Privacy policy Innus GmbH

General - Information according to Art. 13 + 14 DSGVO

Innus GmbH appreciates your visit to our website and your interest in our company. We take the protection and security of your personal data entrusted to us seriously and want you to feel safe and comfortable when visiting our website and using our offers. It is important to us that you know what personal data is collected when you use our offers and services and how we use it subsequently.

Purpose of the data processing

Insofar as Innus GmbH processes personal data, this is done for the purposes stated in this data protection declaration. Personal data, in particular address data, contact data or payment data, are used for the execution of an emerging contractual relationship or its initiation. Consequently, the processing of your personal data takes place on the legal basis of Art. 6 para.1 lit.b DSGVO. For this purpose, it is usually necessary to transfer the collected data to our partner companies or other contract data processors as well. In the case of specific services (in the sovereign or recognized field), processing of personal data and also special categories of personal data takes place on a legal basis. Depending on the type of contractual service, these contractual partners may also be located in countries outside the EU. We also process your data for internal customer analyses. The data processing is done based on Art. 6 para. 1 lit. f DSGVO and in the interest of providing you with optimal offers in the context of our marketing.

Contact details of the responsible person:

Innus GmbH Untermainanlage 7 60329 Frankfurt am Main Phone +49 6151 600-0 E-Mail: info@innus.de

Data Privacy Representative

If you have any further questions regarding the processing of your personal data, you can contact our data privacy representative directly, who is also available in case of requests for information, applications or complaints:
Data Privacy Representative of Innus GmbH, Untermainanlage 7, 60329 Frankfurt am Main E-Mail: Tobias.Mueller@tuevhessen.de

Rights regarding the processing of personal data

Right to information You have the right to receive from us at any time, upon request, information about the personal data we have processed concerning you within the scope of Art. 15 DSGVO. For this purpose, you can submit a request via mail or e-mail to the addresses given above. Right to correct inaccurate data You have the right to request that we correct the personal data concerning you without delay if it should be inaccurate (Art. 16 DSGVO). To do so, please contact us at the contact addresses provided above. Right to erasure You have a right to immediate erasure ("right to be forgotten") of the personal data concerning you if the legal reasons pursuant to Art. 17 DSGVO exist. These are, for example, if the personal data are no longer necessary for the purposes for which they were originally processed or you have withdrawn your consent and there is no other legal basis for processing; the data subject objects to processing (and there are no overriding reasons for processing - this does not apply to objections to direct marketing). To utilize your above right, please contact us at the contact addresses provided above. Right to restriction of processing You have a right to restriction of processing if the conditions are met and in accordance with Article 18 of the GDPR. Therefore, the restriction of processing may be required in particular if the processing is unlawful and the data subject refuses the erasure of the personal data and instead requests the restriction of the use of the personal data or the data subject has objected to the processing pursuant to Article 21 (1) DSGVO, as long as it has not yet been determined whether our legitimate grounds override yours. To utilize your above right, please contact us at the above contact addresses. Right to data transferability You have a right to data transferability according to Art. 20 DSGVO. In this regard, you have the right to receive the data relating to you that you have provided to us in a common, structured and machine-readable format and to transfer this data to another controller, such as another service provider. Prerequisite for this is that the processing is based on consent or on a contract and is carried out with the help of automated processes. To exercise your above right, please contact us at the above contact addresses. Right to complain to a supervisory authority If you believe that our processing of personal data related to you is unlawful, you have the right to complain to the supervisory authority responsible for us, which you can contact as follows: The Hessian Data Protection Commissioner P.O. Box 31 63 65021 Wiesbaden Telephone: +49 611 1408-0 E-mail: poststelle@datenschutz.hessen.de

Planned data transfer to non-EU countries

A transfer to non-EU countries is currently not planned, otherwise the corresponding legal requirements will be created. In particular, you will be informed about the respective recipients or categories of recipients in accordance with the legal requirements.

Security

Innus GmbH uses technical and organizational security measures to protect the data you have provided against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons. This also applies when external services are obtained. The effectiveness of our security measures is reviewed and the measures are continuously improved according to technological developments.

Standard periods for the deletion of data

The legislator has enacted a variety of retention periods and obligations. After these periods have expired, the corresponding data is routinely deleted. If data is not affected by this, it will be deleted or made anonymous if the purposes stated in this data protection declaration cease to apply. Unless this data protection declaration contains other, deviating provisions regarding the storage of data, the data collected by us will be stored for as long as it is required for the aforementioned purposes for which it was collected.

Other data use and data deletion

Further processing or use of your personal data will generally only take place if permitted by law or if you have consented to the data processing or use. In the event of further processing for purposes other than those for which the data was originally collected, we will inform you of these other purposes prior to further processing and provide you with any other relevant information.

Applications

On our Career site , you have the option of applying online for advertised positions or submitting a speculative application. We store your application data for the duration of the review of your application. If your application is unsuccessful or if you withdraw your application, your application data will be deleted after a maximum of 6 months, unless you have specifically agreed to a longer storage period. In the event of a successful application, the data you have provided to us via the application system will be further processed in relation to your future employment with our company. The legal foundation for this is Art. 6 Para. 1 a, b and f DSGVO as well as § 26 BDSG. If you do not provide us with the required personal data, this will not have any negative consequences for you. However, incomplete or inaccurately completed applications will not be considered. Unfortunately, without providing your personal data, the application cannot be submitted and will therefore be deleted.

Website information

Accessing our website

We collect and store the IP address assigned to your computer in order to transmit the contents of our website that you have called up to your computer (e.g. texts, images as well as files made available for download, etc.) (cf. Art. 6 Para. 1 lit. b DSGVO). In addition, we process this data for abuse detection and tracking. In this respect, the legal foundation is Art. 6 para. 1 lit. f DSGVO. Our legitimate interest in data processing is to ensure the proper functioning of our website and the business transactions conducted via it. Insofar as we process your data for the purpose of providing the functions of our website, as described above, you are contractually obliged to provide us with this data.

Other purposes

Personal data is also processed if you provide it to us voluntarily, for example in the context of an inquiry. The legal foundation in this respect is Art. 6 para. 1 lit. b DSGVO. The data processed by us in this respect includes customer data, employee data and data from suppliers, insofar as this is necessary for the purposes named in the context of this data protection declaration. If we process your data, as described above, for the purpose of receiving and processing your respective request, you are contractually obliged to provide us with this data. Without this data, we are not able to carry out the corresponding processing. If you have consented to the processing of personal data (cf. Art. 6 para. 1 lit. a DSGVO), you may revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.

Contact form

If you have a more detailed question for us, you can send an inquiry using the contact information on our website. When you contact us, the data you provide will be stored by us. The processing is carried out for the purpose of processing the inquiries on the basis of Art. 6 para. 1 lit. b, f DSGVO. The data generated in the course of your contact will be deleted as soon as they are no longer required for the processing of your request.

Forwarding to third parties

The transfer of data to processors takes place on the basis of Art. 28 (1) DSGVO. We do not sell your data to third parties, nor do we market it elsewhere. In addition, your personal data will be forwarded to law enforcement authorities and, if necessary, to third parties who have been harmed, without your expressed consent, if it is necessary to clarify an illegal use of our services or for legal prosecution. However, this only happens if there are specific indications of unlawful or abusive behavior. A transfer may also take place if this serves the enforcement of terms of use or other agreements. We are also legally obligated to provide information to certain public authorities upon request. These are law enforcement agencies, authorities that prosecute administrative offenses subject to fines and the tax authorities. The disclosure of this data is based on our legitimate interest in combating abuse, prosecuting criminal offenses and securing, asserting and enforcing claims provided that your rights and interests in the protection of your personal data do not override, Art. 6 (1) lit. f DSGVO.

Links to websites of other providers

Our website may contain links to websites of other providers. We would like to point out that this data protection declaration applies exclusively to this website. We have no influence on and cannot control the fact that other providers comply with the applicable data protection regulations.

Cookies

In order to make our website user-friendly for you and to optimally adapt it to your needs, we use cookies in some areas. A cookie is a small file that is stored locally on your computer when you visit a website. If you visit the website again with the same terminal device, the cookie indicates, for example, that it is a repeat visit. Cookies also enable us to analyze the use of our website. The cookie does not contain any personal information, it is not capable of identifying you on third party websites, including the websites of analytics providers. We use the following types of cookies:

• • Basic/necessary cookies These cookies are of fundamental importance for the function of our website. This is, for example, the allocation of anonymous session IDs for bundling multiple queries to a web server or the error-free functioning of logins and orders.
• • Functionality Cookies These cookies help us to save settings you have chosen or support other functions when you navigate our website. For example, we may remember your preferred settings for your next visit or store your login information for certain areas of our website.
• • Performance/Statistics Cookies These cookies collect information about how you use our website (e.g., Internet browser used, number of visits, pages viewed, or time spent on the website). These cookies do not store information that allows personal identification of the visitor. The information collected with the help of these cookies is aggregated and therefore anonymous.

You can declare your consent or rejection of cookies - also for web tracking - via the settings of your web browser. You can configure your browser to refuse acceptance of cookies in general or to inform you in advance when a cookie is stored. In this case, however, the functionality of the website may be impaired (e.g. when placing orders). Your browser also provides a function to delete cookies (e.g. via Delete browser data). You can find more information about this in the operating instructions or, as a rule, in the settings of your Internet browser.

---

Cookie Consent Settings

> Change privacy settings > Privacy settings history > Revoke consent

---

Matomo Analytics

Our website uses the web analysis tool "Matomo". Matomo is an open source software that provides detailed statistics on visitor access. It is a service provided by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, NZBN 6106769, ("Matomo"). The protection of your data is important to us, which is why we have additionally configured Matomo so that your IP address is only recorded in abbreviated form. We therefore process your personal usage data anonymously. It is not possible for us to draw conclusions about your person. The Matomo installation does not use cookies, tracking pixels or browser fingerprinting. Only the already accumulating log files of the web server are anonymously evaluated and statistically processed. Matomo does not request, process or store any additional data from your browser. Furthermore, no Matomo cookies are stored in your browser. You do not need an opt-out cookie on this website, as no personal data is stored or processed without prior anonymization. The processing is based on the legal basis of legitimate interest, Art. 6. lit f DSGVO. For more information on Matomo's terms of use and data protection regulations, please visit: https://matomo.org/privacy/

Use of devowl.io GmbH

In order to obtain consent for the use of cookies on our website in accordance with data protection laws, we use the cookie banner from devowl.io GmbH, Tannet 12, 94539 Grafling, Germany. The Cookie Banner captures and stores the consent for cookie use for the respective user of our website. It is ensured by our Cookie Banner that statistical and marketing cookies are only set if the user has given their explicit consent to use them. For this purpose, we store information on the extent to which the user has confirmed the use of cookies. The user's decision can be revoked at any time by accessing the setting for cookies and managing the declaration of consent. Existing cookies are deleted after revocation of consent. A cookie is also set to store information about the status of the user's consent, which is referred to in the cookie details. Furthermore, the IP address of the respective user is transmitted to devowl.io servers when this service is called up. The IP address is neither stored nor associated with any other data of the user, it is only used for the correct execution of the service. The use of data is therefore based on our legitimate interest in the legally compliant design of our website in accordance with Art 6 (1) lit. f DSGVO. For more information, please see the devowl.io privacy policy at https://devowl.io/de/datenschutzerklaerung/.

Information about our online presences

Innus GmbH maintains several online presences within social networks and platforms, such as Xing and LinkedIn, in order to have the opportunity to communicate with active users there and to inform them about our service portfolio. Innus GmbH uses the technical platforms and services offered by the operators for this purpose. In social networks and on other external platforms, the respective operators' own data protection provisions apply, even if we disseminate information and maintain presences there. We would like to point out that you use the services offered here by the social networks and platforms and their functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating, etc.). The data collected about you in this context will be processed by the operators of the platforms and, if necessary, transferred to countries outside the European Union. What information the operators receive and how it is used is described in general terms in the respective data protection policies. On the individual platforms, you will also find information on how to contact the operators and on the settings options for advertisements.

• on Xing: www.xing.com/privacy
• on LinkedIn: www.linkedin.com/static

In which way the operators of the social networks use the data from the visit of the respective pages for their own purposes, to which extent activities on the pages are assigned to individual users, how long this data is stored and whether data from a visit of the respective page is passed on to third parties, is not conclusively and clearly stated by the operators and is not known to us.

I. Xing

• Dynatrace Dynatrace, a service provided by Dynatrace LLC, headquartered in Waltham, Massachusetts, USA, provides insight into the performance of a particular web application and how users navigate the site. Dynatrace collects data such as W3C timings, button clicks, link clicks, JavaScript errors, browser types, and geographic regions. This helps to improve the respective offers and to fix functional problems. Dynatrace uses various cookies for this purpose. To the privacy policy of Dynatrace: https://www.dynatrace.com/company/trust-center/
• Google Analytics & Google Conversion Tracking Google Analytics, a service of Google Inc, Moutain View, California, USA, uses cookies that are stored on your terminal device and that enable an analysis of your use of our online presences in social media. The information generated by the cookie about your visit to our online presences in the social media is usually transmitted to a Google server in the USA and stored there. If anonymization of the IP address to be transmitted by the cookie is activated on the website ("IP anonymization"), your IP address will be truncated beforehand by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information to evaluate your use of our online presence in social media and to compile reports on website usage. In doing so, pseudonymous usage profiles can be created from the processed data. The IP address transmitted when using Google Analytics is not merged with other data from Google. You can find more information on data protection here http://www.google.de/privacy.html.
• Adobe Marketing Cloud The Adobe Marketing Cloud enables analysis of visitor flows on websites. The operator of these services is Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland. The analytics allow instant analysis of visitor flows. User behavior is presented in a way that provides an overview of users' online activity on social media sites. Adobe Marketing Cloud uses "cookies" that are stored on your computer and allow analysis of your website usage. If information generated by the cookie about the use of the website is transmitted to a server of Adobe, then the settings ensure that the IP address is anonymized before geolocation and replaced by a generic IP address before storage. http://www.adobe.com/de/privacy/opt-out.html
• Facebook Pixel Xing uses the remarketing function "Facebook Pixel", a service provided by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA. This function is used to present interest-based advertisements ("Facebook Ads") to visitors of the website. For this purpose, Facebook's remarketing tag has been implemented on this website. Via this tag, a direct connection to the Facebook servers is established when visiting the website. This transmits to the Facebook server the fact that you have visited this website and Facebook assigns this information to your personal Facebook user account.https://www.facebook.com/business/help/742478679120153?helpref=search&sr=3&query=pixel
• comScore On Xing, information about usage is also collected and stored in anonymized form using a procedure from comScore, a service of comScore Inc from Reston, Virginia, USA. For this purpose, a small image file or JavaScript is integrated into accessible Internet pages to enable the measurement of access figures, e.g. by means of a cookie. In addition, audio and video usage within the player on the web pages is recorded. Under no circumstances can the data obtained be used to personally identify the visitor to this website. The collected data is only used to improve the service. Therefore, all IP addresses are stored only in anonymous form. No other use or disclosure to third parties takes place. https://www.comscore.com/ger/Ueber-Uns/Datenschutzerklaerung

II. LinkedIn

• • Facebook Pixel LinkedIn uses the remarketing function "Facebook Pixel", a service provided by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA. This function is used to present interest-based advertisements ("Facebook Ads") to visitors of the website. For this purpose, Facebook's remarketing tag has been implemented on this website. Via this tag, a direct connection to the Facebook servers is established when visiting the website. This transmits to the Facebook server the fact that you have visited this website and Facebook assigns this information to your personal Facebook user account.https://www.facebook.com/business/help/742478679120153?helpref=search&sr=3&query=pixel
  • Nielsen NetRatings Nielsen NetRatings is provided by Nielsen GmbH, Lindwurmstraße 10, 80634 Munich, Germany, and is an Internet tracking service for measuring and analyzing consumer behavior. You can object to the collection or analysis of your data by this tool if you download or set and save the opt-out cookie available at the following link: http://www.nielsen.com/us/en/privacy-statement/digital-measurement.htm
  • AppNexus AppNexus is provided by AppNexus Inc, 28 W 23rd Street, 4th floor, New York, NY - 10010, USA and is a web analytics and interest-based advertising tool. You can object to the collection or analysis of your data using this tool here. https://www.appnexus.com/en/company/platform-privacy-policy-de.
  • Eloqua Tracking Eloqua, a service of Oracle Cor, 500 Oracle Parkway, M/S 5op7, Redwood Shores, CA 94065, places a persistent cookie on the respective login page, unless an Eloqua cookie is already present on your device. If you have already used a website that uses Eloqua, you may already have an Eloqua cookie. The Eloqua cookie may be used to analyze your use of pages in order to improve them. Emails sent using Eloqua use tracking technologies of the type described above. If you would like to completely prevent the use of Eloqua tracking technologies for your device, you can do so on the Eloqua opt-out page. For more information, please see the Eloqua privacy policy. (https://www.oracle.com/marketingcloud/products/marketing-automation/index.html)

Changes to this privacy policy

The further development of the Internet and our website may also affect our data protection declaration. We reserve the right to change this Privacy Policy in the future. If We use your personal information in a manner different from the one stated here at the time of collection, we will attempt to notify you via email using the last known information to us. If notification is not possible, We will not use your personal information in a new manner. In any event, notice will be provided via a prominent notice on the Websites to that effect. Status July 2022