Privacy

We take the protection of your personal data seriously and ensure that the collection, processing and use of your data on our website complies with applicable data protection laws. Although we carefully review the content of external links, we cannot accept any responsibility for third-party content accessible through such links.
Below, we explain what data is collected when you visit our website and how this data is processed.

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

aconnic AG
Leopoldstraße 180
80804 Munich
Germany
Phone: +49 89 3 8998 7770
Email: office@aconnic.com

Where individual services or content on this website are provided by aconnic system Germany GmbH, or expressly relate to that company, the controller within the meaning of the GDPR may also be:

aconnic system Germany GmbH
Obere Hauptstraße 10
09232 Hartmannsdorf
Germany
Phone: +49 3722 7351 0
Email: office@aconnic.com

The determining factor in each case is which company decides on the purposes and means of the specific processing activity.

Our Data Protection Officer is:

dsg Datenschutz GmbH
Tobias Marx
Zeppelinstraße 9
89231 Neu-Ulm
Germany
Email: datenschutz@dsg-ulm.de

We process personal data only where there is a valid legal basis for doing so. Depending on the specific processing activity, the legal basis may include:

Article 6(1)(a) GDPR, where you have given your consent, for example for certain cookies, tracking, analytics, marketing or external media services;

Article 6(1)(b) GDPR, where processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract, for example in connection with enquiries, job applications or other communications with us;

Article 6(1)(c) GDPR, where processing is necessary to comply with a legal obligation to which we are subject;

Article 6(1)(f) GDPR, where processing is necessary for the purposes of our legitimate interests or those of a third party, provided that your interests or fundamental rights and freedoms do not override those interests. Our legitimate interests may include, in particular, ensuring the secure and reliable operation of our website, technical administration, IT security, responding to enquiries, establishing, exercising or defending legal claims, and measuring and optimising the reach and performance of our website and services where consent is not required.

Where information is stored on or accessed from your terminal device, technically necessary processing is carried out on the basis of Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG). Any other storage of, or access to, information on your terminal device takes place only with your consent pursuant to Section 25(1) TDDDG.

Cookies

Your Cookie Settings

We use cookies on our website. Cookies are small files that are automatically created by your browser and stored on your device (such as a laptop, tablet or smartphone) when you visit our website. Cookies do not damage your device and do not contain viruses, Trojan horses or other malware.

The cookie stores information that is associated with the specific device being used. However, this does not mean that we obtain direct knowledge of your identity.

The use of cookies serves various purposes. On the one hand, cookies help make our website more user-friendly. For example, we use session cookies to recognise that you have already visited individual pages of our website during your current browsing session. These cookies are automatically deleted once you leave our website.

In addition, we use temporary cookies to improve usability. These cookies remain stored on your device for a defined period. If you revisit our website to use our services, we can automatically recognise that you have visited us before and remember the entries and settings you have made, so that you do not need to enter them again.

We also use cookies and similar technologies to analyse the use of our website for statistical purposes, optimise our services, evaluate marketing activities and provide external content. Where these cookies or comparable technologies are not technically necessary, they are used only on the basis of your prior consent.

You may change or withdraw your consent at any time with future effect via the cookie or privacy settings available on our website.

Technically necessary cookies and similar technologies are used on the basis of Section 25(2) TDDDG. Where personal data is processed, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, stable and functional operation of our website.
Cookies and similar technologies that are not technically necessary are used on the basis of your consent pursuant to Section 25(1) TDDDG and Article 6(1)(a) GDPR.
Most web browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your device or so that a notification appears before a new cookie is placed. Please note that disabling cookies entirely may result in certain functions of our website no longer being available.

By using our cookie consent banner, you have provided your consent within the meaning of Article 6(1)(a) GDPR, where required.

Cookie Overview

Data Collection and Processing

During your visit to www.aconnic.com, the data listed below is collected and processed automatically for technical and statistical purposes. The collected data is never assigned to an identifiable individual. Data may be processed and stored outside the European Union, for example on servers located in the United States.
The following information may be collected:

• Requesting domain / language
• Location (country, city)
• Browser type and version
• Operating system
• Internet service provider
• Screen resolution
• Date and time of access
• Referrer URL (the previously visited website)
• Duration of the visit
• Cookie status (enabled/disabled)
• Requested resource (name of the requested file)
• Amount of data transferred
• Status of the data transfer

When you access our website, your browser automatically transmits information to our web server. In particular, this may include your device’s IP address, the date and time of access, the requested page or file, the referrer URL, browser type and version, operating system, hostname of the accessing computer, and the volume of data transmitted.

This information is processed for the purpose of providing the website, ensuring system security and stability, analysing technical errors and preventing misuse.
The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest is the secure, stable and reliable operation of our website.

Personal data is collected only if you voluntarily provide it to us, for example by submitting a contact form, subscribing to our newsletter or applying for a job.

If you contact us via a contact form, email, telephone or by any other means, we process the personal data you provide for the purpose of handling your enquiry.
Depending on the nature of your enquiry, this data may include, in particular name, contact details, company name, job title or function, the content of your enquiry and
communication data.

Where your enquiry relates to the conclusion or performance of a contract, the legal basis is Article 6(1)(b) GDPR. In all other cases, processing is based on Article 6(1)(f) GDPR, as we have a legitimate interest in responding to and processing enquiries appropriately. Where you have expressly given your consent, processing is based on Article 6(1)(a) GDPR.

Your data will be deleted once your enquiry has been fully processed, unless statutory retention obligations or other legal grounds require further storage.

Privacy Information for Applicants

We process applicants’ personal data solely for the purpose of conducting the recruitment process and in accordance with applicable legal requirements.
The processing of applicant data is carried out to fulfil our pre-contractual obligations within the recruitment process pursuant to Article 6(1)(b) GDPR in conjunction with Section 26 of the German Federal Data Protection Act (BDSG).

Where processing becomes necessary for the establishment, exercise or defence of legal claims, the legal basis is Article 6(1)(f) GDPR. If you give us your consent—for example, to include your application in our Talent Pool—processing is based on Article 6(1)(a) GDPR. You may withdraw your consent at any time with future effect.

As part of the application process, applicants may consent to being included in our Talent Pool for a period of two years in accordance with Articles 6(1)(a) and 7 GDPR.

Application documents stored in the Talent Pool will be used exclusively for future recruitment opportunities and staffing purposes and will be deleted no later than upon expiry of the retention period. Applicants are informed that their consent to inclusion in the Talent Pool is voluntary, has no effect on the current recruitment process and may be withdrawn at any time with future effect. Applicants also have the right to object to the processing pursuant to Article 21 GDPR.

Applicant data is generally deleted once it is no longer required for the recruitment process and provided that no statutory retention obligations or legitimate interests require further storage. Longer retention periods may apply if you have consented to inclusion in the Talent Pool or where storage is necessary for the establishment, exercise or defence of legal claims.

Whistleblowing System

We provide access to a whistleblowing system via our website.
If you use this system, we process the information you submit for the purpose of receiving, reviewing and investigating reports and, where necessary, implementing appropriate follow-up measures.

Depending on the content of the report, the following categories of personal data may be processed contact details, information relating to the person concerned, information regarding the reported incident, communication content, attached documents and
technical metadata. Where anonymous reporting is available and you choose to remain anonymous, we will not process any identifying information unless you voluntarily disclose it.

Where the establishment and operation of a whistleblowing system is required by law, the legal basis is Article 6(1)(c) GDPR. In all other cases, processing is based on Article 6(1)(f) GDPR. Our legitimate interests are the prevention and investigation of legal violations, ensuring compliance and protecting our legal position.

Where special categories of personal data are processed in connection with a report, such processing is carried out in accordance with Article 9(2) GDPR, in particular where necessary for the establishment, exercise or defence of legal claims.

Disclosure of Personal Data

Personal data transmitted to us is used solely for the purposes for which it was collected, for example to respond to your enquiries, fulfil contractual obligations or administer our technical systems.

Your personal data will only be disclosed to third parties where this is necessary for the performance of a contract, including the transmission of order information to suppliers, disclosure is required for billing purposes, you have given your prior consent or disclosure is otherwise permitted or required by law. You have the right to withdraw your consent at any time with future effect.

Personal data will be deleted where you withdraw your consent, where the purpose for which the data was collected no longer applies, or where continued storage is no longer legally permissible.

Personal data may also be disclosed to internal departments and external service providers who support us in the operation, maintenance, security, analysis, marketing, communication, hosting or technical provision of our website. Where such service providers process personal data on our behalf, we conclude Data Processing Agreements (DPAs)with them in accordance with Article 28 GDPR.
Any disclosure to other third parties takes place only where permitted by law, where you have given your consent or where disclosure is necessary for the establishment, exercise or defence of legal claims.

International Data Transfers

For certain services, personal data may be transferred to countries outside the European Union (EU) or the European Economic Area (EEA), in particular to the United States.
Such transfers are carried out only where the requirements of Articles 44 et seq. GDPR are met. Depending on the circumstances, transfers may be based on an adequacy decision issued by the European Commission, the European Commission’s Standard Contractual Clauses (SCCs), Binding Corporate Rules (BCRs) or another lawful transfer mechanism under the GDPR.

Where service providers are certified under the EU–U.S. Data Privacy Framework, transfers of personal data to the United States may be based on the relevant adequacy decision. Where no adequacy decision exists, residual risks may remain despite contractual and technical safeguards, including the possibility that public authorities in the respective third country may access personal data.

Purposes for Which We Collect, Use and Disclose Personal Data

aconnic may collect, use and disclose your personal data for the following purposes:

• responding to your enquiries and requests;
• conducting our business and administrative operations;
• comparing and matching your personal data for the purposes described in this Privacy Policy;
• handling complaints and managing enquiries and requests;
• providing additional products, services and benefits, including promotional offers;
• lead generation and lead management for marketing products and services;
• administering prize draws, competitions and marketing campaigns and personalising your user experience;
• communicating marketing information, including information about products, services, special offers and incentives that may be relevant to our customers
• generally or specifically to you, including (without limitation) upselling, cross-selling and telemarketing activities;
• organising promotional events and corporate social responsibility (CSR) initiatives; and
• any other purposes reasonably related to those listed above.
• Processing for advertising, analytics, tracking, lead generation and marketing purposes is carried out only where an appropriate legal basis exists, in
• particular your consent or an existing customer or prospective customer relationship to the extent permitted by applicable law.

Your Rights as a Data Subject

Upon written request, we will provide information about the personal data we have stored concerning you.

Additional Data Subject Rights

Subject to the applicable legal requirements, you have the following rights:

The right of access to the personal data processed by us pursuant to Article 15 GDPR;

The right to rectification pursuant to Article 16 GDPR, where the personal data is inaccurate or incomplete;

The right to erasure pursuant to Article 17 GDPR;

The right to restriction of processing pursuant to Article 18 GDPR;

The right to data portability pursuant to Article 20 GDPR;

The right to object, pursuant to Article 21 GDPR, to processing based on Article 6(1)(e) or Article 6(1)(f) GDPR;

The right to withdraw any consent given pursuant to Article 7(3) GDPR with effect for the future. The lawfulness of processing carried out prior to the withdrawal shall remain unaffected.

Right to Withdraw Consent

Where processing is based on your consent, we will always obtain your explicit consent where required by law and retain evidence of that consent in accordance with applicable data protection legislation. You may withdraw your consent at any time with future effect.
To withdraw your consent, it is sufficient to contact us by email.
Where consent relates to cookies or similar technologies, you may also withdraw or amend your consent at any time through the cookie or privacy settings available on our website.

Right to Lodge a Complaint

Pursuant to Article 77 GDPR, you have the right to lodge a complaint with a competent supervisory authority if you believe that the processing of your personal data violates applicable data protection law.

For private-sector organisations established in the German federal state of Bavaria, the competent supervisory authority is generally:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Germany
Website: www.lda.bayern.de

Data Security

We are committed to storing your personal data securely.
To protect your personal data against unauthorised access, we implement appropriate technical and organisational security measures. However, please note that no method of electronic communication, including email, can be guaranteed to be completely secure. We therefore recommend that confidential information be sent by post whenever possible.

Consent-Based Services and External Media

Our website uses services that may be required for analytics, marketing, audience measurement, conversion tracking, external media, maps, fonts, form protection or other third-party content. These services may include, in particular Google Tag Manager, Google Analytics, Salesforce Pardot / Marketing Cloud Account Engagement, Meta Pixel, LinkedIn Insight Tag, YouTube, Google Maps, OpenStreetMap, Google Fonts, Google reCAPTCHA, Gravatar, Stockdio and comparable third-party services.

Where these services are not technically necessary, they are loaded only after you have provided your consent through our Consent Management Platform (CMP).
The legal basis is Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
You may withdraw your consent at any time with future effect through the cookie or privacy settings on our website.

When these services are used, personal data may be processed, including IP address, browser and device information, cookie identifiers or other online identifiers, referrer URL, visited pages, interaction data, usage data, location and language information and
communication and form data. Depending on the provider, personal data may also be transferred to countries outside the EU/EEA, in particular to the United States.

Our website may also contain embedded third-party content such as videos, maps, social media content, financial information or other interactive elements. Such content is generally loaded only after you have consented to the relevant service or to the “External Media” category, or where you actively enable the respective content.
When external content is loaded, personal data may be transmitted to the respective provider, including your IP address, browser and device information, the referrer URL, the time of access, the page visited and your interaction with the embedded content.

Google Tag Manager

We use Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a service that enables website tags to be managed and deployed via a user interface.

Google Tag Manager itself serves solely to integrate and manage other services. However, services integrated through Google Tag Manager may themselves process personal data, set cookies or use comparable technologies. Where such services are not technically necessary, they are activated only with your prior consent.

The legal basis for the use of consent-based services via Google Tag Manager is Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. Where Google Tag Manager is used solely for the technical administration of tags and does not trigger consent-based processing activities, the processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in the efficient and controlled management of the services used on our website.

Google Analytics

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics enables us to analyse the use of our website for statistical purposes and to optimise our online offering.

In particular, usage data, browser and device information, approximate location data, the referrer URL, interactions on our website and a shortened IP address may be processed.
Google Analytics is used only with your consent provided through our Consent Management Platform.

The legal basis is Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
You may withdraw your consent at any time with future effect via the cookie settings.

Google Fonts and Google APIs

Our website may use fonts and technical resources provided by Google, in particular Google Fonts and Google APIs. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When these resources are accessed, personal data such as your IP address, browser and device information, the referrer URL and the time of access may be transmitted to Google. Processing may also involve the transfer of personal data to servers operated by Google LLC in the United States.

Where Google Fonts or Google APIs are not hosted locally but are loaded from Google’s servers when you access our website, they are used only on the basis of your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. Where fonts or comparable technical resources are hosted locally on our own servers, no data is transmitted to Google in connection with the retrieval of such fonts.

You may withdraw your consent at any time with future effect through the cookie or privacy settings.

Google reCAPTCHA

We use Google reCAPTCHA, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google reCAPTCHA is used to determine whether entries made on our website originate from a natural person or are generated abusively by automated software. This helps protect our forms, technical systems and website against spam and misuse.

In particular, the following data may be processed IP address, browser and device information, referrer URL, duration of the visit, mouse movements, keyboard input and
other interaction data. Processing may also involve the transfer of data to Google LLC in the United States.

Where reCAPTCHA is necessary to protect our forms and IT systems, processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in protecting our website against misuse, spam and automated attacks. Where the use of reCAPTCHA involves consent-based storage of or access to information on your device, or where its use is not strictly technically necessary, the legal basis is Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

Salesforce Pardot / Marketing Cloud Account Engagement

We use Salesforce Pardot, now known as Marketing Cloud Account Engagement.
The service is provided by Salesforce.com Germany GmbH, Erika-Mann-Straße 31, 80636 Munich, Germany, and Salesforce, Inc., Salesforce Tower, 415 Mission Street, San Francisco, California 94105, USA.

The service is used for marketing automation, lead management, analysing the use of our website, managing marketing campaigns and, where applicable, newsletter and form processing. The following categories of personal data may be processed contact details, company information, communication data, usage data, click paths, form entries, campaign assignments, interest profiles and technical identifiers.

Pardot is used for analytics and marketing purposes only with your consent.
The legal basis is Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
Where your data is processed in connection with a specific enquiry or pre-contractual measures, Article 6(1)(b) GDPRmay apply. Where processing is necessary to manage existing customer or prospective customer relationships, Article 6(1)(f) GDPR may apply.

Pseudonymised usage data is combined with directly identifiable personal data only where a valid legal basis exists, in particular your consent or an existing business relationship. You may withdraw your consent at any time with future effect.

Newsletters and marketing emails may contain web beacons or similar technologies that enable us to analyse whether emails have been opened and links clicked. Such analysis is carried out only where an appropriate legal basis exists.

LinkedIn

We provide content and features of LinkedIn and may also use the LinkedIn Insight Tag. The provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

LinkedIn content may include images, videos, text, buttons and links. If you are a LinkedIn member, LinkedIn may associate your interaction with such content or features with your LinkedIn profile. The LinkedIn Insight Tag enables us to measure the effectiveness of LinkedIn advertising campaigns, create target audiences and statistically analyse the use of our website in connection with LinkedIn campaigns.

In particular, the following data may be processed IP address, browser and device information, page views, date and time of the visit, referrer URL and
LinkedIn identifiers. The LinkedIn Insight Tag is used only with your consent.

The legal basis is Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
You may withdraw your consent at any time via the cookie settings.

Meta Pixel (Facebook Pixel)

We use the Meta Pixel provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. The Meta Pixel is used to measure the effectiveness of advertisements, optimise advertising campaigns and create target audiences on Meta platforms, in particular Facebook and Instagram.

In particular, information regarding your use of our website, pages visited, interactions, browser and device information, your IP address and cookie or advertising identifiers may be processed. The Meta Pixel is used only with your consent.

The legal basis is Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
You may withdraw your consent at any time via the cookie settings.

YouTube

We may embed videos from the YouTube platform. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you access or activate a YouTube video on our website, personal data may be transmitted to Google. This may include, in particular, your IP address, browser and device information, the page accessed, the time of access and information relating to video playback.

When YouTube content is loaded, additional Google services or resources may also be loaded, including Google Ads, Google DoubleClick/Remarketing, Google Image CDN, the YouTube Cast SDK and the YouTube Image CDN.

YouTube content is loaded only after you have consented to the use of external media or have actively enabled the respective video. The legal basis is Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. You may withdraw your consent at any time via the cookie settings.

Google Maps

Our website may include maps provided by Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When using Google Maps, personal data such as your IP address, location data, browser and device information, as well as interactions with the map, may be processed.

Google Maps is loaded only after you have consented to the use of external media or this specific service, or after you have actively enabled the map.
The legal basis is Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
You may withdraw your consent at any time via the cookie settings.

OpenStreetMap

Our website may use map material provided by OpenStreetMap. Depending on the technical implementation, personal data such as your IP address, browser and device information, as well as the date and time of access, may be transmitted to the servers of the respective providers or operators of the map infrastructure.

Where OpenStreetMap or other external map content is not hosted locally, it will only be integrated after you have given your consent or have actively enabled the respective content. The legal basis is Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. Where maps are hosted locally or their integration is technically necessary, processing may instead be based on Article 6(1)(f) GDPR. Our legitimate interest lies in providing a user-friendly presentation of locations and directions.

Gravatar

Certain pages of our website may include content or profile images provided through Gravatar. The provider is Automattic Inc., 60 29th Street #343, San Francisco, California 94110, USA.

When Gravatar content is retrieved, personal data such as your IP address, browser and device information, the referrer URL and the date and time of access may be transmitted to Automattic. A transfer of personal data to the United States cannot be excluded.

Where Gravatar content is loaded from the provider’s external servers, such content is integrated only on the basis of your consent pursuant to Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. Alternatively, such content may be hosted locally or disabled in order to avoid any external data transmission.

Stockdio

Certain pages of our website may include services or resources provided by Stockdio or api.stockdio.com, for example for displaying financial market, stock exchange or investor relations information. When such content is accessed, personal data such as your IP address, browser and device information, the referrer URL, the date and time of access and usage data may be transmitted to the respective provider.

Where Stockdio content is not technically necessary, it is integrated only on the basis of your consent pursuant to Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
You may withdraw your consent at any time via the cookie or privacy settings.

Geo- and IP-Based Services

Certain pages of our website may use services that provide technical or location-related information based on your IP address, for example for language selection, country detection, security measures or display optimisation.In particular, your IP address, the date and time of access, browser and device information, as well as the requested URL, may be processed.

Where such services are necessary for the technical operation or security of the website, processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in ensuring the secure, stable and user-friendly operation of our website.
Where such services are not technically necessary or are used for analytics, marketing or convenience purposes, processing is carried out only on the basis of your consent pursuant to Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

Social Media Presence

We maintain online presences on social networks and platforms, in particular LinkedIn, YouTube, Facebook and Instagram. Through these social media channels, we provide information about our company, our products and services, and communicate with users.

When you visit our social media pages, personal data may be processed by the respective platform operators. Such data may include, in particular, profile information, IP address, device information, interaction data, communication content and statistical information relating to the use of our social media pages. The platform operators may also process such data for their own purposes, including analytics, advertising, market research and the creation of user profiles.

Where we process personal data that you provide to us via social media platforms, such processing is carried out for the purpose of communicating with you, handling your enquiries and maintaining our public presence. Where your enquiry relates to contractual or pre-contractual measures, the legal basis is Article 6(1)(b) GDPR.
In all other cases, processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in communicating with prospective customers, customers and the public, as well as presenting our company externally.

With regard to Facebook and Instagram, we may act as joint controllers together with Meta Platforms Ireland Limited for certain page insights.
With regard to LinkedIn, we may act as joint controllers together with LinkedIn Ireland Unlimited Company for certain page analytics. Further information on the processing of personal data by the respective platform operators and on your rights can be found in the privacy notices of the respective providers.