Legal Basis
The legal basis for the processing of this data is Art. 6 para. 1 lit. f GDPR.
We have a legitimate interest in the storage of cookies for technically error-free and optimized delivery of our services.

Google Analytics

Purpose of the Data Processing
Our website uses Google Analytics, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses so-called “cookies”, text files that are saved on your computer and which allow an analysis of use of the websites you visit. As a rule, the information generated by cookies on the use of our website is transferred to a Google server in the USA and stored there.

Legal Basis
If you have given us your consent to process your personal data, the legal basis for the processing of this data is Art. 6 para. 1 lit. a GDPR.

Google Analytics IP Anonymization
Furthermore, we only use Google Analytics on our website with activated IP anonymization. Your IP address will be truncated by Google within the member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address transferred to a Google server in the USA and truncated there. We have also concluded a contract with Google for data processing. Google processes this data on our behalf and thereby enables us to evaluate the use of the website by the users, to create reports on the website activities and to collect further information related to the use of the website and the internet. The IP address transmitted by your browser within the framework of Google Analytics is not merged with other Google data.

Right of Objection
By setting your browser software accordingly, you can prevent cookies from being stored. However, we would like to point out that in this case you might not be able to use all the functions of our website in their entirety. Furthermore, you can prevent Google from collecting and processing data generated by cookies and related to your use of the website by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

By clicking on the "Revoke cookie consent" link found in the footer, you can prevent Google Analytics from collecting your data. This sets an opt-out cookie so that the collection of your information is prevented during future visits to our website. The opt-out cookie only applies to the internet browser used when you set it and only to our website and is stored on your terminal device. If you delete the cookies in your internet browser, you will have to set the opt-out cookie again.

More information on the handling of user data by Google Analytics can be found in the Google privacy policy: https://support.google.com/analytics/answer/6004245?hl=en

Microsoft Teams

We use Microsoft Teams, a service of the provider Microsoft Corporation, to conduct telephone and video conferences, online meetings and/or online seminars. If online meetings/online seminars are to be recorded, we will inform you of this before the start of the online meeting/online seminar and - if necessary - ask for (verbal) consent. If you do not wish to be recorded, you can leave the online meeting/online seminar. The following personal data may be processed in the process:

• User details: display name, e-mail address, profile picture (optional), preferred language.
• Meeting metadata: e.g., date, time, meeting ID, phone number, location
• Text, audio and video data: You may have the option to use the chat function in an online meeting/online seminar. In this case, the text entries you make are processed in order to display them in the online meeting/online seminar.

The scope of the data depends on the information you provide before or during participation in the online meeting/online seminar.

Legal basis for online meetings
The legal basis for the processing is Art. 6 para. 1 lit. b) DSGVO.
During the online meeting, the login names of all participants and the generated communication content are displayed and can be viewed by the other participants of the online meeting. The communication content is stored for documentation purposes. If applicable, the online meeting will be recorded and subsequently made available to the participants.

Legal basis for online seminars
The legal basis for the processing is our legitimate interest in an appealing design of our online seminar, Art. 6 (1) lit. f) DSGVO.
During the online seminar, the login names of all participants as well as the generated communication content are displayed and can be viewed by the other participants of the online seminar. The communication content is stored for documentation purposes. If necessary, the online seminar will be recorded and subsequently made available to the participants.

Whitepaper

Purpose of data processing
We offer whitepapers on our website, which you can download. In this context, your personal data (e-mail, last name and first name) are processed. These are processed for statistical purposes and feedback opportunities.

Legal basis
The legal basis for the processing of your personal data is Article 6 (1) a DSGVO.
If you have given us your consent, you can revoke it at any time with effect for the future without affecting the lawfulness of the processing already carried out.
For this purpose, an informal message by e-mail to: datenschutz@blu-beyond.com is sufficient.

Newsletter

In order to receive further information about blu BEYOND's services, you can also subscribe to an e-mail newsletter. For sending the newsletter, the so-called double opt-in procedure is used, i.e. you will only receive a newsletter by e-mail if you have previously expressly confirmed that the newsletter service should be activated. After you have activated the newsletter, you will receive a notification e-mail with an activation link. Only by clicking on this link you will receive the newsletter. You can deactivate and unsubscribe from the newsetter at any time. For this purpose, contact blu BEYOND or use the unsubscribe link provided in each newsletter.

Purpose of processing
Your personal data (full name and e-mail address) is collected and stored in order to send you the newsletter.

Legal basis
The permissibility of this processing is based on Art. 6 (1) a) DSGVO, according to which the processing is permissible if the data subject has given his/her consent to the processing of personal data concerning him/her for one or more specific purposes. The provision of your data is voluntary, but necessary for the receipt of the newsletter.

Your data will be deleted after revocation of your consent, unless the controller has a legitimate interest in its continued storage. This may be the case if blu BEYOND has to continue storing your data due to a contract with you. In any case, only those data will continue to be stored that are really absolutely necessary to achieve the corresponding purpose. The provision of the data is neither legally nor contractually required. Failure to provide it will result in you not being able to receive a newsletter.

You can revoke your consent to this processing at any time.

For sending the newsletter, the service of Active Campaign is used. "Active Campaign" is a service of the US provider Active Campaign, LLC, 1 N Dearborn St 5th floor, Chicago, IL 60602, USA.

Active Campaign

We use the functions of the tool ''Active Campaign'', "Active Campaign" is a service of the US provider Active Campaign, LLC, 1 N Dearborn St 5th floor, Chicago, IL 60602, USA.

Purpose of processing and legal basis
Data processing is carried out for the purpose of contractual processing and marketing purposes. The following data may be processed as part of the data processing: Contact details (name, e-mail address). The data processing is based on Art. 6 para 1 lit. b DSGVO and on Art. 6 para 1 lit. f DSGVO. If you have given us your consent to process your data for the above-mentioned purposes, the data processing will take place on the basis of Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future.

It cannot be ruled out that your personal data will be transferred to a third country. In doing so, we ensure that an adequate level of data protection exists before transferring your personal data, whether through an adequacy decision of the European Commission, guarantees, certifications or EU standard contractual clauses.

For more information, please visit: https://www.activecampaign.com/legal/privacy-policy

Survey Monkey

Purpose of processing and legal basis
We use SurveyMonkey from Momentive Inc. (Momentive Europe UC, 2 Shelbourne Buildings, Second Floor, Shelbourne Rd, Ballsbridge, Dublin 4, Ireland) to create and conduct surveys to improve our services.

The legal basis for processing is Art. 6 para. 1 lit. f) GDPR (legitimate interest). Our legitimate interest lies in the optimization of our portfolio and services as well as in our ISO certification.

Momentive Europe UC is a subsidiary of Momentive Inc. Based in the USA, data transfer to the USA cannot be ruled out.

SurveyMonkey collects data from you when you participate in a survey, such as contact information, usage data, device and browser data, information from "page tags", log data, referral data or data from third parties and integration partners. To learn more about SurveyMonkey's privacy policy, please visit:

• https://www.surveymonkey.de/mp/legal/privacy/
• https://www.surveymonkey.de/mp/privacy/
• https://www.surveymonkey.de/mp/legal/privacy-basics/

Your data will only be stored for as long as the defined purpose is given.
We have no control over the duration of SurveyMonkey's storage of your data.

Social Media

LinkedIn

On our website we use the functions of the LinkedIn network, a service of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. When you access our website, which contains the LinkedIn feature, a connection is established to LinkedIn servers. To the best of our knowledge, your personal data will not be stored, in particular the IP address will not be stored or the usage behavior evaluated.

Legal basis
The legal basis for the use of the LinkedIn plug-in is Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the widest possible visibility in social media. For more information please see LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy.

Xing

On our website we use the functions of the XING network provided by XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany.
Each time you visit our website, a connection is established to XING's servers. To the best of our knowledge, no personal data is stored, in particular user behavior is not evaluated and IP addresses are not stored.

Legal basis
The legal basis for the use of the XING plug-in is Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the widest possible visibility in social media.
For more information about data privacy and the XING share button please see XING's privacy policy at: https://www.xing.com/app/share?op=data_protection.

Instagram

On our website we use the functions of the Instagram service operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA. If you are logged in to Instagram you have the option of linking the contents of our website to your Instagram account by clicking the Instagram button. If you are logged in to your Instagram account, you give Instagram the ability to assign your browsing behavior directly to your personal profile.

Legal basis
The legal basis for the use of the Instagram plug-in is Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the widest possible visibility in social media. For more information, please see Instagram's privacy policy: https://instagram.com/about/legal/privacy/.

Facebook

On our website we use the Facebook social network function, a service of Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. We operate our Facebook fan page together with Facebook Ireland Ltd. For this purpose, we have concluded an agreement with Facebook, which represents the mutual obligations under the EU GDPR.

More information about this is available in the Facebook privacy policy at https://www.facebook.com/policy.php

How can you contact us?

You have the possibility to contact us by mail, telephone, fax or e-mail.

All personal data resulting from your inquiry will be stored and processed by us for the purpose of processing your request. This can be general data about your person, address, telephone number, e-mail address.

Legal basis
The legal basis for the processing of your personal data is based on Art. 6. para. 1 lit b DSGVO, provided that the request is directed towards the conclusion of a contract or the implementation of pre-contractual measures. In all other cases, the processing of your personal data is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in the effective processing of requests addressed to us.

Who Gets Your Data?

Internal recipients
An internal transfer of your personal data takes place exclusively for the fulfilment of the stated purposes or for the fulfilment of legal obligations.

External recipients
An external transfer of your personal data will only take place if this is necessary to process your request, if another legal authorization exists or if we have your consent for this.
A transfer to external parties can take place under the following circumstances:

a) Data processor
A data processor is any natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

b) Public bodies and institutions
Authorities and state institutions, such as public prosecutors' offices, hospitals, courts or tax authorities, to which we are obliged to transfer personal data for legally mandatory reasons. The legal basis for the transfer is Article 6 para. 1 lit. c GDPR.

Third country
It cannot be ruled out that your personal data may be transferred to a third country. In this case, before disclosing your personal data, we ensure that an adequate level of data protection exists, whether through an adequacy decision of the European Commission, through guarantees, certifications such as EU-US Privacy Shield or through EU standard contractual clauses.

How Long is Your Data Stored?

Your personal data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected, or if you request its deletion or revoke your consent to its storage. Exceptionally, your personal data will only be stored to the extent required by the laws, regulations or other legal provisions to which we are subject. Data stored by us for other purposes remains unaffected by this.

Automated Decision Making and Profiling

Automated decision making including profiling in terms of Article 22 para. 1 and Article 4 GDPR does not take place on our website.

Your Rights

You have the following legal rights in relation to your personal data:

• Right to access, Article 15 GDPR
• Right to rectification and erasure, Articles 16 and 17 GDPR
• Right to restrict processing, Article 18 GDPR
• Right to object to processing, Article 21 GDPR
• Right to data portability, Article 20 GDPR
• Right to complain to a supervisory authority, Article 77 GDPR

If you have given us your consent, you can revoke it at any time with effect for the future, without affecting the legality of the processing already carried out. To do this, simply send an informal e-mail to: datenschutz@blu-beyond.com

Right of complaint to the supervisory authority

Note on lodging a complaint to a supervisory authority:
Without prejudice to any other administrative or judicial remedy, the person concerned shall have the right to appeal to the competent supervisory authority. This depends on the German state of your residence, your work or the presumed violation. A list of the supervisory authorities (for the non-public sector) with addresses is available at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Mailing address:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Postfach 1349
91504 Ansbach
Germany

Online complaint form: https://www.lda.bayern.de/de/beschwerde.html