ITONICS protects your privacy

§ 4 Collection of personal data when visiting our website

When using the website for informational purposes, i.e. simply viewing it without registering and without you providing us with any other information, we process the personal data that your browser transmits to our server. The legal basis is Art. 6 para. 1 p. 1 lit. f GDPR. The legitimate interest lies in the technical feasibility of your request and securing the website against attacks. The data described below is technically necessary for us to display our website to you and to ensure stability and security and must therefore be processed by us:

• IP address
• Date and time of the request
• Time zone difference from Greenwich Mean Time (GMT)
• Content of the request (page visited)
• Access Status/HTTP Status Code
• Data volume transferred in each case
• Previously visited page
• Browser
• Operating system
• Language and version of the browser software.

§ 5 Processing of data on your end devices ("Cookie Policy")

(1) Cookies are stored on your terminal device when you use our website. Cookies are text files or information in a database that are stored on your hard drive and assigned to the browser you are using so that certain information can flow to the body that sets the cookie. Cookies cannot execute programs or transmit viruses to your computer, but are primarily used to make the website faster and more user-friendly. This website uses the following types of cookies, whose function and legal basis we will explain below:

• Transient cookies: Such cookies, especially session cookies, are automatically deleted when the browser is closed or by logging out. They contain a so-called session ID. In this way, various requests from your browser can be assigned to the joint session and your computer can be recognised when you return to our website.
• Persistent cookies: These are automatically deleted after a predefined duration, which is set differently depending on the cookie. You can view the cookies set and the duration at any time in the settings of your browser and delete the cookies manually.

(2) This website uses the following cookies, whose type, function duration and access options by third parties are explained below:

§ 6 Contacting

(1) You can contact us by e-mail or via the contact form on our website. In this case, the data you provide will be stored by us in order to answer your questions.

To make it easier and quicker to contact us, we recommend using the contact form. We require the following information for this:

• Your name
• Your e-mail address
• Your job title
• Specify the company for which the enquiry is being made
• Type of enquiry

We use this information to answer your enquiry properly and to put you directly in touch with the relevant contact person. If you do not wish to provide one or more details, please contact us by e-mail.

There is no obligation to provide personal data. A possible consequence of not providing this data is that we may not be able to process your request or answer your enquiry in the desired manner.

(2) You can also use our contact form to book a demo of our software or the software of our partner company Braineet. By requesting a demo, you agree that we may contact you for the purpose of carrying out the demo and send you information on the products with promotional content. If you book a demo of the Braineet software, we will send your enquiry to our partner company Braineet, 158ter rue du temple 75003 Paris, France, for further processing. You can find more information on data processing by Braineet at https://www.braineet.com/privacy-policy

(3) The legal basis for data processing for enquiries by email is Art. 6 para. 1 lit. f GDPR. The legitimate interest lies in opening up contact options and participating in standard communication channels. When using the contact form, we ask for your consent. The legal basis for data processing for enquiries via the contact form is therefore Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without this affecting the lawfulness of processing up to the point of withdrawal.

(4) We delete the data collected in connection with your enquiry, if the enquiry is contract-related, after the periods for the term of the contract and, in the case of contract initiation without conclusion of a contract, no later than one year after the preparation of an offer. Otherwise, we will delete your data after storage is no longer necessary (e.g. when the enquiry has been completely dealt with) or restrict processing if there are statutory retention obligations.

§ 7 Online application procedure

(1) You can submit your application documents by using our online application form, by post or by handing them in personally. We ask you to refrain from applying by e-mail.

In the course of submitting the application documents, personal data will be processed by us. Which personal data is processed when using our online application form can be seen from the respective input masks, whereby the necessary mandatory data is specially marked in each case. All other information is voluntary. In the course of sending your documents by post or in the case of personal handover, the personal data that you voluntarily provide to us will be collected.

(2) Your personal data will be used for the purpose of carrying out the application procedure and for the possible conclusion of an employment contract. Insofar as no employment relationship is established, your application documents will be deleted no later than 6 months after rejection. If you have decided to join our talent pool, your data will be deleted after one year.

In the event that we conclude an employment contract with you after the application process has been completed, the personal data collected during the application process will become part of your personnel file and will be used to implement the employment relationship.

(3) The legal basis for data processing in the context of the application procedure is Art. 6 para. 1 p. 1 lit. b GDPR. The legal basis for data processing in the context of the talent pool is your consent (Art. 6 para. 1 p. 1 lit. a GDPR). You may revoke your consent at any time without affecting the permissibility of the processing until revocation.

The provision of personal data is neither legally nor contractually required, but may be necessary for the conclusion of a contract. The possible consequence of not providing this data is that your application may not be considered or not considered sufficiently or that the application process may be delayed due to necessary enquiries.

(4) For the processing of your applicant data within the framework of the online application form, we use the software Personio, a service of Personio GmbH, Rundfunkplatz 4, 80335 Munich, Germany ("Personio"). The data transmitted as part of your application is transferred via TLS encryption and stored in a database operated by Personio. Personio is our processor in this context in accordance with Art. 28 GDPR. The basis for the processing here is a contract for commissioned processing between us as the controller and Personio.

For more information about Personio's privacy practices, please visit: https://www.personio.de/datenschutz/.

§ 8 HubSpot

(1) Our website uses HubSpot, an online marketing service provided by HubSpot Inc, 25 First Street, Cambridge, MA 02141 USA ("Hubspot"). We use this integrated software solution for our own marketing purposes, for lead generation and for customer service purposes. This includes, but is not limited to, email marketing which governs the sending of newsletters as well as automated mailings, social media publishing and reporting, contact management such as benefit segmentation and CRM, landing pages and contact forms.

We primarily record the interactions between you as a user of the website and our website with the help of cookies, data on the device/browser, IP addresses and website or app activities. The duration of the storage of the cookies is stated in the Cookie Policy (§ 5) under Functional duration. Any data beyond this is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

(2) The legal basis for the collection and further processing of the information is your consent (Art. 6 para. 1 p. 1 lit. a GDPR). The revocation of your consent is possible at any time without affecting the permissibility of the processing until the revocation.

There is no obligation to provide the personal data. The possible consequence of not providing the data is that you will not be able to use our website to its full extent and we will not be able to use your data to improve our services.

(3) The information generated by the cookie and the IP addresses about your use of this website are usually transferred to a HubSpot server in the USA and processed there. There is currently no adequacy decision of the Commission for a data transfer to the USA, but HubSpot offers suitable guarantees by concluding so-called standard contractual clauses. More information on the standard contractual clauses is available at https://legal.hubspot.com/dpa.

(5) Further information on data processing when using HubSpot is available at: https://legal.hubspot.com/privacy-policy.

§ 9 Google Analytics

(1) Our website uses Google Analytics, a web tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The purpose of our use of the tool is to enable the analysis of your user interactions on websites and in apps and to improve our offer through the statistics and reports obtained and to make it more interesting for you as a user.

We primarily record the interactions between you as a user of the website and our website with the help of cookies, data on the device/browser, IP addresses and website or app activities. The duration of the storage of the cookies is stated in the Cookie Policy (§ 5) under Functional duration. Google Analytics also collects your IP addresses in order to ensure the security of the service and to provide us, as the website operator, with information about the country, region or location from which the respective user originates (so-called "IP location determination"). For your protection, however, we naturally use the anonymisation function ("IP masking"), i.e. Google truncates the IP addresses by the last octet within the EU/EEA.

(2) The legal basis for the collection and further processing of the information is your consent (Art. 6 para. 1 p. 1 lit. a GDPR). The revocation of your consent is possible at any time without affecting the permissibility of the processing until the revocation. The easiest way to revoke your consent is to use our cookie banner or delete the cookies in your browser.

There is no obligation to provide the personal data. The possible consequence of not providing it is that we cannot include your use of our website to improve our offer.

(3) The information generated by the cookie and the (usually shortened) IP addresses about your use of this website are usually transferred to a Google server in the USA and processed there. There is currently no Commission adequacy decision for data transfer to the USA, but Google offers suitable guarantees by concluding so-called standard contractual clauses. More information on the standard contractual clauses is available at: https://policies.google.com/privacy/frameworks?hl=de.

In addition, Google says it has imposed a standard on itself equivalent to the former EU-US Privacy Shield and has pledged to comply with applicable data protection laws when transferring data internationally.

(5) Further information on data processing when using Google Analytics can be found in Google's privacy policy at: https://policies.google.com/privacy.

§ 10 DoubleClick

(1) Our website uses DoubleClick, a marketing service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The purpose of our use of the tool is to serve relevant ads to the user, to improve campaign performance reports or to avoid showing the same ads to the user more than once.

Google uses a cookie ID to record which ads are displayed in which browser and can thus prevent them from being displayed more than once. In addition, Google can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user is shown a DoubleClick ad and later calls up the advertiser's website with the same browser and makes a purchase there. According to Google, DoubleClick cookies do not contain any personal information. The duration of the storage of the cookies is stated in the Cookie Policy (§ 5) under Functional duration.

(2) The legal basis for the collection and further processing of the information is your consent (Art. 6 para. 1 p. 1 lit. a GDPR). The revocation of your consent is possible at any time without affecting the permissibility of the processing until the revocation. The easiest way to revoke your consent is to use our cookie banner or delete the cookies in your browser.

There is no obligation to provide the personal data. The possible consequence of not providing it is that you will be shown advertisements that are not tailored to your interests and that they will be shown more than once. In addition, your use of our website cannot be used to improve our advertising campaigns.

(3) By using the service, your browser automatically establishes a connection with Google's servers in the USA. There is currently no adequacy decision by the Commission for data transfer to the USA, but Google offers suitable guarantees by concluding so-called standard contractual clauses. More information on the standard contractual clauses is available at: https://policies.google.com/privacy/frameworks?hl=de.

In addition, Google says it has imposed a standard on itself equivalent to the former EU-US Privacy Shield and has pledged to comply with applicable data protection laws when transferring data internationally.

(4) We have no influence on the scope and further use of the data collected by Google through the use of this service.

For more information on data processing when using DoubleClick, please refer to Google's privacy policy at: https://policies.google.com/privacy.

§ 12 Google Optimize

(1) Our website uses Google Optimize, a website optimisation service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The purpose of our use of the tool is to use analytics to improve our website and optimise our Google Ads investment.

We primarily record the interactions between you as a user of the website and our website with the help of cookies, data on the device/browser, IP addresses and website or app activities. The duration of the storage of the cookies is stated in the Cookie Policy (§ 5) under Functional duration.

(2) The legal basis for the collection and further processing of the information is your consent (Art. 6 para. 1 p. 1 lit. a GDPR). The revocation of your consent is possible at any time without affecting the permissibility of the processing until the revocation. The easiest way to revoke your consent is to use our cookie banner or delete the cookies in your browser.

There is no obligation to provide the personal data. The possible consequence of not providing it is that we cannot consider your use of our website for improvement.

(3) The information generated by the cookie and the (usually shortened) IP addresses about your use of this website are usually transferred to a Google server in the USA and processed there. There is currently no Commission adequacy decision for data transfer to the USA, but Google offers suitable guarantees by concluding so-called standard contractual clauses. More information on the standard contractual clauses is available at: https://policies.google.com/privacy/frameworks?hl=de.

In addition, Google says it has imposed a standard on itself equivalent to the former EU-US Privacy Shield and has pledged to comply with applicable data protection laws when transferring data internationally.

(5) For more information on data processing when using Google Optimize, please refer to Google's privacy policy at: https://policies.google.com/privacy.

§ 13 Google reCAPTCHA

(1) Our website uses Google reCAPTCHA, a website analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The purpose of our use of the tool is to determine, with the help of analyses of usage behaviour on our website, whether data input on our website (e.g. via contact form) is made by a human being or by an automated programme. This is to avoid automated requests (e.g. by spammers) and to increase the security of our website.

We primarily record the interactions between you as a user of the website and our website with the help of cookies, data on the device/browser, IP addresses and website or app activities. The duration of the storage of the cookies is stated in the Cookie Policy (§ 5) under Functional duration.

(2) The legal basis for the collection and further processing of the information is your consent (Art. 6 para. 1 p. 1 lit. a GDPR). The revocation of your consent is possible at any time without affecting the permissibility of the processing until the revocation. The easiest way to revoke your consent is to use our cookie banner or delete the cookies in your browser.

There is no obligation to provide the personal data. The possible consequence of not providing it is that you will not be able to use certain functions of our website.

(3) The information generated by the cookie and the (usually shortened) IP addresses about your use of this website are usually transferred to a Google server in the USA and processed there. There is currently no Commission adequacy decision for data transfer to the USA, but Google offers suitable guarantees by concluding so-called standard contractual clauses. More information on the standard contractual clauses is available at: https://policies.google.com/privacy/frameworks?hl=de.

In addition, Google says it has imposed a standard on itself equivalent to the former EU-US Privacy Shield and has pledged to comply with applicable data protection laws when transferring data internationally.

(5) For more information on data processing when using Google reCAPTCHA, please refer to Google's privacy policy at: https://policies.google.com/privacy.

§ 14 Google Maps

(1) Our website uses Google Maps, an online mapping service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The purpose of our use of the tool is to be able to show you our company locations on a map and to enable you to plan a route there.

To enable you to use the functions of the online map service, Google sets a so-called cookie to transmit the information required for route planning (e.g. your location) to Google. The duration of the storage of the cookies is stated in the Cookie Policy (§ 5) under Functional duration.

(2) The legal basis for the collection and further processing of the information is your consent (Art. 6 para. 1 p. 1 lit. a GDPR). The revocation of your consent is possible at any time without affecting the permissibility of the processing until the revocation. The easiest way to revoke your consent is to use our cookie banner or delete the cookies in your browser.

There is no obligation to provide the personal data. The possible consequence of not providing the data is that you will not be able to use the online map function.

(3) The information generated by the cookie and the (usually shortened) IP addresses about your use of this website are usually transferred to a Google server in the USA and processed there. There is currently no Commission adequacy decision for data transfer to the USA, but Google offers suitable guarantees by concluding so-called standard contractual clauses. More information on the standard contractual clauses is available at: https://policies.google.com/privacy/frameworks?hl=de.

In addition, Google says it has imposed a standard on itself equivalent to the former EU-US Privacy Shield and has pledged to comply with applicable data protection laws when transferring data internationally.

(5) Further information on data processing when using Google Maps can be found in Google's privacy policy at: https://policies.google.com/privacy.

§ 15 Vimeo

(1) Vimeo videos have been embedded on this website, a video portal of Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York, New York 10001, USA ("Vimeo"). The purpose of the integration is that videos stored on vimeo.com can be played directly from our website. The duration of the storage of the cookies is stated in the Cookie Policy (§ 5) under Functional duration.

(2) The legal basis for the collection and further processing of the information is your consent (Art. 6 para. 1 p. 1 lit. a GDPR). The revocation of your consent is possible at any time without affecting the permissibility of the processing until the revocation. The easiest way to revoke your consent is to use our cookie banner or delete the cookies in your browser.

There is no obligation to provide the personal data. The possible consequence of not providing this data is that you will not be able to play the embedded Vimeo videos.

(3) The information collected is stored on Vimeo servers, also in the USA. There is currently no Commission adequacy decision for data transfer to the USA, but Vimeo offers suitable guarantees by concluding so-called standard contractual clauses. For more information on the standard contractual clauses, please visit https://vimeo.com/privacy#international_data_transfers_and_certain_user_rights.

(4) When you play the videos, data is transmitted to Vimeo. This data includes your IP address, technical information about your device (e.g. browser type, operating system, basic device information), the website you visit and your activities. We have no influence on this data transmission.

For more information on data processing by Vimeo and the storage period of the data collected by Vimeo, please refer to the Vimeo privacy policy at: https://vimeo.com/privacy.

§ 16 Spotify

(1) Plugins from Spotify, an audio streaming platform of Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Sweden ("Spotify") have been integrated on this website. The purpose of the integration is that audio files, albums or playlists stored on Spotify's servers can be played directly from our website.

We use Spotify by embedding individual audio files, albums or playlists from the platform on our website as a so-called iFrame, so that they can be played directly on our website as a stream. When you visit a sub-page of our website on which a Spotify plug-in is embedded, a connection is established to the Spotify servers and the plug-in is displayed within our website. This transmits to Spotify your IP address and the information about which website you have visited and which audio file you have listened to. If you are logged in as a Spotify user, Spotify assigns this data to your user account. If you do not want Spotify to associate your visit to our website with your Spotify user account, please log out of your Spotify user account.

(2) The legal basis for the collection and further processing of the information is your consent (Art. 6 para. 1 p. 1 lit. a GDPR). The revocation of your consent is possible at any time without affecting the permissibility of the processing until the revocation.

There is no obligation to provide the personal data. The possible consequence of not providing this data is that you will not be able to play the embedded audio plug-ins.

(3) We do not collect any personal data about your use of the audio plugins. Through the connection with the Spotify servers, personal data (e.g. your IP address) is transmitted there. For more information on data processing by Spotify and the storage period of the data collected by Spotify, please refer to Spotify's privacy policy at: https://www.spotify.com/de/legal/privacy-policy/.

Spotify's servers are located in the USA. There is currently no Commission adequacy decision for data transfers to the USA, but Spotify offers suitable guarantees by concluding so-called standard contractual clauses. More information on the standard contractual clauses is available at: https://www.spotify.com/de/legal/privacy-policy/#7-%C3%BCbermittlung-in-andere-l%C3%A4nder.

§ 17 LinkedIn

1) In addition to our website, we also use the social media platform LinkedIn to present our company. The social media platform LinkedIn is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn").

You can find the imprint of LinkedIn at: https://www.linkedin.com/legal/impressum

You can reach LinkedIn via the contact form provided: https://www.linkedin.com/help/linkedin/ask/PPQ

You can reach LinkedIn's data protection officer at LinkedIn's postal address with the addition "Legal Dept. (Privacy Policy and User Agreement)" or via the contact form provided for this purpose at the following address: https://www.linkedin.com/help/linkedin/ask/ppq.

When visiting our company page on LinkedIn, data processing is carried out under joint responsibility. The relevant agreement pursuant to Art. 26 GDPR can be found at the following address: https://legal.linkedin.com/pages-joint-controller-addendum

(2) We would like to point out that you use our presence on LinkedIn and the functions of the social media platform on your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating). When you visit our LinkedIn page, LinkedIn collects, among other things, your IP address and other information that is present on your terminal device in the form of cookies. This information is used to provide us, as the operator of the LinkedIn page, with statistical information about your interaction with us.

Further information on data processing by LinkedIn can be found in LinkedIn's privacy policy at: https://de.linkedin.com/legal/privacy-policy.

(3) The legal basis for the collection and further processing of the information is your consent, which you have given to us or LinkedIn (Art. 6 para. 1 p. 1 lit. a GDPR). The revocation of your consent is possible at any time without affecting the permissibility of the processing until the revocation.

There is no obligation to provide the personal data. The possible consequence of not providing it is that you cannot visit our company's LinkedIn page or view and interact with our posts on the social media platform.

(4) The social media platform LinkedIn is operated on servers in the USA. There is currently no adequacy decision by the Commission for data transfer to the USA, but LinkedIn offers suitable guarantees by concluding so-called standard contractual clauses. More information on the standard contractual clauses is available at the following addresses:

https://www.linkedin.com/legal/l/dpa

https://www.linkedin.com/legal/l/eu-sccs

(5) To exercise your data protection rights, you can contact us or LinkedIn. To the extent that one party is not responsible for responding or needs to obtain the information from the other party, we or LinkedIn will then forward your request to the relevant partner. Please contact LinkedIn directly for questions about profiling and processing of your data when using the LinkedIn site. If you have any questions about the processing of your interaction with us on our LinkedIn site, you can contact us at the contact details provided in § 1.

§18 Newsletter

We send newsletters and other electronic messages containing advertising information (hereinafter referred to as "newsletters") only with the consent of the recipient. Newsletters generally contain information about our products, offers, promotions and the activities of our company.

The registration to our newsletter takes place via our website. To log the registration, the registration and confirmation time as well as the IP address are stored.

Dispatch service provider: The newsletter is dispatched by HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, phone: +353 1 5187500, https://www.hubspot.de

HubSpot is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with the European level of data protection.

The dispatch service provider generally uses the processed data in pseudonymous form (i.e. without allocation to a user) for the optimisation or improvement of its own services (e.g. for the technical optimisation of the dispatch and the presentation of the newsletter or for statistical purposes). However, the dispatch service provider does not use the data to contact the recipients of the newsletter itself. He also does not pass on the data.

The newsletters contain a so-called "web-beacon", i.e. a file the size of a pixel, which is called up by the server of the dispatch service provider when the newsletter is opened.

Technical information (type of browser, system data, e.g. IP address) is collected. This information is used for the technical improvement of the services. Statistical surveys also include determining whether newsletters are opened, when they are opened and which links are clicked.

This information can be assigned to the individual newsletter recipients. However, it is not our aim to observe individual users. Rather, the evaluations serve us to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

Cancellation/revocation - You can revoke your consent to receive our newsletter at any time. Thus your consents to its dispatch by the dispatch service provider and the statistical analyses expire at the same time. A separate revocation of the shipment by the shipping service provider or the statistical analysis is unfortunately not possible. You will find a link to cancel the newsletter at the end of each newsletter. If users have only subscribed to the newsletter and canceled their subscription, their personal data will be deleted.

§19 Learnworlds

(1) Our website uses Learnworlds, an online learning platform provided by LearnWorlds (CY) Ltd, Gladstonos 120, Foloune Building, 2nd Floor, B1, 3032, Limassol, Cyprus ("Learnworlds"). We use this platform to train customers or prospective customers regarding our products and the underlying, methodological background.

(2) If you wish to use our platform, you must register by providing your e-mail address, a password of your choice and your real name. Optionally, we offer you the possibility to register for our service with LinkedIn, Google or Apple. An additional registration is therefore no longer necessary. To register, you will be redirected to the page of the selected provider, where you can log in with your user data. This links your profiles and our service. In addition, when using the learning platform, we track your learning progress in order to be able to create a corresponding certificate for you with your clear name.

The legal basis for the collection and further processing of the information is your given consent (Art. 6 para. 1 p. 1 lit. a DS-GVO). The revocation of your consent is possible at any time without affecting the permissibility of the processing until the revocation.

The duration of the storage of cookies is stated in the Cookie Policy (§ 5) under Functional Duration. Any data beyond this will be deleted as soon as it is no longer required to achieve the purpose for which it was collected.

The provision of personal data is not required by law or contract, but is necessary for use and related user administration. The possible consequence of not providing it is that you cannot use our platform.

(3) The data transmitted in the course of your use is transferred via TLS encryption. Learnworlds is our order processor in this context in accordance with Art. 28 DSGVO. The basis for the processing in this case is a contract for order processing between us as the responsible party and Learnworlds.

(4) You can find more detailed information on the data processing of the respective tools below:

Learnworlds: https://www.learnworlds.com/privacy-policy
LinkedIn: LinkedIn Privacy Policy
Google: Privacy Policy - Privacy Policy & Terms of Use - Google
Apple: Legal - Privacy Policy - Apple 

§20 Disclaimer

We constantly check and update the content that we have published on our website. We assume no liability or guarantee for the topicality, correctness and completeness of the published contents.