PRIVACY POLICY

This Privacy Policy explains the nature, scope, and purpose of the processing of personal data (hereinafter referred to as “Data”) within our online offering and the associated websites, functions, and content, as well as external online presences, such as our social media profiles (hereinafter collectively referred to as the “Online Offering”). With regard to the terms used, such as “processing” or “controller,” we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).

 

1. Definitions

“Personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”); a natural person is considered identifiable if they can be identified, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier (e.g., a cookie), or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

“Processing” means any operation or set of operations performed on personal data, whether or not by automated means. The term is broad and encompasses virtually any handling of data.

“Pseudonymization” means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.

“Controller” means the natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data.

“Processor” means a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller.

 

2. General Information

 

Data Controller

DAS STUDIO Torsten Hegner GmbH
Martin-Behaim-Strasse 26
63263 Neu-Isenburg Germany
info@das-studio.de

Managing Directors: Björn Hegner, Thomas Behmüller
Court of Registration: Offenbach 5 Local Court, Registration Number: HRB 79 35

Link to the Legal Notice: https://www.das-studio.de/impressum/

Data Protection Officer

ENSECUR GmbH

Kaiserstraße 86

76133 Karlsruhe

Contact Data Protection Officer: dsb-dsth@ensecur.de

 

Types of data processed:

– Master data (e.g., names, addresses).
– Contact data (e.g., email, phone numbers).
– Content data (e.g., text entries, photographs, videos).
– Usage data (e.g., websites visited, interest in content, access times).
– Meta/communication data (e.g., device information, IP addresses).

Categories of data subjects

Visitors and users of the online service (hereinafter, we collectively refer to the data subjects as “users”).

Security measures

To protect your personal data against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons, we implement appropriate technical and organizational security measures.

Rights of data subjects

You have the right to request confirmation as to whether data concerning you is being processed, as well as access to this data, further information, and a copy of the data in accordance with Art. 15 GDPR.

You have the right, pursuant to Art. 16 GDPR, to request the completion of the data concerning you or the rectification of inaccurate data concerning you.

You have the right, pursuant to Article 17 of the GDPR, to request that the data in question be erased without delay, or alternatively, pursuant to Article 18 of the GDPR, to request a restriction on the processing of the data.

You have the right to data portability: You have the right to request that the data concerning you that you have provided to us be made available to you in accordance with Article 20 of the GDPR and to request its transmission to other controllers.

You may object to the future processing of your personal data at any time in accordance with Article 21 of the GDPR. In particular, you may object to processing for direct marketing purposes.

You have the right to withdraw any consent you have given in accordance with Article 7(3) of the GDPR with future effect.

To exercise your data subject rights, please contact the controller using the contact details provided.

Right to lodge a complaint

You also have the right, pursuant to Article 77 of the GDPR, to lodge a complaint with the competent supervisory authority. The following supervisory authority is competent for us:

The Hessian Commissioner for Data Protection and Freedom of Information

Gustav-Stresemann-Ring 1

65189 Wiesbaden

Phone: 0611-1408 0

Email: poststelle@datenschutz.hessen.de

https://datenschutz.hessen.de/

3. Processing Purposes

Consent Manager

We use a Consent Manager on our website. The Consent Manager is used to manage your consent for the use of cookies and similar technologies on our website.

The Consent Manager is used to comply with the legal requirements under Article 6(1)(c) of the GDPR and to document your consent for certain data processing activities under Article 6(1)(a) of the GDPR. The processing of your data by the Consent Manager is based on a legal obligation under Article 6(1)(c) of the GDPR.

The Consent Manager stores the following data to document your consent:

• Your IP address (anonymized),
• The time and date of your consent,
• Details regarding the consent granted or denied,
• A unique cookie identifier.

This information and the status of your consent are stored as a cookie in your browser. This ensures that your decision is retained for subsequent visits to our website. The data is stored for as long as necessary to verify your consent.

Collection of access data and log files

Based on our legitimate interests pursuant to Art. 6(1)(f) of the GDPR, we collect data regarding every access to the server on which this service is located (so-called server log files) when you visit this website. Access data includes the name of the accessed webpage, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address, and the requesting provider.

Log file information is stored for a maximum of 7 days for security reasons (e.g., to investigate cases of misuse or fraud) and is then deleted. Data that must be retained for evidentiary purposes is exempt from deletion until the respective incident has been fully resolved.

 

Contact

When you contact us (e.g., via the contact form, email, phone, or social media), the user’s information is processed to handle the contact request and its resolution based on our legitimate interest pursuant to Art. 6(1)(f) of the GDPR.

We delete the personal data processed in connection with the inquiries, provided that it is no longer necessary and no statutory retention periods preclude its deletion.

 

Data Processing When Subscribing to the Newsletter

We offer you the opportunity to subscribe to our newsletter. When you subscribe to our newsletter, the information you provide is used exclusively for this purpose based on your consent in accordance with Article 6(1)(a) of the GDPR. We do not process any further data beyond this. We use the email address you provided during registration to send the newsletter. To ensure that you are the actual owner of the email address you provided, we use the “double opt-in procedure.” For this purpose, we record:

• your consent to receive newsletters
• the sending of the confirmation email
• the receipt of the reply email

You may revoke your consent to the processing of your personal data and its use for sending the newsletter at any time. To do so, you can use the unsubscribe link provided in the newsletter.

We use the “Brevo” software from the provider Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany, to send our newsletter. The data you provide for the purpose of newsletter distribution is stored and processed on the provider’s servers in the EU. We have entered into a Data Processing Agreement (DPA) with the aforementioned provider. This is a contract required by data protection law that ensures the provider processes the personal data of our newsletter subscribers only in accordance with our instructions and in compliance with the GDPR.

If you unsubscribe from the newsletter, you will be removed from the newsletter distribution list and will no longer receive newsletters. For record-keeping purposes, your data will be retained for 3 years and then completely deleted.

 

Privacy Notice Regarding the Application Process

We process applicant data solely for the purpose of and within the scope of the application process in accordance with legal requirements. The processing of applicant data is carried out to fulfill our (pre)contractual obligations within the scope of the application process pursuant to Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR, provided that data processing becomes necessary for us, e.g., in the context of legal proceedings (in Germany, § 26 BDSG also applies).

The application process requires that applicants provide us with their application data. The necessary application data is indicated, if we provide an online form; otherwise, it is derived from the job descriptions and generally includes personal information, mailing and contact addresses, and the documents pertaining to the application, such as a cover letter, resume, and certificates. In addition, applicants may voluntarily provide us with additional information.

By submitting their application to us, applicants consent to the processing of their data for the purposes of the application process in accordance with the manner and scope set forth in this Privacy Policy.

To the extent that special categories of personal data within the meaning of Article 9(1) of the GDPR are voluntarily provided as part of the application process, their processing is additionally carried out in accordance with Article 9(2)(b) of the GDPR (e.g., health data, such as severe disability status or ethnic origin). To the extent that special categories of personal data within the meaning of Article 9(1) of the GDPR are requested from applicants as part of the application process, their processing is additionally carried out in accordance with Article 9(2)(a) of the GDPR (e.g., health data, if such data is necessary for the performance of the job).

If available, applicants may submit their applications to us via an online form on our website. The data is transmitted to us in encrypted form using state-of-the-art technology.
Furthermore, applicants may submit their applications to us via email. However, please note that emails are generally not sent in encrypted form, and applicants must ensure encryption themselves. We therefore cannot assume any responsibility for the transmission of the application between the sender and our server and therefore recommend using an online form or sending the application by mail. Instead of applying via the online form or email, applicants still have the option of sending their application to us by mail.

The data provided by applicants may be further processed by us for the purposes of the employment relationship in the event of a successful application. Otherwise, if the application for a job opening is unsuccessful, the applicants’ data will be deleted. Applicants’ data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time.

Subject to a valid revocation by the applicant, deletion occurs after a period of six months has elapsed, so that we can answer any follow-up questions regarding the application and fulfill our obligations under the Equal Treatment Act. Invoices for any travel expense reimbursements are archived in accordance with tax regulations.

 

Talent Pool

As part of the application process, we offer applicants the opportunity to be included in our “Talent Pool” for a period of two years based on consent pursuant to Art. 6(1)(b) and Art. 7 of the GDPR.

The application documents in the Talent Pool are processed solely in connection with future job postings and the search for employees and will be destroyed no later than upon expiration of the retention period. Applicants are informed that their consent to be included in the Talent Pool is voluntary, has no influence on the current application process, and that they may revoke this consent at any time for the future and object in accordance with Article 21 of the GDPR.

Comments and Posts

When users leave comments or other contributions, the personal data provided in the context of the comment or contribution is processed on the basis of our legitimate interests pursuant to Article 6(1)(f) of the GDPR. The data provided in the context of comments and contributions is stored by us permanently until the user objects.

In addition, their IP addresses may be stored for 7 days based on our legitimate interests pursuant to Article 6(1)(f) of the GDPR. This is done for our protection in case someone posts unlawful content in comments and posts (insults, prohibited political propaganda, etc.). In this case, we ourselves could be held liable for the comment or post and are therefore interested in the author’s identity. Furthermore, we reserve the right to process users’ information for the purpose of spam detection based on our legitimate interests pursuant to Article 6(1)(f) of the GDPR.

Chatbot

We use a chatbot from Chathero GmbH on our website. You have the option to ask the chatbot questions so that it can provide you with targeted assistance. The chatbot helps us efficiently answer inquiries and provide you with information.

When you use the chatbot, we process the following data in particular:

• Communication content (your messages and inputs),
• Voluntary contact details such as first name, last name, email address, phone number,
• Technical data such as IP address, browser information, and time of access.

We process your information based on our legitimate interest pursuant to Art. 6(1)(f) of the GDPR to handle your inquiry. We store your personal data for as long as necessary to process the inquiry and subsequently delete it, provided that no statutory retention periods prevent such deletion.

Chathero processes all data on our behalf as a data processor pursuant to Art. 28 GDPR based on a data processing agreement. No data is transferred to third countries.

Google Ads and Conversion Tracking

We use Google Ads services to display online advertisements and to measure the success of our advertising campaigns (conversion tracking). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

The use of Google Ads and conversion tracking is based solely on your consent in accordance with Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG. You may revoke your consent at any time with future effect via our consent settings.

As part of Google Ads, we use so-called conversion tracking tags. If you arrive at our website via a Google ad, Google may store a cookie or similar technology on your device. This allows us to track whether users perform certain actions on our website, such as submitting a contact request or visiting specific pages.

The information collected in this process may include, in particular:

• pages visited,
• technical information about the browser and device,
• referrer URL,
• time of visit,
• interactions with our advertisements.

The data collected is used to generate statistical analyses of the use of our website and the effectiveness of our advertising campaigns. We do not receive any information that allows us to directly identify individual persons.

Google also processes some data on servers in the U.S. According to Google, data transfers to the U.S. are based on the EU-U.S. Data Privacy Framework and on standard contractual clauses approved by the European Commission.

For more information on data processing by Google, please visit:
https://policies.google.com/privacy

 

4. Integration of Third-Party Services and Content

We use content or service offerings from third-party providers within our online platform to integrate their content and services, such as videos or maps (hereinafter collectively referred to as “Content”).

YouTube

We embed videos from the YouTube platform on our website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

YouTube videos are integrated to provide you with multimedia content and to make our website more engaging. The integration of YouTube is based on your consent pursuant to Art. 6(1)(a) GDPR, which we obtain via the Consent Manager. No YouTube content is loaded without your consent.

When you visit a page with an embedded YouTube video and after you have given your explicit consent, a connection is established to YouTube’s servers. In doing so, the YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, YouTube can directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account. YouTube may also store or read cookies or technologies comparable to on your device, provided you have consented to this.

Personal data may be transmitted to Google servers in the U.S. via the embedded and shared YouTube videos. Google, as the parent company of YouTube, is certified under the EU-U.S. Data Privacy Framework (DPF). This certification confirms that Google ensures an adequate level of data protection in accordance with European Union standards.

For more information on data protection at YouTube, please refer to Google’s Privacy Policy at: https://policies.google.com/privacy

 

Google Maps

We integrate maps from the “Google Maps” service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Maps is integrated to provide you with multimedia content and to make our website visually appealing. Google Maps is only used if you consent to its use via the Consent Manager (Art. 6(1)(a) GDPR). Therefore, no data about you as a user is transmitted to Google Maps unless you explicitly consent to this. Only after you have consented to the use of Google Maps on our website will your IP address and, if applicable, location data be transmitted. The IP address is necessary to ensure the functionality of Google Maps.

Through the integrated and enabled Google Maps, personal data may be transmitted to Google servers in the U.S. and stored there. Google is certified under the EU-U.S. Data Privacy Framework (DPF). This certification confirms that Google ensures an adequate level of data protection in accordance with European Union standards.

We have no influence over data processing by Google. For more information on how Google handles user data, please refer to Google’s Privacy Policy: https://policies.google.com/privacy?hl=de&gl=de

 

5. Social Media Presence

We maintain online presences on social networks and platforms to communicate with customers, prospects, and users active there and to inform them about our services. When accessing the respective networks and platforms, the terms of service and data processing policies of their respective operators apply.

Unless otherwise specified in our Privacy Policy, we process users’ data when they communicate with us within social networks and platforms, e.g., by posting on our online presences or sending us messages.

Facebook – Business Page

We operate a company page on the Facebook platform, a service provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter “Facebook”).

We would like to expressly point out that you use the Facebook page and its features at your own risk.

1. Purpose of Processing and Legal Basis

Our Facebook page serves to communicate with prospective customers and users of our offerings, as well as to provide information about our company and services. We process your data based on our legitimate interest pursuant to Art. 6(1)(f) of the GDPR in order to communicate with you and improve our visibility.

Our overriding legitimate interest lies in effectively and specifically addressing our target groups, as well as in improving our offerings and our visibility on a widely used platform.

1. Data Processing by Facebook

When you visit our Facebook page, Facebook also processes your personal data. This includes:

• Your IP address,
• Information about your device and browser,
• your interactions with our Facebook page (e.g., likes, comments, messages).

This data may be processed by Facebook for its own purposes, e.g., to analyze user behavior and display personalized advertising. We have no influence over Facebook’s processing of this data.

Our Facebook page offers you the opportunity to send us messages, react to our posts, or comment on them. Please therefore consider which personal data you wish to share with us on the company page. If you do not wish to transmit your personal data to Meta, you can contact us at at any time via another channel (e.g., via the website, postal address, etc.).

Data processing by Facebook is subject to the Meta Platforms Privacy Policy (https://www.facebook.com/privacy/policy).

1. Facebook Insights

When you use our Facebook company page, Meta Platforms Ireland Limited (Facebook) provides us with so-called Page Insights. These are anonymized statistical data that Meta generates based on visitors’ interactions with our Facebook page. The legal basis for the use of these Facebook Insights is our legitimate interest pursuant to Art. 6(1)(f) of the GDPR to analyze the use of our page and improve it for interested visitors to our company.

We share joint responsibility with Facebook for the processing of Insights data. You can view the agreement on joint responsibility at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.

1. Data Transfer to Third Countries

Meta Platforms may transfer your data to the United States or other third countries. Please note that these countries may not have a level of data protection comparable to that of the EU. Meta Platforms ensures an adequate level of data protection in accordance with the requirements of the GDPR through certification under the EU-U.S. Data Privacy Framework (DPF) and the use of Standard Contractual Clauses (SCCs) of the European Commission. For more information on data processing and the safeguards in place, please see Meta’s Privacy Policy at: https://www.facebook.com/about/privacy.

1. Retention Period

The controller has only limited influence over the deletion of personal data, as this is largely determined by Facebook. Further information on this can be found at https://www.facebook.com/privacy/policy. Insofar as personal data is provided to us in the context of interactions (e.g., messages), we retain it only for as long as necessary for the purposes of communication.

1. Your rights

You may exercise your rights to access, rectification, objection, portability, and erasure of data both with us and with Facebook (Meta Platforms). Please note that Facebook (Meta Platforms) bears primary responsibility for the processing of Insight data ( ). You can find more information about your data subject rights on Facebook via the following link: https://de-de.facebook.com/privacy/policy).

1. Requirement to Provide Personal Data

You voluntarily provide the collected data to us or to Facebook (Meta). If you do not want your data to be processed, you should not visit our Facebook fan page.

For information on the purpose and scope of data collection, as well as the further processing and use of the data by Facebook, and your related rights and settings options for protecting your privacy, please refer to Facebook’s Privacy Policy (https://www.facebook.com/about/privacy/).

 

Instagram – Business Page

We operate a business page (known as an Instagram Business Page) on the Instagram platform, a service provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

We would like to expressly point out that you use the Instagram page and its features at your own risk.

1. Purpose of Processing and Legal Basis

Our Instagram page serves to communicate with prospective customers and users of our offerings, as well as to provide information about our company and our services. We process your data based on our legitimate interest pursuant to Art. 6(1)(f) of the GDPR in order to communicate with you and improve our visibility.

Our overriding legitimate interest lies in effectively and specifically addressing our target groups, as well as in improving our offerings and our visibility on a widely used platform.

1. Data Processing by Instagram

When you visit our Instagram page, Meta Platforms processes personal data. This includes:

• Your IP address,
• Information about your device and browser,
• Your interactions with our Instagram page (e.g., likes, comments, messages).

This data may be processed by Meta Platforms for its own purposes, e.g., to create user profiles and for personalized advertising. We have no influence over the processing carried out by Instagram.

Our Instagram page offers you the opportunity to send us messages, react to our posts, or comment on them. Please therefore consider which personal data you wish to share with us on the company page. If you do not wish to transmit your personal data to Meta, you can contact us at any time through other means (e.g., via the website, address, etc.).

Data processing by Instagram is subject to the privacy policies of Meta Platforms ( https://privacycenter.instagram.com/policy/ ).

1. Instagram Insights

We use the “Instagram Insights” feature, which provides us with anonymized statistics about the use of our Instagram page. These statistics are based on personal data that Instagram collects about your interactions with our page.
The legal basis for using Instagram Insights is our legitimate interest pursuant to Art. 6(1)(f) of the GDPR to analyze the use of our page and improve it for interested visitors to our company.

We are jointly responsible with Meta Platforms Ireland Limited for the operation of our Instagram page. You can view the joint responsibility agreement (“Page Controller Addendum”) here:
https://www.facebook.com/legal/terms/page_controller_addendum

1. Data Transfer to Third Countries

Meta Platforms may transfer your data to the United States or other third countries. Please note that these countries may not have a level of data protection comparable to that of the EU. Meta Platforms ensures an adequate level of data protection in accordance with the requirements of the GDPR through certification under the EU-U.S. Data Privacy Framework (DPF) and the use of Standard Contractual Clauses (SCCs) of the European Commission. For more information on data processing and the safeguards in place, please see Meta’s Privacy Policy at: https://privacycenter.instagram.com/policy.

1. Retention period

The controller has only limited influence over the deletion of personal data, as this is largely determined by Meta. Further information on this can be found at https://privacycenter.instagram.com/policy. With regard to personal data provided to us in the course of interactions (e.g., messages), we retain this data only for as long as is necessary for the purposes of communication.

1. Your Rights

You may exercise your rights to access, rectification, objection, data portability, and erasure of data both with us and with Facebook (Meta Platforms). Please note that Facebook (Meta Platforms) bears primary responsibility for the processing of Insight data. You can find more information about your data subject rights with Facebook via the following link: https://de-de.facebook.com/privacy/policy).

1. Requirement to Provide Personal Data

You provide the collected data to us or Instagram (Meta) voluntarily. If you do not wish for your data to be processed, you should not use our Instagram page.

For information on the purpose and scope of data collection, as well as the further processing and use of the data by Facebook, and your related rights and privacy settings, please refer to Instagram’s Privacy Policy (https://privacycenter.instagram.com/policy).

 

XING – Company Page

We use XING as a social network to connect and communicate with various groups of people, as well as to inform you about our company, our services, and news. New Work SE, Am Strandkai 1, 20457 Hamburg, Germany, is generally responsible for the processing of personal user data on the XING websites.

When you visit our XING page, XING processes certain information about you on its own responsibility, even if you do not have a XING user account or are not logged in. We have no influence over the processing of data by XING, nor do we have access to such data. XING informs you in its privacy policy at https://privacy.xing.com/de/datenschutzerklaerung about how your data is processed. If you wish to exercise your data subject rights with respect to XING, please contact XING directly. You can find further information on this via the link provided above.

As the operator of our XING page, we process your data only to the extent that we can view the data in your public profile on XING. Which information is visible depends on your profile settings. If you contact us via our XING page, we process your name as well as the content of your messages, inquiries, or other posts in order to process them and, if necessary, respond to them. We are solely responsible for such data processing. Depending on the nature of your inquiry, the processing of your personal data is based either on our legitimate interest pursuant to Art. 6(1)(f) of the GDPR or pursuant to Art. 6(1)(b) of the GDPR if your inquiry is aimed at entering into a contract. We store your personal data on our systems only if and for as long as it is necessary for processing purposes or if statutory retention obligations apply. If you wish to exercise your data subject rights with us, please use the contact options listed in this Privacy Policy.

LINKEDIN – Company Page

We use LinkedIn as a social network to connect with and communicate with various groups of people. LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, is generally responsible for the processing of personal user data on LinkedIn’s websites.

When you visit our LinkedIn pages, LinkedIn processes certain information about you, even if you do not have a LinkedIn user account or are not logged in to LinkedIn at all. LinkedIn explains how it processes your data in its Privacy Policy at https://www.linkedin.com/legal/privacy-policy?trk=d_org_guest_company_overview_footer-privacy-policy. As the operator of our LinkedIn page, we can view your public profile on LinkedIn. What we can view depends on what you have set in your profile. If you contact us via our LinkedIn page, we process your name and the content of your messages, inquiries, or other communications to us for the purpose of processing your communications accordingly and, if necessary, responding to them. Depending on the nature of your inquiry, we process your personal data based on our legitimate interest pursuant to Art. 6(1)(f) of the GDPR or pursuant to Art. 6(1)(b) of the GDPR if your inquiry is aimed at entering into a contract with us.

LinkedIn provides us with so-called Page Analytics data. This data consists of anonymous statistics that allow us to evaluate the quality of our LinkedIn page and our content. LinkedIn collects usage data regarding your interactions on our LinkedIn page and generates statistics from this data. We do not have access to the usage data. The processing of Page Analytics data is subject to so-called joint controllership; this agreement applies (https://legal.linkedin.com/pages-joint-controller-addendum). In it, LinkedIn commits to us to assume responsibility for this and to fulfill the rights of toward data subjects in accordance with the GDPR. The legal basis for this data processing is our legitimate interest pursuant to Art. 6(1)(f) of the GDPR to better understand how users interact with our LinkedIn page (e.g., number of followers, number of views of individual page sections, user statistics by age, geography, and language) and to be able to tailor and improve this page to suit our target audience. We store your personal data on our systems, i.e., outside of LinkedIn, if and as long as it is necessary for the purposes of collection or if there are legal retention obligations.

It is possible that LinkedIn Ireland Unlimited Company may transfer some of the collected data to other LinkedIn entities located outside the European Union, such as LinkedIn Corporation and its U.S. subsidiaries (“LinkedIn”) based in the United States. To ensure an adequate level of data protection, LinkedIn bases such data transfers on the European Commission’s Standard Contractual Clauses. Additionally, as of April 2024, LinkedIn Corporation is an active participant in the EU-U.S. Data Privacy Framework.

If you wish to exercise your rights as a data subject vis-à-vis LinkedIn, please contact LinkedIn directly. The link above will take you to a contact form through which you can contact LinkedIn. In other cases, please use the contact options listed at the beginning of this Privacy Policy.

6. Information Obligations Pursuant to Art. 13 GDPR for Other Data Subject Groups

In addition to this Privacy Policy for visitors to our website, we have provided further privacy notices to fulfill the information obligations under Article 13 of the GDPR for various groups of data subjects. You can access these via the links listed below:

• Prospective customers and customers: https://www.das-studio.de/informationspflicht-fuer-interessenten-kunden/
• Suppliers and service providers: https://www.das-studio.de/informationspflicht-fuer-lieferanten-dienstleister-sonstige/