To our knowledge, the provider receives the information that you have accessed the relevant part of our website or clicked on an ad from us. If you have a user account with Facebook and are registered, the provider can associate the visit with your user account. Even if you are not registered with Facebook or have not logged in, there is a possibility that the provider learns and stores your IP address and possibly other identifiers.
We use the service for marketing and optimization purposes, particularly to display relevant and interesting ads to you, thereby improving our offer, making it more interesting for you as a user, and avoiding annoying ads.
The legal basis is Article 6(1)(a) of the GDPR (consent).
https://www.facebook.com/about/privacy
Provider:
Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Ireland
https://www.facebook.com/
XVI. Google Ads
We use this service on our website.
The service allows us to promote our offerings on external websites using advertising tools. This helps us determine the effectiveness of individual advertising campaigns. These advertising tools are delivered by the provider through so-called “Ad Servers.” We use Ad Server Cookies, which enable certain parameters for measuring success, such as ad impressions or user clicks, to be tracked. When you arrive at our website via a relevant advertisement, a cookie is stored on your PC by the service. These cookies are not intended for personal identification. Typically, the following analysis values are stored in this cookie: Unique Cookie ID, number of ad impressions per placement (Frequency), last impression (relevant for Post-View Conversions), Opt-out information (marking that the user no longer wishes to be contacted). These cookies allow the provider to recognize your web browser. If a user visits certain pages of the website and the cookie stored on their computer has not expired, the provider and the website operator can tell that the user clicked on the ad and was redirected to this page. Each website operator is assigned a different cookie. Thus, cookies cannot be tracked across websites by other operators. We do not collect or process any personal data in these advertising measures. We only receive statistical evaluations from the provider. From these evaluations, we can identify which advertising measures are particularly effective. We do not receive any further data from the use of these advertising tools, nor can we identify users based on this information. Due to the marketing tools used, your browser automatically establishes a direct connection with the provider’s server. We have no control over the extent and further use of the data collected by the provider through the use of the service. To our knowledge, the provider receives information that you have accessed the relevant part of our website or clicked on an ad from us. If you have a user account with the provider and are registered, the provider can associate the visit with your user account. Even if you are not registered with the provider or have not logged in, there is a possibility that the provider learns and stores your IP address.
We use the service for marketing and optimization purposes, especially to display relevant and interesting ads to you, thus improving our offer, making it more interesting for you as a user, and avoiding annoying ads.
The legal basis is Art. 6 para. 1 sentence 1 lit. a) GDPR (Consent).
Provider:
Google Ireland Limited
Google Building Gordon House
Barrow St
4 Dublin
Ireland
Tel. +353 1 543 1000
Fax +353 1 686 5660
https://www.google.com/
https://policies.google.com/privacy
XVII. Google Analytics
We use this service on our website.
The legal basis is Art. 6 Para. 1 S. 1 lit. a) GDPR (Consent).
The service uses cookies, which are small text files stored on your device that enable an analysis of your use of our website. The information generated by the cookie about your use of our website is usually transferred to a server of the provider and stored there. If an anonymization of the IP address to be transmitted by the cookie is activated on the website (“IP anonymization”), your IP address will be shortened by the provider of the service within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a server of the provider outside the EU and shortened there. The provider of this service will use this information to evaluate your use of our website on our behalf, compile reports on website activity, and provide other services related to website and internet use to us. Pseudonymous user profiles can be created from the processed data. The IP address transmitted by the service will not be merged with other data of the provider.
We use the service to analyze the use of our website and to continuously improve individual features and offers as well as the user experience. The statistical evaluation of user behavior allows us to improve our offering and make it more interesting for you as a user. The data will be deleted as soon as they are no longer necessary for the purpose of their collection.
You can also prevent the storage of cookies generated by this service by making appropriate settings in your web browser. Please note that in this case you may not be able to use all functions of our website. If you want to prevent the collection of data related to your user behavior (including your IP address) generated by the cookie, as well as the processing of these data by the service provider, you can also download and install the web browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout
To oblige the provider of this service to process the transmitted data only according to our instructions and to comply with the applicable data protection regulations, we have concluded a data processing agreement with the provider.
Provider:
Google Ireland Limited
Google Building Gordon House
Barrow St
4 Dublin
Ireland
Tel. +353 1 543 1000
Fax +353 1 686 5660
https://www.google.com/
https://policies.google.com/privacy
XVIII. Google Fonts
We use this service on our website.
This service allows us to use external fonts. For this purpose, when you access our website, the required font is loaded into your browser’s cache. This is necessary for your browser to display our texts in an enhanced visual manner. If your browser does not support this feature, a standard font from your computer will be used for display. These fonts are integrated by calling a server of the provider. This process transmits to the server which of our web pages you have visited. Also, the IP address of your device’s browser is stored by the provider. We have no control over the extent and further use of data collected and processed by the service provider.
We use this service for optimization purposes, especially to improve the use of our website for you and to make its design more user-friendly.
The legal basis is Art. 6 Para. 1 S. 1 lit. f) GDPR.
Provider:
Google Ireland Limited
Google Building Gordon House
Barrow St
4 Dublin
Ireland
Tel. +353 1 543 1000
Fax +353 1 686 5660
https://www.google.com/
https://fonts.google.com/
XIX. Google Optimize
We use this service on our website.
The service uses cookies, which are small text files stored on your device, allowing for the analysis of your use of our website. The information generated by the cookie about your use of our website is usually transmitted to and stored on a server of the service provider. If IP anonymization is activated on the website (“IP anonymization”), your IP address will be shortened by the service provider within the member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a server of the provider outside the EU and shortened there. This service provider will use this information to evaluate your use of our website on our behalf, compile reports on website activity, and provide other services related to website and internet use. Pseudonymous user profiles can be created from the processed data. The IP address transmitted by the service during its use is not merged with other data of the provider.
We use this service for optimization purposes, especially to improve the use of our website for you and to make its design more user-friendly.
The legal basis is Art. 6 Para. 1 S. 1 lit. a) GDPR (Consent).
Provider:
Google Ireland Limited
Google Building Gordon House
Barrow St
4 Dublin
Ireland
Tel. +353 1 543 1000
Fax +353 1 686 5660
https://www.google.com/
https://policies.google.com/privacy
XX. Google Tag Manager
We use this service on our website.
This service allows us as marketers to manage website tags through an interface. The tool that implements the tags is a cookie-less domain and does not collect any personal data itself. The service triggers other tags, which in turn may collect data. The service does not access this data. If deactivation has been made at the domain or cookie level, it remains valid for all tracking tags that are implemented with this service.
Provider:
Google Ireland Limited
Google Building Gordon House
Barrow St
4 Dublin
Ireland
Tel. +353 1 543 1000
Fax +353 1 686 5660
https://www.google.com/
https://policies.google.com/privacy
XXI. Hotjar
We use this service on our website.
This service stores and processes information about your user behavior on our website. For this purpose, the service uses cookies, small text files that are stored locally in the cache of your web browser on your device and enable an analysis of your use of our website.
We use this service to analyze the use of our website and to continuously improve individual features and offerings as well as the user experience. Through the statistical evaluation of user behavior, we can enhance our offerings and make them more interesting for you as a user. The data will be deleted as soon as they are no longer necessary for the purpose of their collection.
The legal basis is Art. 6 Para. 1 S. 1 lit. a) GDPR (Consent).
You can also prevent the storage of cookies generated by this service by making appropriate settings in your web browser. Please note that in this case, you may not be able to use all functions of our website to their full extent.
Provider:
Hotjar Ltd.
Dragonara Business Centre, 5th Floor
Dragonara Road, St Julian’s
STJ 3141 Paceville
Malta
Tel. +1 855 464-6788
https://www.hotjar.com/
https://help.hotjar.com/hc/en-us/articles/360053355554-Hotjar-Company-Details
XXII. PostHog
This website uses features of the PostHog service to analyze and optimize user behavior and the usability of our site.
These functions are provided by PostHog Inc, 965 Mission Street, San Francisco, CA 94103, USA. PostHog can record and replay your behavior on our website. The storage of this data is temporary and is used exclusively to improve our service based on your needs. For more information, please refer to the PostHog Privacy Policy: https://posthog.com/privacy
The legal basis for this is Art. 6 Para. 1 S. 1 lit. a) GDPR (Consent).
Provider:
PostHog Inc
965 Mission Street
San Francisco
CA 94103 USA
https://posthog.com
XXII. Mailchimp
We use this service on our website.
This service stores and processes information about your user behavior on our website. For this purpose, the service uses, among other things, cookies, which are small text files that are stored locally in the cache of your web browser on your device and enable an analysis of your use of our website.
We use this service to analyze the use of our website and continuously improve individual functions and offers as well as the user experience. The statistical evaluation of user behavior allows us to improve our offer and make it more interesting for you as a user. The data will be deleted as soon as it is no longer necessary for the purpose of its collection.
The legal basis is Art. 6 para. 1 sentence 1 lit. a) GDPR (consent).
Provider:
The Rocket Science Group, LLC
675 Ponce de Leon Ave NE
Suite 5000
GA 30308 Atlanta
United States
Tel. +1 678 9990141
https://mailchimp.com/
XXIII. YouTube
We use this service on our website.
When you access a web page that includes media content from this provider, data is transmitted to and stored on the provider’s server. If you have a user account with the provider and are registered, the provider can associate your visit with your user account. The provider stores this data as usage profiles and uses them for advertising, market research, and/or to tailor its web pages to specific needs. Such evaluation is carried out (also for users not logged in) for the display of tailored advertising and to inform other users about your activities on our website. You have the right to object to the creation of these user profiles. Please contact the provider directly for this purpose.
We integrate content from this provider on the web pages of our online presence to make this content directly available to you without having to retrieve the content separately from the provider’s pages. This allows us to improve our offer and make the user experience more interesting for you.
The legal basis is Art. 6 para. 1 sentence 1 lit. a) GDPR (consent).
Provider:
Google Ireland Limited
Google Building Gordon House
Barrow St
4 Dublin
Ireland
Tel. +353 1 543 1000
Fax +353 1 686 5660
https://www.google.com/
https://policies.google.com/privacy
XXIV. Firebase
Type, Purpose, and Scope of Data Processing
The web hosting and backend services of Firebase used by Paragon are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. These services are designed to host data and files, enabling the management and use of this application. Additionally, they provide a pre-built infrastructure that handles specific functions or entire components for Paragon. Firebase services can share data with other tools provided by Firebase, such as Crash Reporting, Authentication, Remote Config, or Notifications. Paragon utilizes identifiers for mobile devices and cookie-like technologies to operate Firebase services.
Processed personal data: Usage data; various types of data as described in the service’s privacy policy. Privacy policy: https://firebase.google.com/support/privacy
Legal basis for processing: Legitimate interest according to Art. 6 Para. 1 S. 1 lit. f) GDPR and contract according to Art. 6 Para. 1 S. 1 lit. b) GDPR.
We use Firebase services based on our legitimate interest in providing and optimizing our pages in accordance with Art. 6 Para. 1 lit. f GDPR. Many of the set cookies are technically necessary in the sense of § 25 Abs. 2 TTDSG (e.g., offline functionality). If the services are not technically necessary, we use Firebase services only to fulfill our contractual obligations according to Art. 6 Para. 1 S. 1 lit. b) GDPR.
Processing location: United States
We preferentially use servers located within the EU. However, we inform you that data collected by Firebase may be transferred to and stored on a server in the USA. It is also possible that this data may be shared with contractual partners of Firebase (Google), third parties, and authorities. We note that, according to the European Court of Justice, there currently is no adequate level of protection for data transfers to the USA.
Data Processing Agreement, or Joint Responsibility with Google
We have entered into a Data Processing Agreement (DPA) with Firebase, which references so-called Standard Contractual Clauses (Art. 46 Para. 2 and 3 GDPR). These are provided by the EU Commission and ensure that the level of data protection in the third country is roughly equivalent to the European standard. By signing the clauses, Firebase has committed to maintaining the European level of data protection in all processing activities that concern Paragon. The Data Processing Agreement with Firebase can be accessed here: https://firebase.google.com/terms/firebase-sccs-eu-c2p
Duration of storage: The session cookies set by Firebase services are partly technically necessary for the operation of Paragon and are deleted after the session ends. The storage duration of all data is described in more detail in the provider’s privacy policy: https://firebase.google.com/support/privacy
Deactivation
Users can opt out of certain Firebase functions via the respective device settings of mobile devices, such as through mobile device advertising settings, or by following the instructions in Firebase’s privacy policy, if applicable.
You can prevent the storage of cookies on the website by adjusting your browser settings accordingly.
Legal basis for processing: Legitimate interest.
Legal basis for data transfer: Standard Data Protection Clauses.
In accordance with the CCPA, processing is considered a “sale.” In addition to the information in this clause, users can find information on the option to object to the sale in the section on California Consumer Rights.
Services used: Firebase Cloud Functions, Firebase Cloud Storage, Firebase Realtime Database, Firebase Performance Monitoring, Google Analytics for Firebase
Legal basis is Art. 6 Para. 1 S. 1 lit. a) GDPR (Consent).
Provider:
Google Ireland Limited
Google Building Gordon House
Barrow St
4 Dublin
Ireland
Tel. +353 1 543 1000
Fax +353 1 686 5660
https://www.google.com/
https://policies.google.com/privacy
XXV. TikTok Pixel
We use the so-called “TikTok Pixel” from the provider TikTok (for EU: TikTok Information Technologies UK Limited, Aviation House, 125 Kingsway Holborn, London, WC2B 6NH) on this website. This is a code that we have implemented on our site. With the help of this code, a connection to the TikTok servers is established when you visit our website, provided you give your explicit consent, to track your behavior on our website. For example, if you purchase a product on our website, the TikTok Pixel is triggered and stores your actions on our website in one or more cookies. You have the option to revoke your consent at any time with effect for the future. There are no additional costs other than the base rates.
Personal data such as IP address and other information like device ID, device type, and operating system may also be transmitted to TikTok. TikTok uses email or other login or device information to identify users of our website and to associate their actions with a TikTok user account.
TikTok uses this data to display targeted and personalized advertising to its users and to create interest-based user profiles. The data collected is anonymous to us and not viewable, and is only used within the scope of measuring the effectiveness of advertising placements for us.
In principle, your data is processed within the EU or EEA. For this purpose, a corresponding data protection agreement has been concluded with TikTok. Insofar as personal data are transferred to countries outside the EU or EEA, this takes place within the framework of the Commission’s standard contractual clauses for the transfer of personal data to third countries (i.e., standard contractual clauses).
You can find TikTok’s Privacy Policy here: https://www.tiktok.com/legal/new-privacy-policy?lang=en