Privacy Policy

1. An overview of data protection

General Information

The following information will give you an uncomplicated overview of what will happen to your personal data when you visit this website. The term "personal data" comprises all data that can be used to identify you personally. For detailed information on the topic of data protection, please refer to our Data Protection Declaration, available just below this document.

Logging of data on this website

Who is responsible for recording data on this website (i.e. the "controller")?

The data on this website is processed by the website operator, whose contact information is available in the section "Information about the controller (referred to as the "controller" in the LGPD)" in this Privacy Policy.

How do we record your data?

We collect your data as a result of your sharing of data with us. For example: information you enter in our contact form.

Other data will be recorded by our IT systems automatically or after you consent to its registration during your visit to the website. This data mainly comprises technical information (e.g. web browser, operating system or time when the website was accessed). This information is automatically recorded when you access this website.

For what purposes do we use your data?

A portion of the information is generated to ensure an error-free presentation of the website. Other data can be used to analyze your user patterns.

What rights do you have with respect to your information?

You have the right to receive information about the source, recipients, and purposes of your archived personal data at any time, without having to pay fees for such disclosures. You also have the right to demand that your data be rectified or erased. If you have consented to data processing, you have the option to revoke this consent at any time, which will affect all future data processing. In addition, you have the right to demand that the processing of your data be restricted in certain circumstances. In addition, you have the right to file a complaint with the competent controlling body.

Do not hesitate to contact us at any time if you have any questions about this or any other data protection-related issue.

Analytics tools and tools provided by third parties

There is a possibility that your browsing patterns will be statistically analysed during your visit to this website. Such analyses are mainly carried out with what we call analysis programs.

For detailed information on these analytics programs, please see our Data Protection Statement below.

2. Hosting

External Hosting

This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host's servers. These include IP addresses, contact requests, metadata and communications, contract information, contact information, names, web page visits, and other data generated through websites.

The host is used for the purpose of fulfilling the contract with our potential and existing customers and in order to ensure a secure, fast and efficient provision of our online services by a provider. If appropriate consent is obtained, the processing takes place exclusively on the basis of Art. 7 of the LGPD, insofar as the consent includes the storage of cookies or access to information from the user's end device (e.g. device fingerprint). This consent can be revoked at any time.

Our host will process your data only to the extent necessary to fulfil its performance obligations and to follow our instructions in relation to such data.

We are using the following host:

Crownpeak Technology GmbH

Data Processing

We have entered into a data processing agreement with the above-mentioned provider. This is a contract required by data privacy laws that ensures that they process personal data of our website visitors only based on our instructions and in compliance with the LGPD.

3. General information and mandatory information

Data protection

The operators of this website and its pages take the protection of your personal data very seriously. We therefore treat your personal data as confidential information and in compliance with statutory data protection regulations and this Data Protection Declaration.

Whenever you visit this website, we will collect a variety of personal information. Personal data comprises data that can be used to identify you personally. This Data Protection Statement explains what data we collect, as well as the purposes for which we use that data. It also explains how and for what purpose the information is collected.

We would like to inform you that the transmission of data via the Internet (i.e. by means of e-mail communications) may be subject to security breaches. It is not possible to completely protect data from third-party access.

Information about the controller (referred to as the "controller" in the LGPD)

The data processing controller of this website is:

Data Protection Officer - Luis Amaral
E-mail: dpo.actega.brasil@altana.com

The controller is the natural or legal person who, alone or jointly with others, makes decisions about the purposes and resources for the processing of personal data (e.g. names, email addresses, etc.).

Storage Term

Unless a more specific storage period has been set out in this privacy policy, your personal data will remain with us until the purpose for which it was collected no longer applies. If you make a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally supported grounds for storing your personal data (e.g. tax or commercial law retention periods); In the latter case, the exclusion will occur after these reasons are no longer applicable.

General information on the legal basis for data processing on this website

If you have consented to data processing, we process your personal data on the basis of Art. 7 or Art. 11 of the LGPD, if special categories of data are processed. In the case of explicit consent for the transfer of personal data to third countries, the data processing is also based on article 33 of the LGPD. Consent can be revoked at any time. If your data is necessary for the fulfillment of contracts or for taking pre-contractual measures, we process your data based on article 15 of the LGPD. In addition, if your data is necessary for compliance with a legal obligation, we will process it based on article 15 of the LGPD. In addition, data processing may be carried out on the basis of our legitimate interest in accordance with Art. 15 of the LGPD. Information on the relevant legal basis for each individual case is available in the following paragraphs of this privacy policy.

Designation of a Data Protection Officer

We have appointed a Data Protection Officer for our company.

Data Protection Officer - Luis Amaral
E-mail: dpo.actega.brasil@altana.com

Information on data transfers to the U.S. and other non-EU countries

We use, among other technologies, tools from companies located in other countries that are not secure under data protection law, as well as tools from the U.S. whose providers are not certified under the EU-U.S. Data Privacy Framework (DPF) OR LGPD. If these tools are enabled, your personal data may be transferred to and processed in these countries. We would like you to note that no level of data protection comparable to that of the EU or LGPD can be guaranteed in third countries that are insecure in terms of data protection legislation.

We would like to point out that the USA, as a secure third country, has, in general, a level of data protection comparable to that of the EU and LGPD. The transfer of data to the U.S. is therefore permitted if the recipient is certified in accordance with the "EU-U.S. Data Privacy Framework" (DPF) or has appropriate additional safeguards. Information on transfers to third countries, including the recipients of the data, can be found in this Privacy Policy.

Recipients of personal data

As part of our business activities, we cooperate with various external parties. In some cases, this also requires the transfer of personal data to these external parties. We only disclose personal data to third parties if this is necessary as part of the performance of a contract, if we are legally required to do so (e.g., disclosure of data to tax authorities), if we have a legitimate interest in the disclosure pursuant to Art. 6 of the LGPD, or if another legal basis permits the disclosure of such data. When using processors, we only disclose personal data of our customers on the basis of a valid agreement on data processing. In the case of joint processing, a joint processing agreement is concluded.

Revocation of your consent to data processing

A wide range of data processing transactions is only possible with your express consent. You can also revoke at any time any consent you have already given us. This is without prejudice to the lawfulness of any data collection that took place prior to its revocation.

Right to object to data collection in special cases; right to object to direct advertising (Art. 15 of the LGPD)

IF THE DATA IS PROCESSED, BASED ON ARTICLE 15 OF THE LGPD, YOU HAVE THE RIGHT, AT ANY TIME, TO REVOKE THE PROCESSING OF YOUR PERSONAL DATA BASED ON REASONS ARISING FROM YOUR SPECIAL SITUATION. THIS ALSO APPLIES TO PROFILING ON THE BASIS OF THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS ON WHICH THE DATA PROCESSING IS BASED, PLEASE REFER TO THIS DATA PROTECTION DECLARATION. IF YOU FILE AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE ARE IN A POSITION TO PROVIDE SOLID AND CONVINCING GROUNDS OF PROTECTION FOR THE PROCESSING OF YOUR DATA, WHICH OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE ASSERTION, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 16 LGPD).

IF YOUR PERSONAL DATA IS BEING PROCESSED FOR DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF THE AFFECTED DATA FOR THE PURPOSES OF SUCH ADVERTISING AT ANY TIME. THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS LINKED TO SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (IN ACCORDANCE WITH THE TERMS OF ART. 15(2) OF THE LGPD).

Right to file a complaint with the competent controlling body

In the event of a breach of the LGPD, data subjects have the right to lodge a complaint with a supervisory body, namely in the Member State where they usually maintain their domicile, place of work or the place where the alleged breach occurred. The right to file a complaint is in effect regardless of any other administrative or judicial process available as legal remedies.

Right to data portability

You have the right to require us to hand over all information that we process automatically based on your consent or to perform contracts, and that it be delivered to you or a third party in a commonly used, machine-readable format. If you require the direct transfer of the data to another controller, this will only be done if it is technically feasible.

Information on rectification and deletion of data

Within the scope of the applicable legal provisions, you have the right to request information about your stored personal data, its source and recipients, as well as the purpose of the processing of your data at any time. You may also have the right to rectify or delete your data. If you have any questions about this matter or any questions about personal data, please do not hesitate to contact us at any time.

Right to Demand Processing Restrictions

You have the right to demand the imposition of restrictions with regard to the processing of your personal data. To do so, please contact us at any time. The right to demand the restriction of processing applies in the following cases:

In the event that you contest the accuracy of your data archived by us, we will generally need some time to verify this claim. For as long as this investigation is ongoing, you have the right to demand that we restrict the processing of your personal data.
If the processing of your personal data was/is carried out unlawfully, you have the option of demanding the restriction of the processing of your data instead of demanding its deletion.
If we no longer need your personal data and you need it to exercise, defend or assert legal rights, you have the right to demand the restriction of the processing of your personal data rather than its deletion.
If you have raised an objection, your rights and our rights will have to be weighed against each other. As long as it is not determined which interests prevail, you have the right to demand the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data – with the exception of its archiving – may only be processed with your consent to assert, exercise or defend legal claims or to protect the rights of other natural or legal persons.

SSL and/or TLS encryption

For security reasons and to protect the transmission of sensitive content, such as purchase orders or inquiries you send to us, this website uses an SSL or TLS encryption program. You can recognize an encrypted connection by checking to see if the browser's address changes from "http://" to "https://" and also by the appearance of the lock icon in the browser's address bar.

If SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties

4. Registration of data on this website

Cookies

Our websites and pages use what the industry calls "cookies". Cookies are small text files that do not cause any harm to your device. They are stored temporarily for the duration of a session (session cookies) or are permanently archived on your device (permanent cookies). Session cookies are automatically deleted as soon as you end your visit. Permanent cookies remain archived on your device until you actively delete them or they are automatically deleted by your web browser.

In some cases, it is possible that third-party cookies will be stored on your device as soon as you enter our website (third-party cookies). These cookies allow you or us to take advantage of certain services offered by third parties (e.g., cookies for the processing of payment services).

Cookies have a variety of functions. Many cookies are technically essential, as certain functions of the website would not work in their absence (e.g. the shopping cart function or the display of videos). The purpose of other cookies may be to analyze user patterns or to display promotional messages.

Cookies, which are necessary for the performance of electronic communications transactions, or for the provision of certain functions that you intend to use (e.g. for the shopping cart function) or those that are necessary for the optimization (necessary cookies) of the website (e.g. cookies that provide measurable information about the web audience), must be stored based on article 7, paragraph 9 of the LGPD, unless a different legal basis is cited. The website operator has a legitimate interest in the storage of the necessary cookies in order to ensure the smooth and optimised provision of the operator's services. If your consent to the storage of cookies and similar recognition technologies has been requested, the processing will take place solely on the basis of consent.

You have the option to configure your browser so that you are notified whenever cookies are stored and to allow the acceptance of cookies only in specific cases. You can also opt out of the acceptance of cookies in certain cases or in general, or activate the opt-out function for the automatic eradication of cookies when the browser closes. If cookies are disabled, the functions of this website may be limited.

If third-party cookies are used or the cookies are used for analytical purposes, we will notify you separately in conjunction with this Data Protection Policy and, if applicable, ask for your consent.

Consent to ConsentManager

Our website uses the ConsentManager consent technology to obtain your consent for the storage of certain cookies on your device or for the use of certain technologies and documentation that are compliant with data protection legislation. The party offering this technology is Jaohawi AB, Håltegelvägen 1b, 72348 Västerås, Sweden, website:

https:www.consentmanager.de (hereinafter "ConsentManager").

Whenever you visit our website, a connection will be established with ConsentManager's servers to obtain your consent and other statements regarding the use of cookies.

In addition, ConsentManager will store a cookie in your browser in order to be able to allocate your declaration(s) of consent or revocations thereof. Data that is recorded in this way will be stored until you ask us to eradicate it, delete the ConsentManager cookie, or until the purpose for archiving the data no longer exists. This is without prejudice to mandatory statutory retention periods.

ConsentManager uses cookies to obtain the declarations of consent required by law. The legal basis for the use of these cookies is article 7, paragraph 9 of the General Data Protection Law (LGPD).

Data Processing

We have entered into a processing agreement with the above-mentioned provider. This is a contract required by data privacy laws that ensures the processing of personal data of visitors to our website only on the basis of our instructions.

Contact form

If you send us requests through our contact form, the information you provide on this form will be stored by us in order to respond to your request and if we have any further questions. We will not share this information without your consent.

If your request is related to the performance of a contract or if it is necessary to carry out pre-contractual measures, the processing of this data is based on article 7 of the General Data Protection Law (LGPD). In all other cases, the processing is based on our legitimate interest in the effective processing of requests addressed to us or your contract. If this has been requested; Consent can be revoked at any time.

The information you entered in the contact form will remain with us until you ask us to delete the data, revoke your consent to data archiving, or if the purpose for which the information is being archived no longer exists (e.g., after we have completed our response to your request). This is without prejudice to mandatory statutory provisions, in particular retention periods.

Request by e-mail, phone or fax

If you contact us by e-mail, telephone or fax, your request, including all resulting personal data (name, request), will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent.

This data is processed on the basis of Art. 7 parag. 5 of the General Data Protection Law (LGPD) if your query is related to the fulfillment of a contract or is necessary for the execution of pre-contractual measures. In all other cases, the data is processed on the basis of our legitimate interest in the effective processing of the queries sent to us (Art. 7, paragraph 9 of the LGPD) or on the basis of your consent (Art. 7, paragraph 1), if this has been obtained; Consent can be revoked at any time.

The data you submit to us via contact requests remains with us until you request deletion, revoke your consent to the storage or the purpose of the data storage expires (e.g. after the completion of your request). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

Salesforce Sales Cloud

We use Salesforce Sales Cloud to manage customer data. The supplier is salesforce.com Deutschland GmbH, Erika-Mann-Str. 31, 80636 Munich, Germany (hereinafter "Salesforce").

Salesforce Sales Cloud is a CRM system and allows us, in particular, to manage customers and contacts of existing and potential customers and to organize sales and communication processes. Using the CRM system also allows us to analyze our customer-related processes. Customer data is stored on Salesforce's servers. In the process, personal data may also be transferred to the parent company of salesforce.com Germany GmbH, salesforce.com inc., Salesforce Tower, 415 Mission Street, San Francisco, CA 94105, USA.

Details about Salesforce Sales Cloud features can be found here: https://www.salesforce.com/de/products/sales-cloud/overview/ .

The use of Salesforce Sales Cloud is based on Art. 7, paragraph 1 of the LGPD. The website operator has a legitimate interest in the most efficient management and communication with the customer possible. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 7, paragraph 1 of the LGPD, insofar as the consent includes the storage of cookies or access to information on the user's end device (e.g. device fingerprint. This consent can be revoked at any time.

Salesforce has Binding Corporate Rules (BCR) approved by the French data protection authority. These are binding corporate rules that legitimize the transfer of data from companies to third countries outside the EU and EEA. Details can be found here: https://www.salesforce.com/de/blog/2020/07/die-binding-corporate-rules-von-salesforce-erfuellen-hoechste-da.html .

For details, see the Salesforce Privacy Policy: https://www.salesforce.com/de/company/privacy/ .

The company is certified according to the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the U.S., which aims to ensure compliance with European data protection standards for data processing in the U.S. Every company certified by the DPF is required to comply with these data protection regulations. For more information, please contact the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000KzLyAAK&status=Active

Data Processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract required by data privacy laws that ensures that they process personal data of visitors to our website only based on our instructions and in compliance with the LGPD.

5. Analytics and advertising tools

Google Tag Manager

This website uses Google Tag Manager and its provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies into our website. Google Tag Manager does not create user profiles on its own, does not store cookies and does not carry out independent analyses. It just manages and runs the built-in tools through it. However, Google Tag Manager collects your IP address, which may also be transferred to Google's parent company in the United States.

Google Tag Manager is used on the basis of Art. 7, paragraph 1 of the General Data Protection Law (LGPD). The website operator has a legitimate interest in the quick and uncomplicated integration and administration of various tools on its website. If appropriate consent is obtained, the processing takes place exclusively on the basis of Art. Art. 7, paragraph 1 of the LGPD, insofar as consent includes the storage of cookies or access to information from the user's end device (e.g., device fingerprint). This consent can be revoked at any time.

Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider of this service is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics allows the website operator to analyze the behavior patterns of website visitors. To this end, the website operator receives various data from the user, such as pages accessed, time spent on the page, operating system used and origin of the user. This data is assigned to the user's respective end device. No assignment to a device ID occurs.

In addition, Google Analytics allows us to record your mouse movements and scrolling and clicks, among other things.

Google Analytics uses various modeling approaches to augment the datasets it collects and uses machine learning technologies in data analysis. Google Analytics uses user-aware technologies for the purpose of analyzing user behavior patterns (e.g., cookies or device fingerprinting). The website usage information recorded by Google is usually transferred to a Google server in the United States, where it is stored.

The use of these services is based on your consent under the terms of article 7, paragraph 1 of the General Data Protection Law (LGPD). You can revoke your consent at any time.

For more information, see: https://privacy.google.com/businesses/controllerterms/mccs/

IP anonymization

On this website, we have activated the IP anonymization function. In this way, your IP address will be abbreviated by Google within member countries of the European Union or in other countries that have ratified the Convention on the European Economic Area prior to its transmission to the United States. The full IP address will be transmitted to one of Google's servers in the United States and will only be shortened in exceptional cases. On behalf of the operator of this website, Google will use this information to analyse your use of this website in order to generate reports on website activities and to provide other services to the operator of this website relating to your use of the website and the Internet. The IP address transmitted in conjunction with Google Analytics from your browser must not be merged with other data held by Google.

Browser Plug-in

You can prevent the recording and processing of your data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en .

For more information on the processing of user data by Google Analytics, please refer to Google's Data Privacy Statement at: https://support.google.com/analytics/answer/6004245?hl=en

Demographic parameters provided by Google Analytics

This website uses the "demographic characteristics" function of Google Analytics, in order to be able to display to the website visitor advertisements that are compatible within the Google advertising network. This function allows the creation of reports that contain information about the age, gender, and interests of website visitors. The sources of this information are interest-related advertising from Google, as well as visitor data obtained from third-party vendors. This data cannot be attributed to a specific individual. You have the option to disable this function at any time by making changes to settings relevant to advertising in your Google account, or you can prohibit the recording of your data in general by Google Analytics, as explained in the section "Objection to data logging".

Data Processing Agreement

We have concluded a data processing agreement with Google and are applying the strict provisions of the German data protection agencies to the fullest when using Google Analytics.

Google Ads

The website operator uses Google Ads. Google Ads is an online promotional program of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads allows us to display ads on Google's search engine or third-party websites if the user enters certain search terms into Google (keyword targeting). It is also possible to place targeted ads based on the user data that Google has (e.g. location and interest data; target group segmentation). As a website operator, we may analyze this data quantitatively, analyzing, for example, which search terms resulted in the display of our advertisements and how many advertisements led to the respective clicks.

The use of these services is based on your consent under the terms of article 7, paragraph 1 of the General Data Protection Law (LGPD). You can revoke your consent at any time.

For more information, see: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/ .

Google Ads Remarketing

This website uses the functions of Google Ads Remarketing. The provider of these solutions is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads Remarketing analyzes your user patterns on our website (e.g. clicks on specific products) in order to allocate certain advertising target groups to you and subsequently display corresponding online offers when you visit other online offers (remarketing or retargeting).

In addition, you can link the advertising target groups generated with Google Ads Remarketing to Google's comprehensive device functions. This makes it possible to display personalized advertising messages based on interests depending on your previous usage and browsing patterns on one device (e.g., mobile phone) in a manner that is personalized to you, as well as on any of your devices (e.g., tablet or PC).

If you have a Google account, you can object to personalized advertising at the following link:

https://www.google.com/settings/ads/onweb/ .

The use of these services is based on your consent under the terms of article 7, paragraph 1 of the General Data Protection Law (LGPD). You can revoke your consent at any time.

For more information and relevant data protection regulations, please visit Google's Data Privacy Policies at: https://policies.google.com/technologies/ads?hl=en

Meta Pixel (formerly Facebook Pixel)

To measure conversion rates, this website uses the Facebook visitor activity pixel. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook's statement, the data collected will be transferred to the USA, as well as other third countries.

This tool allows for the tracking of page visitors after they have been linked to the provider's website after clicking on a Facebook ad. This allows you to analyze the effectiveness of Facebook ads for statistical and market research purposes and to optimize future advertising campaigns.

For us, as the operators of this website, the data collected is anonymous. We are not in a position to reach any conclusions as to the identity of the users. However, Facebook stores the information and processes it in order to be able to connect to the respective user profile, and Facebook is able to use the data for its own promotional purposes in accordance with Facebook's Data Use Policy: https://www.facebook.com/about/privacy/ . This allows Facebook to display ads on your pages as well as in off-Facebook locations. We, as the operators of this website, have no control over the use of this data.

The use of these services is based on your consent under the terms of article 7, paragraph 1 of the General Data Protection Law (LGPD). You can revoke your consent at any time.

To the extent that personal data is collected on our website with the help of the tool described herein and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly and severally liable for such data processing. Joint and several liability is limited exclusively to the collection of the data and its forwarding to Facebook. Processing by Facebook that takes place after the transfer does not form part of joint and several liability. Our joint and several obligations have been set out in a joint processing agreement. The wording of the contract is available at: https://www.facebook.com/legal/controller_addendum . In accordance with this agreement, we are responsible for providing the privacy information when using the Facebook tool and for the secure execution of the tool on our website. Facebook is responsible for the data security of the Facebook products. You can assert the data subject's rights (e.g. requests for information) in relation to the data processed by Facebook directly with Facebook. If you assert your data subject rights with us, we will be obliged to forward them to Facebook.

The transmission of data to the USA is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381 .

In Facebook's Data Privacy Policy, you can find more information about protecting your privacy at: https://www.facebook.com/about/privacy/ .

You also have the option to opt out of the "Custom Audiences" remarketing function in the ad settings section at https:www.facebook.com/ads/preferences/?entry_product=ad_settings_screen . To do so, you need to log in to Facebook.

If you do not have a Facebook account, you can opt-out of any user-targeted advertising from Facebook at the web address of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/ .

The company is certified according to the "EU-U Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the U.S., which aims to ensure compliance with European data protection standards for data processing in the U.S. Every company certified by the DPF is required to comply with these data protection regulations. For more information, please contact the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnywAAC&status=Active

Facebook Custom Audiences

We use Facebook Custom Audiences. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

Whenever you visit or use our website and apps, use our portfolio (e.g., participate in sweepstakes), transfer data to us, or interact with our company's content on Facebook, we record related personal data.

If you have given us your consent to use Facebook Custom Audiences, we will share this data with Facebook to enable Facebook to serve relevant ads. This data can also be used for defined audiences (Lookalike Audiences).

Facebook processes this data as our contract processor. For more information, please refer to the Facebook User Agreement: https://www.facebook.com/legal/terms/customaudience .

The use of these services is based on your consent under the terms of article 7, paragraph 1 of the General Data Protection Law (LGPD). You can revoke your consent at any time.

For more information, see: https://www.facebook.com/legal/terms/customaudience and https://www.facebook.com/legal/terms/dataprocessing .

Insight Tag do LinkedIn

This site uses LinkedIn's Insight Tag. This service is provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Data processing by LinkedIn Insight Tag

We use the LinkedIn Insight Tag to obtain information about visitors to our website. Once a website visitor is registered on LinkedIn, we may analyze key occupational data (e.g., career level, company size, country, location, industry, job title) of our website visitors to help us better target our website to the relevant target audience. We may also use LinkedIn Insight Tags to find out if visitors to our websites make a purchase or take other actions (conversion measurement). Conversion measurement can also be performed on multiple devices (e.g., from PC to tablet). The LinkedIn Insight Tag also has a retargeting function that allows us to display targeted advertising to our website visitors in other spaces. According to LinkedIn, the identification of the recipient of the advertisement does not occur.

LinkedIn itself also collects log files (URL, referrer URL, IP address, device and browser characteristics, and access time). IP addresses are shortened or (if used to reach LinkedIn users across multiple devices) anonymized. LinkedIn users' direct identifiers are deleted by LinkedIn after seven days. All other anonymized data will be deleted within 180 days.

The data collected by LinkedIn cannot be attributed by us, as the operator of the website, to specific individuals. LinkedIn will store the personal data collected from website visitors on its servers in the USA and use it for its own promotional activities. For more information, please refer to LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy#choices-oblig .

Legal basis

If you have approved (consented), the use of the above-mentioned service must take place based on article 7, paragraph 1 of the General Data Protection Law (LGPD). This consent can be revoked at any time. If you have not given consent, the use of the service will occur based on article 7, item of the General Data Protection Law (LGPD); The Website Operator has a legitimate interest in effective advertising promotions that include the use of social networks.

For more information, see: https://www.linkedin.com/legal/l/dpa and

https://www.linkedin.com/legal/l/eu-sccs .

Objection to the use of LinkedIn's Insight Tag

You can object to LinkedIn's user behavior analysis and targeted advertising at the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out .

In addition, LinkedIn users can control the use of their personal information for promotional purposes in their account settings. To prevent LinkedIn from linking information collected on our website to your LinkedIn account, you must log out of your LinkedIn account before visiting our website.

Data Processing

We have entered into a data processing agreement (DPA) with the above-mentioned provider. This is a contract required by data privacy laws that ensures that they process personal data of our website visitors only based on our instructions and in compliance with the LGPD.

6. Newsletter and mail advertising

Newsletter data

If you wish to subscribe to the newsletter offered on this website, we will need your email address as well as information that allows us to verify that you are the owner of the email address provided and to consent to receive the newsletter. No other data will be collected or will be collected only voluntarily. We will only use this data to send you the information you request and will not share such data with third parties.

The processing of the information entered in the newsletter subscription form will take place exclusively on the basis of your consent (Art. 7, paragraph 1 of the LGPD). You can revoke the consent you have given to the archiving of data, the e-mail address and the use of this information for the sending of the newsletter, for example by clicking on the "Unsubscribe" link in the newsletter itself. This is without prejudice to the lawfulness of any data processing operations that have taken place to date.

The data deposited with us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter or the newsletter service provider and will be deleted from the newsletter distribution list after you unsubscribe from the newsletter or after the purpose has ceased to apply. We reserve the right to delete or block email addresses from our newsletter distribution list at our sole discretion within the scope of our legitimate interest in accordance with Art. 7, paragraph 9 of the LGPD.

Data stored for other purposes with us remains unaffected.

Upon unsubscribing from the newsletter mailing list, we and the newsletter service provider may store your email address in a blacklist if such action is necessary to prevent future correspondence. We use the blacklist data for this purpose only, which will not be merged with other data. This serves both your and our interest in complying with legal requirements when sending newsletters (legitimate interest according to Article 7, paragraph 9 of the General Data Protection Law (LGPD)). Blacklisting will be stored indefinitely. You can object to storage if your interests override our legitimate interest.

Mail Advertising

We use your address in accordance with all legal regulations for the sending of advertising by post (advertising by post).

The legal basis for this is our legitimate interest in direct advertising in accordance with article 7, item 9 of the General Data Protection Law (LGPD). If a corresponding consent is requested, the processing is carried out exclusively on the basis of article 7, item 1 of the General Data Protection Law (LGPD); Consent can be revoked at any time. We may communicate more specific regulations to you, if necessary in the context of data collection, which will take precedence over these regulations.

Your address will remain with us until the purpose of the data processing no longer applies. If you make a justified request to delete or revoke your consent to advertising by mail, your personal data will be deleted unless we have other legally supported grounds for storing it (e.g., commercial or tax law retention periods); In the latter case, deletion will occur after these reasons no longer apply

7. Plugins and Tools

YouTube with expanded data protection integration

Our website incorporates videos from the YouTube website. The operator of the website is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in expanded data protection mode. According to YouTube, this mode ensures that YouTube does not store any information about visitors to this site before they watch the video. However, this does not necessarily mean that data sharing with YouTube partners can be ruled out as a result of the expanded data protection mode. For example, regardless of whether you're watching a video, YouTube will always establish a connection to the Google DoubleClick network.

As soon as you start playing a YouTube video on this site, a connection to the YouTube servers will be established. As a result, the YouTube server will be notified about which of our pages you have visited. If you are logged in to your YouTube account while visiting our website, you allow YouTube to directly allocate your browsing patterns to your personal profile. You have the option to prevent this from happening by logging out of your YouTube account.

In addition, once you start playing a video, YouTube may place various cookies on your device or comparable technologies for recognition (e.g., device fingerprinting). In this way, YouTube will be able to obtain information about visitors to this website. Among other things, this information will be used to generate video statistics for the purpose of increasing the user-friendliness of the website and preventing fraud attempts.

In certain circumstances, YouTube may trigger further data processing transactions after you start playing a video from the platform, which is beyond our control.

The use of YouTube is motivated by an interest in presenting our content online in an attractive way. According to article 7, item 9 of the General Data Protection Law (LGPD), this is a legitimate interest. If appropriate consent is obtained, the processing takes place exclusively on the basis of art. 7, item 1 of the General Data Protection Law (LGPD), insofar as the consent includes the storage of cookies or access to information from the user's end device. This consent can be revoked at any time.

For more information on how YouTube handles user data, please refer to YouTube's Data Privacy Policy at: https://policies.google.com/privacy?hl=en .

Google Maps

This website uses the Google Maps mapping service. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

To enable the use of Google Maps features, this service will store your IP address. As a rule, this information will be transferred to one of Google's servers in the United States, where it will be archived. The operator of this website has no control over the transfer of data. In case Google Maps has been enabled, Google has the option to use Google web fonts for the purpose of uniform font representation. When you access Google Maps, your browser loads the necessary web fonts into the browser's cache to correctly display the text and fonts.

We use Google Maps to present our online content in an attractive way and to make it easier for you to find the places advertised on our website. This constitutes a legitimate interest, as defined in article 7, item 9 of the General Data Protection Law (LGPD). If appropriate consent is obtained, the processing takes place exclusively on the basis of Art. 7 (1) of the General Data Protection Law (LGPD), insofar as the consent includes the storage of cookies or access to information from the user's end device (e.g. device fingerprint).

The transmission of data to the USA is based on the Standard Contractual Clauses (SCC) of the European Commission. For more information, see: https://privacy.google.com/businesses/LGPDcontrollerterms/ and https://privacy.google.com/businesses/LGPDcontrollerterms/sccs/.

For more information on the processing of user data, please refer to Google's Data Privacy Statement at: https://policies.google.com/privacy?hl=en .

Google reCAPTCHA

We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of reCAPTCHA is to determine whether the data entered on this website (e.g. information entered into a contact form) was entered by a human user or by an automated program. To determine this, reCAPTCHA analyzes the behavior of website visitors based on a number of parameters. This analysis is triggered automatically as soon as the visitor enters the site. For this analysis, reCAPTCHA evaluates a variety of data (e.g., IP address, time the website visitor spent on the website, or user-initiated cursor movements). The data tracked during these analyses is forwarded to Google.

The reCAPTCHA scans run entirely in the background. Site visitors are not alerted that an analysis is in progress.

The data is stored and analyzed based on article 7, item 9 of the General Data Protection Law (LGPD). The website operator has a legitimate interest in protecting the operator's websites against abusive automated spying and against SPAM. If appropriate consent is obtained, the processing takes place exclusively on the basis of Art. 7 (1) of the General Data Protection Law (LGPD), insofar as the consent includes the storage of cookies or access to information from the user's end device (e.g. device fingerprint). This consent can be revoked at any time.

For more information about Google reCAPTCHA, please refer to Google's Data Privacy Statement and Terms of Use at the following links: https://policies.google.com/privacy?hl=en and https://policies.google.com/terms?hl=en .

8. Online Audio and Video Conferencing (Conferencing Tools)

Data Processing

We use online conferencing tools, among other things, to communicate with our customers. The tools we use are described in detail below. If you communicate with us via video conferencing or audio conferencing using the Internet, your personal data will be collected and processed by the provider of the respective conferencing tool and by us. Conferencing tools collect all the information you provide/access in order to use them (email address and/or your phone number). In addition, conferencing tools process the duration of the conference, start and end (time) of participation in the conference, number of participants, and other "context information" related to the communication process (metadata).

In addition, the tool provider processes all the technical data necessary for the processing of the online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera, microphone or speaker type, and the type of connection.

In the event that content is exchanged, uploaded, or made available in the tool, it will also be stored on the servers of the tool provider. Included in this content are, but not limited to: cloud logs, chat/instant messages, photos and videos sent via voicemail, files, whiteboards, and other information shared while using the service.

Please note that we do not have full influence over the data processing procedures of the tools used. Our possibilities are largely determined by the corporate policy of the respective provider. For more information on data processing by the conferencing tools, please refer to the data protection declarations of the tools used, which we list below.

Purpose and legal basis

Conferencing tools are used for communication between potential or existing contractual partners or to offer certain services to our customers. In addition, the use of the tools serves to simplify and speed up communication in general with us or with ours. To the extent that consent has been requested, we will use the tools in question on the basis of that consent; Consent may be revoked at any time with effect from its date.

Duration of storage

Data collected directly by us via the video and conferencing tools will be deleted from our systems immediately after you ask us to delete it, revoke consent to storage, or when the reason for storing the data no longer applies. Stored cookies remain on your end device until you delete them. Mandatory statutory retention periods remain unaffected.

We have no influence on the duration of the storage of your data stored by the operators of the conferencing tools for their own purposes. For more information, please contact the operators of the conferencing tools directly.

Conferencing tools used

We employ the following conferencing tools:

ClickMeeting

We use ClickMeeting. The provider is ClickMeeting Spółka z ograniczoną odpowiedzialnością based in ul. Arkońska 6/A4, 80-387 Gdańsk, Poland, Company No. (KRS): 0000604194, VAT identification number (NIP): 5842747535. For more information on data processing, please refer to ClickMeeting's Privacy Policy: https://clickmeeting.com/legal?clang=en

Data Processing

9. Customized Service

We offer website visitors the opportunity to apply for job vacancies (e.g. by e-mail, via postal services when submitting the online job application form). Below, we will inform you of the scope, purpose and use of your personal data collected in connection with the job application process. We guarantee that the collection, processing and use of your data will take place in compliance with applicable data privacy rights and all other legal provisions and that your data will always be treated as strictly confidential.

Scope and purpose of data collection

If you submit a job application form to us, we will process all affiliated personal data (e.g. contact data and communications, job application documents, notes made during job interviews , etc.) if they are necessary to make decisions regarding the establishment or an employment relationship. The legal grounds for the above are article 7, item 1 of the General Data Protection Law (LGPD). You can revoke the consent given at any time. Within our company, your personal data will only be shared with individuals involved in the processing of your job application.

If your job application results in your recruitment, the data you have submitted will be archived based on article 16, item 1 of the General Data Protection Law (LGPD) for the purpose of implementing the employment relationship in our data processing system.

Data Archiving Period

If we are unable to make you a job offer or you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted based on our legitimate interests based on Art. 7, paragraph 9 of the General Data Protection Law (LGPD) for up to 6 months from the end of the application procedure (rejection or withdrawal of the application). After this period, the data will be deleted and the physical application documents will be destroyed. In particular, storage serves as evidence in the event of a dispute. If it is evident that the data will be required after the end of the 6-month period (e.g. due to imminent or pending litigation), deletion will only take place when the purpose of further storage no longer applies.

In addition, we may store your data for longer if you have agreed to this (Article 7, paragraph 1 of the General Data Protection Law (LGPD)) or if legal data retention requirements prevent deletion.