Privacy Policy

1. Privacy at a Glance

General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data refers to any information that can be used to identify you personally. For detailed information on data protection, please refer to our Privacy Policy listed below.

Data Collection on This Website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find the operator’s contact information in the “Information on the Responsible Party” section of this privacy policy.

How do we collect your data?
Your data is collected, on one hand, when you provide it to us. This may include, for example, data that you enter into a contact form. Other data is collected automatically or with your consent by our IT systems when you visit the website. This consists primarily of technical data (e.g., internet browser, operating system, or time of the page view). This data is collected automatically as soon as you access this website.

How do we use your data?
Some of the data is collected to ensure the website functions properly. Other data may be used to analyze your user behavior. If contracts can be concluded or initiated via the website, the data provided will also be processed for contract offers, orders, or other order inquiries.

What rights do you have regarding your data?
You have the right at any time to receive, free of charge, information about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you may revoke this consent at any time with future effect. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to file a complaint with the competent supervisory authority. You may contact us at any time regarding this matter or any other questions about data protection.

Analytics Tools and Third-Party Tools
When you visit this website, your browsing behavior may be statistically analyzed. This is done primarily using so-called analytics programs. Detailed information about these analytics programs can be found in the following Privacy Policy.

2. Hosting

External Hosting
This website is hosted by an external service provider (hosting provider). The personal data collected on this website is stored on the host’s servers. This may include, in particular, the following data: IP addresses, date and time of access, URL and pages visited, protocol and log data, meta and communication data, as well as the content of contact requests submitted via the contact form on the website.

External hosting is used for the purpose of processing inquiries directed to us via the website and for preparing or initiating potential contractual relationships (Art. 6(1)(b) GDPR), as well as in the interest of ensuring the secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR). If consent has been requested, processing is based exclusively on Art. 6(1)(a) GDPR and § 25(1) TDDDG, to the extent that the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time.

Our hosting provider processes your data only to the extent necessary to fulfill its service obligations and follows our instructions regarding this data under a data processing agreement pursuant to Article 28 of the GDPR.

We host the content of our website with the following provider:

Hosting with IONOS
We host our website with IONOS SE. The provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (hereinafter “IONOS”). Our website content and the personal data collected via this website are stored on servers operated by IONOS within the European Union.

Whenever you visit our website, IONOS processes various log files together with your IP address and other technical connection data. This may include, in particular, the IP address of the requesting device, date and time of access, requested URL and pages visited, HTTP status codes, information on the browser and operating system used, and, where applicable, referrer URLs. These data are processed to ensure the secure and technically reliable delivery of our website and to protect the stability and integrity of IONOS’s systems.

We use IONOS on the basis of Article 6(1)(f) GDPR. We have a legitimate interest in the reliable, secure and efficient provision of our online services through a professional hosting provider. If appropriate consent has been obtained, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time.

Data Processing
We have concluded a data processing agreement with IONOS in accordance with Article 28 GDPR. Under this agreement, IONOS acts as our processor and processes personal data of our website visitors solely in accordance with our instructions and in compliance with the GDPR.

3. General Information and Mandatory Disclosures

Data Protection The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations as well as this Privacy Policy.

When you use this website, various types of personal data are collected. Personal data is data that can be used to personally identify you. This Privacy Policy explains what data we collect and how we use it. It also explains how and for what purpose this is done.

Please note that data transmission over the Internet (e.g., when communicating via email) may have security vulnerabilities. It is not possible to completely protect data from access by third parties.

Information on the Data Controller The data controller responsible for data processing on this website is: DIGITAGIOUS Coralynn Weinrich c/o Holger Schmidt Palnkam 47 83624 Otterfing Germany

Email: contact@digitagious.com

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g., names, email addresses, etc.).

Retention Period
Unless a more specific retention period is stated in this Privacy Policy, your personal data will remain with us until the purpose for data processing no longer applies. If you submit a legitimate request for erasure or revoke your consent to data processing, your data will be erased, provided we have no other legally permissible grounds for storing your personal data (e.g., retention periods under tax or commercial law); in the latter case, erasure will take place once these grounds no longer apply.

General Information on the Legal Bases for Data Processing on This Website
If you have consented to data processing, we process your personal data on the basis of Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, provided that special categories of data are processed in accordance with Article 9(1) of the GDPR. In the event of explicit consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49(1)(a) of the GDPR. If you have consented to the storage of cookies or to access to information on your device (e.g., via device fingerprinting), data processing is additionally based on Section 25(1) of the German Telemedia Act (TDDDG). Consent may be revoked at any time. If your data is required for the performance of a contract or for the implementation of precontractual measures, we process your data on the basis of Article 6(1)(b) of the GDPR. Furthermore, we process your data if it is necessary to comply with a legal obligation on the basis of Article 6(1)(c) of the GDPR. Data processing may also be based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR. Information regarding the applicable legal bases in each individual case is provided in the following sections of this Privacy Policy.

Recipients of Personal Data
As part of our business operations, we collaborate with various external parties. In doing so, it is sometimes necessary to transfer personal data to these external parties.

We only disclose personal data to external parties if this is necessary for the performance of a contract, if we are legally obligated to do so (e.g., disclosure of data to tax authorities), if we have a legitimate interest pursuant to Article 6(1)(f) of the GDPR in the disclosure, or if another legal basis permits the disclosure of data. When using data processors, we disclose our customers’ personal data only on the basis of a valid contract for data processing. In the case of joint processing, a contract for joint processing is concluded.

Withdrawal of Your Consent to Data Processing
Many data processing operations are only possible with your explicit consent. You may withdraw consent you have already provided at any time. The lawfulness of the data processing carried out up to the time of withdrawal remains unaffected by the withdrawal.

Right to Object to Data Collection in Specific Cases and to Direct Marketing (Art. 21 GDPR) IF DATA PROCESSING IS BASED ON ART. 6(1)(e) OR (f) OF THE GDPR, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS RELATED TO YOUR SPECIFIC SITUATION, TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE SPECIFIC LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTIONS UNDER ART. 21(1) of the GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF FOR THE PURPOSES OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING, TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21(2) OF THE GDPR).

Right to lodge a complaint with the competent supervisory authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the location of the alleged violation. The right to lodge a complaint is without prejudice to other administrative or judicial remedies.

Right to Data Portability
You have the right to have data that we process automatically — based on your consent or in fulfillment of a contract — provided to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place to the extent that it is technically feasible.

Access, Rectification, and Erasure
Subject to applicable legal provisions, you have the right at any time, free of charge, to access your stored personal data, its origin, recipients, and the purpose of the data processing, and, where applicable, the right to have this data rectified or erased. For this purpose, as well as for any further questions regarding personal data, you may contact us at any time.

Right to Restriction of Processing
You have the right to request the restriction of the processing of your personal data. You may contact us at any time regarding this matter. The right to restriction of processing applies in the following cases:

If you dispute the accuracy of your personal data stored by us, we generally need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data. If the processing of your personal data was or is unlawful, you may request the restriction of data processing instead of erasure. If we no longer need your personal data, but you need it to exercise, defend, or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of erasure. If you have lodged an objection under Article 21(1) of the GDPR, a balancing of your interests against ours must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data. If you have restricted the processing of your personal data, such data—apart from its storage—may be processed only with your consent or for the purpose of asserting, exercising, or defending legal claims, or to protect the rights of another natural or legal person, or for reasons of a substantial public interest of the European Union or a Member State.

SSL or TLS Encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the website operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the lock icon in your browser’s address bar. When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

Objection to Promotional Emails
We hereby object to the use of contact information published in accordance with the legal notice requirement for the purpose of sending unsolicited advertising and informational materials. The operators of this website expressly reserve the right to take legal action in the event of the unsolicited transmission of advertising information, such as via spam emails.

4. Data Collection on This Website

Cookies
Our website uses so-called “cookies.” Cookies are small data packets and do not cause any damage to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or your web browser deletes them automatically. Cookies may originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites (e.g., cookies for processing payment services).

Cookies serve various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g., the shopping cart function or the display of videos). Other cookies may be used to analyze user behavior or for advertising purposes.

Cookies that are required to carry out the electronic communication process, to provide certain functions you have requested (e.g., the shopping cart function), or to optimize the website (e.g., cookies for measuring web traffic) (necessary cookies) are stored pursuant to Article 6(1)(f) of the GDPR, unless another legal basis is specified.

The website operator has a legitimate interest in storing necessary cookies to ensure the technically error-free and optimized provision of its services. If consent was requested for the storing cookies and similar recognition technologies has been requested, processing is based exclusively on this consent (Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG); consent may be revoked at any time.

You can configure your browser to notify you when cookies are set and only allow cookies on a case-by-case basis, exclude the acceptance of cookies for specific cases or in general, and enable the automatic deletion of cookies when you close your browser. If you disable cookies, the functionality of this website may be limited. If additional cookies and services are used on this website, you can find this information in this Privacy Policy.

Consent with our cookie banner
Our website uses a cookie consent banner to inform you about the use of cookies and similar technologies and to obtain and record your consent where required by law. When you visit our website, the banner stores a small cookie in your browser that records your selected cookie preferences (for example “accept”, “reject” or “manage cookies”) and the time of your decision. This information is used to apply your preferences on subsequent visits and to document your consent. The data collected via the banner are stored until you delete the corresponding cookie in your browser or the purpose for storage no longer applies. Statutory retention obligations remain unaffected. The use of the consent banner is necessary to obtain the legally required consent for the use of non‑essential cookies and comparable technologies and to document such consent. The legal basis for this processing is Article 6(1)(c) GDPR in conjunction with Section 25(1) TDDDG.

Internal website analytics
We use simple, self‑hosted analytics functions on our website to evaluate how our online services are used. These analytics are implemented directly on our server backend; we do not use external analytics providers such as Google Analytics, and no personal data is transferred to third‑party analytics services. As part of these internal analytics, we may process aggregated usage information, such as the number of page views, which pages are accessed, the approximate origin of visits (e.g., country or region), and technical data that your browser transmits (e.g., IP address in server logs, device type, browser and operating system). Where possible, we use this information in an anonymized or pseudonymized form and do not attempt to identify individual visitors. The purpose of this processing is to monitor the technical functioning of our website, to improve its content and usability, and to ensure the security and stability of our systems. The legal basis for this data processing is our legitimate interest in a secure, user‑friendly and demand‑oriented design of our online services pursuant to Article 6(1)(f) GDPR.

Server Log Files
The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us.

These include: Browser type and version Operating system used Referrer URL Hostname of the accessing computer Time of the server request IP address

This data is not combined with other data sources. The collection of this data is based on Art. 6(1)(f) of the GDPR. The website operator has a legitimate interest in the technically error-free display and optimization of its website — for this purpose, the server log files must be collected.

Contact Form
If you submit inquiries to us via the contact form, the information you provide in the inquiry form—including the contact details you enter there—will be stored by us for the purpose of processing your inquiry and in case of follow-up questions. We will not disclose this data without your consent.

The processing of this data is based on Article 6(1)(b) of the GDPR, provided that your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries directed to us (Article 6(1)(f) of the GDPR) or on your consent (Article 6(1)(a) of the GDPR), provided that consent was requested; consent may be withdrawn at any time.

The data you enter in the contact form will remain with us until you request that we delete it, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g., after your inquiry has been fully processed). Mandatory legal provisions—in particular retention periods—remain unaffected.

Inquiries via Email, Phone, or Fax
If you contact us via email, phone, or fax, your inquiry—including all personal data contained therein (name, inquiry)—will be stored and processed by us for the purpose of handling your request. We will not disclose this data without your consent.

The processing of this data is based on Article 6(1)(b) of the GDPR, provided that your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effectively processing the inquiries directed to us (Article 6(1)(f) of the GDPR) or on your consent (Article 6(1)(a) of the GDPR) if such consent was requested; consent may be withdrawn at any time.

The data you send us via contact requests will remain with us until you request that we delete it, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g., after your request has been fully processed). Mandatory legal provisions—in particular statutory retention periods—remain unaffected.

6. Use of Chatbots

We use chatbots as an additional channel of communication with you. Chatbots can respond to your questions and other inputs without immediate human intervention. To do so, the chatbots process and analyze additional data in addition to your inputs in order to generate appropriate responses (e.g., names, email addresses, and other contact information; customer numbers and other identifiers; order information; and previous chat histories). In addition, your IP address, log files, location information, and other metadata may be collected via the chatbot. This data is stored on the servers of the respective chatbot provider.

Usage and interest profiles may be created based on this data. Furthermore, the data may be used to display interest-based advertising, provided that the necessary legal requirements (in particular, your consent) are met. For this purpose, chatbots may be connected to analytics and advertising tools. The collected data may also be used to further develop our chatbots in terms of technology and content and to optimize their response behavior (machine learning). The data you enter when communicating via the chatbot remains with us or with the respective chatbot operator until you request that we delete it, revoke any consent you have given for its storage, or the purpose for storing the data no longer applies (e.g., after your inquiry has been fully processed) . Legal requirements—in particular statutory retention periods—remain unaffected by this.

The legal basis for the use of chatbots is Article 6(1)(b) of the GDPR if the chatbot is used to enter into a contract or to fulfill an existing contract. If your consent is obtained for specific processing activities, processing—insofar as such consent covers the storage of cookies or access to information on your device (e.g., device fingerprinting) within the meaning of the TDDDG—is carried out exclusively on the basis of Article 6(1)(a) of the GDPR in conjunction with Section 25(1) of the TDDDG. You may revoke any consent you have given at any time with future effect. In all other cases, the use of chatbots is based on our legitimate interest in communicating with our customers as efficiently and user-friendly as possible, pursuant to Article 6(1)(f) of the GDPR.

We use the following chatbots:

ManyChat
The provider is ManyChat, Inc., 535 Everett Ave, Palo Alto, CA 94301, USA (hereinafter “ManyChat”). ManyChat processes various personal and technical data in the course of its interaction with you. This includes publicly visible information from your social media profiles, your behavior on our website, your chat histories, the content you enter, and log data such as your IP address and the browser you use. You can find ManyChat’s privacy policy here: https://manychat.com/privacy_statement.html and https://manychat.com/privacy.html Data transfers to the U.S. are based on the EU Commission’s Standard Contractual Clauses. Details can be found here: https://manychat.com/privacy.html

Data Processing
We use ManyChat on the basis of a data processing agreement (DPA) in accordance with Article 28 of the GDPR. This is a contract required under data protection law that ensures ManyChat processes the personal data of our website visitors exclusively in accordance with our instructions and in compliance with the provisions of the GDPR.

Eventbrite
On our website, we feature events for which you can book tickets. Ticket bookings are processed through the external booking system Eventbrite. The provider of this service is Eventbrite, Inc., Delaware, 155 5th Street, Floor 7, San Francisco, CA 94103, USA.

When you book a ticket, Eventbrite collects the data you provide during the booking process (e.g., your name, email address, and other contact information). Eventbrite also processes your payment information as well as technical information such as your IP address and metadata about the device you are using (e.g., browser, operating system, version, and device type). You can view Eventbrite’s Privacy Policy at the following link: https://www.eventbrite.com/help/en-us/articles/460838/eventbrite-privacy-policy/

The data you provide will be stored for as long as necessary to process your booking and organize the event, or as required by applicable legal retention obligations. After that, the data will be deleted unless further legal obligations prevent this. Regardless of this, you may request that we delete the data at any time or revoke any consent you have provided. Mandatory legal provisions, in particular statutory retention periods, remain unaffected by this.

The legal basis for the use of Eventbrite and the associated data processing is Article 6(1)(f) of the GDPR, as we have a legitimate interest in ensuring that the ticket booking process is as simple and professional as possible. To the extent that consent is obtained in connection with the use of Eventbrite, processing takes place —to the extent that consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG—exclusively on the basis of Article 6(1)(a) of the GDPR in conjunction with Section 25(1) of the TDDDG; consent may be revoked at any time with future effect. The transfer of personal data to the United States is based on the European Commission’s Standard Contractual Clauses. You can view Eventbrite’s corresponding clauses here: https://cdn.evbstatic.com/s3-s3/static/images/en_US/legal_policies/Eventbrite_Organizer_Standard_Contractual_Clauses.pdf

Eventbrite is also certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States designed to ensure that European data protection standards are upheld when data is processed in the United States. Companies with DPF certification commit to complying with these standards. For more information, please visit: https://www.dataprivacyframework.gov/participant/5881

Data Processing
For the use of Eventbrite, we have entered into a Data Processing Agreement (DPA) in accordance with Article 28 of the GDPR. This agreement ensures that Eventbrite processes the personal data of our website visitors only in accordance with our instructions and in compliance with the requirements of the GDPR.

7. Audio and Video Conferences

Data Processing We use online conferencing services, among other tools, to communicate with our customers. The specific tools we use are listed below. When you communicate with us via a video or audio conferencing tool over the Internet, personal data is collected and processed by both us and the respective provider of the conferencing tool.

In particular, the conference tools process the data you enter or provide to use the service, such as your email address and, if applicable, your phone number. In addition, usage data is collected, such as the duration of a conference, the start and end times of your participation, the number of participants, and other contextual information related to the communication process (metadata).

The respective provider also processes technical information necessary for conducting online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, version of the client used, as well as information about the camera, microphone, speakers, and type of connection used.

If content is exchanged, uploaded, or made available within a conferencing tool, it is also stored on the respective provider’s servers. This includes, for example, cloud recordings, chat and instant messages, voice messages, uploaded photos and videos, files, whiteboards, and other information shared while using the service.

Please note that we do not have comprehensive control over all data processing operations that take place within the tools we use. Our ability to control these operations is essentially governed by the guidelines and settings of the respective provider. Further information on data processing by the individual conferencing tools can be found in the privacy policies of the respective providers, to which we refer below.

Purpose and Legal Bases
We use conferencing tools to communicate with existing or potential contractual partners and to provide services to our customers. The legal basis for data processing in this regard is Article 6(1)(b) of the GDPR. In addition, the tools serve to simplify and expedite communication with us and our company. For this use, we base the processing on our legitimate interest in an efficient and modern communication infrastructure in accordance with Article 6(1)(f) of the GDPR. To the extent that consent is obtained for the use of a specific tool, the processing is based on this consent. You may revoke any consent you have given at any time with future effect.

Retention Period
We delete the personal data that we store directly via the video and conferencing tools we use from our systems as soon as you request deletion, revoke your consent to storage, or the purpose of the processing no longer applies—for example, upon completion of the respective communication. Cookies stored on your device remain there until you delete them yourself. Statutory retention requirements remain unaffected by this. We have no influence over the retention period of data stored by the operators of the conferencing tools for their own purposes. You can find information on this in the privacy policies of the respective providers.

Conferencing Tools Used
We use the following conference tools:

Zoom
We use the Zoom service for online meetings and video conferences. The provider is Zoom Video Communications Inc., 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA. Details regarding data processing by Zoom can be found in the privacy policy: https://explore.zoom.us/en/privacy/

The transfer of personal data to the U.S. is based on the European Commission’s Standard Contractual Clauses. Zoom provides information on this at the following link: https://explore.zoom.us/en/privacy/

Zoom is also certified under the “EU-U.S. Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States designed to ensure that European data protection standards are upheld when data is processed in the United States. Companies with DPF certification commit to complying with these standards. For more information, visit: https://www.dataprivacyframework.gov/participant/5728

Data Processing
For the use of Zoom, we have entered into a Data Processing Agreement (DPA) in accordance with Article 28 of the GDPR. This agreement ensures that Zoom processes the personal data of our website visitors exclusively in accordance with our instructions and in compliance with the requirements of the GDPR.

Google Meet
We also use the Google Meet service for video conferences. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details regarding Google’s data processing can be found in its Privacy Policy: https://policies.google.com/privacy?hl=en

Google is also certified under the “EU–US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards for data processing in the United States. Companies with DPF certification commit to adhering to these standards. For more information, please visit: https://www.dataprivacyframework.gov/participant/5780

Data Processing
For the use of Google Meet, we have entered into a Data Processing Agreement (DPA) in accordance with Article 28 of the GDPR. This agreement guarantees that Google will process the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Microsoft Teams
We also use the Microsoft Teams service for online meetings and video conferences. The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, or the respective European subsidiaries of Microsoft.

Various types of personal and technical data are processed in connection with the use of Microsoft Teams. This includes, in particular, the data you provide for your user account or to participate (e.g., name, email address, phone number (if applicable), and profile information within your organization), details regarding the conduct of meetings (time, duration, participants, meeting ID), as well as the content of communications (chats, audio and video data, shared files, recordings, and transcripts). In addition, Microsoft Teams collects technical information such as IP address, device ID, device type, operating system, client version, and other diagnostic data necessary for the secure operation and error analysis of the service. Details on data processing by Microsoft can be found in the Microsoft Privacy Statement at: https://www.microsoft.com/en-us/privacy/privacystatement The use of Microsoft Teams to communicate with existing and potential contractual partners is based on Article 6(1)(b) of the GDPR. Furthermore, we base the use of Microsoft Teams on our legitimate interest in a secure, efficient, and modern communication and collaboration environment pursuant to Article 6(1)(f) of the GDPR. To the extent that consent is obtained in connection with the use of Microsoft Teams (in particular, to the extent that consent covers the storage of cookies or access to information on the user’s device within the meaning of the TDDDG), processing is carried out on the basis of Article 6(1)(a) of the GDPR in conjunction with Section 25(1) of the TDDDG; consent that has been given may be revoked at any time with future effect.

The transfer of personal data to third countries, in particular to the United States, is safeguarded by appropriate safeguards in accordance with Chapter V of the GDPR. For this purpose, Microsoft provides, in particular, the EU Standard Contractual Clauses, as explained in the Microsoft compliance documents: https://learn.microsoft.com/en-us/compliance/regulatory/offering-eu-model-clauses

Microsoft is also certified under the “EU–US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States designed to ensure that European data protection standards are upheld when data is processed in the United States. You can view which U.S. entities of Microsoft are covered by the DPF certification here: https://www.microsoft.com/en-us/privacy/microsoft-data-privacy-framework-covered-entities

Data Processing
For the use of Microsoft Teams, we have entered into a Data Processing Agreement (DPA) with Microsoft in accordance with Article 28 of the GDPR. This agreement ensures that Microsoft processes our users’ personal data only in accordance with our instructions and in compliance with the requirements of the GDPR.

8. Social Media Presence

We maintain business profiles on various social media platforms to communicate with prospects and customers and to showcase our content and services. We currently have a presence on the following platforms:

Facebook https://www.facebook.com/digitagious
Instagram https://www.instagram.com/digitagious/
Threads https://www.threads.net/@digitagious
YouTube https://www.youtube.com/@digitagious
TikTok https://www.tiktok.com/@digitagious
X https://x.com/Digitagious

When you visit our profiles on these networks, personal data is processed by the respective platform operator and, where applicable, by us. This includes, in particular, the data you provide on the networks themselves (e.g., posts, comments, messages, reactions, publicly visible profile information), as well as usage and statistical data for analyzing user behavior and for displaying content and advertisements. We have only limited influence over the nature, scope, and purposes of data processing by the platform operators; the privacy policies of the respective providers apply first and foremost.

We process your data in connection with our social media profiles for the purpose of communicating with you, responding to your inquiries, and presenting our content and offers. The legal basis for this is our legitimate interest in effective public presentation and communication pursuant to Article 6(1)(f) of the GDPR. To the extent that your contact via social media is aimed at initiating or fulfilling a contract, processing is based on Article 6(1)( b) of the GDPR. If you grant us consent in individual cases (e.g., for the publication of image or video material), the processing is based on Article 6(1)(a) of the GDPR; you may revoke any consent you have given at any time with future effect.

Please note that when using the aforementioned platforms, data may also be processed outside the European Union, particularly in the United States and other third countries. In this regard, the respective platform operator is responsible for compliance with data protection requirements. For details on the purpose, scope, and legal basis of data processing, as well as your rights (e.g., right of access, erasure, and objection), please refer to the privacy policies of the respective networks:

Instagram, Facebook, Threads
The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Privacy Policy (Joint Meta Privacy Policy for Facebook, Instagram, Threads, and others): https://www.facebook.com/privacy/policy/

X (formerly Twitter)
The provider is X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. Information on data processing can be found in the current privacy policy and on X’s policy pages: https://x.com/en/privacy

YouTube
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Information on data protection and privacy on YouTube can be found at: https://www.youtube.com/howyoutubeworks/privacy/ as well as in the general Google Privacy Policy: https://policies.google.com/privacy?hl=en

TikTok
The provider is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, and other affiliated companies.

TikTok’s privacy policy applicable to the European Economic Area can be found at: https://www.tiktok.com/legal/page/eea/privacy-policy/en

If you do not want the aforementioned platforms to combine your usage behavior on our profiles with other activities on their networks, we recommend that you log out of the respective accounts before visiting our profiles, delete the relevant cookies, and review and adjust your privacy and advertising settings within the platforms.