The protection of your data is important to us, the company Ferdinand Gruber Inception (hereinafter also "Company", "we", etc.) and we would like to inform you here about our data protection, the processing of personal data and about the rights and obligations arising from the GDPR (General Data Protection Regulation) (in particular Art. 13 GDPR).
When we make decisions about the methods and purposes of data processing, one of our obligations is to inform you comprehensively about the nature, scope, purpose, duration, your rights and the legal basis of data processing (Article 13 GDPR). Through this declaration, hereinafter also referred to as "Data protection information", we would like to inform you about how we handle your personal data.
In the following, we will call you, as the data subject, in particular "customer", "user", "you", "you" or "data subject", depending on the context.
Outline:
General information, in particular contact details
Website & Social Media
For applicants
A. General information
The information presented here, under "A. General Information", applies at all times. Below you will find information for special situations and circumstances. If an article has no legal designation, it is an article of the GDPR.
Items
The general definitions of the GDPR apply (Art. 4 GDPR), in particular these terms apply:
According to Article 4 No. 2 GDPR, "processing" includes any handling of personal data, regardless of automated procedures. This includes the collection, recording, organisation, storage, adaptation, modification, reading, querying, use, disclosure by transmission, dissemination, provision, comparison, linking, restriction, deletion or destruction of personal data as well as any change to the original purpose or purpose of the data processing.
"Personal data" according to Article 4 No. 1 GDPR is all information that relates to an identified or identifiable natural person, the "data subject". A person is considered identifiable if he can be identified directly or indirectly by characteristics such as name, identification number, online identifier, location data or physical, physiological, genetic, psychological, economic, cultural or social characteristics. This identification can also be done by linking information or additional knowledge. It is irrelevant in what form the information is available, including photos, videos or sound recordings.
A "controller" in accordance with Article 4 No. 7 GDPR is a natural or legal person, authority, institution or other body that alone or jointly with others decides on the purposes and means of processing personal data.
A "processor" in accordance with Article 4 No. 8 GDPR is a natural or legal person, authority, institution or other body that processes personal data on behalf of the controller, in particular in accordance with his instructions.
A "third party" in accordance with Article 4 No. 10 GDPR means any natural or legal person, authority, institution or other body other than the data subject, the controller, the processor and persons who are authorized to process personal data under the direct responsibility of the controller or processor. This also includes other companies within a group.
The "consent" pursuant to Article 4 No. 11 GDPR is a voluntary, informed and unambiguous declaration of will or action by the data subject. With this, she agrees that her personal data will be processed for a specific purpose.
Name and contact details of the person responsible
We, the company, are the responsible body for the processing of your personal data in accordance with Article 4 number 7 of the General Data Protection Regulation (GDPR:
inceptionagency (owner Ferdinand Leopold Gruber)
Nikolaus-Geiger-Straße 26, 89415 Lauingen, Germany
Phone: +49 9072 6044 998,
E-Mail: info@inceptionagency.de
For further information about our company and information, please refer to the imprint information on our website https://inceptionagency.de/IMPRESSUM .
Legal basis of data processing
In accordance with the legal provisions, in principle, any processing of personal data is prohibited and is only permitted under certain justification grounds:
Article 6 paragraph 1 lit a: The data subject has given his "consent" too clearly, voluntarily, informed, for one or more purposes (consent)
Article 6(1)(b): the processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures that are carried out at the request of the data subject;
Article 6(1)(c): the processing is necessary to fulfil a legal obligation to which the controller is subject;
Article 6(1)(d): the processing is necessary to protect the vital interests of the data subject or another natural person;
Article 6(1)(e): the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
Article 6(1)(f) Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.
In the following, we provide the respective legal basis for the processing operations carried out by us. It is possible that processing is based on several legal bases.
Duration of storage and data deletion
Furthermore, for the processing operations carried out by us, we specify in each case how long your data will be stored by us and at what time it will be deleted or blocked. If no specific storage period is specified, your personal data will be deleted or blocked as soon as the purpose or legal basis for storage no longer applies. In principle, your data will only be stored on our servers in Germany, unless there is a possible transfer in accordance with the sections on contract processors and transfer to third countries.
Further storage and processing is possible in the event of a possible legal dispute with you or in the context of another legal procedure or if the storage is required by law (e.g. tax retention obligations), until the expiry of these procedures, legal disputes or the statutory retention obligations. After that, the data will be deleted or blocked. This does not apply if storage is required by law.
Contract processors
We use service providers as part of our business activities. This includes domestic and foreign service providers (e.g. in IT, logistics, forwarding companies, communication, sales, marketing and consultants). They will only act according to our instructions and have been contractually obliged to comply with the data protection regulations in accordance with Art. 28 GDPR.
For the transfer of personal data to third countries
In the course of our activities, it may happen that your personal data is passed on or disclosed to third-party companies that may also be located outside the European Economic Area (EEA), in so-called third countries. The purpose is exclusively the fulfillment of contractual and business obligations as well as to maintain your business relationship with us. We will inform you about details in the relevant sections.
Some third countries have data protection standards that are considered appropriate by the European Commission. This means that they are comparable to the data protection standard of the EEA. A list of these countries and copies of the adequacy decisions can be found here: https://commission.europa.eu/law/law-topic/data-pr ...
In other third countries to which personal data may be transferred, there may not be a consistently high level of data protection due to the lack of legal provisions. In such cases, we make sure that data protection is adequately guaranteed. This can be achieved, for example, by binding corporate regulations, standard contractual clauses of the European Commission for the protection of personal data, certificates or recognized codes of conduct. If you would like further information on this, please contact us. Contact details, see above.
We also use the tools of Pipedrive. The service provider is the US-American company Salesforce, Inc., located at 530 Fifth Avenue, 9th Floor, Suite 802, New York, NY 10036, USA.
Pipedrive also processes your data in the USA, among other places. Pipedrive is an active participant in the EU-US Data Protection Framework, which regulates the correct and secure transfer of personal data of EU citizens to the USA. Further information can be found at https://commission.europa.eu/document/fa09cbad-dd7
In addition, Pipedrive uses so-called standard contractual clauses in accordance with Article 46 of the GDPR. These clauses are standard documents provided by the EU Commission and guarantee that your data will comply with European data protection standards even if it is transferred to third countries (such as the USA) and stored there. Due to the EU-US data protection framework and the standard contractual clauses, Pipedrive undertakes to comply with the European data protection level when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. The resolution and the corresponding standard contractual clauses can be found here, among other things: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj
Further details on the data and the standard contractual clauses that are processed by using Pipedrive can be found in our privacy policy at www.pipedrive.com/de/privacy
For the individual adaptation of our websites, we create pseudonymous usage profiles with the help of Google Analytics. This analysis tool uses targeting cookies, which can be stored on your device and retrieved by us. This enables us to identify returning visitors, count their frequency and find out how often our websites have been accessed by different users. Data processing is carried out in accordance with Article 6(1)(a) of the GDPR on the basis of your consent.
The information about your use of our website generated by the cookie is usually transmitted to a Google server in the USA and stored there. However, we have activated IP anonymization on our website, which means that your IP address will be shortened by Google within the Member States of the European Union before transmission. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Further information on the purpose and scope of data collection can be found at https://policies.google.com/privacy?hl=de&gl=de . In addition, we have concluded a contract for order processing in accordance with Article 28 of the GDPR with Google LLC (USA). Google will therefore use all information exclusively for the purpose of analyzing the use of our websites and compiling reports on website activity.
Google Fonts: We use Google Fonts to provide fonts and icons on our website. This serves to enable a technically safe, maintenance-free and efficient use of fonts and symbols by ensuring their up-to-dateness and loading times as well as taking into account licensing restrictions.
When accessing our website, the IP addresses of the users are transmitted to the font provider in order to display the fonts in the user's browser. In addition, technical data such as language settings, screen resolution, operating system and hardware used are transmitted in order to provide the fonts according to the devices and the technical environment of the user.
This data can be processed on servers of the font provider in the USA. When users visit our website, their browsers send HTTP requests to the Google Fonts Web API to retrieve the fonts. These requests contain the user's IP address, the requested URL on the Google server and the HTTP headers with information about the user's browser and operating system, as well as the referral URL.
The IP addresses are neither logged nor stored or analyzed by Google. The Google Fonts Web API logs details of the HTTP requests in order to measure the usage of the fonts and to generate aggregated usage statistics. These statistics are published on the Google Fonts website.
Google does not use the collected information to create profiles of end users or to place targeted ads. The service provider of Google Fonts is Google Ireland Limited, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. The legal basis for data processing is our legitimate interest in accordance with Article 6 paragraph 1 sentence 1 letter f of the General Data Protection Regulation (GDPR). Further information can be found in our privacy policy at https://policies.google.com/privacy and on the Google Fonts FAQ page at https://developers.google.com/fonts/faq/privacy?hl ....
Our obligation to transmit certain data
If necessary, we may be obliged to pass on personal data to third parties, in particular public authorities (in accordance with Article 6 paragraph 1 sentence 1 letter c GDPR).
No obligation to provide your personal data
For the conclusion of contracts with us, we do not require that you provide personal data beforehand. In principle, there is no legal obligation for you to provide us with your personal data. However, it may be that we cannot provide certain offers or can only provide them to a limited extent without the data. We will point this out to you accordingly.
Adjustments to our data protection information.
In the course of the ongoing further development of data protection law and against the background of other possible changes, we regularly review our data protection declaration for the need for adaptation or supplementation. Updates will be published mainly on our German website at https://inceptionagency.de / published.
For automated decision-making (including profiling)
We do not intend to use the personal data provided by you for automated decision-making procedures (including profiling) and do not use such a procedure.
Security of data
Taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the different probability of occurrence and severity of the risk to the rights and freedoms of the data subjects, we take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk. In particular, we aim to protect your data from unauthorized access, influence, modification, partial or complete loss or deletion. The security measures include in particular the encryption of our website and other encryption techniques. We are continuously and constantly improving our safety precautions.
We are at your disposal for detailed information about our security measures. The contact details can be found above.
Your rights as a data subject
You can assert your rights as a data subject at any time using the above-mentioned contact details. You have the following rights:
1) In accordance with the provisions of Article 15 of the General Data Protection Regulation (GDPR), you have the right to request information from us about the processing of your personal data. This information includes, among others: purposes of data processing, type of data processed, categories of recipients to whom your data has been or will be disclosed, expected storage period, right to correction, deletion, restriction of processing or objection, right to file a complaint, origin of the data, if not provided by you, presence of automated decision-making including profiling, as well as meaningful information on their details.According to Article 16 GDPR, you have the right, to demand the immediate correction of incorrect data or the completion of your data stored by us.
2) In accordance with Article 17 GDPR, you have the right to request the deletion of your data stored with us. However, this does not apply if the processing is necessary for: - The exercise of the right to freedom of expression and information, - The fulfillment of a legal obligation, - Reasons of public interest or- The assertion, exercise or defense of legal claims.
3) In accordance with Article 18 GDPR, you have the right to request the restriction of the processing of your data if the accuracy of the data is disputed by you or the processing is unlawful.
4) In accordance with Article 20 GDPR, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to transfer this data to another person responsible.
5) In accordance with Article 21 GDPR, you are free to object to the processing of personal data concerning you at any time; this also applies to profiling based on these provisions. The situation will be examined on the basis of your objection and a decision will be communicated to you.
6) In accordance with Art. 7 para. 3 DSGVO, you can revoke your consent to data processing at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent until the revocation. We must then stop the data processing, unless there is any other legal basis for the data processing.
7) In accordance with Article 77 of the General Data Protection Regulation (GDPR), you are free to complain to a data protection supervisory authority about the processing of your personal data. For complaints, you can contact in particular the responsible data protection supervisory authority, the Bavarian State Commissioner for Data Protection (BayLfD), address: P.O. Box 22 12 19, 80502 Munich, visitor address: Wagmüllerstraße 18, 80538 Munich, telephone: 089 212672-0, Fax: 089 212672-50, E-mail: poststelle@datenschutz-bayern.de
B. Special information for visiting websites and social media presences
Information about us and our offered products or services can be found on our website/its subpages and our social media presences (hereinafter together: "Websites"). When visiting our websites, personal data may be processed.
Personal data processing
We collect, store and process the following categories of personal data for informational use of the websites:
When visiting our websites, log data (so-called server log files) are stored temporarily and anonymously. This data includes the page from which the request was made (referrer URL), the name and URL of the requested page, the date and time of access, the web browser used including type, language and version, the IP address of the requesting computer (shortened to avoid a personal reference), the amount of data transferred, the operating system, the access status (HTTP status code) and the GMT time zone difference.
When using contact forms, we process the requested and transmitted data, such as name, address, company, e-mail address and the time of transmission.
We also offer our newsletter, which informs about current developments of our company and our products or services. When registering, certain data is collected, stored and processed, including the referrer URL, the date and time of the request, the description of the web browser used, the anonymized IP address of the requesting computer, your e-mail address, as well as the date and time of registration and confirmation.
Please note that we evaluate your user behavior when sending the newsletter. For this purpose, we use web beacons or tracking pixels in the e-mails sent, which are embedded as one-pixel image files on our website. This evaluation links the above-mentioned data as well as the web beacons with your e-mail address and an individual ID. The links in the newsletter also contain this ID. The collected data is stored exclusively in pseudonymized form, i.e. the IDs are not linked to other personal data in order to exclude a direct personal reference.
Purpose and legal basis of data processing
The processing takes place only to the necessary extent and in accordance with the applicable laws, in particular the GDPR. The above-mentioned purposes of processing represent our legitimate interest in accordance with Art. Art. 6 Para. 1 P. 1 lit. f DSGVO, the aforementioned purposes also represent our legitimate interests.
The log data is processed for statistical purposes and also serves to improve the quality, in particular the stability and security of the websites, in accordance with Article 6 paragraph 1 sentence 1 letter f GDPR.
In accordance with Article 6 paragraph 1 sentence 1 letter b or letter f GDPR, contact form data is processed to process customer inquiries.
The processing of your personal data for sending our newsletter is carried out in accordance with Article 6(1) lit. a DSGVO. The so-called double opt-in procedure is used. With this, after your consent, you confirm your consent again by confirmation e-mail. This prevents abuse. By revoking, you can terminate your consent and the receipt of the newsletter at any time. Please use the unsubscribe link in the newsletters or send us a message, e.g. by e-mail to Either use the unsubscribe link in every newsletter e-mail, send us an e-mail to (info@inceptionagency.de ) or contact us via the contact details given at the top of this data protection information or in the imprint.
Duration of data processing
The processing of your data takes place only for the period necessary to achieve the stated goals, and depends on the respective legal basis.
Commissioned third parties only store your data for as long as necessary to provide the agreed services.
Personal data and their transmission to third parties; legal bases
The categories of recipients listed below, usually processors (see Processors under A), may receive personal data:
Service providers for website operation and for processing the data stored or transmitted by the systems (e.g. hosting providers, for data centers, IT security service providers). The legal basis for the transfer is then Art. 6 para. 1 P. 1 lit. b or lit. f DSGVO, unless they are processors;
Public bodies or authorities, insofar as this is necessary to fulfil a legal obligation. The transfer takes place in accordance with Article 6 paragraph 1 sentence 1 letter c GDPR.
Persons involved in the performance of our business activities (e.g. lawyers, insurance companies, supervisory authorities). The transfer takes place in accordance with Article 6 paragraph 1 sentence 1 letter b or letter f GDPR.
To ensure an adequate level of data protection when transferring data to third countries, see the section "On the transfer of personal data to third countries" under A.
In addition, your personal data will only be passed on with your express consent. Article 6 paragraph 1 sentence 1 letter a GDPR.
Use of cookies, plugins and other services on our website:
Use of cookies on websites
Cookies are small text files that are assigned to your browser by a unique string of characters and stored in order to transmit certain information to the location that sets the cookie. In principle, cookies are not dangerous and improve the user-friendliness and effectiveness of our websites. Cookies can contain device information and thus enable recognition, but do not allow direct identification of the user. There are "session cookies" that are deleted after closing the browser, and persistent cookies that remain stored over sessions. Cookies can be divided into the following categories:
Essential cookies" are indispensable for navigation, basic functions and the security of the website. They do not collect any data for marketing purposes or about visited pages. "Performance cookies", on the other hand, collect information about the use of the website, pages visited and possible errors, whereby the collected data is anonymous and serves to improve the website. "Advertising and targeting cookies" display targeted advertising and measure its effectiveness. They are stored for a maximum of 13 months. "Sharing cookies" improve the interaction of the website with other services, such as social networks, and are also stored for a maximum of 13 months.
The use of cookies that are not technically necessary requires your express consent in accordance with Article 6 paragraph 1 sentence 1 letter a GDPR, in particular for advertising, targeting and sharing cookies. In addition, personal data processed by cookies will only be passed on to third parties if you have given your express consent in accordance with Article 6 paragraph 1 sentence 1 letter a GDPR.
Social Media Plugins
We do not use social media plugins on our websites. If you find symbols of social media providers on our websites (e.g. [symbols of social media providers]), they serve only as a link to the respective provider pages.
C. Applicants
As part of the application process, we only collect the personal data that you provide to us with your application. Typically, these include:
- Your full name, date of birth
- Contact details such as telephone number and e-mail address
- Application documents such as CV, cover letter and certificates
- If necessary, information about your state of health or a severe disability
- Possibly an application photo
- Account information for possible refunds of travel expenses
- Other information that you provide during the interview.
The data provided by you will be used to check your application and suitability for the advertised position as well as to process the application procedure. The legal basis for this is § 26 of the Federal Data Protection Act (BDSG).
If special categories of personal data are included in your application documents in accordance with Article 9(1) of the GDPR, we process them as part of the application procedure to exercise rights or obligations under labor law, social security law and social protection. The legal basis for this is Article 6 paragraph 1 sentence 1 letter c of the GDPR in conjunction with Article 9 paragraph 2 letter b of the GDPR and § 26 paragraph 3 of the Federal Data Protection Act (BDSG).
Your data will be deleted at the latest 6 months after completion of the application process for the position for which you have applied, unless you have been hired. If we conclude an employment contract with you, your application data will be transferred to your personnel file.
Current status of the entire data protection information: 12.04.2024
General Terms and Conditions, imprint and data protection information legally created/checked by the Kanzlei-Kick.de
When we make decisions about the methods and purposes of data processing, one of our obligations is to inform you comprehensively about the nature, scope, purpose, duration, your rights and the legal basis of data processing (Article 13 GDPR). Through this declaration, hereinafter also referred to as "Data protection information", we would like to inform you about how we handle your personal data.
In the following, we will call you, as the data subject, in particular "customer", "user", "you", "you" or "data subject", depending on the context.
Outline:
General information, in particular contact details
Website & Social Media
For applicants
A. General information
The information presented here, under "A. General Information", applies at all times. Below you will find information for special situations and circumstances. If an article has no legal designation, it is an article of the GDPR.
Items
The general definitions of the GDPR apply (Art. 4 GDPR), in particular these terms apply:
According to Article 4 No. 2 GDPR, "processing" includes any handling of personal data, regardless of automated procedures. This includes the collection, recording, organisation, storage, adaptation, modification, reading, querying, use, disclosure by transmission, dissemination, provision, comparison, linking, restriction, deletion or destruction of personal data as well as any change to the original purpose or purpose of the data processing.
"Personal data" according to Article 4 No. 1 GDPR is all information that relates to an identified or identifiable natural person, the "data subject". A person is considered identifiable if he can be identified directly or indirectly by characteristics such as name, identification number, online identifier, location data or physical, physiological, genetic, psychological, economic, cultural or social characteristics. This identification can also be done by linking information or additional knowledge. It is irrelevant in what form the information is available, including photos, videos or sound recordings.
A "controller" in accordance with Article 4 No. 7 GDPR is a natural or legal person, authority, institution or other body that alone or jointly with others decides on the purposes and means of processing personal data.
A "processor" in accordance with Article 4 No. 8 GDPR is a natural or legal person, authority, institution or other body that processes personal data on behalf of the controller, in particular in accordance with his instructions.
A "third party" in accordance with Article 4 No. 10 GDPR means any natural or legal person, authority, institution or other body other than the data subject, the controller, the processor and persons who are authorized to process personal data under the direct responsibility of the controller or processor. This also includes other companies within a group.
The "consent" pursuant to Article 4 No. 11 GDPR is a voluntary, informed and unambiguous declaration of will or action by the data subject. With this, she agrees that her personal data will be processed for a specific purpose.
Name and contact details of the person responsible
We, the company, are the responsible body for the processing of your personal data in accordance with Article 4 number 7 of the General Data Protection Regulation (GDPR:
inceptionagency (owner Ferdinand Leopold Gruber)
Nikolaus-Geiger-Straße 26, 89415 Lauingen, Germany
Phone: +49 9072 6044 998,
E-Mail: info@inceptionagency.de
For further information about our company and information, please refer to the imprint information on our website https://inceptionagency.de/IMPRESSUM .
Legal basis of data processing
In accordance with the legal provisions, in principle, any processing of personal data is prohibited and is only permitted under certain justification grounds:
Article 6 paragraph 1 lit a: The data subject has given his "consent" too clearly, voluntarily, informed, for one or more purposes (consent)
Article 6(1)(b): the processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures that are carried out at the request of the data subject;
Article 6(1)(c): the processing is necessary to fulfil a legal obligation to which the controller is subject;
Article 6(1)(d): the processing is necessary to protect the vital interests of the data subject or another natural person;
Article 6(1)(e): the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
Article 6(1)(f) Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.
In the following, we provide the respective legal basis for the processing operations carried out by us. It is possible that processing is based on several legal bases.
Duration of storage and data deletion
Furthermore, for the processing operations carried out by us, we specify in each case how long your data will be stored by us and at what time it will be deleted or blocked. If no specific storage period is specified, your personal data will be deleted or blocked as soon as the purpose or legal basis for storage no longer applies. In principle, your data will only be stored on our servers in Germany, unless there is a possible transfer in accordance with the sections on contract processors and transfer to third countries.
Further storage and processing is possible in the event of a possible legal dispute with you or in the context of another legal procedure or if the storage is required by law (e.g. tax retention obligations), until the expiry of these procedures, legal disputes or the statutory retention obligations. After that, the data will be deleted or blocked. This does not apply if storage is required by law.
Contract processors
We use service providers as part of our business activities. This includes domestic and foreign service providers (e.g. in IT, logistics, forwarding companies, communication, sales, marketing and consultants). They will only act according to our instructions and have been contractually obliged to comply with the data protection regulations in accordance with Art. 28 GDPR.
For the transfer of personal data to third countries
In the course of our activities, it may happen that your personal data is passed on or disclosed to third-party companies that may also be located outside the European Economic Area (EEA), in so-called third countries. The purpose is exclusively the fulfillment of contractual and business obligations as well as to maintain your business relationship with us. We will inform you about details in the relevant sections.
Some third countries have data protection standards that are considered appropriate by the European Commission. This means that they are comparable to the data protection standard of the EEA. A list of these countries and copies of the adequacy decisions can be found here: https://commission.europa.eu/law/law-topic/data-pr ...
In other third countries to which personal data may be transferred, there may not be a consistently high level of data protection due to the lack of legal provisions. In such cases, we make sure that data protection is adequately guaranteed. This can be achieved, for example, by binding corporate regulations, standard contractual clauses of the European Commission for the protection of personal data, certificates or recognized codes of conduct. If you would like further information on this, please contact us. Contact details, see above.
We also use the tools of Pipedrive. The service provider is the US-American company Salesforce, Inc., located at 530 Fifth Avenue, 9th Floor, Suite 802, New York, NY 10036, USA.
Pipedrive also processes your data in the USA, among other places. Pipedrive is an active participant in the EU-US Data Protection Framework, which regulates the correct and secure transfer of personal data of EU citizens to the USA. Further information can be found at https://commission.europa.eu/document/fa09cbad-dd7
In addition, Pipedrive uses so-called standard contractual clauses in accordance with Article 46 of the GDPR. These clauses are standard documents provided by the EU Commission and guarantee that your data will comply with European data protection standards even if it is transferred to third countries (such as the USA) and stored there. Due to the EU-US data protection framework and the standard contractual clauses, Pipedrive undertakes to comply with the European data protection level when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. The resolution and the corresponding standard contractual clauses can be found here, among other things: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj
Further details on the data and the standard contractual clauses that are processed by using Pipedrive can be found in our privacy policy at www.pipedrive.com/de/privacy
For the individual adaptation of our websites, we create pseudonymous usage profiles with the help of Google Analytics. This analysis tool uses targeting cookies, which can be stored on your device and retrieved by us. This enables us to identify returning visitors, count their frequency and find out how often our websites have been accessed by different users. Data processing is carried out in accordance with Article 6(1)(a) of the GDPR on the basis of your consent.
The information about your use of our website generated by the cookie is usually transmitted to a Google server in the USA and stored there. However, we have activated IP anonymization on our website, which means that your IP address will be shortened by Google within the Member States of the European Union before transmission. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Further information on the purpose and scope of data collection can be found at https://policies.google.com/privacy?hl=de&gl=de . In addition, we have concluded a contract for order processing in accordance with Article 28 of the GDPR with Google LLC (USA). Google will therefore use all information exclusively for the purpose of analyzing the use of our websites and compiling reports on website activity.
Google Fonts: We use Google Fonts to provide fonts and icons on our website. This serves to enable a technically safe, maintenance-free and efficient use of fonts and symbols by ensuring their up-to-dateness and loading times as well as taking into account licensing restrictions.
When accessing our website, the IP addresses of the users are transmitted to the font provider in order to display the fonts in the user's browser. In addition, technical data such as language settings, screen resolution, operating system and hardware used are transmitted in order to provide the fonts according to the devices and the technical environment of the user.
This data can be processed on servers of the font provider in the USA. When users visit our website, their browsers send HTTP requests to the Google Fonts Web API to retrieve the fonts. These requests contain the user's IP address, the requested URL on the Google server and the HTTP headers with information about the user's browser and operating system, as well as the referral URL.
The IP addresses are neither logged nor stored or analyzed by Google. The Google Fonts Web API logs details of the HTTP requests in order to measure the usage of the fonts and to generate aggregated usage statistics. These statistics are published on the Google Fonts website.
Google does not use the collected information to create profiles of end users or to place targeted ads. The service provider of Google Fonts is Google Ireland Limited, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. The legal basis for data processing is our legitimate interest in accordance with Article 6 paragraph 1 sentence 1 letter f of the General Data Protection Regulation (GDPR). Further information can be found in our privacy policy at https://policies.google.com/privacy and on the Google Fonts FAQ page at https://developers.google.com/fonts/faq/privacy?hl ....
Our obligation to transmit certain data
If necessary, we may be obliged to pass on personal data to third parties, in particular public authorities (in accordance with Article 6 paragraph 1 sentence 1 letter c GDPR).
No obligation to provide your personal data
For the conclusion of contracts with us, we do not require that you provide personal data beforehand. In principle, there is no legal obligation for you to provide us with your personal data. However, it may be that we cannot provide certain offers or can only provide them to a limited extent without the data. We will point this out to you accordingly.
Adjustments to our data protection information.
In the course of the ongoing further development of data protection law and against the background of other possible changes, we regularly review our data protection declaration for the need for adaptation or supplementation. Updates will be published mainly on our German website at https://inceptionagency.de / published.
For automated decision-making (including profiling)
We do not intend to use the personal data provided by you for automated decision-making procedures (including profiling) and do not use such a procedure.
Security of data
Taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the different probability of occurrence and severity of the risk to the rights and freedoms of the data subjects, we take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk. In particular, we aim to protect your data from unauthorized access, influence, modification, partial or complete loss or deletion. The security measures include in particular the encryption of our website and other encryption techniques. We are continuously and constantly improving our safety precautions.
We are at your disposal for detailed information about our security measures. The contact details can be found above.
Your rights as a data subject
You can assert your rights as a data subject at any time using the above-mentioned contact details. You have the following rights:
1) In accordance with the provisions of Article 15 of the General Data Protection Regulation (GDPR), you have the right to request information from us about the processing of your personal data. This information includes, among others: purposes of data processing, type of data processed, categories of recipients to whom your data has been or will be disclosed, expected storage period, right to correction, deletion, restriction of processing or objection, right to file a complaint, origin of the data, if not provided by you, presence of automated decision-making including profiling, as well as meaningful information on their details.According to Article 16 GDPR, you have the right, to demand the immediate correction of incorrect data or the completion of your data stored by us.
2) In accordance with Article 17 GDPR, you have the right to request the deletion of your data stored with us. However, this does not apply if the processing is necessary for: - The exercise of the right to freedom of expression and information, - The fulfillment of a legal obligation, - Reasons of public interest or- The assertion, exercise or defense of legal claims.
3) In accordance with Article 18 GDPR, you have the right to request the restriction of the processing of your data if the accuracy of the data is disputed by you or the processing is unlawful.
4) In accordance with Article 20 GDPR, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to transfer this data to another person responsible.
5) In accordance with Article 21 GDPR, you are free to object to the processing of personal data concerning you at any time; this also applies to profiling based on these provisions. The situation will be examined on the basis of your objection and a decision will be communicated to you.
6) In accordance with Art. 7 para. 3 DSGVO, you can revoke your consent to data processing at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent until the revocation. We must then stop the data processing, unless there is any other legal basis for the data processing.
7) In accordance with Article 77 of the General Data Protection Regulation (GDPR), you are free to complain to a data protection supervisory authority about the processing of your personal data. For complaints, you can contact in particular the responsible data protection supervisory authority, the Bavarian State Commissioner for Data Protection (BayLfD), address: P.O. Box 22 12 19, 80502 Munich, visitor address: Wagmüllerstraße 18, 80538 Munich, telephone: 089 212672-0, Fax: 089 212672-50, E-mail: poststelle@datenschutz-bayern.de
B. Special information for visiting websites and social media presences
Information about us and our offered products or services can be found on our website/its subpages and our social media presences (hereinafter together: "Websites"). When visiting our websites, personal data may be processed.
Personal data processing
We collect, store and process the following categories of personal data for informational use of the websites:
When visiting our websites, log data (so-called server log files) are stored temporarily and anonymously. This data includes the page from which the request was made (referrer URL), the name and URL of the requested page, the date and time of access, the web browser used including type, language and version, the IP address of the requesting computer (shortened to avoid a personal reference), the amount of data transferred, the operating system, the access status (HTTP status code) and the GMT time zone difference.
When using contact forms, we process the requested and transmitted data, such as name, address, company, e-mail address and the time of transmission.
We also offer our newsletter, which informs about current developments of our company and our products or services. When registering, certain data is collected, stored and processed, including the referrer URL, the date and time of the request, the description of the web browser used, the anonymized IP address of the requesting computer, your e-mail address, as well as the date and time of registration and confirmation.
Please note that we evaluate your user behavior when sending the newsletter. For this purpose, we use web beacons or tracking pixels in the e-mails sent, which are embedded as one-pixel image files on our website. This evaluation links the above-mentioned data as well as the web beacons with your e-mail address and an individual ID. The links in the newsletter also contain this ID. The collected data is stored exclusively in pseudonymized form, i.e. the IDs are not linked to other personal data in order to exclude a direct personal reference.
Purpose and legal basis of data processing
The processing takes place only to the necessary extent and in accordance with the applicable laws, in particular the GDPR. The above-mentioned purposes of processing represent our legitimate interest in accordance with Art. Art. 6 Para. 1 P. 1 lit. f DSGVO, the aforementioned purposes also represent our legitimate interests.
The log data is processed for statistical purposes and also serves to improve the quality, in particular the stability and security of the websites, in accordance with Article 6 paragraph 1 sentence 1 letter f GDPR.
In accordance with Article 6 paragraph 1 sentence 1 letter b or letter f GDPR, contact form data is processed to process customer inquiries.
The processing of your personal data for sending our newsletter is carried out in accordance with Article 6(1) lit. a DSGVO. The so-called double opt-in procedure is used. With this, after your consent, you confirm your consent again by confirmation e-mail. This prevents abuse. By revoking, you can terminate your consent and the receipt of the newsletter at any time. Please use the unsubscribe link in the newsletters or send us a message, e.g. by e-mail to Either use the unsubscribe link in every newsletter e-mail, send us an e-mail to (info@inceptionagency.de ) or contact us via the contact details given at the top of this data protection information or in the imprint.
Duration of data processing
The processing of your data takes place only for the period necessary to achieve the stated goals, and depends on the respective legal basis.
Commissioned third parties only store your data for as long as necessary to provide the agreed services.
Personal data and their transmission to third parties; legal bases
The categories of recipients listed below, usually processors (see Processors under A), may receive personal data:
Service providers for website operation and for processing the data stored or transmitted by the systems (e.g. hosting providers, for data centers, IT security service providers). The legal basis for the transfer is then Art. 6 para. 1 P. 1 lit. b or lit. f DSGVO, unless they are processors;
Public bodies or authorities, insofar as this is necessary to fulfil a legal obligation. The transfer takes place in accordance with Article 6 paragraph 1 sentence 1 letter c GDPR.
Persons involved in the performance of our business activities (e.g. lawyers, insurance companies, supervisory authorities). The transfer takes place in accordance with Article 6 paragraph 1 sentence 1 letter b or letter f GDPR.
To ensure an adequate level of data protection when transferring data to third countries, see the section "On the transfer of personal data to third countries" under A.
In addition, your personal data will only be passed on with your express consent. Article 6 paragraph 1 sentence 1 letter a GDPR.
Use of cookies, plugins and other services on our website:
Use of cookies on websites
Cookies are small text files that are assigned to your browser by a unique string of characters and stored in order to transmit certain information to the location that sets the cookie. In principle, cookies are not dangerous and improve the user-friendliness and effectiveness of our websites. Cookies can contain device information and thus enable recognition, but do not allow direct identification of the user. There are "session cookies" that are deleted after closing the browser, and persistent cookies that remain stored over sessions. Cookies can be divided into the following categories:
Essential cookies" are indispensable for navigation, basic functions and the security of the website. They do not collect any data for marketing purposes or about visited pages. "Performance cookies", on the other hand, collect information about the use of the website, pages visited and possible errors, whereby the collected data is anonymous and serves to improve the website. "Advertising and targeting cookies" display targeted advertising and measure its effectiveness. They are stored for a maximum of 13 months. "Sharing cookies" improve the interaction of the website with other services, such as social networks, and are also stored for a maximum of 13 months.
The use of cookies that are not technically necessary requires your express consent in accordance with Article 6 paragraph 1 sentence 1 letter a GDPR, in particular for advertising, targeting and sharing cookies. In addition, personal data processed by cookies will only be passed on to third parties if you have given your express consent in accordance with Article 6 paragraph 1 sentence 1 letter a GDPR.
Social Media Plugins
We do not use social media plugins on our websites. If you find symbols of social media providers on our websites (e.g. [symbols of social media providers]), they serve only as a link to the respective provider pages.
C. Applicants
As part of the application process, we only collect the personal data that you provide to us with your application. Typically, these include:
- Your full name, date of birth
- Contact details such as telephone number and e-mail address
- Application documents such as CV, cover letter and certificates
- If necessary, information about your state of health or a severe disability
- Possibly an application photo
- Account information for possible refunds of travel expenses
- Other information that you provide during the interview.
The data provided by you will be used to check your application and suitability for the advertised position as well as to process the application procedure. The legal basis for this is § 26 of the Federal Data Protection Act (BDSG).
If special categories of personal data are included in your application documents in accordance with Article 9(1) of the GDPR, we process them as part of the application procedure to exercise rights or obligations under labor law, social security law and social protection. The legal basis for this is Article 6 paragraph 1 sentence 1 letter c of the GDPR in conjunction with Article 9 paragraph 2 letter b of the GDPR and § 26 paragraph 3 of the Federal Data Protection Act (BDSG).
Your data will be deleted at the latest 6 months after completion of the application process for the position for which you have applied, unless you have been hired. If we conclude an employment contract with you, your application data will be transferred to your personnel file.
Current status of the entire data protection information: 12.04.2024
General Terms and Conditions, imprint and data protection information legally created/checked by the Kanzlei-Kick.de
CONTACTS
Monday - Friday 08:00 - 17:00 (GMT+1)
Nikolaus-Geiger-Strasse 26, Lauingen 89415, Germany
Inception Agency
All content used on this website is created by us.
