Privacy policy of persolog GmbH - Your data protection is our concern

We are pleased that you are interested in our company and our products and services and would like you to feel secure when visiting our website with regard to the protection of your personal data. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration. We want you to know when we collect which data and how we use it. We have taken appropriate technical and organisational measures to ensure that the data protection regulations are observed both by us and by our service providers. Our employees are also sensitised to data protection through appropriate training courses

Data protection at a glance

General information

The following notes provide a simple overview of what happens to your personal data when you visit our website:

Personal data

When you use this website, various personal data are collected. Personal data is data with which you can be personally identified. This includes, for example, details such as name, address, telephone number, e-mail address. Data such as the IP address of the device with which you access this website is also considered personal data at the time of access.

This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission on the Internet (e.g., communication by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

The information you provide in e-mails will only be used to process your enquiries. This data is treated as strictly confidential. We pay particular attention to the principles of data avoidance and data economy.

Who is responsible for the data collection on this website?

The data processing on this website is carried out by:

persolog GmbH
Koenigsbacher Strasse 51
75196 Remchingen Germany

Represented by:

Debora Karsch
Phone: +49 (0)7232-3699-0
E-Mail: mail@persolog.com

How do you reach the Data Protection Officer?

If you have any questions about data protection at our company, please contact our data protection officer:

Steven Bösel
ENSECUR GmbH
Kaiser Straße (Street). 86
76133 Karlsruhe
E-Mail: dsb-persolog@ensecur.de

How do we capture your data?

On the one hand, your data is collected by you providing it to us. This may, for example, be data that you send us by e-mail. Other data is collected automatically by our IT systems when you visit our website. This is mainly technical data (e.g., internet browser, operating system or time of page view). This data is collected automatically as soon as you enter our website. This is exclusively information that does not allow any conclusions to be drawn about your person. We evaluate this data only for statistical purposes and in anonymous form to optimise our website, to increase user-friendliness, effectiveness and security. Your IP address is stored anonymously and thus no longer allows any personal reference. Please note that, with your consent, your non-anonymised IP address is also sent to third-party providers and information from your visit of this site could possibly be linked to other information that this third-party provider has collected about you. If your data is transferred to third countries that do not have an equivalent level of data protection, we ensure that the level of data protection is guaranteed by concluding standard contractual clauses.

How long do we store your data?

We generally store your data for as long as we need it for the stated processing purposes. If the processing is based on your consent, we will only process your data until you withdraw your consent.

What do we use your data for?

We collect some of the data to ensure that the website is provided without error. Other data may be used with your consent to analyse your user behaviour in order to improve our website and our products. In this context, we may pass on data to third parties.

What rights do you have regarding your data?

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction, blocking or deletion of this data. In addition, you have the right to object to the processing if the processing is carried out on the basis of our overriding legitimate interest (Art. 6 para. 1 lit. f GDPR). You can contact us at any time at the above addresses with regard to this and other questions on the subject of data protection. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

Children

Persons under the age of 16 should not submit any personal data to us without the consent of their parents or legal guardians. We do not request personal data from children and young people, do not collect it and do not pass it on to third parties.

Is the provision of your data obligatory?

There is no obligation to provide your data. A possible consequence of not providing your data may be that the display is not optimal or that it is not possible for you to access our website. In the case of orders and payments, the consequence of not providing your data is the impossibility of fulfilling the contract.

1. Use of analysis tools and advertising

We only process your data for analysis and advertising purposes if you have consented to this (Art. 6 para. 1 p. 1 lit. a. GDPR). You have the right to revoke your consent at any time by clicking on the “fingerprint-symbol” in the lower left corner of this Website. Please note that the processing of your data by us and third parties remains lawful until the time of revocation.

For the management of customer data in a CRM system and for marketing purposes, we additionally process your data on the basis of the following legal grounds:

– Art. 6 para. 1 p. 1 lit. b DSGVO, if we process the data in the context of an existing contract with you.
– Art. 6 para. 1 p. 1 lit. f DSGVO, if we use data to optimize our products and customer management, which is also our overriding legitimate interest here.

Further information on the processing of your data for CRM, marketing, analysis and advertising purposes, the recipients of the data and further purposes of the data processing of these recipients can be found below:

1.1 Hubspot

HubSpot is an online marketing and sales tool for collecting and storing data and for lead generation. We also use HubSpot with forms on our websites. Leads can be generated from this information and used by our sales team. HubSpot can also record customer journeys using cookies and IP addresses. We use HubSpot’s CRM and marketing software on our website and to manage customer data. We have contracted HubSpot to store and process our sales and marketing data. We use various functions of this software for this purpose:

– Website (content management)
– Landing pages
– Contact form
– Email marketing (newsletter, automated mailings, provision of downloads)
– Contact management (user segmentation, CRM)
– Social media (publishing, reporting)
– Workflows (for lead score management, upsell opportunities, target group management for more targeted information).
– Reporting (hits, traffic sources, conversions, target group segmentation, analysis of user habits, call-to-action analysis).

HubSpot is a software company based in the USA with an office in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Phone: +353 1 5187500 HubSpot is subject to TRUSTe ‘s Privacy Seal and the U.S. – EU Safe Harbor Framework and the U.S. – Swiss Safe Harbor Framework. For more information, please visit:

HubSpot Legal Stuff: https://legal.hubspot.com/legal-stuff?hsLang=fr

HubSpot Privacy Policy: https://legal.hubspot.com/de/privacy-policy

We have entered into an order processing agreement with HubSpot: https://legal.hubspot.com/de/dpa

Data may be stored by HubSpot on servers in the USA in this context. The transfer of data takes place according to the terms of the standard contractual clauses. HubSpot undertakes to treat all personal data received from member countries of the European Union (EU) and Switzerland in accordance with the applicable principles of the standard contractual clauses.

If you do not wish your data to be collected by HubSpot when you visit this website, you can prevent the storage of cookies at any time by making settings in your browser or by clicking on the “fingerprint-symbol” in the lower left corner of this website.

1.2 Wiredminds

We use the Leadlab service of wiredminds GmbH and its pixel-counting technology on our site to analyse user behaviour and optimise our offers based on this. The service enables us to recognise which companies have visited our site. In doing so, we do not receive any information that makes you directly identifiable. Cookies and tracking pixels are used in connection with the use of Leadlab. This enables us to perform a statistical analysis of the use of this site. In doing so, we process information about your usage behaviour and either transmit this information to Wiredminds or it is collected directly by Wiredminds. The information collected is processed by Wiredminds using a pseudonym for analysis and anonymised where possible.

The data obtained in this way is not readily used to identify you personally.

Furthermore, the data is not combined with personal data about you as the bearer of the pseudonym. Information on data protection at Wiredminds can be found here: https://www.wiredminds.de/datenschutz/.

An AV contract has been concluded with the company. In this way, we ensure that the data processing is carried out on our behalf and in accordance with the requirements of the GDPR.

1.3 LinkedIn Insights and Conversion Tracking

We use the LinkedIn Insight Tag on this site. This tag creates a LinkedIn browser cookie that collects data such as IP address, timestamp, page activity and demographic data from LinkedIn (if the user is an active LinkedIn member).

This service allows us to generate reports on the performance of our advertisements and obtain information on website interaction. The LinkedIn Insight tag is integrated on this page for this purpose. This establishes a connection to the LinkedIn server when you visit this website and are also logged into your LinkedIn account at the same time.

Leadformular:

When you fill out a lead form on the LinkedIn website, we process your personal data in order to provide you with the information you have requested. If you consent to this, we will transfer the information you entered in the lead form to our customer database and possibly link this to other information you have provided, in order to be able to make you offers in future that correspond to your interests. If you have consented to this, you can revoke the corresponding use of your data at any time.

An AV contract has been concluded with the company. In this way, we ensure that the data processing is carried out on our behalf and in accordance with the requirements of the GDPR.

1.4 Google Analytics, Global Site Day, Conversion Linker

This website uses functions of the web analysis service Google Analytics; Google also uses the Global Site Tag and Conversion Linker services. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics is a web analysis service for the collection, compilation and evaluation of data on the behavior of website visitors. Google Analytics uses cookies that transmit data to Google for analysis purposes when you visit our website, provided you have consented to the processing. Cookies are text files that are stored on your computer and enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

As part of this process, the following data is usually transmitted to Google’s servers and stored:

– referrer URL
– which subpage of the website is accessed
– how often and for how long a subpage is viewed
– IP address
– access time
– access location
– frequency of visits to our website.

In Google Analytics 4, the anonymization of IP addresses is activated by default. Due to IP anonymization, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

During your visit to the website, your user behavior is recorded in the form of “events”. Events can be:

– Page views
– First visit to the website
– Start of the session
– Visited web pages
– Your “click path”, interaction with the website
– Scrolls (whenever a user scrolls to the bottom of the page (90%))
– Clicks on external links
– Internal search queries
– Interaction with videos
– file downloads
– Ads viewed / clicked on
– language setting

Also recorded:

– Your approximate location (region)
– Date and time of your visit
– Your IP address (in abbreviated form)
– Technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
– your internet provider
– the referrer URL (via which website/advertising medium you came to this website)

The purpose of the Google Analytics tool is to analyze the flow of visitors to our website. From the data obtained, Google evaluates the use of the website and provides us with online reports that show the activities on our website. The use of Google Analytics enables us to optimize our website and perform a cost-benefit analysis of our Internet advertising.

Cookies are used in connection with the Google analysis tool if you consent to this. In order to obtain your consent, we have placed a cookie banner on our website. The use of Google Analytics is therefore based on the legal basis of Section 25 (1) GDPR and Art. 6 (1) (a) GDPR.

The data sent by us and linked to cookies is automatically deleted after 14 months. The maximum lifespan of Google Analytics cookies is 2 years. Data whose retention period has been reached is automatically deleted once a month.

For the USA, the European Commission adopted its adequacy decision on July 10, 2023. Google LLC is certified under the EU-US Privacy Framework. Since Google servers are distributed worldwide and a transfer to third countries (for example to Singapore) cannot be completely ruled out, we have also concluded the EU standard contractual clauses with the provider.

It is possible that Google may pass on the data obtained in the process to third parties.

The consent given via the cookie banner can also be revoked at any time. The revocation can be made either via the link “Data protection settings” in the footer area of the page or via the shield symbol in the lower left corner of the browser window.

You also have the option to object to the collection of data generated by Google Analytics relating to the use of this website and to the processing of this data by Google in general and to prevent such collection. To do this, you must download and install a browser add-on from the link https://tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data and information on website visits may be transmitted to Google Analytics. The installation of the browser add-on is considered an objection by Google. If you delete, format or reinstall the IT system at a later date, you must reinstall the browser add-on to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by you or another person who is attributable to your sphere of control, it is possible to reinstall or reactivate the browser add-on.

This website uses conversion optimization and conversion tracking functions from Google. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Conversion Tracking uses so-called “cookies”. These are text files that are stored on your computer and enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Information on the standard contractual clauses to ensure the level of data protection when processing data in the USA can be found here: https://privacy.google.com/businesses/compliance/?hl=de

1.5 Google Signals

If you have given your consent in the Consent Manager (“Cookie Manager”), we also use the Google Signals service.

Google Signals are data that Google has collected from you on various channels (including across devices). This may include session data, data from website visits and articles, apps used, devices used, videos viewed and much more. The specific data depends on your usage profile and is only collected if you have given Google your consent. Google links all information if you are logged in with your Google account and visit websites on the Internet that also use Google Signals. Google will then link these activities. Your behavioral data is therefore recorded if you are logged into your account and have activated the personalized advertising option. You can find out how to make this setting here. Google Signals helps us to enrich the data obtained via Google Analytics and give us a better picture of users and interested parties so that we can provide you with even better tailored advertising and offers.

1.6 Google Analytics Remarketing

Our websites use the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google Ads and Google DoubleClick. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

This function makes it possible to link the advertising target groups created with Google Analytics Remarketing with the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-based, personalised advertising messages that have been adapted to you depending on your previous usage and surfing behaviour on one end device (e.g., mobile phone) can also be displayed on another of your end devices (e.g., tablet or PC).

If you have given your consent, Google will link your web and app browsing history to your Google Account for this purpose. In this way, the same personalised advertising messages can be served on every device on which you log in with your Google account.

To support this feature, Google Analytics collects Google-authenticated IDs of users, which are temporarily linked to our Google Analytics data to define and create target groups for cross-device ad advertising.

You can permanently object to cross-device remarketing/targeting by deactivating personalised advertising in your Google account; follow this link: https://www.google.com/settings/ads/onweb/.

The aggregation of the collected data in your Google account is based solely on your consent, which you can give or revoke at Google (Art. 6 para. 1 lit. a GDPR). Further information and the data protection provisions can be found in Google’s data protection declaration at: https://www.google.com/policies/technologies/ads/.

1.7 Google AdWords and Google Conversion-Tracking

This website uses Google AdWords. AdWords is an online advertising programme of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).

Within the framework of Google AdWords, we use so-called conversion tracking.

When you click on an ad placed by Google, a cookie is set for conversion tracking.

Cookies are small text files that the internet browser stores on the user’s computer.

These cookies expire after 30 days and are not used to personally identify users. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the ad and was redirected to this page.

Each Google AdWords customer receives a different cookie. The cookies cannot be tracked via the websites of AdWords customers. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted in to conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that personally identifies users. If you do not wish to participate in the tracking, you can object to this use by easily deactivating the Google conversion tracking cookie via your internet browser under user settings. You will then not be included in the conversion tracking statistics.

You can find more information about Google AdWords and Google Conversion Tracking in Google’s privacy policy: https://www.google.de/policies/privacy/.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or generally and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.

IP anonymisation by Google

We have activated the IP anonymisation function on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases (e.g. consent to the use of Google Signals) will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Browser plugin for opting out of cookies set by Google

You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. In addition, you can prevent the collection of the data generated by the cookie and related to your use of the website (incl. your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data capture by Google

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set, which will prevent the collection of your data during future visits to this website: Deactivate Google Analytics. You can find more information on how Google Analytics handles user data in Google’s privacy policy:

https://support.google.com/analytics/answer/6004245?hl=de.

Order data processing contract with Google

We have concluded an order data processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic characteristics in Google Analytics

This website uses the “demographic characteristics” function of Google Analytics. This allows reports to be generated that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google as well as visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as shown in the item “Objection to data collection”.

2. Data collection to enable access to our website

2.1 Cookies

These pages partly use so-called cookies. Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognise your browser on your next visit.

Cookies that are required to carry out the electronic communication process or to provide certain functions you have requested (e.g., shopping cart function) are stored on the basis of Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimised provision of its services. Insofar as other cookies (e.g., cookies to analyse your surfing behaviour) are stored, these are dealt with separately in this data protection declaration (see above).

2.2 Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

Browser type and version
Operating system used
Referrer URL
Time of the server request
IP address (this is only stored anonymously by us) This data is not merged with other data sources.

The basis for data processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the technically error-free and optimised provision of our services.

2.3 Contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We do not pass on this data without your consent.

The processing of the data entered in the contact form is therefore based exclusively on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

The data you entered in the contact form will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g., after we have completed processing your request). Mandatory legal provisions – in particular retention periods – remain unaffected.

2.4 Registration on this website

You can register on our pages (store, trainer portal, online academy) with a password-protected customer or trainer account in order to use additional functions on the respective page. We will only use the data you enter for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will reject the registration, as the respective task cannot be fulfilled without this data.

For important changes, for example in the scope of the offer or in the case of technically necessary changes, we will use the e-mail address provided during registration to inform you in this way.

The legal basis for the data entered during registration is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing already carried out remains unaffected by the revocation.

The data collected during registration will be stored by us for as long as you are registered on our website and will then be deleted. Legal retention periods remain unaffected.

2.5 Use of data for advertising purposes in the event of registration

In addition to processing your data to process your purchase and/ or service, if you register, we will also use your data, with your consent, to communicate with you about your orders, specific products or marketing promotions and to recommend products or services that may be of interest to you.

2.6 Use of data for the dispatch of goods and welcome gifts

If you order items in our store or would like to receive free welcome gifts as part of promotions, we will use your address and pass it on to shipping service providers.

2.7 Comment function on this website

For the comment function (for services and products) on this site, in addition to your comment, details of when the comment was created, your e-mail address and, if you do not post anonymously, the username you have chosen will be stored.

Storage of the IP address
Our comment function stores the IP addresses of users who post comments. We need this data to be able to take criminal action against the author in the event of legal violations such as insults or propaganda.

Storage period of the comments
The comments and the associated data (e.g., IP address) are stored and remain on our website until the commented content has been completely deleted or the comments have to be deleted for legal reasons (e.g. offensive comments).

Legal basis
The storage of comments is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing operations already carried out remains unaffected by the revocation.

2.8 Processing of data (customer and contract data)

We also collect, process and use personal data if it is required for the establishment, content or amendment of the legal relationship (inventory data). This is done on the basis of Art. 6 (1) lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures. We collect, process and use personal data about the use of our Internet pages (usage data) only insofar as this is necessary to enable the user to use the service or to bill the user.

The collected customer data is deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

2.9 Data transfer upon conclusion of the contract for online shops, retailers and goods dispatch

We only transmit personal data to third parties if this is necessary within the framework of the contract processing, for example to the companies entrusted with the delivery of the goods or to the credit institution entrusted with the payment processing. Further transmission of data does not take place or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes. The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

2.10 Data transmission when concluding contracts for services and digital content

We only transmit personal data to third parties if this is necessary within the framework of the contract processing, for example to the credit institution commissioned with the payment processing.

Further transmission of data does not take place or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

3. Social Media

The adequacy of the data transfer to the USA is guaranteed in each case by standard contractual clauses. We have concluded a joint responsibility agreement in accordance with Art. 26 of the GDPR with the providers, insofar as joint responsibility exists for the processing of the data.

3.1 Facebook-Plugins (Facebook SDK)

We use the Software Development Kit (SDK) from Facebook. The Facebook SDK is published and administered by Facebook. With the help of this integration, we can link various services from Facebook with our service offerings. For example, users can use the Facebook SDK to share content from us within their own Facebook timeline or to send messages to other Facebook users. You can find more information about Facebook SDK on iOS here: https://developers.facebook.com/docs/ios.

For Android here:
https://developers.facebook.com/docs/android.

The legal basis for storing this data is Art. 6 para. 1 sentence 1 letter b GDPR.

Plugins of the social network Facebook, provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, are integrated on our pages. You can recognise the Facebook plugins by the Facebook logo or the “Like” button on our site. You can find an overview of the Facebook plugins here: https://developers.facebook.com/docs/plugins/.

When you visit our pages, a direct connection is established between your browser and the Facebook server via the plugin. Facebook thereby receives the information that you have visited our site with your IP address. If you click the Facebook “Like” button while you are logged into your Facebook account, you can link the content of our pages on your Facebook profile. This allows Facebook to associate the visit to our pages with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Facebook. You can find more information on this in Facebook’s privacy policy at: https://de-de.facebook.com/policyphp.

If you do not want Facebook to be able to assign your visit to our pages to your Facebook user account, please log out of your Facebook user account.

3.2 Twitter Plugin

Functions of the Twitter service are integrated on our pages. These functions are offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the “Re-Tweet” function, the websites you visit are linked to your Twitter account and made known to other users. In the process, data is also transferred to Twitter. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Twitter. You can find more information on this in Twitter’s privacy policy at: https://twitter.com/privacy.

You can change your privacy settings on Twitter in the account settings under https://twitter.com/account/settings.

3.3 Google+ Plugin

Our pages use Google+ functions. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Collecting and sharing information: You can use the Google+ button to publish information around the world. Through the Google+ button, you and other users receive personalised content from Google and our partners. Google stores both the information that you have given +1 for a content and information about the page you were viewing when you clicked +1. Your +1s can be displayed as notices together with your profile name and photo in Google services, such as in search results or in your Google profile, or in other places on websites and ads on the internet. Google records information about your +1 activities in order to improve Google services for you and others. In order to use the Google+ button, you need a globally visible, public Google profile, which must contain at least the name chosen for the profile. This name is used in all Google services. In some cases, this name may also replace another name you used when sharing content through your Google Account. The identity of your Google profile may be displayed to users who know your email address or have other identifying information about you.

Use of information collected: In addition to the uses explained above, the information you provide will be used in accordance with Google’s applicable privacy policy. Google may publish aggregate statistics about users’ +1 activities or share them with users and partners, such as publishers, advertisers or affiliated websites.

3.4 Instagram Plugin

Functions of the Instagram service are integrated on our pages. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate the visit to our pages with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Instagram.

You can find more information on this in Instagram’s privacy policy: https://instagram.com/about/legal/privacy/

3.5 LinkedIn Plugin

Our website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.

Each time one of our pages containing LinkedIn functions is accessed, a connection to LinkedIn servers is established. LinkedIn is informed that you have visited our website with your IP address. If you click the LinkedIn “Recommend” button and are logged into your LinkedIn account, it is possible for LinkedIn to associate your visit to our website with you and your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by LinkedIn.

You can find more information on this in LinkedIn’s privacy policy at: https://www.linkedin.com/legal/privacy –policy

3.6 XING Plugin

Our website uses functions of the XING network. The provider is New Work SE, Dammtorstraße 29-32, 20354 Hamburg, Germany.

Each time one of our pages containing XING functions is called up, a connection to XING servers is established. As far as we are aware, no personal data is stored in this process. In particular, no IP addresses are stored, or usage behaviour evaluated.

You can find further information on the data protection of XING share buttons in the data protection declaration at: https://www.xing.com/app/share?op=data_protection .

3.7 Pinterest Plugin

On our site, we use social plugins of the social network Pinterest, which is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103-490, USA (“Pinterest”).

When you call up a page that contains such a plugin, your browser establishes a direct connection to the Pinterest servers. The plugin transmits log data to the Pinterest server in the USA. This log data may contain your IP address, the address of the websites visited that also contain Pinterest functions, the type and settings of the browser, the date and time of the request, how you use Pinterest and cookies. The use of the Pinterest plugin is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in ensuring the greatest possible visibility in social media.

Further information on the purpose, scope and further processing and use of the data by Pinterest, as well as your rights in this regard and options for protecting your privacy, can be found in the Pinterest data protection information: https://policy.pinterest.com/de/privacy –policy

4. Newsletter

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the specified e-mail address and that you agree to receive the newsletter. No further data is collected or only on a voluntary basis. We use this data exclusively for sending the requested information.

The data entered in the newsletter registration form is processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent to the storage of the data, the email address and their use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation. The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g., e-mail addresses for the member area) remain unaffected by this.

5. Plugins und Tools

5.1 YouTube

Our website uses plugins from the YouTube site operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR.

Further information on the handling of user data can be found in YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy

5.2 Google Maps

This site uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there.

The provider of this site has no influence on this data transmission.

Google Maps is used in the interest of an appealing presentation of our online offers and to make it easy to find the places we indicate on the website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

You can find more information on the handling of user data in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/

5.3 Google Hosted Libraries & jQuery Plugin, Migrate and Cookie

This site uses the jQuery Javascript library. To increase the page loading speed, we use Google’s CDN (content delivery network) to load this library. It is highly likely that you have already used jQuery on another page from the Google CDN. If this is the case, your browser can access the cached copy and does not need to download it again. If your browser does not have a cached copy or is downloading the file from the Google CDN for some other reason, this will transfer data from your browser to Google Inc. (“Google”). For further information on data processing by Google, please refer to Google’s privacy policy, currently available at: https://www.google.de/intl/de/policies/privacy/

5.4 Wordfence Security

We use the “Wordfence Security” service (Defiant Inc., 800 5th Ave., Suite 4100, Seattle, WA 98104, USA) to secure our site.

Our site uses the plug-in to protect against viruses and malware and additionally to defend against attacks by cyber criminals. The plugin sets cookies to recognise whether the respective visitor is a human or a robot. To protect against brute force and DDoS attacks or spam comments, your IP address may be stored on the Wordfence servers. IP addresses classified as harmless are white listed here. Wordfence Security secures our site and thus also protects visitors to the site from viruses and malware. This constitutes a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR. The Live Traffic View option (real-time live traffic) of the plug-in is switched off, as it is not mandatory.

Further information on the collection and use of data by Wordfence Security can be found in Defiant’s privacy policy: https://www.wordfence.com/privacy –policy/

5.5 Retrieving emojis and smilies

Within our WordPress blog, graphic emojis (or smilies), i.e., small graphic files that express feelings, are used that are obtained from external servers. The providers of the servers collect the IP addresses of the users. This is necessary so that the emoji files can be transmitted to the users’ browsers. The Emojie service is provided by Automattic Inc, 60 29th Street #343, San Francisco, CA 94110, USA. Automattic’s privacy policy: automattic.com/privacy/. The server domains used are s.w.org and twemoji.maxcdn.com, which, as far as we know, are so-called content delivery networks, i.e., servers that only serve to transmit the files quickly and securely, and the users’ personal data is deleted after transmission. The use of emojis is based on our legitimate interests, i.e., interest in an attractive design of our online offer according to Art. 6 para. 1 lit. f. GDPR.

5.6 Font Awesome

Our website uses so-called web fonts or icons provided by Fonticons, Inc. for the uniform display of fonts or icons. When you call up a page, your browser loads the required web fonts or icons into your browser cache in order to display texts, fonts and icons correctly.

For this purpose, the browser you use must connect to the servers of Fonticons, Inc. This enables Fonticons, Inc. to know that our website has been accessed via your IP address. Font Awesome is used in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR.

If your browser does not support Font Awesome, a standard font will be used by your computer. For more information about Font Awesome, please visit https://fontawesome.com/help and read the privacy policy of Fonticons, Inc..: https://fontawesome.com/privacy.

Google Fonts Google Fonts is a service of Google Inc. (“Google”). The integration of these web fonts takes place via a server call, usually with the help of Google servers in the USA. In the process, the IP address of the browser of the end device is stored by Google. You can find more information in Google’s privacy policy, which you can access here: www.google.com/fonts#AboutPlace:about
www.google.com/policies/privacy

5.7 Google Fonts

Google Fonts is a service provided by Google Inc (“Google”). These web fonts are integrated by a server call, usually with the help of Google servers in the USA. The IP address of the end device’s browser is stored by Google. You can find more information in Google’s privacy policy, which you can access here:

www.google.com/fonts#AboutPlace:about

www.google.com/policies/privacy

5.8 Google Tag Manager

This website uses the Tag Manager from Google. This service allows us to manage website tags via an interface. This Google tool only sets tags. This means that no cookies are used, and no personal data is regularly collected. However, other tags may be triggered, which in turn may collect data. The Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, this remains in place for all tracking tags if they are implemented with the Google Tag Manager.

6. Payment provider

The transmission of your data to the payment providers is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the performance of a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the validity of past data processing operations.

6.1 PayPal

On our website we offer, among other things, payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”). If you select payment via PayPal, the payment data you enter will be transmitted to PayPal.

6.2 Mollie

We offer payment via Mollie on our website. The provider of this payment service is Mollie H.Q., Keizersgracht 126, 1015CW Amsterdam, The Netherlands.

If you select payment via Mollie, the payment details you enter will be transmitted to Mollie.

6.3 Digistore24

Some of our products, services and content are offered by Digistore24 as a reseller. The provider and contractual partner is Digistore24 GmbH, St.-Godehard-Straße 32 in 31139 Hildesheim. Digistore24 GmbH, as the responsible party, sets out in its own data protection declaration which data Digistore24 stores and processes when this website is accessed. Further information is available in the Digistore24 data protection declaration:

https://www.digistore24.com/dataschutz.

6.4 Digistore24 WordPress Plugin

The WordPress plugin offers the possibility to integrate various Digistore24 services on your own website, e.g., the Social Proof Bubble, the Affiliate Ad Generator or other tools. With each integration, non-personal data is reloaded from the Digistore24 server (e.g. a Javascript file). During this reloading, your web browser retrieves a web page from the Digistore24 server. Our server has no influence on the extent to which your web browser transmits data to the Digistore24 server. Our server itself does not transmit any data to the Digistore24 server in this context. Digistore24 GmbH, as the responsible party, sets out in its own data protection declaration which data Digistore24 stores and processes during this website visit.

You can find Digistore24’s data protection declaration here:
https://www.digistore24.com/dataschutz

Conversion tools/shopping cart

Digistore24 offers the possibility of integrating various services on its own website via HTML and Javascript codes, e.g., the Social Proof Bubble or the Digistore24 shopping cart. With each integration, non-personal data is reloaded from the Digistore24 server (e.g., a Javascript file). During this reloading, your web browser retrieves a web page from the Digistore24 server. Our server has no influence on the extent to which your web browser transmits data to the Digistore24 server. Our server itself does not transmit any data to the Digistore24 server in this context.

Digistore24 GmbH, as the responsible party, sets out in its own data protection declaration which data Digistore24 stores and processes during this website visit.

You can find Digistore24’s privacy policy here:
https://www.digistore24.com/dataschutz

Promo Links/Content Links

On this website we use various links to offers from Digistore24. The purpose of the links is to draw your attention to products of interest to you. Some of these links are links to the digistore24.com domain of Digistore24 GmbH. When you click on one of the links, you are calling up a website on the Digistore24 server. Our server does not transmit any data to Digistore24 in this process, but the data is transmitted to Digistore24 by your web browser – as is the case with every web page call. We have no influence on the extent to which your web browser transmits data to Digistore24.

7. Trusted Shops

Integration of the Trusted Shops Trustbadge

The Trusted Shops trust badge is integrated on this website to display our Trusted Shops seal of approval and any ratings collected, as well as to offer Trusted Shops products to buyers after they have placed an order.

This serves to protect our legitimate interests in an optimal marketing of our offer, which outweigh our interests in the context of a balancing of interests. The trust badge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.

When the Trustbadge is called up, the web server automatically saves a so-called server log file, which contains, for example, your IP address, the date and time of the call-up, the amount of data transferred and the requesting provider (access data) and documents the call-up. This access data is not evaluated and is automatically overwritten at the latest seven days after the end of your visit to the site.

Further personal data will only be transferred to Trusted Shops if you decide to use Trusted Shops products after completing an order or have already registered to use them. In this case, the contractual agreement between you and Trusted Shops applies.

8. Tools for e-learning, video conferencing, online meetings, screen sharing, collaboration and project management

The legal basis for data processing for these purposes is Art. 6 para. 1 lit. b. The processing takes place in the context of the provision of services or for the purpose of pre-contractual measures such as the preparation of offers. The adequacy of the data transfer to the USA is guaranteed in each case by standard contractual clauses.

8.1 KeeUnit

The website onlineacademy.persolog.com uses the services of KeeUnit for the provision of e-learning offers. The provider is keeunit GmbH, Mombacher Straße 52, 55122 Mainz, Germany.

Further information on KeeUnit and its handling of data protection can be found under the following links:
https://keelearning.de/datenschutzerklaerung/

Keelearning is a learning platform that enables the provision of e-learning courses. If you enter data for the purpose of participating in an e-learning course (e.g. e-mail address), this data is stored on KeeUnit’s servers in Frankfurt am Main.

Use of the learning platform is voluntary. From the time you register as a user, data entered by you or automatically generated by your use of the learning platform will be processed. Insofar as this data refers to your person and not just to a fictitious identity, it is personal data. The relevant data protection regulations therefore also apply to the learning platform. The information provided during registration, some of which is collected automatically and some of which is additionally entered by the user, is logged. All this data is accessible to the administration of the platform. It is used exclusively to run the respective course and is not passed on to other persons or bodies, not even in anonymized form. The administrators can see, for example, which users access which parts of the courses at what time. Depending on the design of the individual course, it is also logged whether the user has completed the tasks set and which contributions have been edited.

KeeUnit stores so-called “cookies” in order to offer you a comprehensive range of functions and to make the use of the websites more convenient. If you do not wish cookies to be used, you can prevent them from being stored on your computer by making the appropriate settings in your Internet browser. Please note that this may limit the functionality and scope of the offer.

Conclusion of an order processing contract
We have concluded a so-called “AV contract” with KeeUnit, in which we oblige KeeUnit to protect our customers’ data and not to pass it on to third parties.

Deletion of data
If your data is no longer required for the aforementioned purposes, we will delete it. If we delete your account or instruct you to delete it, we will also delete all data from your account.

8.2 Microsoft Teams

Messenger and conferencing software; Service provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA;

Website: https://products.office.com;

Safety instructions: https://www.microsoft.com/de –de/trustcenter ;

Information on the standard contractual clauses to ensure the level of data protection when processing data in the USA:
https://docs.microsoft.com/de –de/compliance/regulatory/offering –eu –model –clauses

8.3 Zoom

Video conferences, web conferences; service provider: Zoom Video Communications, Inc., 55 Almaden Blvd., Suite 600, San Jose, CA 95113, USA; Website: https://zoom.us; Privacy policy and information on the

standard contractual clauses to ensure the level of data protection when processing data in the U.S.: https://zoom.us/docs/de-de/privacy-and-legal.html

8.4 Trello

Project management tool; service provider: Trello Inc., 55 Broadway New York, NY 10006, USA, parent company: Atlassian Inc. (San Francisco, location Harrison Street), 1098 Harrison Street, San Francisco, California 94103, USA; Website: https://trello.com/; More information on security and data protection including information on the standard contractual clauses to ensure the level of data protection when processing data in the USA: https://www.atlassian.com/de/trust/security/security-practices#privacy-at-atlassian

8.5 Slack

persolog uses the software Slack (Slack Technologies Inc., 500 Howard St, San Francisco, CA 94105, USA) for internal communication. An order processing agreement has been reached with Slack. Slack is certified according to the “Privacy Shield” agreement. The Slack software supports the latest recommended secure procedures and protocols for the encryption of all data during transmission as well as at rest. The legal basis of the processing is Art. 6 (1) lit. f) GDPR is the legitimate interest in the efficient organisation of company processes. Information on Slack’s data protection and on the standard contractual clauses to ensure the level

of data protection when processing data in the USA can be found at:
https://slack.com/intl/de –de/trust/compliance/gdpr

9. Use of ePort & purchase of products in our shop

The legal basis for data processing for these purposes is – if you give us your consent – Art. 6 (1) lit. a DS-GVO. If the processing takes place in the context of the provision of services or for the purpose of pre-contractual measures such as the preparation of an offer, the legal basis is Art. 6 (1) lit. b DS-GVO. For the further legally required storage of documents, the legal basis is Art. 6 para. 1 lit. c DS-GVO in conjunction with the respective individual standard (e.g. § 147 AO). In the case of data transfer to the USA, the level of data protection is guaranteed in each case by the effective agreement of standard contractual clauses.

9.1 Shopware

We use the services of Shopware for our online shop. The provider is shopware AG, Ebbinghoff 10, 48624 Schöppingen.

You can find more information about shopware and their handling of data protection under the following link:
https://www.shopware.com/de/datenschutz/

9.2 abilis

For the provision of the ePort service, we use the hosting services of abilis. The provider is abilis GmbH IT-Services & Consulting, Lorenzstraße 8, 76297 Stutensee.

You can find further information about abilis and their handling of data protection under the following link:
https://www.abilis.de/datenschutz/

Conclusion of a contract for the processing of orders

We have concluded a so-called “AV contract” with abilis, in which we oblige abillis to protect our customers’ data and not to pass it on to third parties.

Deletion of data

Insofar as your data is no longer required for the aforementioned purposes, we delete it. If we delete or order the deletion of your account, all data from your account will also be completely deleted by us.

9.3 Scaleway

For the provision of persolog online, we use the hosting services of Scaleway S.A.S., 8, rue de la Ville-l’Évêque – 75008 Paris, France.

Further information about Scaleway and how they handle data protection can be found at the following link: https://www.scaleway.com/de/privacy-policy/

Conclusion of an order processing contract
We have concluded a so-called “AV contract” with Scaleway, in which we oblige Scaleway to protect our customers’ data and not to pass it on to third parties.

10. Security

10.1 SSL or TLS encryption

This site uses TLS encryption (formerly SSL) for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. We prefer to use the latest TLS versions (1.2 and 1.3). Older TLS versions (TLS < 1.2) are no longer supported by our server for security reasons. If you have problems accessing the website, we recommend that you update your browser. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If TLS encryption is activated, the data you transmit to us cannot be read by third parties.

10.2 Encrypted payment transactions on this website

If there is an obligation to provide us with your payment details (e.g. account number for direct debit authorization) after the conclusion of a chargeable contract, this data is required for payment processing.
Payment transactions via the usual means of payment (Visa/MasterCard, direct debit) are made exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
With encrypted communication, the payment data you transmit to us cannot be read by third parties.

11. Further general information

11.1 Revocation of your consent to data processing

Many Data processing operations are only possible with your express consent. You can revoke your consent for tracking or advertising purposes at any time by clicking on the “fingerprint-symbol” in the lower left corner of this Website. If you wish to revoke any other type of consent, it is sufficient to send us an informal e-mail. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

11.2 Right of appeal to the competent supervisory authority

In the event of violations of data protection law, the person concerned has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the state data protection commissioner of the federal state in which our company is based. A list of the data protection officers and their contact details can be found in the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links –node.html

11.3 Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

11.4 Right of objection

If we process the data in our legitimate interest with Art. 6 para. 1 lit. f as the legal basis, you have the right to.

11.5 Information, blocking, erasure

Within the framework of the applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipient and the purpose of the data processing and, if applicable, a right to rectification, blocking or erasure of this data at any time. You can contact us at any time at the address given in the legal notice if you have further questions on the subject of personal data.

11.6 Objection to advertising e-mails

We hereby object to the use of contact data published as part of our obligation to provide a legal notice for the purpose of sending unsolicited advertising and information material. The operators of the website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

11.7 Updating

We reserve the right to regularly update the privacy policy. The updated version will apply the next time you visit our website.

Last update: 1.2.2024