Data Protection Policy

§ 6 Usage of cookies

1. Purpose and scope of data processing

We use cookies on our website. Cookies are small files that are sent to us by your browser during your visit to our website. We store them. Cookies are needed from a technical standpoint to be able to provide certain website functions. Other cookies, however, enable us to conduct various analyses. For example, cookies are able to recognize the browser you are using the next time you visit our website and to transmit various items of information to us. With the help of cookies, we can make our website more user-friendly and effective for you. For example, cookies track how you use our website and determine your preferred settings (e.g. country and language settings). If third parties process information via cookies, they will collect the information directly via your browser. Cookies cause no damage to your device. They cannot run any programs and do not contain viruses.

If you have created an SER+Account, the login script creates an “ONLINEPLUS” cookie for the domain ser.de. This cookie verifies your access to our documents. This cookie remains in place until you click on “Log out” to sign out and is not automatically deleted at the end of your session. This can be useful as it means that we will remember you if you return to the website later; you will not be required to log in again and can carry on accessing secure data on our website.

2. Legal basis

Due to the described purposes of usage (cf. § 6. a.), the legal basis for the processing of personal data using cookies is based on Article 6, Paragraph 1 of the GDPR.

3. Retention period

As soon as the data transmitted to us via the cookies is no longer necessary for the purposes described above, this information will be deleted. Longer storage may occur in single cases if this is required by law.

4. Configuration of browser settings

Most browsers have the default setting to accept cookies. You may, however, configure your browser so that only certain or no cookies at all are accepted. We would like to point out, however, that you may not be able to use all functions of our website if you opt to turn off your cookies in your browser settings. In your browser settings, you can also delete stored cookies or display the retention period. You are also able to deactivate cookies or configure your browser so that it informs you before saving any cookies. Since browsers can differ in their respective functions, we ask you to use the help menu of your browser for the configuration options.

§ 7 Tracking and analytics tools

We use tracking and analytics tools to constantly optimize and tailor our website to your needs. Tracking functions enable us to ascertain statistics regarding how visitors use our website. Based on this information, we are able to further develop our online offerings. Based on these interests, the use of the tracking and analytics tools described below is justified in accordance with Article 6 para. 1 s. 1 lit. f GDPR. The following tracking and analytics tools demonstrate the purpose of processing and which data is processed.

1. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland (“Google”).  Google Analytics uses cookies, which are text files placed on your computer to help the website analyze how users use the site.

The information generated by the cookie about, for example, your use of the website will be transmitted to and stored by Google on servers in the United States. When using Google Analytics, it is not excluded that cookies created by Google Analytics may collect other personal data in addition to the IP address. We would like to point out that Google may transfer this personal data to third parties if this is required by law or if third parties process this data on behalf of Google.

Based on cookies, Google will use this information on behalf of the operator of this website for the purpose of evaluating how you use the website, compiling reports on website activities and providing further services related to website and internet usage to the website operator. The IP address transferred by your browser within the scope of Google Analytics will not be merged with any other data held by Google, as Google itself states.

Generally speaking, you can prevent cookies from being saved by adjusting your browser settings. However, we would like to point out that if you do so, you may not be able to make use of all of this website's functions.

It is not excluded that cookies created by Google Analytics may collect other personal data in addition to the IP address. To prevent information about your use of this website from being collected by Google Analytics and transmitted to Google Analytics, you can download and install the following plug-in for your browser via this link: http://tools.google.com/dlpage/gaoptout?hl=de. This plug-in prevents information from your website visit from being transmitted to Google Analytics. The plug-in cannot prevent other analyses from taking place.

We would like to point out that you cannot use this plug-in when visiting our website via a browser of a mobile device (smartphone or tablet). When using a mobile device, you can prevent the collection of usage data by Google Analytics by clicking on the following link: Disable Google Analytics.

You will be shown an opt-out cookie in your browser when you click on this. This prevents your personal data from being transmitted to Google Analytics. Please note that the opt-out cookie is only valid for this browser and only for this domain. If you delete cookies from this browser, the opt-out cookie will be deleted. To continue preventing Google Analytics from collecting data, you must click on the link again. You can also use the opt-out cookie as an alternative to the above plug-in when using the browser on your computer.

To ensure the best possible protection of your personal data, the code "anonymizeIp" has been added to Google Analytics on this website. This code ensures that the last 8 bits of the IP addresses are deleted and your IP address is thereby recorded anonymously (IP masking). Your IP address will thereby be truncated by Google before transmission within member states of the European Union or in other signatory states of the Agreement on the European Economic Area. Your IP address is thereby anonymized. Your full IP address will only be sent to a Google server in the USA and truncated there in exceptional cases.

2. wiredminds

Our website also uses counting pixel technology of wiredminds GmbH (www.wiredminds.de) to analyze your website usage behavior. It collects, processes and stores data from which user profiles are created under a pseudonym. Where possible and when it is reasonable, these user profiles are made completely anonymous. Cookies may be used here.

Data collected that may also contain personal data is transmitted to wiredminds or directly collected by wiredminds. The provider wiredminds is allowed to use information left from website visits to create anonymous user profiles. The data obtained in this way will not be used to personally identify the visitor of this website without the expressly given consent of the person concerned and will not be merged with personal data about the bearer of the pseudonym. If IP addresses are collected, they are made anonymous by deleting the last number block.

3. Eloqua

If you are visiting the SER website for the first time, a cookie of the third-party provider Oracle (www.eloqua.com) will be saved in your browser. This cookie is used to record the pages you visit in one session. Even if this cookie is set on many other pages, the information from visiting the SER website is only visible to SER and will not be shared with Oracle or other users of Eloqua systems. It is also not possible for SER to record or see information about your visits to other websites via this cookie.

Even if this cookie does not contain any specific personal information, the personal reference may be established later on by linking it to other information, as described here. If you provide SER your personal information by filling out a form on our website, it may be added using the browser information recorded by the Eloqua cookie.

Information collected this way is used to enhance the services we offer. This includes if and how we communicate with you and the personalization of the content of this communication. We try to tailor this communication to your personal interests as reflected in your visits to SER websites. This enables us to present as well as possible only the offers and promotions that we believe are of interest to you.

If you want to completely deactivate the use of Eloqua tracking technologies on your device, please visit the Eloqua opt-out page: http://www.eloqua.com/trust/privacy-policy/opt-status.html.

4. Hotjar

We use Hotjar in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices. This includes a device's IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf.

For further details, please see the ‘about Hotjar’ section of Hotjar’s support site.

5. Salesloft

We use a script from our sales engagement platform Salesloft for lead management to communicate with prospective customers. The provider is Salesloft, Inc, 1180 West Peachtree Street NW, Suite 600, Atlanta, USA. In principle, cookies for live website tracking do not collect any personal data that can be used to identify the user. Only a system-generated identifier is linked to personal data. The provider processes contact data (e.g. email addresses, telephone numbers) and meta/communication data (e.g. device information, IP addresses) in the USA. Live website tracking is only activated and places cookies on the user's device when the user clicks on a tracking link in an email sent via the Salesloft platform. The legal basis for processing is art. 6 par. 1 sentence 1 lit. of EU GDPR. Data is processed only upon consent. The data will be deleted if the purpose of its collection no longer applies and there is no obligation to retain it. Further information can be found in the provider's privacy policy at https://salesloft.com/platform-privacy-notice/ 

6. Microsoft Clarity

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

§ 8 Hyperlinks

Our website includes hyperlinks to websites belonging to other parties. When clicking on a hyperlink, you will be directed straight to the third-party website from our website. You will notice this process taking place because the URL will change, for example. We are unable to accept any responsibility for the way these third-party websites process your personal data as we are unable to ensure that these companies adhere to our Data Protection Policy. Please consult these websites directly to find out how they process your personal data.

§ 9 User rights

The GDPR gives you as a data subject the following rights regarding the processing of personal data:

• Pursuant to Article 15 GDPR, you have the right to request information about your personal data that we process. More specifically, you may request information about: the purpose of processing your personal data, the categories of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned retention period, your rights to correct, delete, restrict or reject processing, your right to lodge a complaint with a supervisory authority, the origin of your data (if we did not collect it), the transferal of personal data to other countries or international organizations, the existence of automated decision-making, including profiling, and, if applicable, meaningful information about the logic involved.
• Pursuant to Article 16 GDPR, you can immediately demand that incorrect or incomplete personal data stored by us is corrected or completed.
• Pursuant to Article 17 GDPR, you can demand that personal data we store be deleted, provided the personal data is not needed to exercise the right to freedom of expression and information, to fulfill legal obligations, for reasons of public interest or to assert, exercise or defend legal claims.
• Pursuant to Article 18 GDPR, you can demand that the processing of your personal data be restricted if you dispute the accuracy of your data, if the processing is unlawful, or if SER no longer needs the data and you object to the deletion because you require it to assert, exercise or defend legal claims. You are also entitled to the right under Article 18 of the GDPR if you have filed an objection to processing according to Article 21 of the GDPR.
• Pursuant to Article 20 GDPR, you can demand that the personal data you have provided SER be transmitted to you in a structured, commonly used and machine-readable format and that you have the right to transmit that data to another controller.
• Pursuant to Article 7, para. 3 GDPR, you can withdraw the consent given to us at any time. This means that we may not continue processing data provided to us based on this consent.
• Pursuant to Article 77 GDPR, you have the right to lodge a complaint against us to a supervisory authority. Typically, you may contact the supervisory authority where you are living, at your workplace or at our company headquarters.

§ 10 The right to object

When processing your personal data based on legitimate interests according to Article 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data according to Article 21 of the GDPR, provided that there are reasons for this based on your personal situation or if you object to direct advertising. Regarding direct advertising, you generally speaking have the right to object, which we will fulfill even if you do not mention special circumstances.

§ 11 Data security and security measures

We are committed to protecting your privacy and making sure that your personal data remains confidential. To prevent your data stored at SER from being lost or misused, we have implemented a range of technical and organizational measures that are regularly checked and adjusted to technological advances. However, we would like to point out that due to the inherent structure of the internet, people or institutions outside of our remit may not adhere to the provisions of this Data Protection Policy and the security measures mentioned above. In particular, any data shared in unencrypted form may be accessed by third parties, for example, if the data is shared by email. Unfortunately, we have no technical influence over such actions. The user is responsible for protecting any data they wish to share by encrypting it or using another security measure.