Authorised representatives and Managing Directors:
Dr Peter Mrosik (Owner and CEO)
Marc Böttger (CFO)
Chairman of the Supervisory Board:
Register number: HRB 8435
VAT ID no.: DE 137.876.324
Responsible for contents as defined under § 7 of the German Telemedia Act TMG:
Data protection information of profine GmbH (25 May 2018):
1. Data privacy
Thank you for visiting the website of profine GmbH. We take the protection of your personal data very seriously and therefore do all we can to ensure that you feel comfortable and secure when visiting our websites. This data privacy statement applies to all websites under the responsibility of profine GmbH. Controller within the meaning of Art. 4 (7) General Data Protection Regulation (GDPR) for this website is profine GmbH; for contact details, please refer to the Legal Notice above.
2. Collection and Processing of Personal Data
In general, you may visit the website of profine GmbH without any of your personal data being collected. Personal data will only be collected and processed directly if you use the service offers of profine GmbH and provide the data necessary for processing your request. Whenever personal data is required, you will be informed accordingly.
In order to further optimize our websites for you, we collect general information (e.g. pages accessed, browser used, time spent on the pages). This data is not person-related. Neither profine GmbH nor the operators of the respective analysis tools collect personal information that allows conclusions to be drawn about the identity of the users.
2.1. Usage data
Purpose of data processing/legal basis
When you visit our websites, so-called usage data is temporarily stored on our web server for statistical purposes as a protocol in order to improve the quality of our websites. This dataset consists of
- the site from which the file was requested;
- the name of the file;
- the date and time of the query;
- the amount of data transferred;
- the access status (file transferred, file not found);
- the description of the type of web browser used;
- the IP address of the requesting computer, which is shortened in such a way that a personal reference can no longer be established.
We use this information to enable access to our website, to control and administer our systems and to improve the design of our websites. The data is stored anonymously in accordance with the German Telemedia Act (Telemediengesetz, TMG). The creation of personal user profiles is thus precluded. Data related to individuals or their individual behavior is not collected or otherwise processed.
Purpose of data processing/legal basis
No personal data will be stored or processed in any other way. The cookie only allows us to identify you as a unique but unknown user during your visit to the site.
2.3. Use of Google Analytics
Purpose of data processing/legal basis:
Storage duration/Criteria for defining the storage duration:
The information stored by the cookie about your use of this website is usually transferred to a Google server in the Ireland and stored there.
However, because we have activated IP anonymization on this website, your IP address will previously be shortened by Google within Member States of the European Union.
Your data will only be processed for statistical evaluation and deleted after a period of 14 months.
Recipient/categories of recipients
The full IP address will only be transferred to a Google server in the Ireland in exceptional cases (an appropriate level of data protection pursuant to Art. 45 (1) GDPR is ensured through Google's participation in the Privacy Shield) and shortened there. We have also concluded a contract with Google Inc. (USA) for order processing pursuant to Art. 28 GDPR. Google may therefore use all information strictly for the sole purpose of evaluating the use of our website for us and compiling reports on website activities.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services associated with website and Internet use.
The IP address transmitted by your browser in the context of Google Analytics is not combined with other Google data.
You may object to the processing at any time. Please use one of the following options:
- You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
- You can also prevent data collection by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent future collection of your data when you visit this website: Click here to set the opt-out cookie.
3. Processing, forwarding of personal data and limitation of use
All personal data collected within the scope of the Internet services provided by profine GmbH will be collected, processed and used in accordance with the applicable personal data regulations, for the sole purpose of contract processing and in order to safeguard our own legitimate business interests with regard to the consultation and support of our customers as well as demand-oriented product design.
Data transfer to third parties
We transfer your data to service providers who support us in operating our websites and the associated processes. These service providers are carefully selected, audited by us and contractually bound according to Art. 28 GDPR.
The website is operated by profine GmbH together with an external provider. This provider is the agency Electronic Minds GmbH, Feldbergstrasse 80, 64293 Darmstadt, Germany.
In addition, we transfer your personal data to other third parties with whom we have concluded an order processing contract in accordance with Art. 28 GDRP and, in case you fill in the contact form, to specialist companies that appear in our specialist company search.
Data transfer to third countries
In some cases, we transfer personal data to a third country outside the EU. We have always ensured an appropriate level of data protection:
In the case of Google Analytics (data transfer to the Ireland), an appropriate level of data protection is ensured by the corresponding participation in the Privacy Shield Agreement (Art. 45 (1) GDPR).
4. Contact form
Purpose of data processing/legal basis
You have the option to contact us via a web form. To use our contact form we need your name, the country you are contacting us from, your email address and your message. You may provide further information, but are not obliged to do so. The legal basis for data processing is Art. 6 (1) (f) GDPR. The legitimate interest on the part of profine GmbH results from the interest to answer inquiries of our customers and visitors of this website and thus to maintain and promote customer satisfaction.
Storage duration/ Criteria for defining the storage duration:
Your data will only be processed for answering your inquiry and deleted after a period of about 120 days.
Recipient/categories of recipients
Transfer only takes place if necessary for the purpose of processing and answering your request to the named agency partners (see data transmission to third parties). These are carefully selected, audited by us and contractually bound by Art. 28 GDPR.
We use the Hubspot service of HubSpot Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA, on our websites for the purposes described below.
Hubspot is a web-based customer relationship management software solution (CRM system) that we use to cover various aspects of our online marketing. We use Hubspot for email marketing, in particular newsletter distribution, contact management (e.g. user segmentation & customer relationship management/CRM), chat, operation of contact forms, social media publishing and reporting.
Hubspot processes your personal data when you interact with our website, e.g. when you use our registration forms there. Information collected when you use our website includes information about your computer and your visits to our website, such as your IP address, geographic location, browser type, length of visit, Internet service provider (ISP), pages visited and files viewed on our site (e.g., HTML pages and graphics), operating system, clickstream data, access times, and addresses of websites from which you linked to our site. This data is used to compile general statistics on the use of the website. We may link this automatically collected data to other personally identifiable information such as name, email address, address, and phone number.
The legal basis for this processing is your consent pursuant to Art. 6 para 1 sentence 1 lit. a GDPR, Art. 49 para 1 sentence 1 lit. a GDPR. Consent given can be withdrawn at any time. Please note that the withdrawal is only effective for the future. Processing that took place before the withdrawal is not affected. The withdrawal can be made to the contact details above.
In the context of processing via HubSpot, data may be transferred to the USA. We have concluded an data processing agreement with Hubspot. In addition, by concluding standard contractual clauses with us, HubSpot Inc has undertaken to ensure the European data protection principles and the European level of data protection also in the context of data processing taking place in the USA. However, we would like to point out that the European Court of Justice (CJEU) stated in its Schrems II ruling that the protection of personal data in the USA does not meet the requirements in the EU. In particular, there is a lack of enforceable rights that safeguard the protection of your data against access by government authorities. Therefore, there is a risk that these government agencies may access the personal data without Hubspot, you or us being able to effectively prevent this.
You can find more details about our use and management of cookies in the "Cookies" chapter of this privacy information. You can manage your cookie settings by clicking on the "Change cookie consent" link in the footer of the website.
We use the live chat and chatbot function offered by Hubspot. A chat is basically a directly conducted online conversation between humans. A chatbot, on the other hand, is software that automatically answers users' questions or informs them of messages, if applicable, during a chat without human interaction.
When you use our chat functions, we process your personal data provided in the chat for the purposes of the chat as well as for the purpose of further customer support and information about interesting products, offers, services and/or related actions by us. The legal basis for this processing is your consent pursuant to Art. 6 para 1 sentence 1 lit. a GDPR, Art. 49 para 1 sentence 1 lit. a GDPR.
Hubspot Newsletter Service
We use the newsletter function offered by Hubspot. In the following, we inform you about our newsletter as well as the registration, mailing and evaluation procedure and inform you about your rights of objection. If you subscribe to our newsletter, you agree to receive the newsletter and you agree to the described procedure.
Newsletter content: We send newsletters, e-mails and other electronic notifications, e.g. whitepapers, with promotional information (hereinafter "newsletter") only on the basis of the recipient's consent or on the basis of legal permission. If we specifically describe individual newsletters as part of the registration process, this description is decisive for the consent of a newsletter subscriber. If no separate description is provided, our newsletters will contain information about our products, offers and promotions as well as information about our company.
Double-Opt-In: The registration for our newsletter takes place in the so-called double-opt-in procedure. This means that after you have registered for the newsletter, we will send you an e-mail in which we ask you to confirm your registration. This confirmation serves to ensure that only persons who have access to the specified e-mail address register for our newsletter. We log the registrations to the newsletter in order to be able to prove the registration process in accordance with the legal requirements. This includes the storage of the registration and confirmation time, as well as the IP address. Changes to your data stored with the newsletter service provider are also logged.
According to its own information, Hubspot uses the data to optimize or improve its own services. However, the newsletter service provider does not use the data of our newsletter recipients to write to them itself or to pass them on to third parties.
To register for the newsletter, it is sufficient to enter your e-mail address. Optionally, we ask you to provide a first and last name, company, telephone number, for the purpose of personal address in the newsletter.
The newsletters contain a so-called web beacon, i.e. a pixel-sized file that is retrieved from Hubspot's server when the newsletter is opened. As part of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and the time of the retrieval are collected. This information is used for the technical improvement of the services based on the technical data or the target groups and your reading behavior based on their retrieval locations (which can be determined with the help of the IP address) or the access times. Statistical surveys also include determining whether newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor that of the dispatch service provider to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.
The sending of the newsletter and the measurement of success are based on the consent of the recipients according to Art. 6 para 1 sentence 1 lit. a GDPR, Art. 49 para 1 sentence 1 lit. a GDPR, Art. 7 GDPR in conjunction with § 7 para. 2 No. 3 UWG or on the basis of the legal permission according to § 7 para. 3 UWG.
The logging of the registration process is based on our legitimate interests pursuant to Art. 6 para 1 sentence 1 lit. f GDPR and serves as proof of consent to receive the newsletter.
You can unsubscribe from receiving our newsletter at any time, i.e. withdraw your consent. You will find a link to cancel the newsletter at the end of each newsletter. If users have only subscribed to the newsletter and have cancelled this subscription, their personal data will be deleted.
6. Your rights as Data Subject
You have the right to receive information about your personal data stored by us pursuant to Art. 15 (1) GDPR upon request and free of charge. Upon request, we will inform you in writing in accordance with the applicable law whether and which personal data about you is stored by us.
In addition, you have the right to correction (Art. 16 GDPR), deletion (Art. 17 GDPR) and restriction of the processing (Art. 18 GDPR) of your personal data if the legal requirements are met.
If data processing is based on Art. 6 (1) (f) GDPR, you have a right to object pursuant to Art. 21 GDPR. If you object to data processing, this will not take place in the future, unless the person responsible can prove compelling reasons worthy of protection for further processing which outweigh the interest of the data subject in the objection.
If you have provided the processed data yourself, you have the right to data transmission in accordance with Art. 20 GDPR.
If the data processing is based on a consent pursuant to Art. 6 (1) (a) or Art. 9 (2) (a) GDPR, you may revoke the consent at any time with effect for the future without affecting the legality of the previous processing.
In the cases mentioned above, in case of open questions or in case of complaints, please contact the data protection officer in writing or by email.
You may also lodge a complaint with a data protection supervisory authority. The competent data protection supervisory authority is that of the federal state in which you reside or in which the person responsible is based.
7. Whistleblower system
Compliance with laws and internal regulations is a top priority for profine. You can use our electronic whistleblower system to submit a report easily, securely and, if desired, anonymously.
We use the whistleblowing system "INVENSITY" of Invensity GmbH, Mainzer Straße 19, 65185 Wiesbaden. Within the framework of our whistleblower system, information can be provided anonymously. To submit a notification via our whistleblower platform, it is sufficient to provide information about the location, time and circumstances of the reportable circumstance in the description of facts. The transmission of your report is encrypted and, according to information from Invensity, in pseudonymous form, i.e. without assignment to a user, with your metadata removed. However, you may voluntarily disclose personal data about yourself as part of the reporting process. If you do not disclose any personal data, the case agents will not be able to establish a personal reference to you.
In order to receive and clarify serious cases of suspected violations of rules at profine, the following data may (optionally) be processed as part of the whistleblower platform: Information about the accused person (e.g. surname, first name, position and employment details), information about the alleged breaches of conduct. When submitting your report, please refrain from providing sensitive information about the accused persons unless it is necessary for the description of their concern. However, we cannot exclude the receipt and thus the processing of special category personal data as defined in Art. 9 GDPR.
profine GmbH will only process your data to the extent permitted by an applicable legal provision. The establishment of the whistleblower portal serves the fulfillment of our legal obligations pursuant to Art. 6 para. 1 lit. c GDPR in conjunction with. Directive (EU) 2019/1937 and for the implementation of internal compliance measures for the detection of breaches of obligations under employment contracts (Section 26 para. 1 Sentence 1 Federal Data Protection Act (BDSG)) and the investigation of criminal offenses Section 26 para. 1 Sentence 2 BDSG. In addition, we base the processing of personal data on our legitimate interest in appropriate corruption prevention and control pursuant to Art. 6 para. 1 lit. f GDPR. By submitting the reporting form, the persons providing the information declare their consent to any data processing relating to them (Art. 6 para. 1 lit. a GDPR).
Personal data that we receive via our whistleblower system will be retained for the duration necessary to clarify and conclusively assess the whistleblowing. After completion of the investigation, the personal data will be deleted within a reasonable period of regularly one month and in accordance with the legal requirements. If judicial and/or disciplinary proceedings are initiated, they may be retained until the conclusion of the proceedings or the expiry of any time limits for appeal. Personal data in connection with unfounded reports will be deleted immediately.
profine GmbH takes all technical and organizational measures necessary to ensure data protection and data security, prevention of data loss and data damage. Our security measures are continuously optimized in accordance with technological developments. To protect your data from unauthorized access, we use an encryption method on our pages. Your details are then transmitted from your computer to our server and vice versa via the Internet using SSL encryption (Secure Socket Layer). You can recognize this by the fact that the lock symbol on the status bar of your browser is closed and the address line starts with https://
9. Data Protection Officer
Should you have any further questions regarding the processing of your personal data, you may contact our data protection officer directly, who is also available in the event of requests for information, applications or complaints:
Data Protection Officer
profine GmbH, International Profile Group
Mülheimer Strasse 26, 53840 Troisdorf, Germany
All texts and image data contained on our website may not be used or downloaded for further use or transmission to third parties without the author's consent. The image data is subject to the copyrights valid at the time from which it is made available to the public on the website.
Any unauthorized use of the image data or other documents, information is expressly prohibited and constitutes an infringement of copyrights or other property rights.
11. Design and programming
Electronic Minds GmbH