Privacy Terms

With the following privacy policy, we inform you about the type, scope, purpose, duration and legal basis of our processing of personal data, insofar as we decide either alone or together with others on the purposes and means of processing. We also inform you about the third-party components we use for optimization purposes and to increase the quality of use, insofar as third parties process data on their own responsibility.

I. Verantwortlicher

The responsible provider of this website in terms of data protection law is:

slashwhy GmbH & Co. KG
Netter Platz 2, 49090 Osnabrück
Phone: +49 541 96104-0;
Mail: info@slashwhy.de
VAT Id. no. DE331006254

Registered office of the company: Osnabrück AG Osnabrück HRA 206927

Personally liable partner: slashwhy Verwaltungs- GmbH
Registered office of the company: Osnabrück AG Osnabrück HRB 214669

Management: Kai Bergmann, Dr. Christina Niemöller, Dr. Joachim Wilharm

Responsible for content: Dr. Christina Niemöller

II. Kontakt des Datenschutzbeauftragten

Our external data protection officer will be happy to provide you with information on the subject of data protection using the following contact details:

datenschutz nord GmbH
Konsul-Smidt-Str. 88
28217 Bremen
Contact person: Daniel Stolper

III. Sicherheitsmaßnahmen

We take appropriate technical and organizational measures in accordance with the legal requirements, considering the state of the art, the implementation costs and the nature, scope and purposes of the processing, in order to ensure a level of protection appropriate to the respective risk of a violation of legal interests. The measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical and electronic access to the data as well as access, input, disclosure, securing availability and separation of the data. Furthermore, we have established procedures that ensure the exercise of data subject rights, the deletion of data and responses to data threats. Furthermore, we already take the protection of personal data into account during the development or selection of hardware, software and procedures in accordance with the principle of data protection, through technology design and through data protection-friendly default settings.

IV. Aufbewahrungsdauer

Personal data will be stored for as long as is necessary to fulfill the purposes stated below or for as long as statutory or contractual retention obligations exist.

V. Übermittlung von personenbezogenen Daten

As part of our processing of personal data, the data may be transferred to other bodies, companies, legally independent organizational units or persons or disclosed to them. The recipients of this data may include, for example, service providers commissioned with IT tasks or providers of services and content that are integrated into a website. In such cases, we observe the legal requirements and, in particular, conclude corresponding contracts or agreements with the recipients of your data that serve to protect your data.

If we transfer personal data to recipients outside the European Economic Area (EEA), the transfer will only take place if the third country has been confirmed by the EU Commission to have an adequate level of data protection, an adequate level of data protection has been agreed with the data recipient (e.g. by means of EU standard contractual clauses) or you have given us your consent in accordance with the provisions of Art. 49 para. 1 lit. a GDPR.

VI. Rechte der Nutzer und Betroffenen

If your personal data is processed, you are a data subject in accordance with the GDPR and you have the following rights vis-à-vis us after successful identification:

• Right of access (Article 15 GDPR)

• Right to erasure (Article 17 GDPR)

• Right to rectification (Article 16 GDPR)

• Right to restriction of processing (Article 18 GDPR)

• Right to data portability (Article 20 GDPR)

• Right to withdraw your consent at any time (Article 7 (3) GDPR)

• Right to object (Article 21 GDPR).

You can lodge a complaint with the competent supervisory authority about the collection and processing of your personal data by the controller at any time.

VII. Informationen zur Datenverarbeitung

1. Cookies und Trackingtechnologien

We use so-called cookies on our website. Cookies are small text files or other storage technologies that are placed and stored on your end device by the Internet browser you use.

The legal basis under data protection law on which we process users' personal data with the help of cookies depends on whether we ask users for their consent. If users give their consent, the legal basis for processing their data is the consent given. Otherwise, the data processed using cookies is processed on the basis of our legitimate interests (e.g. in the commercial operation of our online offering and improving its usability) or if this is done as part of the fulfillment of our contractual obligations and the use of cookies is necessary for this.

If you log in to the third-party provider with your own user data, the respective recognition features of different browsers and end devices can be linked with each other. If, for example, the third-party provider has created a separate feature for the laptop, desktop PC or smartphone or tablet you are using, these individual features can be assigned to each other as soon as you use a service of the third-party provider with your login data. In this way, the third-party provider can also target our advertising campaigns across different end devices.

2. Cookie Manager

The provider uses a cookie manager to obtain consent for the use of technically unnecessary cookies on the website. When the website is accessed, a cookie with the settings information is stored on the user's end device so that the request for consent does not have to be made on a subsequent visit. The cookie is required to obtain the user's legally compliant consent.

The cookiebot web service of the company Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter: cookiebot.com) is loaded on our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to cookiebot.com. The legal basis for data processing is Art. 6 para. 1 lit. f GDPR. The legitimate interest lies in the error-free functioning of the website. The data is deleted as soon as the purpose of its collection has been fulfilled. Further information on the handling of the transferred data can be found in the privacy policy of cookiebot.com

3. Session Cookies

These cookies are used to process certain information about you on an individual basis, such as your browser or location data or your IP address. This processing makes our website more user-friendly, effective and secure, as the processing enables, for example, the reproduction of our website in different languages or the offer of a shopping cart function.

The legal basis for this processing is Art. 6 para. 1 lit. b. GDPR, insofar as this cookie data is processed for contract initiation or contract processing.

If the processing does not serve to initiate or process a contract, our legitimate interest lies in the improvement, stability, functionality and security of our website. The legal basis in this case is Art. 6 para. 1 lit. f. GDPR.

4. Beseitigungsmöglichkeit

You can prevent, restrict or terminate the installation of cookies by changing the settings of your Internet browser. You can also delete cookies that have already been saved at any time. However, the steps and measures required for this depend on the specific Internet browser you are using. For example, you can deactivate the execution of script code in your browser or install a script blocker in your browser. If you prevent or restrict the installation of cookies, this may mean that not all functions of our website can be used to their full extent.

5. Kontaktanfragen / Kontaktmöglichkeit

If you contact us by contact form, e-mail or telephone, the data you provide will be used to process your request. The provision of the data is necessary for processing and answering your inquiry - without it we cannot answer your inquiry or can only answer it to a limited extent.

The legal basis for this processing is Art. 6 para. 1 lit. b. GDPR.

Your data will be deleted after 2 years, provided that your request has been finally answered and the deletion does not conflict with any statutory retention obligations, such as in the case of any subsequent contract processing.

6. Vertragsanbahnung / Vertragsabwicklung

The processing of your personal data may arise on the one hand due to the implementation of pre-contractual measures that precede a contractually regulated business relationship or on the other hand in the fulfillment of obligations arising from a contract concluded with you. This may include, for example, the processing of purchase, work or service contracts, deliveries or payments or the preparation and response to requests for quotations from individuals to determine the establishment or terms of a contractual relationship.

The legal basis for the processing is Art. 6 para. 1 lit. b. GDPR.

We are also subject to various legal obligations that may make it necessary to process your personal data. These legal obligations may arise, for example, from tax law, commercial and foreign trade law or sanction law regulations.

The legal basis for the processing is Art. 6 para. 1 lit. c. GDPR.

In addition, your personal data may be processed to protect certain legitimate interests. The legitimate interests are in particular the conclusion or execution of contracts and other business relationships with our business partners, suppliers or interested parties for whom you may be working as a representative or employee. Furthermore, legitimate interests are internal administrative purposes (e.g. for accounting) or to ensure IT security and IT operations as well as to carry out compliance investigations, to ensure building and plant security or to prepare, assert, exercise or defend legal claims.

The legal basis for the processing is Art. 6 para. 1 lit. f. GDPR.

As part of our business relationship, you must provide the personal data that is necessary for the establishment, execution and termination of a business relationship and for the fulfillment of the associated obligations, which we are legally obliged to collect or which we are entitled to collect on the basis of legitimate interests. Without this data, we will generally not be able to contact you and/or enter into a business relationship with you.

7. Online-Stellenbewerbungen / Veröffentlichung von Stellenanzeigen

We offer you the opportunity to apply for a job with us via our website. For these digital applications, your applicant and application data will be collected and processed electronically by us to handle the application process.

The legal basis for this processing is Section 26 (1) sentence 1 BDSG in conjunction with Art. 88 para. 1 GDPR.

If an employment contract is concluded after the application procedure, we will store the data you submitted during the application in your personnel file for the purpose of the usual organizational and administrative process - naturally in compliance with further legal obligations.

The legal basis for this processing is also § 26 para. 1 sentence 1 BDSG in conjunction with Art. 88 para. 1 GDPR.

Your data will be stored for the duration of the application process and in accordance with the legitimate retention periods after completion of the application process. In the event of a rejection, the data will be stored for 6 months. After the retention period has expired, the data will be completely anonymized. The processing of anonymized data records is not subject to the material scope of the data protection regulations, so that anonymized data can be processed for statistical and analytical purposes, for the creation of market studies or for product development. However, this does not take place if the data requires longer storage (e.g. until the conclusion of legal proceedings) due to legal provisions, e.g. due to the burden of proof under the AGG.

In this case, the legal basis is Art. 6 para. 1 lit. f. GDPR and § 24 para. 1 no. 2 BDSG. Our legitimate interest lies in legal defense or enforcement.

If an application is made via the “Softgarden” applicant management system, the additional data protection provisions to be accepted for the use of the tool apply. If you expressly consent to your data being stored for longer in this context, e.g. for your inclusion in an applicant or prospect database or a talent pool, the data will be processed further on the basis of your consent.

The legal basis is then Art. 6 para. 1 lit. a. GDPR.

However, you can of course withdraw your consent to inclusion in an applicant or prospect database or talent pool at any time in accordance with Art. 7 para. 3 GDPR by notifying us with effect for the future. In addition, we will ask for your consent again at regular intervals to ensure that you are still interested in being included.

8. Matomo

We use Matomo (formerly: “PIWIK”) on our website. This is an open-source software with which we can analyze the use of our website. It processes your IP address, the website(s) of our website that you visit, the website from which you switched to our website (referrer URL), the time you spend on our website and the frequency with which you visit one of our websites.

To collect this data, Matomo stores a cookie on your end device via your Internet browser. This cookie is valid for one week.

The legal basis for this processing is Art. 6 para. 1 lit. f. GDPR. Our legitimate interest lies in the analysis and optimization of our website.

We use Matomo with the anonymization function “Automatically Anonymize Visitor IPs”. This anonymization function shortens your IP address by two bytes, making it impossible to assign it to you or to the Internet connection you are using.

If you do not agree to this processing, you have the option of preventing the storage of cookies by changing the settings in your Internet browser. You can find more information on this above under “Cookies”.

You also have the option of ending the analysis of your usage behavior by opting out. When you confirm the link, a cookie is stored on your end device via your Internet browser, which prevents further analysis. Please note, however, that you will have to click on the above link again if you delete the cookies stored on your device.

9. Google Analytics 4

We use Google Analytics on our website. This is a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”.

The Google Analytics 4 service is used to analyze the usage behavior of our website, but does not contain any unique data such as names or e-mail addresses.

The legal basis for this processing is Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.

Usage and user-related information, such as IP address, location, time or frequency of visits to our website, is transmitted to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymization function. This function allows Google to shorten the IP address within the EU or EEA.

The data collected in this way is in turn also used by Google to provide us with an analysis of visits to our website and the usage activities there. This data can also be used to provide other services related to the use of our website and the use of the Internet.

Google states that it will not associate your IP address with any other data. Google also provides further data protection information for you at https://www.google.com/intl/de/policies/privacy/partners, for example on the options for preventing the use of data. Google also offers a so-called deactivation add-on at https://tools.google.com/dlpage/gaoptout?hl=en along with further information on this. This add-on can be installed with the most common Internet browsers and offers you further control over the data that Google collects when you visit our website. The add-on informs the JavaScript (ga.js) of Google Analytics that information about your visit to our website should not be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analysis services.

10. Google AdSense

We use Google AdSense on our website to integrate advertisements. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”.

Google AdSense stores cookies and so-called web beacons on your end device via your Internet browser. This enables Google to analyze your use of our website. In addition to your IP address and the advertising formats displayed to you, the information collected in this way is transferred to Google in the USA and stored there. Google may also pass this information on to contractual partners. However, Google declares that your IP address will not be associated with your personal information.

The legal basis for this processing is Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.

If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your Internet browser. Details on this can be found above under “Cookies”.

In addition, Google offers further information at https://policies.google.com/privacy and https://adssettings.google.com/authenticated, in particular on the options for preventing the use of data.

11. Google Maps

We use Google Maps on our website to display our location and to provide directions. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”.

If you call up the Google Maps component integrated into our website, Google stores a cookie on your end device via your Internet browser. Your user settings and data are processed in order to display our location and create directions. We cannot rule out the possibility that Google uses servers in the USA.

The legal basis for this processing is Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.

The connection to Google established in this way enables Google to determine from which website your request has been sent and to which IP address the directions are to be sent.

If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your Internet browser. Details on this can be found above under “Cookies”.

In addition, the use of Google Maps and the information obtained via Google Maps is governed by the Google Terms of Use Google-Nutzungsbedingungen and the Terms and Conditions for Google Maps.

In addition, Google offers further information https://adssettings.google.com/authenticated and https://policies.google.com/privacy.

12. YouTube

We use YouTube on our website. This is a video portal of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “YouTube”.

The legal basis for this processing is Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.

A connection to the YouTube server in the USA is established as soon as you access one of our web pages on which a YouTube video is embedded.

This connection is necessary in order to be able to display the respective video on our website via your Internet browser. In the course of this, YouTube will at least record and process your IP address, the date and time and the website you have visited. In addition, a connection to Google's “DoubleClick” advertising network is established.

If you are logged in to YouTube at the same time, YouTube will assign the connection information to your YouTube account. If you wish to prevent this, you must either log out of YouTube before visiting our website or make the appropriate settings in your YouTube user account.

For the purpose of functionality and analysis of user behavior, YouTube permanently stores cookies on your end device via your Internet browser. If you do not agree to this processing, you have the option of preventing the storage of cookies by changing the settings in your Internet browser. You can find more information on this above under “Cookies”.

In this respect, we would like to point out that there is a possibility that user data may be processed outside the European Union, in particular in the USA. This may result in increased risks for users in that, for example, subsequent access to user data may be made more difficult. We also have no access to this user data. The access option lies exclusively with YouTube.

Google provides further information on the collection and use of data as well as your rights and protection options in this regard in the data protection information available at https://policies.google.com/privacy.

13. Microsoft Bing Ads

We have integrated Bing Ads on our website. This is a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052 - 6399, USA, hereinafter referred to as “Microsoft”, which uses Universal Event Tracking (UEN) to display targeted advertising to users. Bing Ads uses cookies and other browser technologies to evaluate user behaviour and recognize users.

Bing Ads collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, Bing Ads delivers targeted advertising based on behavioral profiles and geographical location. Your IP address and other identification features such as your user agent are transmitted to the provider.

The legal basis for this processing is Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.

We would like to point out that there is a possibility that user data may be processed outside the European Union, in particular in the USA. This may result in increased risks for users in that, for example, subsequent access to user data may be made more difficult. The right of access lies exclusively with Microsoft.

14. Google Forms

We use Google Forms as an internal company survey tool, for example to plan events. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”. We collect and store the data you enter in the registration form. This is usually your e-mail address, first and last name and event-specific topics (accommodation, catering). Sometimes we need further information for organizational or legal reasons, which is then requested in the registration form.

The legal basis for this processing is Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.

Your data will be stored until the event is held and deleted after the event.

15. Easyfeedback

We use easyfeedback (easyfeedback GmbH, Ernst-Abbe-Straße 4, 56070 Koblenz) as an internal company survey tool, for example to obtain feedback on events, working groups, workshops and other topics. If you would like to take part in a survey, you can do so completely anonymously. We cannot establish any connection between the survey link, the answers given and the participants. In the case of particularly interesting answers to the questions asked, we would like to talk to the participant afterwards, which is why we may ask the survey participants for their name. However, providing a name is of course voluntary.

If a participant provides a name, the processing is carried out on the basis of Art. 6 para. 1 sentence 1 lit. a GDPR and § 25 para. 1 TTDSG. We store the personal data provided exclusively for the purpose of contacting the participant and to be able to enter into a constructive exchange with them afterwards.

16. Newsletter / Presseverteiller

We only send newsletters, press mailing lists, emails and other electronic notifications (hereinafter generally referred to as “newsletters”) with the consent of the recipient or with legal permission.

To subscribe to our newsletters, you must provide your first name, surname (for the purpose of addressing you personally) and your e-mail address. However, we may also ask you to provide your telephone number.

Registration for our newsletter is always carried out in a so-called double opt-in procedure. After registering, you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that no one can register with other people's e-mail addresses. Subscriptions to the newsletter are logged in order to be able to prove the registration process in accordance with legal requirements. This includes storing the time of registration and confirmation as well as the IP address.

We may store the unsubscribed email addresses for up to two years on the basis of our legitimate interests before deleting them in order to be able to prove that consent was previously given. The processing of this data is limited to the purpose of a possible defense against claims. In the event of obligations to permanently observe objections, we reserve the right to store the e-mail address in a blacklist solely for this purpose.

The registration process is logged on the basis of our legitimate interests for the purpose of proving that it has been carried out properly. If we commission a service provider to send e-mails, this is done on the basis of our legitimate interests in an efficient and secure mailing system.

The newsletter emails are sent on the basis of the recipient's consent in accordance with Art. 6 para. 1 lit. a GDPR. Insofar as we commission a service provider to send e-mails, this is done on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f GDPR. The registration process for the press distribution list is recorded on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR in order to prove that it has been carried out in accordance with the law.

Newsletters contain, among other things, content about news and developments about us, our services, offers and products, company changes, successful partnerships and projects, social commitment.

Our newsletters may contain a so-called “web-beacon”, i.e. a pixel-sized file that is retrieved from our server when the newsletter is opened or, if we use a mailing service provider, from their server. As part of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and the time of retrieval, is initially collected.

This information is used for the technical and content-related improvement of our press distribution list based on the technical data or the target groups and their reading behavior. This analysis also includes determining whether the newsletters are opened, when they are opened and which links are clicked. The evaluations are used to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

The evaluation of the newsletter and the measurement of success are carried out, subject to the express consent of the users, on the basis of our legitimate interests for the purposes of using a user-friendly and secure press distribution system that serves both our business interests and meets the expectations of the users.

A separate revocation of the performance measurement is not possible. In this case, the entire newsletter subscription must be canceled or objected to.

You can cancel the receipt of our newsletter at any time, i.e. revoke your consent or object to further receipt. You will find a link to unsubscribe from the press mailing list at the end of every press mailing list email - opt-out option.

We use the service provider HubSpot, Inc, 25 First Street, Cambridge, MA 02141 USA for the service. HubSpot's privacy policy can be found at: https://legal.hubspot.com/privacy-policy