Privacy Policy

[Disclaimer: This is a translation of our Privacy Policy originally written in German. In the event of legal proceedings, the original German version applies, as does German law.]

 

Privacy Policy

of the minubo GmbH, hereinafter referred to as “minubo”.

Version: 01.09.2024

 

I. Privacy Policy

1. General information

The protection of your personal data is very important to us. We naturally comply with the provisions of the EU General Data Protection Regulation. The following notes provide a simple overview of what happens to your personal data when you use our website. Personal data is any data with which you can be personally identified.

2. Responsible body

Responsible for the processing is:

minubo GmbH

represented by the Managing Director Lennard Stoever

Schaartor 1
20459 Hamburg
Germany

Telephone: +49 (0) 40 3980675 0
E-Mail: contact@minubo.com

__________

In accordance with Article 37 of the GDPR, we have appointed an external data protection officer.

He and our data protection team can be reached at the following contact:

Konstantin Pflüger
Anywhere digital GmbH
Hoheluftchaussee 40 A
20253 Hamburg
Germany

Telephone: +49 (0)40 38 99 500
E-Mail: datenschutz@minubo.com

3. Data security

We have taken technical and organisational measures to protect the data entrusted to us from access by third parties in the best possible way. Our servers are protected by technical measures. Likewise, role and authorisation concepts as well as back-up and recovery procedures are a matter of course for us. We use encryption procedures by means of TLS encryption (you can recognise this procedure by the address line that begins with https://). 

We would like to point out that data transmission on the Internet (e.g. by e-mail) can always have security gaps and, depending on the mail server, this can happen without transport encryption. Protection against access by third parties is not possible without gaps.

4. Legal basis and purpose

In order to ensure the operation of our website and to provide you with the best possible information, we use technical means to monitor the use of our website. This data collection is explained separately in this statement.

The legal basis for this processing is the legitimate interest (Article 6 (1) lit. f GDPR) to operate our service professionally and securely. 

We would like to point out that you have a right of objection pursuant to Article 21 GDPR in the event that personal data is processed pursuant to Article 6 (1) lit. e GDPR or Article 6 (1) lit. f GDPR. In the event that you object, we will no longer process your personal data unless we can prove that our interests outweigh yours. 

The objection can be made in writing or by e-mail to the above address.

For the use of contact forms or e-mail, the legal basis results from Art. 6 (1) lit. c GDPR in order to comply with the legal requirement that you can contact us quickly and easily (§5 (1) Abs.2 TMG). 

In addition, there are situations in which you want to provide us with personal data.

In this case, we will ask you for consent pursuant to Article 6 (1) lit. a GDPR for processing. The consent you have given can be revoked at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation. 

5. Abstract: What data is collected?

You will find a detailed description in our data collection section.

  • Cookies 
  • Server log files
  • Collection and use of data during registration
  • Data collection for applications
  • Use and application of HubSpot
  • Collection and processing when using the contact form or processing an enquiry  
  • Newsletter
  • Use of our free demo account
  • CRM and support
  • Use of Google services
  • Webinars
  • Benefits of the web-based application Business Intelligence Software

6. Recipients or forwarding of personal data

As a matter of principle, we do not pass on any data to third parties, in particular not for advertising purposes. However, our website is hosted by an external service provider. In this process, your personal data is collected on our website and stored on the service provider's servers.

Our hoster is used for the purpose of contract processing and contract fulfillment in accordance with Art. 6 (1) lit. b GDPR in order to be able to offer our service securely and quickly.

The following service partners are involved in the processing:

HubSpot
2nd Floor 30 North Wall Quay
Dublin 1, Ireland,
Telefon: +353 1 5187500

In doing so, all data protection measures are complied with and the service partner will only process your data to the extent that this is necessary for the service obligation to be fulfilled. 

We carefully select our service partners and only commission those who have provided sufficient guarantees for compliance with the technical and organisational measures in accordance with the GDPR and the BDSG - new. In order to ensure the highest possible level of security, our service providers are bound by instructions and confidentiality obligations, are subject to regular audits and have concluded the necessary order processing contracts with us in accordance with Art. 28 GDPR.

7. Types of data or categories of data

The following types of data are regularly the subject of processing, depending on which data have been communicated to us:

  • IP adresses 

  • Contact inquiries

  • Meta- and communications data

  • Contract data

  • Contact details

  • Names

  • Website accesses

  • other data generated via the website

8. Information on safeguarding the rights of data subjects

a) Withdrawal of consent

Many data processing operations are only possible with your express consent. You can revoke the consent you have given at any time. An informal email to us is sufficient for this purpose. The legality of the data agreement made until the revocation remains unaffected by the revocation.

b) Information rights

You have the right to free information, correction, deletion or blocking of your data at any time.  

Furthermore, you have the right to correct incorrect or incompletely stored data.

c) Right of appeal

According to Art. 77 GDPR you have the right to complain to the supervisory authority. (Contact details see below)

9. Right to complain to the competent supervisory authority

In the event of violations of data protection law, the person concerned has the right to complain to a supervisory authority. 

The supervisory authority responsible for us in matters of data protection law is:

The Hamburg Commissioner for Data Protection and Freedom of Information 

Ludwig-Erhard-Straße 22
20459 Hamburg
Germany

mailbox@datenschutz.hamburg.de

10. Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format.

11. Information, blocking, deletion

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of the data processing and, if applicable, the right to correction, blocking or deletion of this data. Legal provisions regarding retention and documentation periods must be observed. You can contact us at any time about this and other questions on the subject of personal data at the address given in the contact details.

12. Right to restriction of processing

Restriction of processing" refers to methods for restricting the processing of personal data. In this case, the data concerned is temporarily blocked and no longer displayed or processed. You have the right to request this restriction of processing if the conditions listed below are met:

  • The accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the data,
  • the processing is unlawful and you oppose the erasure of the data and request the restriction of their processing instead
  • We no longer need the personal data for the purposes of the processing, but you need it for the establishment, exercise or defence of legal claims
  • You have objected to processing based on our legitimate interests and it is not yet clear whether our legitimate grounds override yours.
  • Where processing has been restricted at your request, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of a natural or legal person or for reasons of important public interest of the Union or of a Member State of the European Union.
 
13. Right to object
You can object to processing by us at any time if the processing is carried out as a task in the public interest or in the exercise of official authority or to safeguard the legitimate interests of the controller (Article 6(1)(e) or (f)). This also applies to profiling based on this.
However, you may then not be able to use our services. 
 
14. Analysis tools and third-party tools

When visiting our website, your surfing behaviour may be statistically analysed. This is mainly done with so-called analysis programs. The analysis of your surfing behaviour is usually anonymous. You can object to this analysis or prevent it by not using certain tools. You will find detailed information on this in the following data protection declaration.

15. External links to websites of other providers outside our responsibility

Our website contains external links to websites of other providers.

If you click on external links, we would like to point out that this is not our responsibility and that the contents differ from our own.

We have no influence on which data protection guidelines are followed and accept neither responsibility nor liability for this. Therefore, please check whether your data is handled confidentially before passing on your data to the websites of other providers, as the responsibility then lies with the provider of the linked site.

Please also note that the transfer may be to unsafe third countries (e.g. Facebook - USA). According to a recent ruling by the European Court of Justice (ECJ), there is no adequate level of data protection in insecure third countries and thus a risk to the protection of your data. Here, the data may be used for control and monitoring purposes under certain circumstances.

Therefore, if you do not wish for this to happen, do not click on the link. If you still wish to use the link destination, click on the external link and your data will be transferred to the link destination accordingly.

II. Data collection on our website

a) Cookies

The Internet pages partly use so-called cookies. Cookies do not cause any damage to your computer or mobile device and serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies enable us to recognise your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.

Cookies that are required to carry out the electronic communication process or to provide certain functions you have requested are stored on the basis of Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimised provision of its services. Insofar as other cookies (e.g. cookies to analyse your surfing behaviour) are stored, these are dealt with separately in this data protection declaration.

You have the option to decide on the setting of cookies in the area of our offer through the "Consent banner".

b) Server log files

The provider of the pages automatically collects and stores information that your browser automatically transmits to us in so-called server log files. 

These are:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

This data is not merged with other data sources.

The legal basis for this processing is the legitimate interest (Article 6 (1) lit. f GDPR) to operate this website professionally and securely.

When using this general data and information, minubo does not draw any conclusions about the data subject. Rather, this information is needed (1) to deliver the contents of our website correctly, (2) to optimise the contents of our website as well as the advertising for these, (3) to ensure the long-term operability of our information technology systems and the technology of our website, and (4) to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack. Therefore, minubo analyzes anonymously collected data and information on one hand for statistical purposes and on the other hand for the purpose of increasing the data protection and data security of our enterprise, and ultimately ensuring an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from any personal data provided by a data subject.

c) Collection and use of data during registration

You have the option to register with us. This is voluntary and serves the purpose of the data controller to offer the data subject content or services which, due to the nature of the matter, can only be offered to registered users. Registered persons are free to contact minubo in order to have the personal data provided during registration amended or completely deleted from the controller's database.

The legal basis for this is Article 6 (1) lit. a GDPR. The consent given by you can be revoked at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation. 

By registering on the website of the controller, the IP address of the data subject the IP address assigned by the Internet service provider (ISP) of the data subject, the date and the time of registration are also stored. The storage of this data takes place against the background that only in this way can the misuse of our services be prevented and, if necessary, this data makes it possible to clarify criminal offences that have been committed. 

In this respect, the storage of this data is necessary for the protection of the data controller. As a matter of principle, this data is not passed on to third parties unless there is a legal obligation to pass it on or the passing on serves the purpose of criminal prosecution.

d) Data collection for applications

minubo collects and processes the personal data of applicants for the purpose of handling the application procedure pursuant to Art. 6 (1) lit. f GDPR. 

The processing may also take place electronically. This is in particular the case if an applicant submits corresponding application documents to the controller by electronic means, for example by email or via a web form located on the website.

If minubo concludes an employment contract with an applicant, the transmitted data will be stored in accordance with Art. 88 GDPR in conjunction with § 26 BDSG for the purpose of processing the employment relationship in compliance with the statutory provisions. 

If minubo does not conclude an employment contract with the applicant, the application documents will be automatically deleted six months after the announcement of the rejection decision, unless the applicant has given his/her consent to further processing pursuant to Art. 6 (1) lit. a GDPR. The six-month period results from the defence of asserted claims under the General Equal Treatment Act (§ 15 (4) AGG). The data will then be retained for evidentiary purposes and deleted after the six-month period.

e) Use and application of HubSpot

We use HubSpot for our online marketing activities. This is an integrated software solution that we use to cover various aspects of our online marketing. 

The legal basis is the legitimate interest pursuant to Art. 6 (1) lit.f GDPR.

This includes, among other things:

  • Content management (website and blog)
  • Email marketing (newsletter and automated mailings, e.g. to provide downloads)
  • Social media publishing & reporting
  • Reporting (e.g. traffic sources, accesses, etc.
  • Contact management (e.g. user segmentation & CRM)
  • Landing pages and contact forms

Our sign-up service allows visitors to our website to learn more about our company, download content and provide their contact information and other demographic information. 

This information, as well as our website content, is stored on servers operated by our software partner HubSpot. It may be used by us to contact visitors to our website and to determine which of our company's services are of interest to them. All information we collect is subject to this privacy policy. We use all information collected solely to optimise our marketing.

HubSpot is a software company from the USA with a branch in Ireland. Contact:

HubSpot Ireland Ltd
Ground Floor, Two Dockland Central, Guild Street
Dublin 1, Co. Dublin
Ireland
Phone: +353 1 5187500

Since data transfer to the USA cannot be ruled out, HubSpot offers standard contractual clauses for data transfer to third countries. The European Commission has approved the use of standard contractual clauses as a means of ensuring adequate protection when transferring data outside the EEA. 

More information from HubSpot regarding their privacy policy »

More information from HubSpot regarding EU data protection regulations »

More information about the cookies used by HubSpot can be found here & here »

f) Collection and processing when using the contact form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you have provided there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We do not pass on this data without your consent.

The personal data entered by the data subject is collected and stored exclusively for internal use by the data controller and for its own purposes (including contacting by minubo). The controller may arrange for the data to be passed on to one or more processors, who will also use the personal data exclusively for an internal use attributable to the controller. No further disclosure to third parties will take place.

The processing of the data entered in the contact form is therefore based exclusively on your consent (Art. 6 (1) lit. a GDPR). You can revoke this consent at any time. An informal communication by email to us is sufficient for this purpose. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

The data you entered in the contact form will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory legal provisions - in particular retention periods - remain unaffected.

g) Newsletter

minubo informs its customers and business partners at regular intervals by means of a newsletter about offers of the company, which can be subscribed to all or selected topics. 

The legal basis for this is the consent according to Art. 6 (1) lit. a GDPR.

In principle, the newsletter can only be received by the data subject if the data subject has a valid e-mail address and the data subject registers for the newsletter dispatch. For legal reasons, a confirmation e-mail is sent to the e-mail address entered by a data subject for the first time for the newsletter dispatch using the double opt-in procedure. This confirmation e-mail serves to verify whether the owner of the e-mail address as the data subject has authorized the receipt of the newsletter.

When registering for the newsletter, we also store the IP address of the computer system used by the data subject at the time of registration, as assigned by the Internet service provider (ISP), as well as the date and time of registration. The collection of this data is necessary in order to be able to trace the (possible) misuse of a data subject's e-mail address at a later point in time and therefore serves as a legal safeguard for the controller.

For the dispatch of e-mail campaigns, in particular newsletters, we use the provider "HubSpot". For further details, see also above under "e) Use and application of HubSpot".

The personal data collected as part of a newsletter registration is used to send our newsletter and for information around changes or disruptions to our newsletter offering. Furthermore, subscribers of minubo could be contacted by e-mail for sales purposes, provided that there is a legitimate interest of minubo, e.g. the newsletter recipient shows strong interest in the products/services of minubo through appropriate behavior.

No personal data collected as part of the newsletter service will be passed on to third parties. The subscription to our newsletter can be cancelled by the data subject at any time. The consent to the storage of personal data that the data subject has given us for the newsletter dispatch can be revoked at any time. For the purpose of cancelling the subscription, a corresponding link can be found in each newsletter. Furthermore, it is also possible to notify the controller of this at any time by other means.

Newsletter tracking 

The newsletters of minubo contain so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in such emails that are sent in HTML format to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of our newsletter content. Based on the embedded tracking pixel, minubo may see if and when an e-mail was opened by a data subject, and which links contained in the e-mail were called up by the data subject.

Such personal data collected via the tracking pixels contained in the newsletters are stored and analyzed by the controller in order to optimize the newsletter dispatch and to better tailor the content of future newsletters to the interests of the data subject. This personal data will not be disclosed to third parties. Data subjects are entitled at any time to revoke the separate declaration of consent given in this regard via the double opt-in procedure. Unsubscribing from the receipt of the newsletter automatically interprets minubo as a revocation.

The legal basis results from the consent according to Art. 6 (1) lit. a GDPR, which is obtained via a mail link.

h) Use of our free demo account

minubo offers its customers and business partners the use of a free demo account to test the products in detail and to obtain further information about the product.

The legal basis for this are contractual or pre-contractual measures according to Art. 6 (1) lit. b DSGVO.

By registering for the demo account, the IP address assigned by the Internet service provider (ISP) of the person concerned, the date and the time of registration are also stored. The storage of this data takes place against the background that only in this way can the misuse of our services be prevented, and this data makes it possible, if necessary, to clarify committed crimes. In this respect, the storage of this data is necessary for the protection of the data controller. As a matter of principle, this data is not passed on to third parties unless there is a legal obligation to pass it on or the passing on serves the purpose of criminal prosecution.

The personal data entered by the data subject are collected and stored exclusively for internal use by the data controller and for its own purposes (including contacting by minubo). The controller may arrange for the data to be passed on to one or more processors, who will also use the personal data exclusively for an internal use attributable to the controller. No further disclosure to third parties will take place.

We generally delete personal data when there is no need for further storage. A requirement may exist in particular if the data is still needed to fulfill contractual services, to check and grant or defend against warranty and, if applicable, guarantee claims. In the case of statutory retention obligations, deletion will only be considered after expiry of the respective retention obligation.

i) CRM and support
minubo uses CRM systems and support portals for the documentation of contract initiation, contract execution and customer support. The personal data in these systems is limited to business contact data such as first name, last name, e-mail address, function, title and telephone numbers. minubo collects and stores information on companies and employees of these companies who have entered into a contractual relationship with minubo in order to use one of minubo's various offers.

The contractual partner for the CRM system is the US provider "Salesforce". The technical service provider Salesforce is an offering of Salesforce.com, Inc, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA. The required order processing contracts according to Art. 28 GDPR, as well as an adequate level of data protection through the use of standard contractual clauses according to European law to enable the transfer of personal data to the USA are given.

The contractual partner for the support system "Jira ServiceDesk” is the US provider "Atlassian". The technical service provider Atlassian is an offering of Atlassian, Inc., 350 Bush Street, Level 13, San Francisco, CA, 94104, USA. The required order processing contracts according to Art. 28 GDPR, as well as an adequate level of data protection through the use of standard contractual clauses according to European law to enable the transfer of personal data to the USA are given.

The legal basis for both systems are pre-contractual or contractual relationships according to Art. 6 para. 1 p. 1 lit. b GDPR. 

minubo will provide any data subject at any time upon request with information about what personal data is stored about the data subject. Furthermore, minubo will correct or delete personal data at the request or notice of the data subject, provided that this does not conflict with any contractual or statutory retention obligations. Both the data protection officer and the respective account manager are available to the data subject as contact persons in this context.

j) Use of Google services

Use of Google Tag Manager

We use the Google Tag Manager service provided by Google. This is an auxiliary service and facilitates the integration of tools for us, so that data is only collected for technically necessary purposes.

The purpose of the data processing is therefore the tag management.

The Google Tag Manager is a company of Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

The legal basis for processing is consent pursuant to Art. 6 (1) lit. a DSGVO. The data will be deleted as soon as it is no longer required, but no later than at the latest 14 days after retrieval.

We have concluded an order processing contract with Google pursuant to Art. 28 DSGVO. However, we would like to point out that the data may be processed by the US authorities for control and monitoring purposes. The processing by Google therefore also takes place outside the EU (USA, Taiwan, Chile, Singapore).

There are guarantees for the transfer of data to third countries through the conclusion of standard contractual clauses.

The European Commission has approved the use of standard contractual clauses as a means of ensuring adequate protection when transferring data outside the EEA.

Further information and the applicable Google privacy policy can be found at available at https://policies.google.com/privacy?hl=en&gl=de.

Use and application of Google Analytics

minubo has integrated the Google Analytics component (with anonymization function) on the website and blog. Google Analytics is a web analysis service. 

The legal basis results from the consent according to Art. 6 para.1 p. 1 lit. a GDPR and is obtained via the cookie banner.

Web analysis is the collection, compilation and evaluation of data about the behavior of visitors to websites. Among other things, a web analysis service collects data on the website from which a data subject has accessed a website (so-called referrers), which subpages of the website have been accessed, or how often and for how long a subpage has been viewed. A web analysis is mainly used for the optimization of a website and for the cost-benefit analysis of internet advertising.

The operating company of the Google Analytics component is Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

minubo uses the add-on "_gat._anonymizeIp" for web analysis via Google Analytics. By means of this add-on, the IP address of the Internet connection of the data subject is shortened and anonymized by Google if access to our Internet pages is from a Member State of the European Union or from another state party to the Agreement on the European Economic Area.

The purpose of the Google Analytics component is to analyze the flow of visitors to our website. Google uses the data and information obtained, among other things, to evaluate the use of our website, to compile online reports for us that show the activities on our website, and to provide other services related to the use of our website.

Google Analytics sets a cookie on the information technology system of the data subject. What cookies are has already been explained above. By setting the cookie, Google is enabled to analyze the use of our website. By each call of one of the individual pages of this website, which is operated by the controller and on which a Google Analytics component has been integrated, the internet browser on the information technology system of the data subject is automatically caused by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. As part of this technical process, Google obtains knowledge of personal data, such as the IP address of the data subject, which Google uses, among other things, to track the origin of visitors and clicks and subsequently enable commission calculations.

By means of the cookie, personal information, for example the access time, the location from which an access originated and the frequency of visits to our website by the data subject, is stored. Each time the data subject visits our website, this personal data, including the IP address of the internet connection used by the data subject, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may disclose this personal data collected via the technical procedure to third parties.

The data subject can prevent the setting of cookies by our website, as already described above, at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system of the data subject. In addition, a cookie already set by Google Analytics can be deleted at any time via the internet browser or other software programs.

Furthermore, the data subject has the option to object to the collection of data generated by Google Analytics and related to the use of this website as well as to the processing of this data by Google and to prevent such processing. For this purpose, the data subject must download and install a browser add-on under the link https://tools.google.com/dlpage/gaoptout.

This browser add-on tells Google Analytics via JavaScript that no data and information about visits to Internet pages may be transmitted to Google Analytics. The installation of the browser add-on is considered by Google as an objection. If the data subject's information technology system is deleted, formatted or reinstalled at a later point in time, the data subject must reinstall the browser add-on in order to deactivate Google Analytics. Provided that the browser add-on is uninstalled or deactivated by the data subject or another person attributable to his or her sphere of control, there is the option of reinstalling or reactivating the browser add-on.

The criterion for the duration of the storage of personal data is, in addition to any agreed contractual term, the respective statutory retention period. After expiry of this period, the corresponding data is routinely deleted, provided that it is no longer required for the fulfillment of the contract or the initiation of the contract.

Another option for deactivating Google Analytics on mobile devices is possible under the following link: Deactivate Google Analytics

Further information and the applicable data protection provisions of Google can be found at https://policies.google.com/privacy?hl=en and https://marketingplatform.google.com/about/analytics/terms/us.

We have concluded an order processing agreement with Google pursuant to Art. 28 GDPR. However, processing by Google Analytics also takes place outside the EU (USA). There are guarantees for data transfer to third countries through the conclusion of standard contractual clauses. The European Commission has approved the use of standard contractual clauses as a means of ensuring adequate protection when transferring data outside the EEA. 

Google Analytics is explained in more detail under this link https://marketingplatform.google.com/intl/en/about/analytics/.

Use of Google Remarketing

minubo has integrated Google Remarketing services on this website. 

The legal basis results from the consent according to Art. 6 para.1 p. 1 lit. a GDPR and is obtained via the cookie banner. 

Google Remarketing is a function of Google AdWords that allows a company to display advertisements to Internet users who have previously visited the company's website. The integration of Google Remarketing thus allows a company to create user-related advertisements and consequently to display interest-relevant advertisements to the Internet user. 

The operating company of the Google Remarketing services is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The purpose of Google Remarketing is the display of interest-relevant advertising. Google Remarketing enables us to display advertisements via the Google advertising network or to have them displayed on other websites, which are tailored to the individual needs and interests of Internet users.

Google Remarketing sets a cookie on the information technology system of the data subject. What cookies are has already been explained above. By setting the cookie, Google is enabled to recognize the visitor to our website when he or she subsequently visits websites that are also members of the Google advertising network. Each time a website is accessed on which the Google Remarketing service has been integrated, the Internet browser of the person concerned automatically identifies itself to Google. Within the scope of this technical procedure, Google obtains knowledge of personal data, such as the IP address or the user's surfing behavior, which Google uses, among other things, to display interest-relevant advertising.

By means of the cookie, personal information, for example the Internet pages visited by the data subject, is stored. Each time the data subject visits our website, personal data, including the IP address of the internet connection used by the data subject, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may disclose this personal data collected via the technical procedure to third parties.

The data subject can prevent the setting of cookies by our website, as already described above, at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system of the data subject. In addition, a cookie already set by Google Analytics can be deleted at any time via the internet browser or other software programs.

Furthermore, the data subject has the option to object to interest-based advertising by Google. To do this, the data subject must call up the link https://adssettings.google.de/authenticated from any of the internet browsers he or she uses and make the desired settings there.

We have concluded an order processing agreement with Google pursuant to Art. 28 GDPR. However, processing by Google Remarketing also takes place outside the EU (USA). There are guarantees for data transfer to third countries through the conclusion of standard contractual clauses. The European Commission has approved the use of standard contractual clauses as a means of ensuring adequate protection when transferring data outside the EEA. 

Further information and Google's applicable privacy policy can be found at https://policies.google.com/privacy?hl=en.

Use of Google AdWords

minubo has integrated Google AdWords on this website. Google AdWords is a service for internet advertising, which allows advertisers to place ads in the search engine results of Google as well as in the Google advertising network. 

The legal basis results from the consent according to Art. 6 para.1 p. 1 lit. a GDPR and is obtained via the cookie banner.

Google AdWords allows an advertiser to specify certain keywords in advance, by means of which an ad is displayed in Google's search engine results exclusively when the user retrieves a keyword-relevant search result with the search engine. In the Google advertising network, the ads are distributed to topic-relevant websites by means of an automatic algorithm and in compliance with the previously defined keywords.

The operating company of the Google AdWords services is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The purpose of Google AdWords is to advertise our website by displaying interest-relevant advertisements on the websites of third-party companies and in the search engine results of the Google search engine and to display third-party advertisements on our website.

If a data subject accesses our website via a Google ad, a so-called conversion cookie is stored by Google on the data subject's information technology system. What cookies are has already been explained above. A conversion cookie loses its validity after thirty days and is not used to identify the data subject. The conversion cookie is used to track whether certain subpages on our website have been accessed, provided that the cookie has not yet expired. 

The data and information collected through the use of the conversion cookie are used by Google to create visit statistics for our website. These visit statistics are in turn used by us to determine the total number of users who were referred to us via AdWords ads, i.e. to determine the success or failure of the respective AdWords ad and to optimize our AdWords ads for the future. Neither our company nor other advertisers of Google AdWords receive information from Google by means of which the data subject could be identified.

By means of the conversion cookie, personal information, for example the internet pages visited by the data subject, is stored. Each time the data subject visits our website, personal data, including the IP address of the internet connection used by the data subject, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may disclose this personal data collected via the technical procedure to third parties.

The data subject can prevent the setting of cookies by our website, as already described above, at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a conversion cookie on the information technology system of the data subject. In addition, a cookie already set by Google AdWords can be deleted at any time via the internet browser or other software programs.

Furthermore, the data subject has the option to object to interest-based advertising by Google. To do this, the data subject must call up the link https://adssettings.google.de/authenticated from any of the internet browsers he or she uses and make the desired settings there.

We have concluded an order processing agreement with Google pursuant to Art. 28 GDPR. However, processing by Google AdWords also takes place outside the EU (USA). There are guarantees for data transfer to third countries through the conclusion of standard contractual clauses. The European Commission has approved the use of standard contractual clauses as a means of ensuring adequate protection when transferring data outside the EEA. 

Further information and Google's applicable privacy policy can be found at https://policies.google.com/privacy?hl=en.

Use of Google Meet as video conferencing tool

minubo processes personal data that we receive from our customers or other data subjects in the course of using Google Meet. The purpose is communication with customers in the form of video conferences. 

The legal basis for this is contractual or pre-contractual measures pursuant to Art. 6 para. 1 p. 1 lit. b GDPR.

Relevant personal data are personal details (name, telephone number and other contact details, meeting metadata: Topic, description (optional), participant IP addresses, device/hardware information and the IP address of your device). Further, written communication is recorded in the chat feature of Google Meet. 

We use Google Meet to conduct online meetings. If we want to record online meetings, we will transparently communicate this to you in advance and - if necessary - ask for consent.

Google does not use customer data for advertising and does not sell it to third parties. Customer data is encrypted in transit and records stored in Google Drive are encrypted by default. There are neither functions nor software for user attention tracking in Google Meet.

We generally delete personal data when there is no need for further storage. A requirement may exist in particular if the data is still needed to fulfill contractual services, to check and grant or defend against warranty and, if applicable, guarantee claims. In the case of statutory retention obligations, deletion is only considered after the expiry of the respective retention obligation.

The necessary order processing contracts, as well as the conclusion of so-called standard contractual clauses are in place. 

Note: If you call up the Google Meet website, the Google Meet provider is responsible for data processing. However, calling up the website is only necessary for the use of Google Meet in order to download the software for the use of Google Meet. However, it is not necessary to download the software to conduct video conferences. 

https://support.google.com/meet/answer/9852160?hl=en&ref_topic=10632347

k) Use of Hotjar
 
minubo has integrated services of Hotjar Ltd. on this website. Hotjar is an analysis tool that allows website operators to evaluate the online behaviour of their users. Possible tools offered by the platform are heat maps, user surveys and funnel tracking. Website operators can use these to disclose, for example, clicks, scroll heights and mouse movements of users. With the data obtained, they can improve the functionality and user-friendliness of their website.

The legal basis results from consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR and is obtained via the cookie banner.

The operating company of the Hotjar services is Hotjar Ltd, Dragonara business centre, 5th floor, Dragonara road, Paceville St Julian's, STJ 3141, Malta.

The purpose of the Hotjar services is to analyze the flow of visitors and their behaviour on our website. Hotjar uses the data and information obtained to, among other things, evaluate the use of our website in order to compile simple data visualizations, such as heat maps, for us. This allows us to analyze where we can further optimize the user experience.

Hotjar uses cookies and tracking codes to collect user data for website operators. The tracking codes collect, among other things

  • the IP address of the end device (anonymized collection and storage by collecting only the first 3 eight-bit characters of the IP),
  • the type of terminal device,
  • the size of the terminal screen,
  • the geographical location (country),
  • the language used on the website,
  • the sub-pages visited on the website,
  • the referring domain and
  • the date and time of the website visit.

According to Hotjar, all data collected is stored on servers in Ireland (EU). Hotjar has imposed a data retention period of 365 days on itself, after which the collected data is automatically deleted again.

In addition, we have concluded an order processing contract with Hotjar in accordance with Art. 28 GDPR. 

No personal data is stored by Hotjar for the analysis and the company follows the guideline "We track behaviour, not individuals". 

Data subjects also have the option to object to tracking by Hotjar. To do so, the data subject must call up the link https://www.hotjar.com/policies/do-not-track/ from any of the internet browsers he or she uses and make the desired settings there ('opt-out').

Furthermore, the data subject has the option to prevent the setting of cookies by our website at any time by means of a corresponding setting ('Do-Not-Track') of the Internet browser used, as already described above, and thus to permanently object to the setting of cookies. In addition, a cookie already set by Hotjar can be deleted at any time via the Internet browser or other software programs.

l) Webinars
The contractual partner for our online video conference tool  "Zoom” is the US provider "Zoom Video Communications". The technical service provider Zoom Video Communications is an offering of Zoom Video Communications, Inc., 55 Almaden Blvd, San Jose, CA 95113, USA. The required order processing contracts according to Art. 28 GDPR, as well as an adequate level of data protection through the use of standard contractual clauses according to European law to enable the transfer of personal data to the USA are given.
 
The legal basis is our legitimate interest according to Art. 6 para. 1 p. 1 lit. F GDPR to offer webinars.
 
Processing by Zoom Video Communications does not take place outside the EU, but has been restricted to server locations in Germany and the Netherlands.
 
The data controller for data processing directly related to the performance of "Online Meetings" is minubo GmbH. Note: To the extent you access the Zoom Video Communication website, the Zoom Video Communication provider is responsible for data processing. However, a call to the internet page is only necessary for example for the use of Zoom Video Communication in order to download the software for the use of Zoom. https://www.zoom.com/en/trust/privacy/
 
m) Benefits of the web-based application Business Intelligence Software

The Business Intelligence Software is a web-based application (at app.minubo.com) that enables e-commerce and omni-channel retail companies to make the company data transferred via a variety of interfaces accessible to their employees within the products now and suite, thus promoting data-driven work in their company. The legal basis for this is the contract pursuant to Art. 6 (1) p. 1 lit. b GDPR.

Cookies

Like the minubo.com website, the web-based Business Intelligence Software at app.minubo.com also uses and stores cookies. The cookie is used there in particular to store the session information after login.

The data subject can prevent the setting of cookies by our website at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software programs. This is possible in all common Internet browsers. If the data subject deactivates the setting of cookies in the Internet browser used, not all functions of our business intelligence software may be fully usable.

Login-Data

Users of the minubo Business Intelligence Software receive access data generated by minubo employees or their own colleague responsible for user management in minubo, consisting of their business e-mail address and a secure random password. The password can subsequently be changed by the users to a personal password.  

In addition, the first and last name as well as the functional area of the respective employee are recorded and stored when an access is set up. Depending on the functional area, certain functions in the Business Intelligence Software can be personalized for the respective functional area.

Log files and user tracking

minubo's Business Intelligence Software contains so-called tracking pixels. A tracking pixel is a miniature graphic embedded in individual HTML pages of the web-based application to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of individual functions within the suite. Based on the embedded tracking pixel, minubo may see if and when a certain function in the application was executed by a data subject. In addition, minubo measures the activity of the entire company within the application and the various functional areas of the respective customer company already working with the application

minubo Store Monitor

The minubo Store Monitor is an application for tablets and smartphones that provides users with quick and intuitive access to key figures and data based on the company data in the minubo Software.

Data storage on the end device

The minubo Store Monitor stores data on the respective end device of the User analogous to cookies in the Internet browser, which also includes personal information. In addition to session information (technical authentication keys used to maintain the session after login) and a search history (identification numbers of entities searched for, such as brands and product names), the user's business e-mail address is also stored in order to avoid re-entering it when logging in again.

It is not possible to block this data storage. If the user concerned wishes to object to the storage of the above-mentioned information on the end device, he must delete the app on his end device together with the data stored by the app.

Login data

Users of the minubo Store Monitor receive access data generated by minubo employees or their own colleague responsible for user management in minubo, consisting of their business e-mail address and a secure random password. The password can subsequently be changed by the users to a personal password.  

In addition, the first and last name as well as the functional area of the respective employee are recorded and stored when an access is set up. Depending on the functional area, certain functions in the Store Monitor can be personalized for the respective functional area.

Log files and user tracking

The Store Monitor by minubo contains so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in individual pages of the mobile application to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of individual functions within the application. Based on the embedded tracking pixel, minubo can see if and when a certain function in the Suite was executed by a data subject. In addition, minubo measures the activity of the entire company within the application and the various functional areas of the respective customer company that are already working with the application.

LOGO GRÜN NEU