Data protection

anybill attaches great importance to the security of your data and therefore we do not pass on any of your personal data to third parties.

Introduction

The following information is intended to give you an overview of the processing of your personal data on our website https://anybill.de (hereinafter referred to as "website"). We also want to inform you about your rights under the data protection laws. The processing of your personal data by us is always in accordance with the General Data Protection Regulation (hereinafter referred to as "GDPR") and all applicable country-specific data protection regulations.

1. Controller

The controller as defined by the GDPR is:

techreach GmbH

Franz-Mayer-Strasse 1

93053 Regensburg

Phone: +49 941 7508 9008

E-mail: datenschutz@anybill.de

https://anybill.de/impressum

2. Data Protection Officer

You can reach our data protection officer as follows:

Niklas Hanitsch

c/o secjur GmbH

Steinhöft 9

20459 Hamburg

Phone: +49 40 228 599 520

E-mail: dsb@secjur.com

You can contact our data protection officer directly at any time with all questions and suggestions regarding data protection and the exercise of your rights.

3. Provision of the Website

3.1 General information

When you visit our website, data is automatically processed that your browser transmits to our server. This general data and information is stored in the server's log files (in so-called "server log files"). The following can be collected:

  • Browser type and version
  • Operating system used
  • Referrer URL (previously visited website)
  • Host name of the accessing computer
  • Date and time of the server request
  • IP address

3.2 Purpose of the processing

When using this general data and information, we do not draw any conclusions about your person. The purposes pursued by us include in particular:

  • ensuring the smooth connection of the website,
  • ensuring a comfortable use of our website,
  • The investigation of acts of abuse or fraud,
  • Problem analyses in the network,
  • the evaluation of system security and stability, and
  • other administrative purposes.

3.3 Legal basis

The legal basis for data processing is our legitimate interest within the meaning of Art. 6 (1) (f) GDPR. We have an overriding legitimate interest in being able to offer our service in a technically flawless manner.

3.4 Storage duration

The log files are stored for security reasons (e.g. for the clarification of abuse or fraud) for a maximum of 7 days and then deleted. Data whose further retention is required for evidentiary purposes will be retained until the matter has been finally clarified.

4. Cookies

4.1 General information

We use cookies on our website. These are text files that your browser automatically creates and that are stored on your terminal device when you visit our site. In the cookie, information is stored that arises in connection with the specific end device used.

4.2 Technically necessary cookies

We use technically necessary cookies. These are cookies that are technically necessary to provide all the functions of our website.

4.2.1 Purpose of the processing

We use technically necessary cookies for the following purposes:

  • Provide services,
  • to enable the use of our website functions,
  • as well as to offer different languages.

4.2.2 Legal basis

The legal basis for data processing is our legitimate interest within the meaning of Art. 6 (1) (f) GDPR. We have an overriding legitimate interest in being able to offer our service in a technically flawless manner.

4.2.3 Storage duration

We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. Technically necessary cookies are only stored for the respective session. When you leave our website and close your browser, the cookies are deleted.

4.3 Analysis and marketing cookies

We also use analysis and marketing cookies. These are cookies that are not technically necessary. We use them to understand your behavior on our website and to improve our offer.

4.3.1 Purpose of the processing

We use technically necessary cookies for the following purposes:

  • Reach measurement and tracking,
  • Evaluation of visitor behavior,
  • Optimization of our offer,
  • and targeted advertising.

4.3.2 Legal basis

The legal basis for the data processing is your consent according to Art. 6 (1) (a) GDPR. The cookies are only set after you have given your consent via our Cookie banner.

4.3.3 Storage duration

We delete your personal data as soon as it is no longer required to achieve the purpose for which it was collected. The storage duration of the personal data depends on the providers used. Information on this can be found in the section "Use of third-party providers".

5. Contact options

5.1 General information

Through our website you have the opportunity to contact us by e-mail or via our form.

In the course of contacting you and responding to your inquiry, we process the following personal data from you:

  • Name
  • E-mail address
  • Date and time of the request
  • IP address
  • Other personal data that you provide to us when contacting us.

5.2 Purpose of the processing

We process your data to respond to your enquiry and other matters arising from it.

5.3 Legal basis

If your request is based on pre-contractual measures or an existing contract with us, the legal basis is the fulfillment of the contract and the implementation of pre-contractual measures according to Art. 6 (1) (b) GDPR.

If your request is made independently of contractual or pre-contractual measures, and not via our contact form, our legitimate interests pursuant to Art. 6 (1) (f) GDPR constitute the legal basis. The legitimate interest corresponds to the purposes mentioned above.

5.4 Storage duration

We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. In the context of contact inquiries, this is generally the case when the circumstances indicate that the specific matter has been conclusively processed.

6. Use of third-party providers

We use the following third-party services on our website:

6.1 Marketing

6.1.1 Google Analytics

Service: Google Analytics

Provider: Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland

Purpose: Creation of evaluations and reports of the website activities of the users, remarketing

Legal Basis: Your consent according to Art. 6 (1) (a) GDPR

Storage duration: Personal data of users will be deleted or anonymized after 14 months, unless there is a legal obligation to retain it.

6.1.2 Google Ads

Service: Google Ads

Provider: Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland

Purpose: Optimization of our advertising on Google

Legal Basis: Your consent according to Art. 6 (1) (a) GDPR

Storage duration: We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected.

6.1.3 Google Tag Manager

Service: Google Tag Manager

Provider: Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland

Purpose: Management and integration of tags on our website

Legal Basis: Your consent according to Art. 6 (1) (a) GDPR

Storage duration: We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected.

6.1.4 LinkedIn Insight Tag

Service: LinkedIn Insight Tag

Provider: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland

Purpose: Collection and analysis of LinkednIn members on our website

Legal Basis: Your consent according to Art. 6 (1) (a) GDPR

Storage duration: We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected.

6.1.5 Youtube video

Service: Youtube video

Provider: Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland

Purpose: Integration of a Youtube video on our website

Legal Basis: Your consent according to Art. 6 (1) (a) GDPR

Storage duration: We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected.

6.2 Website display and fonts

Service: Google Fonts

Provider: Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland

Purpose: Provision of different fonts for our online offer

Legal Basis: Legitimate interests according to Art. 6 (1) (f) GDPR. The legitimate interest corresponds to our purpose of processing.

Storage duration: We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected.

6.3 Cloud services and sending e-mails

6.3.1 Microsoft Azure

Service: Microsoft Azure

Provider: Microsoft Ireland Operations Limited,70 Sir John Rogerson's Quay, Dublin 2, Ireland

Purpose: Provision of the technical infrastructure to host the website

Legal Basis: Legitimate interests according to Art. 6 (1) (f) GDPR. The legitimate interest corresponds to our purpose of processing.

Storage duration: We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected.

6.3.2 JSDelivr

Service: JSDelivr

Provider: Prospect One, Krolewska 65a, Krakow, Malopolskie 30-081

Purpose: Fast and optimal delivery of our content to website visitors

Legal Basis: Legitimate interests according to Art. 6 (1) (f) GDPR. The legitimate interest corresponds to our purpose of processing.

Storage duration: We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected.

6.3.3 Mailjet

Service: Mailjet

Provider: Mailjet GmbH

Alt-Moabit 2, 10557 Berlin; Mailgun Technologies inc, 112 E Pecan St #1135, San Antonio, TX 78205, USA

Purpose: Sending e-mails

Legal Basis: Your consent according to Art. 6 (1) (a) GDPR

Storage duration: We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected.

6.3.1 Microsoft Bookings

Service: Microsoft Bookings

Provider: Microsoft Ireland Operations Limited,70 Sir John Rogerson's Quay, Dublin 2, Ireland

Purpose: Planning and organization of meetings and discussions

Legal Basis: Your consent according to Art. 6 (1) (a) GDPR

Storage duration: We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected.

6.4 Transfer of personal data to third countries

If we transfer personal data to a third country for processing, we ensure compliance with Art. 44-49 GDPR, i.e., before any transfer of personal data to third parties in a country outside the European Union ("EU") or the European Economic Area ("EEA"), we check whether an adequate level of protection is ensured.

An adequate level of protection can be ensured, among other things, by the existence of an adequacy decision by the EU Commission, by the fact that we have concluded standard contractual clauses with the recipient and have taken other additional measures, or by the fact that the third-country transfer is permitted under other safeguards regulated in Art. 46-49 GDPR is permissible. Where the data transfer is based on Art 46, 47 or 49 (1) GDPR, you may obtain from us a copy of the safeguards for the existence of an adequate level of data protection in relation to the data transfer or an indication of the availability of a copy of the safeguards. Copies of these guarantees can be requested from us.

The following providers may transfer data to third countries:

Service: Google

Third country: USA

Suitable guarantee according to Art. 44-49 GDPR:
Standard contractual clauses
Standard contractual clauses Google Ads
In Google Analytics 4, the anonymization of IP addresses is activated by default.

Service: LinkedIn

Third country: USA

Suitable guarantee according to Art. 44-49 GDPR:
Standard contractual clauses

Service: Mailjet

Third country: USA

Suitable guarantee according to Art. 44-49 GDPR:
Standard contractual clause

Service: Mircosoft

Third country: USA

Suitable guarantee according to Art. 44-49 GDPR:
Standard data protection clauses

7. Social networks

7.1 General information

We maintain presences in social networks in order to be able to communicate with you and inform you about our services.

If you visit one of our pages maintained there, we may be jointly responsible with the provider of the respective platform within the meaning of Art. 26 GDPR regarding the processing operations triggered thereby which concern personal data.

Within the framework of the processing operations, the following data, among others, are processed:

  • Inventory data (e.g. first and last name, address, age, gender)
  • Content data (e.g. texts, photographs, videos)
  • Usage data (e.g. visit to websites, interests)
  • Metadata (e.g. device information, IP address).

This usage data is often processed in social and professional networks for advertising purposes or for the analysis of user behavior by the providers, without us being able to influence this. In addition, the providers often create usage profiles, on the basis of which user-based advertising can subsequently be placed inside and outside the network. Cookies are often used for this purpose or the usage behavior is directly assigned to your own member profile of the network (if you are logged in here). In addition, we use the user data to communicate with you via the respective network and to provide you with information. If you interact with our company profile in the respective network (e.g. visit our company profile, comment or "like" something), it is possible that your user profile including the personal data will be made public.

Information on the processing of your data in social and professional networks and the possibility to make use of your right of objection or revocation (opt-out), we have listed below.

7.2 Purpose of processing

We process your personal data for the following purposes:

  • public relations and marketing purposes, i.e. we provide information about our services and offers, among other things, and communicate with you
  • Recruitment

7.3 Legal basis

The legal basis for the processing of personal data is our overriding legitimate interest pursuant to Art. 6 (1) (f) GDPR. The overriding legitimate interest corresponds to the above-mentioned purposes.

7.4 Storage duration

In principle, your data will be stored by the respective provider of the network and not directly by us. We store your activities and personal data published via our presence until the purpose of the processing has ceased to apply or your consent has been withdrawn, provided that there are no retention obligations to the contrary.

7.5 Recipients of personal data

We use the following service providers:

7.5.1 LinkedIn

Social network: LinkedIn

Provider: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland

Third country: USA

Suitable guarantees: Standard contractual clauses

More information: Privacy policy, Opt-out and advertising settings, Joint responsibility contract

7.5.2 Twitter

Social network: Twitter

Provider: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland

Third country: USA

Suitable guarantees: Standard contractual clauses

More information: Privacy policy, Objection settings

7.5.3 Facebook

Social network: Facebook

Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Third country: USA

Suitable guarantees: Standard contractual clauses

More information: Privacy policy, Objection settings, Joint responsibility contract

7.5.4 Instagram

Social network: Instagram

Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Third country: USA

Suitable guarantees: Standard contractual clauses

More information: Privacy policy, Objection settings

7.5.5 Xing

Social network: Xing

Provider: New Work SE, Am Strandkai 1, 20457 Hamburg, Germany

Third country:

Suitable guarantees: Standard contractual clauses

More information: Privacy policy, Objection settings

7.5.6 Youtube

Social network: Youtube

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland 

Third country: USA

Suitable guarantees: Standard data protection clauses

More information: Privacy policy, Opposition settings

7.5.7 Wakalet

Social network: Wakalet

Provider: Wakelet Limited, 76 Quay Street, Manchester, M3 4PR, United Kingdom

Third country: UK

Suitable guarantees: Adequacy resolution

More information: Privacy policy, Objection settings

8. Your rights

8.1 Right to confirmation

You have the right to request confirmation from us as to whether personal data relating to you is being processed.

8.2 Information (Art. 15 GDPR)

You have the right to receive information from us at any time and free of charge about the personal data stored about you as well as a copy of this data in accordance with the statutory provisions.

8.3 Rectification (Art. 16 GDPR)

You have the right to request the rectification of inaccurate personal data concerning you. You also have the right to request that incomplete personal data be completed, considering the purposes of the processing.

8.4 Erasure (Art. 17 GDPR)

You have the right to demand that we erase the personal data concerning you without delay if one of the reasons provided for by law applies and insofar as the processing or storage is not necessary.

8.5 Restriction of processing (Art. 18 GDPR)

You have the right to demand that we restrict processing if one of the legal requirements is met.

8.6 Data portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. Furthermore, you have the right to transfer this data to another controller without hindrance from us, to whom the personal data has been provided, provided that the processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and the processing is carried out with the aid of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

In addition, when exercising your right to data portability pursuant to Article 20 (1) GDPR, you have the right to have the personal data transferred directly from one controller to another controller, insofar as this is technically feasible and provided that this does not adversely affect the rights and freedoms of other individuals.

8.7 Objection (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of data processing in the public interest pursuant to Article 6 (1) (e) GDPR or on the basis of our legitimate interest pursuant to Article 6 (1) (f) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of legal claims.

In individual cases, we process personal data in order to carry out direct advertising. You may object to the processing of personal data for the purpose of such advertising at any time. If you object to the processing for direct marketing purposes, we will no longer process the personal data for these purposes.

8.8 Withdraw of consent under data protection law

You have the right to withdraw your consent to the processing of personal data at any time with effect for the future.

8.9 Complaint to a supervisory authority

You have the right to complain about our processing of personal data to a supervisory authority responsible for data protection.

9. Changes of the privacy policy

This privacy policy is currently valid and has the following status: March 2023.

If we continue to develop our website and our offers or if legal or official requirements change, it may be necessary to amend this privacy policy. You can access the current data protection information at any time here.

Data protection