Data protection notice for the use of our website

This data protection notice pursuant to Art. 13 ff. GDPR fulfills our obligation to provide information about the collection of personal data on our website.
As a general rule, Tebis operates multiple websites, including but not limited to tebis.com, info.tebis.com or tebis-consulting.com (referred to in the following as “the websites”, “our websites”) and would like to inform you in the following sections of the present data protection notice about, among other things, the extent to which your personal information will be processed by the websites and the purposes for which this information will be used.

1. Name and contact data of the controller:

2. Contact data of the Data Protection Officer:

Holzhofer Consulting GmbH
Martin Holzhofer
Lochhamer Str. 31
82152 Planegg, Germany
Phone: (0 89) 1 25 01 56 00
Email: datenschutzbeauftragter-tebis@holzhofer-consulting.de

3. Purposes for which personal data are processed and the legal basis for processing: 3.1. Processing of access dataFor technical reasons, we will process a limited quantity of data (so-called connection data) every time you access our websites. These data are technically required to establish and carry out a connection between your terminal device and our servers. These data will be processed in the main memory of the web server for the duration of the connection:

The following data or categories of data will be collected:

• IP address
• Source port of the accessing device or gateway (e.g., firewall or proxy)
• Time stamp (date and time) of access
• Data quantity transferred
• Report as to whether the access was successful (by way of HTTP error code)
• Report as to why an access failed, applicable (by way of HTTP error code)
• Referer (website from which our main page or subpages were accessed)
• User agent (type and version of browser with which you access our website)
• Width and height of the display screen
• Language settings of your browser

The IP address, time stamp, HTTP error code, referer and user agent will be logged automatically when you access our websites in order to ensure the functionality and protection of our websites. The logs also serve the purpose of optimizing the website. You IP address will be processed further only in truncated form, by which it is anonymized. It is impossible for us to generate personally identifiable user profiles with these data.

The processing is done on the basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. Based on a weighing of interests, it has been concluded that the processing is necessary for the purposes of our legitimate interests, which override your interests and fundamental rights and freedoms which require protection of your personal data.

3.2 Cookies and related technologies3.2.1 General information
This website uses so-called cookies and related technologies (e.g., scripts) in part. Cookies cause no damage to your computer and contain no viruses. Cookies serve the purpose of making our websites more user-friendly, more effective and more secure. Cookies are small text files which are stored on your terminal device and which your browser saves, including for the purpose of “remembering” information about you such as your language settings or log-in information. These cookies are placed by us in part and are referred to as first-party cookies. We also use third-party cookies, which originate from a different domain from that of the website you visited.

As a general rule, we categorize cookies as follows:

• Technically necessary cookies
• Preference cookies
• Statistical cookies
• Marketing cookies

You can find additional information about the individual categories and the chance to reject each cookie category (with the exception of technically necessary cookies), as well as a list of all cookies used, under “Cookie settings”.

3.2.2. Technically necessary cookies
Most of the cookies we use are so-called “session cookies”. They are automatically erased at the end of your visit. Such cookies are technically necessary to operate the website and to provide the service desired by the user and can therefore not be deactivated.
Processing is performed on the basis of a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. Based on a weighing of interests, it has been concluded that the processing is necessary for the purposes of our legitimate interests, which override your interests and fundamental rights and freedoms which require protection of your personal data.

3.2.3 Cookies requiring your consent, such as analysis and tracking cookies and related technologies (e.g., tracking scripts)
Advertising, marketing and analysis tools of third-party providers are additionally integrated into our website. These tools are not technically necessary to operate the website, but serve the purpose, for example, of gathering information about the user’s behavior, displaying certain advertising to the user on the basis of this information, or analyzing the use of our website (e.g., Google Analytics, DoubleClick by Google, LinkedIn Ads and LinkedIn Analytics).
These services are only activated after you have expressly granted your consent with the aid of the consent banner.

An overview of all third-party services integrated into the website and detailed information about each one of these services can be found in Article 10.

3.3 Data processing in connection with our contact form When you contact Tebis using the contact form on the website, the information your enter will only be used, as a general rule, for the purpose of processing and answering your request and for possible follow-up questions and further advice, where applicable (insofar as you do not wish to subscribe to the newsletter at the same time by checking the corresponding checkbox).

The following data or categories of data will be collected and processed:

• Form of address
• Last name
• Email address
• Name of your company
• Country
• Contact reason

In addition, you can provide the following information on a voluntary basis:

• First name
• Telephone number
• Postal code
• City

The legal basis for processing your data is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. Based on a weighing of interests, it has been concluded that the interests of the data subjects do not override our interests in processing. In the present case, we have a legitimate interest in answering your request, for the purpose of which it is necessary to process the data and categories of data mentioned here.

3.4 Data processing in connection with newsletter subscriptionIf you wish to receive information about new products or other interest topics on a regular basis, Tebis offers you the chance to receive a newsletter.
You can subscribe to our newsletter by checking the corresponding checkbox below the various forms (e.g., contact form, registration for training courses, or registration for events) or by subscribing directly at https://www.tebis.com/de/immer-auf-dem-laufenden. You will then receive an activation link at the email address you indicated, which you must click to complete the subscription (double opt-in procedure).

Your subscription to the newsletter is not activated until you click the confirmation link. This enables us to prevent the abuse of your personal data by third parties.

The following data or categories of data will be collected and processed:

• Form of address
• Last name
• Email address
• Name of your company
• Country

In addition, you can provide the following information on a voluntary basis:

• First name

The legal basis for processing is Art. 6 para. 1 lit. a GDPR, thus your express and voluntary consent in combination with the double opt-in procedure.

You can revoke your consent at any time for any reason. Two options are available to you for this purpose:
You can click on the “Unsubscribe” button appearing in every newsletter in order not to receive the newsletter in the future.
You can also send an informal mail with your request to unsubscribe to tebisworld@tebis.com or info@tebis.com.

3.5 Data processing in connection with registration for eventsYou can also register for various events on our website (e.g., the Annual Tebis Open House).
In order to complete the registration and plan the event, we require the following data or categories of data from you:

• Form of address
• Last name, first name
• Email address
• Name of your company
• Position
• Street address
• Postal code
• City
• Telephone number
• Country

Unless you wish to register for the newsletter at the same time by checking the corresponding checkbox, the data collected in the registration will be processed exclusively for the purpose of performing the registration and planning of the corresponding event. The legal basis for processing is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. Based on a weighing of interests, it has been concluded that the interests of data subjects do not override our interests in processing. In this case, we have a legitimate interest in holding and planning events, for which purpose the registration process and the related processing of the data and categories of data mentioned here are necessary.

3.6 Data processing on connection with registration for training courses, seminars and online events (e.g., webinars)If you wish to make use of our offering of training courses, seminars and webinars and register for them using the respective registration forms, we will process your following data or categories of data in order to plan and hold such events:

• Form of address
• Last name, first name
• Email address
• Job title
• Name of your company
• Street address
• Postal code
• City
• Telephone number
• Country

Unless you wish to register for the newsletter at the same time by checking the corresponding checkbox, the data collected in the registration will be processed exclusively for the purpose of performing the registration and planning of the corresponding event (e.g., training course, seminar, webinar). The legal basis for processing your data is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. Based on a weighing of interests, it has been concluded that the interests of the data subjects do not override our interests in processing. In this case, we have a legitimate interest in holding and planning training courses, seminars and webinars, for which purpose the registration process and the related processing of the data and categories of data mentioned here are necessary.

Additional notice regarding webinars: Webinars serve the purpose of communication between Tebis Technische Informationssysteme AG and a group of persons who register for a digital conference to obtain information online. If you register for a webinar, the following data are absolutely necessary to support the procedure: Last name, first name, and email address. In order to offer the “webinar” service, Tebis Technische Informationssysteme AG utilizes the GoToWebinar service of the company LogMeIn, LogMeIn Ireland Limited Bloodstone Building Block C 70, Sir John Rogerson’s Quay Dublin 2, Ireland. (Data protection statement: 3.7 Consent to the production and use of photographs, video or audio recordings and personal data in accordance with Art. 6 para. 1 lit. a GDPR, Section 22 KunstUrhG With your registration for in-person events or online webinars organized by us, such as the Tebis Open House, photographs, video and audio recordings will be produced and you consent to the processing of your personal data for the purpose of publication, free of charge, in: - Press releases - Social media such as Facebook, Instagram, XING, LinkedIn, YouTube, Twitter, etc. - Online media such as intranet and Internet - Various printed materials .
Before publishing such photographical materials, Tebis AG will ask for your consent as long as you are not to be seen only as part of larger group of persons.
You consent to your personal data being forwarded to service providers (print shops, social media providers, etc.) for processing your data.

You can revoke this consent with effect in the future at any time for any reason. This revocation can be sent by email to info@tebis.com or by mail to Tebis Technische Informationssysteme AG, Einsteinstr. 39, 82152 Martinsried/Planegg, Germany.

Your photographs, video or audio recordings will no longer be used for the above-mentioned purposes starting from the date of receipt of your revocation. Your photographs, video and audio recordings will be stored until you revoke your consent, but not for longer than necessary for the intended purpose.
Please be advised that recordings used on the Internet or social media can no longer be deleted retrospectively.
Already printed and distributed printed materials (e.g., printed media) or an image file cannot be withdrawn.

3.8 Data processing for the purpose of precontractual steps with prospective customersOur offering is aimed exclusively at entrepreneurs, tradespeople, freelancers and public-sector institutions. Contracts with consumers pursuant to Section 13 BGB are not concluded.
If you are interested in the goods and services offered on the website, we will process and store the information you provide when contacting us by using our contact form. All other information required to fulfill the obligation to provide information about these processing activities pursuant to Art. 13 ff. GDPR can be found in the data protection notice.

4. Automated decision making, including profiling Tebis AG does not engage in automated individual decision making, including profiling, according to Art. 22 paras. 1 and 4 GDPR.

5. Transfer of data to a third country Data transfers to countries outside of the EU and the European Economic Area (“third countries”) are done for purposes of the administration, development and operation of IT systems. Such transfers are only done on the basis of:

• An adequacy decision of the European Commission within the meaning of Art. 45 GDPR.
• a certification mechanism pursuant to Art. 42 GDPR, together with legally binding and enforceable obligations of the controller or the processor in the third country.
• Standard data protection clauses issued by the Commission in accordance with the committee procedure pursuant to Art. 93 para. 2 GDPR.

At the present time, transfers of personal data to third countries, particularly to the United States, in connection with the use of our website are done through the use of third-party services in the following cases:

• Transfer of data to Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.
• Transfer of data to LinkedIn Corp., 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.
• Transfer of data to Vimeo Inc., 555 West 18th Street New York, NY 10011, USA.
• Transfer of data to Salesforce Pardot LLC, 950 East Paces Ferry Rd NE #2800, Atlanta, GA 30326, USA.
• Transfer of data to New Relic Inc., 188 Spear St., Suite 1000. San Francisco, CA USA 94105.
• Transfer of data to Wingify Software Private Limited, LJ TOWER, 1104, North, Netaji Subhash Place, Pitam Pura, Delhi, 110034, India.

The websites and logs are stored exclusively on servers in Germany.

6. Categories of data recipients For processing personal data for the purposes indicated herein, we utilize the following categories of data recipients as controllers within the meaning of Art. 28 GDPR:

• Providers of servers for the purpose of hosting our websites
• IT service providers to maintain our IT infrastructure
• External service providers for additional services
• Providers of marketing and analysis services (e.g., Google, LinkedIn, Salesforce/Pardot)
• Other processors within the meaning of Art. 28 GDPR in the course of processing

These service providers process information about you on our behalf on the basis of our instructions and are contractually bound to comply with applicable data protection laws.
Other recipients are affiliated companies of Tebis AG. As a globally active company, we may therefore also transfer your data to the following affiliated companies:

• Tebis ProLeiS GmbH
• DCAM GmbH

Your data will also be transferred insofar as we are legally obligated to do so.

USE OF DATA ON THE BASIS OF YOUR CONSENT (ART. 6 PARA. 1 LIT. A GDPR)

Partner events (in-person events or online webinars) are held on the basis of a legitimate interest of Tebis AG and the partners of Tebis AG indicated in the respective registration form, after weighing your rights and freedoms.

If you have granted us your consent, Controllers A and B will share your participant data with each other after the event or webinar for marketing purposes, in order to provide individualized advice to customers. The following personal data are processed for this purpose:

• Last name
• First name
• Email address
• Company/organization
• Address (street address)
• City
• Telephone number
• Job description

All consents are voluntary and may be revoked at any time in relation to Tebis AG and the partners named in the respective registration form.


7. Duration of storage and criteria for the determination of the durationAs a general rule, data will be retained only for as