Privacy Policy

We are delighted about the visit of our website. We would like to inform you below about the processing of your personal data on our website.

Controller

Inxmail GmbH

Wentzingerstr. 17, 79106 Freiburg

Germany

Contact:

Tel: +49 761 296979-0

E-mail: info@inxmail.de

Data Protection Officer

DDSK GmbH

Dr.-Klein-Str. 29, 88069 Tettnang

Germany

Contact:

Tel: +49 7542 94921-00

E-mail: datenschutz@inxmail.de

General information on data processing on the website

Automated data processing (log files etc.)

Our website can be visited without actively providing personal information about the user. However, every time our website is accessed, we automatically store access data (server log files), such as the name of the internet service provider, the operating system used, the website the user visited us from, the date and duration of the visit and the name of the file accessed, as well the IP address of the device used (for security reasons, such as to recognise attacks on our website) for a period of 7 days. This data is not merged with other data sources. We process and use the data for the following purposes: provision of the website, prevention and detection of errors/malfunctions, and the abuse of the website.

  • Data categories: Meta and communication data (e.g. IP address, date and time of access, time, type of HTTP request, website from which access is made (referrer URL), browser used and, if applicable, operating system of the accessing computer (user agent))
  • Purpose of the processing: Prevention and detection of errors/malfunctions, detection of abuse of the website
  • Legal basis: Legitimate interest according to Art. 6 para. 1 lit. f) GDPR
  • Legitimate interests: Fraud prevention to detect abuse of the website

Required cookies (functionality, opt-out links, etc.)

We use cookies on our website to enable the use of the basic functions on our website and to provide the service requested by the user. Cookies are a standard Internet technology for storing and retrieving information for website users. Cookies represent information and/or data that can be stored on the user's end device, for example. With classic cookie technology, the user's browser is instructed to store certain information on the user's device when a specific website is accessed.

Strictly required cookies are used to provide a digital service expressly requested by the user, e.g:

  • Cookies for error analysis and security purposes
  • Cookies for storing logins
  • Cookies for storing data in online forms if the form extends over several pages
  • Cookies for saving (language) settings
  • Cookies to store articles in the shopping basket by users to complete the purchase
  • Cookies for storing consent or withdrawal (opt-in, opt-out)

Some of the cookies used (session cookies) are erased after the end of the browser session, i.e. after closing the browser.

Cookies can be erased by users afterwards to remove data that the website has stored on the user's computer.

The data processing described may also relate to information that is not personal but constitutes information within the meaning of the German Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz – "TDDDG”). In these cases, this information may be necessary for the use of an expressly requested service and may therefore be stored in accordance with § 25 TDDDG.

  • Legal basis: Legitimate interests (Art. 6 para. 1 lit. f) GDPR in conjunction with § 25 para. 2 no. 2 TDDDG), consent (Art. 6 para. 1 lit. a) GDPR in conjunction with § 25 para. 1 TDDDG
  • Legitimate interests: Storage of opt-in preferences, ensuring the functionality of the website, maintaining user status across the entire website

Consent Management Platforms (Consent Management)

We use a consent management procedure on our website to store and manage your consent regarding cookies and tracking technologies. This is done to comply with data protection requirements.

We record the time at which you gave your consent and identify you and your device so that we can correctly associate your consent with you.

You can manage your preferences yourself and change or withdraw your consent at any time.

  • Data categories: Consent data (consent ID and number, time consent was given, opt-in or opt-out), meta and communication data (e.g. device information, IP addresses)
  • Purposes of processing: Consent management; storage and documentation of consents and withdrawals; management of consent-based services; fulfillment of accountability
  • Legal basis: Legal obligation (Art. 6 para. 1 lit. c) GDPR in conjunction with Art. 7 GDPR)

Usercentrics

  • Recipient: Usercentrics GmbH, Sendlinger Straße 7, 80331 München, Germany
  • Third country transfer: Does not take place.
  • Privacy policy: https://usercentrics.com/de/datenschutzerklaerung/
  • Cookies Used: uc_cross_domain_data_bFgpFFMm, uc_gcm, uc_interaction_type,
    uc_ui_version, uc_user_country uc_user_interaction,
    uc_settings
  • Associated Domains: usercentrics.eu; app.usercentrics.eu; www.inxmail.de

Hosting

Our website is hosted by an external service provider. Data of visitors to our website, in particular log files, are stored on the servers of our service provider. By using a specialized service provider, we can provide our website efficiently. The hosting provider we use does not process the data for its own purposes.

  • Data categories: User data (e.g. websites visited, interest in content, access times), meta and communication data (e.g. device information, IP addresses)
  • Purposes of the processing: Correctly presentation and optimization of the website, faster and location-independent accessibility of the website,
  • Legal basis: Legitimate interests (Art. 6 para. 1 lit. f) GDPR)
  • Legitimate interests: Prevention of unplanned availability time, high scalability, reduction of the bounce rate on the website

Hosting Provider

  • Recipient: Mittwald CM Services GmbH & Co. KG, Königsberger Strasse 4-6, 32339 Espelkamp, Germany
  • Third country transfer: Does not take place.
  • Privacy policy: https://www.mittwald.de/datenschutz

Website support and consulting, web agency

We have commissioned a web agency to provide support and advice for services and applications on our website. This agency supports us in all activities related to the design and functionality of our website. In this context, the web agency selected by us receives the access data for our website in order to make necessary adjustments and changes, such as the design of forms or other programming activities.

  • Data categories: Usage data (e.g. access times), Meta and communication data (e.g. device information, IP addresses), Contact data (e.g. email address), Content data (e.g. text information)
  • Purposes of processing: Support for web analysis and optimization, analysis of user behavior on the website (website interaction) for web optimization and reach measurement, checking the utilization of the website
  • Legal basis: Legitimate interests (Art. 6 para. 1 lit. f) GDPR)
  • Legitimate interests: Support and assistance with website maintenance through high level of technical expertise, efficiency through outsourcing

Web agency

Web analysis and optimization

We use procedures on our website to analyze user behavior and measure reach. For this purpose, information about visitors’ behavior, interests or demographic characteristics is collected to determine whether and where our website needs to be optimized or adapted (e.g. website forms, improved placement of buttons or call-to-action buttons, etc.).

We can also measure the click and scroll behavior of website visitors. Among other things, this helps us recognize when our website, its functions or its content are visited most frequently.

  • Data categories: Usage data (e.g. websites visited, interest in content, access times), demographic characteristics (age, gender), meta and communication data (e.g. device information, anonymized IP addresses, location data), contact data (e.g. e-mail address), content data (e.g. text details)
  • Purposes of processing: Checking the status of target achievement (success control) of all online activities: Analysis of user behavior on the website (website interaction) for web optimization and reach measurement, checking the utilization of the website, lead evaluation, sales increase, budget control
  • Legal basis: Consent (Art. 6 para. 1 lit. a) GDPR

Google Analytics

  • Recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
    Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
  • Third country transfer: Based on the adequacy decision of the European Commission for the country USA
  • Privacy policy: https://policies.google.com/privacy?hl=en-US
  • Cookies Used: _ga ,_ga_KXF31H5J7J
  • Associated Domains: analytics.google.com; google-analytics.com; googletagmanager.com (gtag.js)

LinkedIn Insight Tag

  • Recipient: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland
    LinkedIn Corporation, 1000 W Maude Ave Sunnyvale, CA, 94085-2810, USA
  • Third country transfer: Based on the adequacy decision of the European Commission for the country USA
  • Privacy policy: https://de.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy
  • Cookies Used: __cf_bm, bcookie, li_gc, lidc
    Depending on the LinkedIn configuration, additional cookies may be used, including AnalyticsSyncHistory, lms_analytics, lms_ads, li_fat_id, li_sugr and User-MatchHistory.
  • Associated Domains: analytics.google.com; google-analytics.com; googletagmanager.com (gtag.js)

SalesViewer

  • Recipient: SalesViewer GmbH, Huestraße 30, 44787 Bochum, Germany
  • Third country transfer: Does not take place.
  • Privacy policy: https://www.salesviewer.com/de/datenschutzerklaerung/
  • Cookies Used: pageViewCount – Session Storage, Domain www.inxmail.de
    According to the provider, an additional opt-out cookie may be stored when the opt-out function is used.
  • Associated Domains: www.inxmail.de (pageViewCount); salesviewer.com

Online marketing

We process personal data to increase awareness of and continuously improve our online offerings. For this purpose, we use cookies and similar technologies to store information about users. This information includes, for example, content viewed, websites visited and settings. Our aim is to review the effectiveness of our marketing measures and identify potential interests so that we can better tailor our offerings to users’ needs. The data is then modified so that neither we nor the provider of the tool used can identify the users’ actual identities. The modified data is often stored in user profiles.

If user profiles are stored, the data may be read and supplemented when users visit other online offerings that use the same online marketing method. The data may also be supplemented on the server of the online marketing provider.

We can determine the success of our ads based on aggregated data made available to us by the provider of the online marketing method (known as conversion measurement). As part of this conversion measurement, we can determine whether a marketing measure led to a purchase decision by a visitor to our online offering. This evaluation serves to analyze the success of our online marketing.

In addition to conventional methods on our website, we also use search engine marketing and social media marketing. The evaluation is provided to us in the form of statistics via our tracking tool and serves to analyze the success of our online activities (success monitoring).

  • Data categories: User and interaction data (e.g. websites visited, interest in content, access times), meta and communication data (e.g. device information, anonymized IP addresses), location data if applicable, contact data (e.g. email addresses)
  • Purposes of processing: Marketing (in some cases, also interest-based and behavioral marketing), conversion measurement, audience creation, click tracking, development of marketing strategies, increasing campaign efficiency, expanding reach, reach analysis and statistical analysis
  • Legal basis: Consent (Art. 6 para. 1 lit. a) GDPR

Daisycon

Google

Google Ads / Google AdSense/ Google Double Click (Google Marketing Infrastructure)

Google Ads Conversion Tracking

Google Ads Remarketing

LinkedIn Ads

Microsoft Advertising

  • Recipient: Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland

Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

Microsoft Conversion Tracking

  • Recipient: Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland

Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

Presence on social media

We use social media platforms to increase our visibility and to contact prospective customers and/or applicants, for example, via the messaging service available on those platforms. We use these channels to share information about our company, organize events and communicate important news.

Our goals are to increase our visibility, encourage interaction, acquire new customers and improve our offerings. Based on users’ behavior, such as their stated interests (likes, shares), social media platform operators create so-called user profiles. These profiles are used to tailor ads to the interests of target groups. When users are active on social media channels, cookies or other technologies are regularly stored on their devices, sometimes regardless of whether they are registered users of the social network.

If you follow our channel on the relevant social media platform, both we and the operator of the online service process your data for our own purposes.

  • Data categories: User names (e.g. surname, first name), contact data (e.g. e-mail address), content data (e.g. text details, photographs, videos), usage and interaction data (e.g. websites visited, interests, likes, shares, access times), meta and communication data (e.g. device information, IP address, location data if applicable)
  • Purposes of the processing: Increasing reach, awareness-raising activities, rapid networking
  • Legal basis: Legitimate interests (Art. 6 para. 1 lit. f) GDPR), consent (Art. 6 para. 1 lit. a) GDPR)
  • Legitimate interests: Interaction and communication on social media presence, profit increase, insights about target groups

Facebook

Instagram

Kununu

LinkedIn

YouTube

Xing

Plugins and integrated third-party content

We have integrated functions and content obtained from third-party providers into our website. Our website includes functions and elements that are obtained from third-party providers. For example, videos, images, buttons, map services (Maps) or posts (hereinafter termed “content”) can be integrated.

If this third-party content is accessed by website visitors (e.g. by clicking or playing it), information and data are collected, linked to the website visitor’s end device in the form of cookies or other technologies (e.g. pixels, JavaScript commands or WebAssembly) and transmitted to the server of the third-party provider used. As a result, the third-party provider receives usage and interaction data from the website visitor.

In order to protect the personal data of website visitors, we have taken protective measures to prevent the automatic transmission of this data to the third-party provider. This data is only transmitted when users actively use the buttons and click on the third-party content.

  • Data categories: Usage data (e.g. websites visited, interests, access time), meta and communication data (e.g. device information, IP address)
  • Purposes of processing: Sharing posts and content, interest- and behavior-based marketing, evaluation of statistics, cross-device tracking, increasing reach in social media
  • Legal basis: Consent (Art. 6 para. 1 lit. a) GDPR), legitimate interests (Art. 6 para. 1 lit. f) GDPR)

Friendly Captcha

  • Recipient: Friendly Captcha GmbH, Am Anger 3-5, 82237 Wörthsee, Germany
  • Legal Basis: Legitimate interests (Art. 6 para. 1 lit. f) GDPR)
  • Legitimate interests: Protection against Bot Spam
  • Third country transfer: Does not take place.
  • Privacy policy: https://friendlycaptcha.com/de/legal/privacy-end-users/
  • Associated Domains: eu.frcapi.com; global.frcapi.com

Google Maps

  • Recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
    Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
  • Legal Basis: Consent (Art. 6 para. 1 lit. a) GDPR)
  • Third country transfer: Based on the adequacy decision of the European Commission for the country USA
  • Privacy policy: https://policies.google.com/privacy?hl=en-US
  • Associated Domains: maps.googleapis.com; mapsresources-pa.googleapis.com; maps.gstatic.com; fonts.gstatic.com; other map and tile servers operated by Google, where applicable

Google Tag Manager

  • Recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
    Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
  • Legal Basis: Legitimate interests (Art. 6 para. 1 lit. f) GDPR)
  • Legitimate interests: Coordination of different tools, management, ease of use and presentation
  • Third country transfer: Based on the adequacy decision of the European Commission for the country USA
  • Privacy policy: https://policies.google.com/privacy?hl=en-US
  • Associated Domains: googletagmanager.com; googletagmanager.com/gtm.js

SlideShare

SoundCloud

  • Recipient: SoundCloud Global Limited & Co. KG, Rheinsberger Str. 76/77, 10115 Berlin, Germany
  • Legal Basis: Consent (Art. 6 para. 1 lit. a) GDPR)
  • Third country transfer: Does not take place.
  • Privacy policy: https://soundcloud.com/pages/privacy
  • Cookies Used: ddSession_datadome
  • Associated Domains: soundcloud.com; w.soundcloud.com; sndcdn.com

YouTube

  • Recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
    Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
  • Legal Basis: Consent (Art. 6 para. 1 lit. a) GDPR)
  • Third country transfer: Based on the adequacy decision of the European Commission for the country USA
  • Privacy policy: https://policies.google.com/privacy?hl=en-US
  • Associated Domains: youtube.com; youtube-nocookie.com, if Privacy-Enhanced Mode is used; googlevideo.com; ytimg.com

Survey services

From time to time, we conduct surveys and polls on our online offerings (hereinafter referred to as “surveys”). This helps us improve our offerings and better address our customers’ needs. It is not necessary for us to be able to determine whether feedback can be attributed to a specific person. Before the survey responses are evaluated, the data we process to provide and technically conduct our surveys is anonymized. Participation in the survey is voluntary.

  • Data categories: Meta and communication data (e.g. device information, IP address), Usage data (e.g. interests, access times), Master data (e.g. name, address), Contact data (e.g. e-mail address, telephone number)
  • Purposes of processing: Marketing, customer loyalty and new customer acquisition, improvement and optimization of the offer
  • Legal basis: Consent (Art. 6 para. 1 lit. a) GDPR)

Microsoft Forms

  • Recipient: Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland

Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

Newsletter and mass communication (with tracking)

We offer a newsletter containing information and updates. An email address is required to subscribe. The newsletter is only sent to recipients who have completed the so-called double opt-in procedure and have given their express consent. A subscription can be cancelled at any time. An unsubscribe link (opt-out link) is included at the end of each newsletter.

We store the IP address and the time of subscription and unsubscription to ensure compliance with data protection requirements.

Our newsletters are designed to enable us to obtain insights into improvements, target groups and our subscribers’ reading behavior. We can associate newsletter opens and clicks with your recipient profile only if you have given separate consent to tracking in our newsletter (so-called “Tracking Permission”). Tracking Permission can be withdrawn at any time, independently of the newsletter subscription. Without Tracking Permission, we cannot draw conclusions about the usage behavior of individual subscribers.

  • Data categories: Master data (e.g. name, address), contact data (e.g. e-mail address, telephone number), meta and communication data (e.g. device information, IP address), usage data (e.g. interests, access times)
  • Purposes of processing: Marketing, increase in customer loyalty and new customer acquisition, analysis and evaluation of the success of the campaign
  • Legal basis: Consent (Art. 6 para. 1 lit. a) GDPR)

Bringe

  • Recipient: Bringe Informationstechnik GmbH, Rudolf-Link-Straße 6, 76228 Karlsruhe, Germany
  • Third country transfer: Does not take place.
  • Privacy policy: https://bringe.com/home

Microsoft

  • Recipient: Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland

Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

Interlake

Hetzner

SysEleven

Advertising communication

We also use data provided to us, for example, in connection with an order or the engagement of a service, for advertising purposes. In particular, we use it to inform recipients through various channels about news from us or our range of offerings. We contact recipients for advertising purposes in accordance with statutory requirements and, where required, after obtaining their consent.

If recipients do not wish to receive our advertising, they can let us know at any time. We will be happy to comply with their request.

  • Data categories: Master data (e.g. name, address), contact data (e.g. e-mail address, telephone number if applicable)
  • Purposes of the processing: Direct marketing
  • Legal basis: Consent (Art. 6 para. 1 lit. a) GDPR), legitimate interests (Art. 6 para. 1 lit. f) GDPR)
  • Legitimate interests: Customer loyalty and acquisition of new contacts or contractual partners, information about similar goods and services

Prize draws and competitions

We use our online presence to carry out prize draws and/or competitions. To do so, we process the data from the competition participants so we can carry out the competition in question. This also includes the data that we need to tell the winners the outcome and distribute the prize.

Depending on the type of competition, contributions by or about the participants may be published, such as reports on the competition in question or if a vote on a contribution submitted by the participant forms part of the competition. The participant’s name will also be published as part of this. The data processed in each individual case depends on the competition actually run and the data we receive from the participant.

  • Data categories: Master data (e.g. name, address), contact data (e.g. e-mail address, telephone number), content data (e.g. text entries, photos, videos)
  • Purposes of the processing: Implementation of the competition, incl. disbursement of prizes and announcement of the winners in various media
  • Legal basis: Consent (Art. 6 para. 1 lit. a) GDPR)

Events and activities

On our website, visitors have the opportunity to register for events and functions. The information collected by us and required for the initiation and fulfillment of the contract is marked as mandatory. The provision of additional data is voluntary.

  • Data categories: Master data (e.g. name, address), contact data (e.g. e-mail address, telephone number), transaction data (bank details, invoices, payment history), meta and communication data (e.g. device information, IP addresses)
  • Purposes of processing: Contract initiation and execution
  • Legal basis: Contract initiation and execution (Art. 6 para. 1 lit. b) GDPR), consent (Art. 6 para. 1 lit. a) GDPR)

CAS genesisWorld

Microsoft Teams

  • Recipient: Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland

Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

eCommerce

Inxmail Ordering Process

Through our website, you can purchase our Inxmail products. We process the personal data you provide insofar as it is necessary to establish, perform and administer the contractual relationship.

When you use the ordering process, the data you enter in the input fields is collected and processed to handle your request and conclude the contract.

We also collect data so that we can provide our customers with advertising or discounts tailored to their interests.

Where necessary, we share data with third parties who assist us with processing, or where we are legally required to disclose certain data.

  • Data categories: Master data (e.g. name, address, country), contact data (e.g. e-mail address), login data (username and password), where applicable, other content data (e.g. text entries), metadata and communication data (e.g. device information, IP addresses), usage data (e.g. access times), payment data (e.g. bank details)
  • Purposes of processing: Contract initiation and execution interest-based advertising, where applicable, customer account-related rewards or discounts, outsourcing
  • Legal basis: Contract initiation and performance (Art. 6 para. 1 lit. b) GDPR), legitimate interests (Art. 6 para. 1 lit. f) GDPR)
  • Legitimate interests: Simplifying workflows, efficient use of resources, market research, marketing

Inxmail Demo

Through our website, you can register for a personalized, free demo of our software. In connection with this demo account, we process the personal data required to provide and administer the account.

The data collected when you request a demo account is used exclusively for the purposes stated above and is only shared with third parties to the extent necessary to provide the demo.

  • Data categories: Master data (e.g. first and last name), contact data (e.g. email address, telephone number), login data (email address, password), metadata and communication data (e.g. device information, IP addresses), usage data (e.g. access times), and, where applicable, content data
  • Purposes of processing: Contract initiation and performance
  • Legal basis: Contract initiation and performance (Art. 6 para. 1 lit. b) GDPR

CAS genesisWorld

Inxmail Trial Account

Through our website, you can register for a personalized, free trial of our software. In connection with this trial account, we process the personal data required to provide and administer the account.

The data collected when you request a trial account is used exclusively for the purposes stated above and is only shared with third parties to the extent necessary to provide the trial.

We also send a series of accompanying emails in connection with the trial account. These emails are used to confirm and activate the trial account, support you in using the software, and provide further information about the trial period and the features of our software.

  • Data categories: Master data (e.g. first and last name), contact data (e.g. email address, telephone number), where applicable, payment data, login data (email address, password), metadata and communication data (e.g. device information, IP addresses), usage data (e.g. access times)
  • Purposes of processing: Contract initiation and performance
  • Legal basis: Contract initiation and performance (Art. 6 para. 1 lit. b) GDPR

Internal area and digital services

Partner Portal and Customer Login: Registration

We offer the option of setting up a user account on our online offering in the Inxmail Partner Portal or in the internal customer area. Registration in the Partner Portal is generally open to all interested parties. After registration, the Partner Management team reviews the information provided and activates access if the requirements for a partnership with Inxmail are met.

Access to the Partner Portal provides, among other things, general information, specialist articles, event announcements, and information about Inxmail’s email marketing products and services. As part of the registration process, we collect the data from interested visitors that we need to provide a user account and the associated functions.

To protect the internal area, we collect IP addresses and the time of access to prevent misuse of user accounts and unauthorized use. We do not pass this data on to third parties unless this is necessary to pursue our claims or we are legally obliged to do so.

  • Data categories: Master data (e.g. name, address), contact data (e.g. email address, telephone number), login data (username and password), where applicable, other content data (e.g. text entries), metadata and communication data (e.g. device information, IP addresses), usage data (e.g. access times)
  • Purposes of the processing: Simplification of website functionality, contract performance, customer retention, verification of customer data for customer login, and verification of authorization
  • Legal basis: Consent (Art. 6 para. 1 lit. a) GDPR)

Contact us

On our online offering, we offer the option of contacting us directly or requesting information via various contact options. We use a management tool for these enquiries so that we always have an overview of contact that has been made with us.

In the event of contact being made, we process the data of the person making the enquiry to the extent necessary for answering or handling their enquiry. Which data is processed depends on the way in which contact is made with us.

  • Data categories: Master data (e.g. name, address), contact data (e.g. email address, telephone number), content data (e.g. text input, photographs, videos), usage data (e.g. interests, access times), meta and communication data (e.g. device information, IP address).
  • Purposes of processing: Processing requests
  • Legal basis: Consent (Art. 6 para. 1 lit. a) GDPR), fulfillment or initiation of a contract (Art. 6 para. 1 lit. b) GDPR)

CAS genesisWorld

Downloads Knowledge / White Papers

We offer the option to download materials from our online offering in order to provide our visitors with up-to-date information or information relevant to them. In some cases, visitors can download PDF files without the download being recorded by our system. In such cases, no tracking or statistical analysis takes place.

In some cases, before a download is made available, we collect personal data, including IP addresses, through a form and make access to our free services conditional on subscribing to our newsletter. In these cases, consent is obtained through a double opt-in procedure both for processing user data for the download and, separately, for subscribing to download-related emails. Each consent may be withdrawn at any time, independently of the other.

The download is then initiated as soon as the double opt-in confirmation link is clicked.

  • Data categories: Master data (e.g. name, address), contact data (e.g. email address), content data (e.g. text entries, photographs, videos), usage data (e.g. interests, access times), metadata and communication data (e.g. device information, IP address)
  • Purposes of processing: Handling of inquiries
  • Legal basis: Consent (Art. 6 para. 1 lit. a) GDPR); fulfillment or initiation of a contract (Art. 6 para. 1 lit. b) GDPR)

Online meetings, webinars, online events

We make use of the opportunity to hold online meetings and/or webinars, as well as events. To do so, we use offerings provided by other carefully selected providers. When these offerings are actively used, data regarding the participants in the communication is processed and stored on the servers of the third-party providers used, insofar as this data is necessary for the communication process.

If a recording and/or transcription is made, participants will be informed at the beginning.

  • Data categories: Master data (e.g. surname, first name), contact data (e.g. e-mail address), content data (e.g. text input), meta and communication data (e.g. device information, IP addresses)
  • Purposes of processing: Processing of enquiries, increasing efficiency, promoting cross-company and cross-location cooperation
    Traceability and analysis of content; documentation of decisions and outcomes
  • Legal basis: Consent (Art. 6 para. 1 lit. a) GDPR)

Go ToMeeting

Microsoft Teams

  • Recipient: Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland

Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

Careers Page

Our careers page at https://jobs.inxmail.de/ provides visitors to our website with a comprehensive overview of our current vacancies. If you are interested in one of the advertised positions, you can apply for it by email or using the online application form provided. We process the data you submit in connection with your application to assess your suitability for the position (or, where applicable, for other vacancies within the corporate group) and to conduct the application process. We also process personal data that you have published online and that we are permitted to process under applicable data protection laws. This may include, for example, your résumé and employment history.

If you contact us, we process your data to the extent necessary to respond to your inquiry or process your application.

  • Categories of data subjects: Applicants
  • Data categories: Master data (e.g. name, address), contact data (e.g. email address, telephone number), content data (e.g. résumé, text entries, photographs, videos), usage data (e.g. interests, access times), metadata and communication data (e.g. device information, IP address)
  • Purposes of processing: Handling applications
  • Legal basis: Fulfillment or initiation of a contract (Art. 6 para. 1 lit. b) GDPR)

HR Works

  • Recipient: HRworks GmbH, Waldkircher Str. 28, 79106 Freiburg, Germany
  • Third country transfer: Does not take place.
  • Privacy policy: https://www.hrworks.de/unternehmen/sicherheit-bei-hr-works/
  • Associated Domains: AWSALB, AWSALBCORS,cure und SameSite=None gesetzt. | HrwMeJobApplicationManagementSession

Hosting Provider

Amazon CloudFront (Content Delivery Network)

Further mandatory information on data processing

Data transfer

We transfer the personal data of website visitors for internal purposes (e.g. for internal administration or to the HR department in order to comply with legal or contractual obligations). Internal data transfer or the disclosure of data only occurs to the extent necessary, under the pertinent data protection provisions.

It may be necessary for us to disclose personal data in order to perform contracts or to fulfill a legal obligation. If we are not receiving the personal data, it may not be possible to conclude the contract with the data subject.

If your data is processed outside the EU/EEA, in third countries (e.g. USA), we ensure that the legal requirements of Art. 44 et seq. GDPR are fulfilled. We take additional measures to ensure the highest possible level of protection for the personal data of data subjects. The guarantee applicable to the transfer to third countries is specified in our privacy policy under the respective recipients.

Data processing

Recipients of personal data may act as data processors. We have concluded "data processing agreements" with them in accordance with Art. 28 para. 3 GDPR. This means that the processors may only process your personal data on explicit instruction. Processors take adequate technical and organizational measures to process your data securely and in accordance with our instructions.

Storage period

We store visitors data for as long as necessary to provide our services or as required under laws or regulations issued by the European legislature or another legislator to which we are subject. In all other cases, we delete personal data once the purpose for which it was collected has been fulfilled, except for data that we are required to retain to meet legal obligations. For example, tax and commercial record-keeping requirements oblige us to retain documents such as contracts and invoices for a certain period.

The storage and further processing of user data that is not strictly necessary to provide the digital service are based on consent within the meaning of Article 6(1)(a) GDPR (where applicable, in conjunction with Section 25(2), No. 1 TDDDG).

Automated decision-making (including profiling)

We do not use automated decision-making or profiling in accordance with Art. 22 GDPR.

Legal bases

The relevant legal bases primarily arises from the GDPR. They are supplemented by national laws of the member states and can, if applicable, be applied alongside or in addition to the GDPR.

  • Consent: Art. 6 para.1 lit. a) GDPR serves as the legal basis for data processing activities for which we have obtained consent for a specific processing purpose.
  • Performance of a contract: Article 6 (1) (b) serves as the legal basis for processing required to perform a contract to which the data subject is a contractual party or for taking steps prior to entering into a contract, at the request of the data subject.
  • Legal obligation: Article 6 (1) (c) GDPR is the legal basis for processing that is required to comply with a legal obligation.
  • Vital interests: Article 6 (1) (d) GDPR serves as the legal basis if the processing is necessary to protect the vital interests of the data subject or another natural person.
  • Public interest: Article 6 (1) (e) GDPR serves as the legal basis for processing that is necessary to perform a task in the public interest or to exercise public force that is transferred to the controller.
  • Legitimate interest: Article 6 (1) (f) GDPR serves as the legal basis for processing that is necessary to protect the legitimate interests of the controller or a third party, provided this is not out-weighed by the interests or fundamental rights and funda-mental freedoms of the data subject that require personal da-ta to be protected, particularly if the data subject is a child.

Rights of data subjects

  • Right to information: Pursuant to Art. 15 GDPR, data subjects have the right to request confirmation as to whether we are processing data concerning them. They can request information about this data as well as the further information listed in Art. 15 para. 1 GDPR and a copy of their data.
  • Right to rectification: Pursuant to article 16 GDPR, data subjects have the right to request that data relating to them, and that we process, be rectified or completed.
  • Right to erasure and restriction: Pursuant to article 17 GDPR, data subjects have the right to request that data relating to them be erased without delay. Alternatively, they can request that we restrict the processing of their data, pursuant to article 18 GDPR.
  • Right to data portability: Pursuant to article 20 GDPR, data subjects have the right to request that data made available to us by them be provided and transferred to another controller.
  • Right to lodge a complaint: In addition, data subjects have the right to lodge a complaint with the supervisory authority responsible for them, under article 77 GDPR.
  • Right to object: If personal data is processed on the basis of legitimate interests pursuant to article 6 (1) (1) (f) GDPR, under article 21 GDPR data subjects have the right to object to the processing of their personal data, provided there are reasons for this that arise from their particular situation or the objection relates to direct advertising. In the latter case, data subjects have a general right to object that is to be put into effect by us without a particular situation being stated.

Withdrawal of consent

Some data processing procedures can only be carried out with the express consent of the data subject. You have the option to withdraw any consent you have already given at any time without providing a reason. All you need to do is send an email to: datenschutz@inxmail.de.

The legality of the data processing carried out up to the point of withdrawal shall remain unaffected by the withdrawal.

External links

Our website contains links to the online offerings of other providers. We would like to point out that we have no influence on the content of the linked websites and the compliance with data protection regulations by their providers.

Amendments

We reserve the right to amend this information on data protection, in compliance with the applicable data protection provisions, if changes are made to our online offering so that it complies with the legal requirements.

This privacy policy was drawn by

DDSK GmbH

www.ddsk.de

Additional Information on the Processing of Customer and Supplier Data

Information-Obligations-Customers-and-Suppliers.pdf

Data protection information for applicants

1. General

Thank you for your interest in Inxmail. Below, we provide information about how we process your personal data as part of the application process.

1.1 Responsible body and data protection officer

Inxmail GmbH
Wentzingerstr. 17
D-79106 Freiburg/Germany

Email: info@inxmail.de
Website: www.inxmail.de

Phone: +49 761 296979-0
Fax: +49 761 296979-9

You can find further information about our company, details of the persons authorized to represent it, and further contact options in the legal notice on our website: www.inxmail.de/en/imprint

We have an external data protection officer.
You can contact them using the following contact details:
DDSK GmbH
Stefan Fischerkeller
Phone: +49 7542 94921-00
Email: datenschutz@inxmail.de

2. Processing framework

2.1 Security of data processing

We use technical and organizational security measures to protect your data managed by us against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Our security measures are continuously improved in line with technological developments.

For security reasons and to protect the transmission of your confidential content, the site uses SSL (Secure Socket Layer) encryption in conjunction with the highest level of encryption supported by your browser. This is usually 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether a single page of our website is transmitted in encrypted form by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

When SSL encryption is activated, the data you transmit to us cannot be read by third parties. We would like to point out that data transmission over the Internet (e.g., when communicating by email) may be subject to security vulnerabilities. It is not possible to completely protect data from access by third parties.

2.2 Sources and categories of data

We process the data you have sent us in connection with your application in order to assess your suitability for the position (or other open positions in our company, if applicable) and to carry out the application process. In addition, we process personal data that you have published on the Internet and that we are permitted to process within the framework of data protection laws. This includes, for example, your resume, career history, etc.

Note: Please only send us special categories of personal data (e.g., health data) if they are necessary for the application or if you wish to provide them voluntarily.

2.3 Purposes and legal basis for the processing of data

We process your personal data in compliance with the provisions of the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and other relevant laws.

The legal basis for the processing of your personal data in this application process is primarily Art. 6 (1) (b) GDPR (implementation of pre-contractual measures). Where relevant, processing is also carried out in accordance with § 26 BDSG (data processing for the purposes of the employment relationship).

If the data is required for legal purposes after the application process has been completed, data processing may be carried out on the basis of the requirements of Art. 6 GDPR, in particular for the purpose of pursuing legitimate interests pursuant to Art. 6 (1) (f) GDPR. Our interest then lies in asserting or defending claims.

Insofar as special categories of personal data are processed in accordance with Art. 9 (1) GDPR, this serves the purpose of establishing an employment relationship, exercising rights, or fulfilling legal obligations. This is done on the basis of Art. 9 (2) b) GDPR in conjunction with § 26 (3) BDSG. In addition, the processing of health data may be necessary for the assessment of your ability to work in accordance with Art. 9 (2) h) GDPR in conjunction with § 22 (1) b) BDSG.

In the event that we fill a position for which you have applied elsewhere, we will ask you if you would like to be included in our applicant pool if you are fundamentally interested in working with us. We will then continue to process your application data, provided we receive your express consent to do so. The legal basis for the processing is Art. 6 (1) (a) GDPR. This consent can be revoked in writing at any time without giving reasons. The revocation must be sent by mail to the responsible office (Inxmail GmbH, Team Human Resources, Wentzingerstr. 17, 79106 Freiburg, Germany) or by email to: jobs@inxmail.de.

Unless consent is revoked, it remains valid until revoked, but for a maximum of two years. It is voluntary; there are no disadvantages arising from the refusal of consent or its revocation. The legality of the data processing carried out until revocation remains unaffected by the revocation.

2.4 Consequences of not providing data

As part of your application, you must provide the personal data that is necessary for the establishment of the employment relationship or that we are legally obliged to collect.

2.5 Recipients of data within the EEA

Within our company, only those persons and departments (e.g., specialist department, management, human resources department) who need your personal data to carry out the application process will have access to it. After we receive your application, the human resources department will review your documents. Suitable applications will be forwarded to the relevant department managers; the next steps will then be coordinated.

We also use the recruiting/HR software of HRworks GmbH (HRworks) as a service provider (processor) for the application process. HRworks may obtain knowledge of personal data in the course of maintenance and support. A data processing agreement is in place for this purpose.

According to HRworks, hosting takes place in the EEA, specifically via an AWS data center in Ireland. As a matter of principle, no data is transferred to countries outside the EEA; if, in individual cases, subcontractors outside the EEA are used, this is only done in compliance with legal requirements (e.g., through appropriate safeguards such as EU standard contractual clauses).

2.6 Storage periods

In the event of rejection, applicant data will be deleted no later than 6 months after completion of the application process, unless longer storage is necessary to assert or defend claims.

If you have consented to the further storage of your personal data for other job vacancies or for a period exceeding the current application process, we will transfer your data to our applicant pool. The data will be deleted after two years.

If you have been accepted for a position as part of the application process, the data will be transferred from the applicant data system to our personnel information system.

3. Rights as a “data subject”

You can request information about the data stored about you at the above address. In addition, under certain circumstances, you can request the correction or deletion of your data. You may also have the right to restrict the processing of your data and the right to receive the data you have provided in a structured, commonly used, and machine-readable format.

Furthermore, you have the right to object to the processing of your data within the framework of the legal requirements. The same applies to the right to data portability.

You also have the option of lodging a complaint with the above-mentioned data protection officer or a data protection supervisory authority.

The data protection supervisory authority responsible for us is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg /
The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
P.O. Box 10 29 32, 70025 Stuttgart, Germany
Heilbronner Straße 35, 70191 Stuttgart, Germany
Phone: +49 711 615541-0
Fax: +49 711 615541-15
Email: poststelle@lfdi.bwl.de
Website: www.baden-wuerttemberg.datenschutz.de