Introduction
The following information is intended to give you an overview of the processing of your personal data on our website https://anybill.de (hereinafter referred to as "website"). We also want to inform you about your rights under the data protection laws. The processing of your personal data by us is always in accordance with the General Data Protection Regulation (hereinafter referred to as "GDPR") and all applicable country-specific data protection regulations.
1. Controller
The controller as defined by the GDPR is:
techreach GmbH
Franz-Mayer-Strasse 1
93053 Regensburg
Phone: +49 941 7508 9008
E-mail: datenschutz@anybill.de
https://anybill.de/impressum
2. Data Protection Officer
You can reach our data protection officer as follows:
Niklas Hanitsch
c/o secjur GmbH
Steinhöft 9
20459 Hamburg
Phone: +49 40 228 599 520
E-mail: dsb@secjur.com
You can contact our data protection officer directly at any time with all questions and suggestions regarding data protection and the exercise of your rights.
3. Provision of the Website
3.1 General information
When you visit our website, data is automatically processed that your browser transmits to our server. This general data and information is stored in the server's log files (in so-called "server log files"). The following can be collected:
3.2 Purpose of the processing
When using this general data and information, we do not draw any conclusions about your person. The purposes pursued by us include in particular:
3.3 Legal basis
The legal basis for data processing is our legitimate interest within the meaning of Art. 6 (1) (f) GDPR. We have an overriding legitimate interest in being able to offer our service in a technically flawless manner.
3.4 Storage duration
The log files are stored for security reasons (e.g. for the clarification of abuse or fraud) for a maximum of 7 days and then deleted. Data whose further retention is required for evidentiary purposes will be retained until the matter has been finally clarified.
4. Cookies
4.1 General information
We use cookies on our website. These are text files that your browser automatically creates and that are stored on your terminal device when you visit our site. In the cookie, information is stored that arises in connection with the specific end device used.
4.2 Technically necessary cookies
We use technically necessary cookies. These are cookies that are technically necessary to provide all the functions of our website.
4.2.1 Purpose of the processing
We use technically necessary cookies for the following purposes:
4.2.2 Legal basis
The legal basis for data processing is our legitimate interest within the meaning of Art. 6 (1) (f) GDPR. We have an overriding legitimate interest in being able to offer our service in a technically flawless manner.
4.2.3 Storage duration
We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. Technically necessary cookies are only stored for the respective session. When you leave our website and close your browser, the cookies are deleted.
4.3 Analysis and marketing cookies
We also use analysis and marketing cookies. These are cookies that are not technically necessary. We use them to understand your behavior on our website and to improve our offer.
4.3.1 Purpose of the processing
We use technically necessary cookies for the following purposes:
4.3.2 Legal basis
The legal basis for the data processing is your consent according to Art. 6 (1) (a) GDPR. The cookies are only set after you have given your consent via our Cookie banner.
4.3.3 Storage duration
We delete your personal data as soon as it is no longer required to achieve the purpose for which it was collected. The storage duration of the personal data depends on the providers used. Information on this can be found in the section "Use of third-party providers".
5. Contact options
5.1 General information
Through our website you have the opportunity to contact us by e-mail or via our form.
In the course of contacting you and responding to your inquiry, we process the following personal data from you:
5.2 Purpose of the processing
We process your data to respond to your enquiry and other matters arising from it.
5.3 Legal basis
If your request is based on pre-contractual measures or an existing contract with us, the legal basis is the fulfillment of the contract and the implementation of pre-contractual measures according to Art. 6 (1) (b) GDPR.
If your request is made independently of contractual or pre-contractual measures, and not via our contact form, our legitimate interests pursuant to Art. 6 (1) (f) GDPR constitute the legal basis. The legitimate interest corresponds to the purposes mentioned above.
5.4 Storage duration
We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. In the context of contact inquiries, this is generally the case when the circumstances indicate that the specific matter has been conclusively processed.
6. Use of third-party providers
We use the following third-party services on our website:
6.1 Marketing
6.1.1 Google Analytics
Service: Google Analytics
Provider: Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland
Purpose: Creation of evaluations and reports of the website activities of the users, remarketing
Legal Basis: Your consent according to Art. 6 (1) (a) GDPR
Storage duration: Personal data of users will be deleted or anonymized after 14 months, unless there is a legal obligation to retain it.
6.1.2 Google Ads
Service: Google Ads
Provider: Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland
Purpose: Optimization of our advertising on Google
Legal Basis: Your consent according to Art. 6 (1) (a) GDPR
Storage duration: We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected.
6.1.3 Google Tag Manager
Service: Google Tag Manager
Provider: Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland
Purpose: Management and integration of tags on our website
Legal Basis: Your consent according to Art. 6 (1) (a) GDPR
Storage duration: We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected.
6.1.4 LinkedIn Insight Tag
Service: LinkedIn Insight Tag
Provider: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland
Purpose: Collection and analysis of LinkednIn members on our website
Legal Basis: Your consent according to Art. 6 (1) (a) GDPR
Storage duration: We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected.
6.1.5 Youtube video
Service: Youtube video
Provider: Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland
Purpose: Integration of a Youtube video on our website
Legal Basis: Your consent according to Art. 6 (1) (a) GDPR
Storage duration: We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected.
6.2 Website display and fonts
Service: Google Fonts
Provider: Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland
Purpose: Provision of different fonts for our online offer
Legal Basis: Legitimate interests according to Art. 6 (1) (f) GDPR. The legitimate interest corresponds to our purpose of processing.
Storage duration: We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected.
6.3 Cloud services and sending e-mails
6.3.1 Microsoft Azure
Service: Microsoft Azure
Provider: Microsoft Ireland Operations Limited,70 Sir John Rogerson's Quay, Dublin 2, Ireland
Purpose: Provision of the technical infrastructure to host the website
Legal Basis: Legitimate interests according to Art. 6 (1) (f) GDPR. The legitimate interest corresponds to our purpose of processing.
Storage duration: We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected.
6.3.2 JSDelivr
Service: JSDelivr
Provider: Prospect One, Krolewska 65a, Krakow, Malopolskie 30-081
Purpose: Fast and optimal delivery of our content to website visitors
Legal Basis: Legitimate interests according to Art. 6 (1) (f) GDPR. The legitimate interest corresponds to our purpose of processing.
Storage duration: We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected.
6.3.3 Mailjet
Service: Mailjet
Provider: Mailjet GmbH
Alt-Moabit 2, 10557 Berlin; Mailgun Technologies inc, 112 E Pecan St #1135, San Antonio, TX 78205, USA
Purpose: Sending e-mails
Legal Basis: Your consent according to Art. 6 (1) (a) GDPR
Storage duration: We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected.
6.3.1 Microsoft Bookings
Service: Microsoft Bookings
Provider: Microsoft Ireland Operations Limited,70 Sir John Rogerson's Quay, Dublin 2, Ireland
Purpose: Planning and organization of meetings and discussions
Legal Basis: Your consent according to Art. 6 (1) (a) GDPR
Storage duration: We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected.
6.4 Transfer of personal data to third countries
If we transfer personal data to a third country for processing, we ensure compliance with Art. 44-49 GDPR, i.e., before any transfer of personal data to third parties in a country outside the European Union ("EU") or the European Economic Area ("EEA"), we check whether an adequate level of protection is ensured.
An adequate level of protection can be ensured, among other things, by the existence of an adequacy decision by the EU Commission, by the fact that we have concluded standard contractual clauses with the recipient and have taken other additional measures, or by the fact that the third-country transfer is permitted under other safeguards regulated in Art. 46-49 GDPR is permissible. Where the data transfer is based on Art 46, 47 or 49 (1) GDPR, you may obtain from us a copy of the safeguards for the existence of an adequate level of data protection in relation to the data transfer or an indication of the availability of a copy of the safeguards. Copies of these guarantees can be requested from us.
The following providers may transfer data to third countries:
Service: Google
Third country: USA
Suitable guarantee according to Art. 44-49 GDPR:
Standard contractual clauses
Standard contractual clauses Google Ads
In Google Analytics 4, the anonymization of IP addresses is activated by default.
Service: LinkedIn
Third country: USA
Suitable guarantee according to Art. 44-49 GDPR:
Standard contractual clauses
Service: Mailjet
Third country: USA
Suitable guarantee according to Art. 44-49 GDPR:
Standard contractual clause
Service: Mircosoft
Third country: USA
Suitable guarantee according to Art. 44-49 GDPR:
Standard data protection clauses
7. Social networks
7.1 General information
We maintain presences in social networks in order to be able to communicate with you and inform you about our services.
If you visit one of our pages maintained there, we may be jointly responsible with the provider of the respective platform within the meaning of Art. 26 GDPR regarding the processing operations triggered thereby which concern personal data.
Within the framework of the processing operations, the following data, among others, are processed:
This usage data is often processed in social and professional networks for advertising purposes or for the analysis of user behavior by the providers, without us being able to influence this. In addition, the providers often create usage profiles, on the basis of which user-based advertising can subsequently be placed inside and outside the network. Cookies are often used for this purpose or the usage behavior is directly assigned to your own member profile of the network (if you are logged in here). In addition, we use the user data to communicate with you via the respective network and to provide you with information. If you interact with our company profile in the respective network (e.g. visit our company profile, comment or "like" something), it is possible that your user profile including the personal data will be made public.
Information on the processing of your data in social and professional networks and the possibility to make use of your right of objection or revocation (opt-out), we have listed below.
7.2 Purpose of processing
We process your personal data for the following purposes:
7.3 Legal basis
The legal basis for the processing of personal data is our overriding legitimate interest pursuant to Art. 6 (1) (f) GDPR. The overriding legitimate interest corresponds to the above-mentioned purposes.
7.4 Storage duration
In principle, your data will be stored by the respective provider of the network and not directly by us. We store your activities and personal data published via our presence until the purpose of the processing has ceased to apply or your consent has been withdrawn, provided that there are no retention obligations to the contrary.
7.5 Recipients of personal data
We use the following service providers:
7.5.1 LinkedIn
Social network: LinkedIn
Provider: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland
Third country: USA
Suitable guarantees: Standard contractual clauses
More information: Privacy policy, Opt-out and advertising settings, Joint responsibility contract
7.5.2 Twitter
Social network: Twitter
Provider: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland
Third country: USA
Suitable guarantees: Standard contractual clauses
More information: Privacy policy, Objection settings
7.5.3 Facebook
Social network: Facebook
Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Third country: USA
Suitable guarantees: Standard contractual clauses
More information: Privacy policy, Objection settings, Joint responsibility contract
7.5.4 Instagram
Social network: Instagram
Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Third country: USA
Suitable guarantees: Standard contractual clauses
More information: Privacy policy, Objection settings
7.5.5 Xing
Social network: Xing
Provider: New Work SE, Am Strandkai 1, 20457 Hamburg, Germany
Third country:
Suitable guarantees: Standard contractual clauses
More information: Privacy policy, Objection settings
7.5.6 Youtube
Social network: Youtube
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Third country: USA
Suitable guarantees: Standard data protection clauses
More information: Privacy policy, Opposition settings
7.5.7 Wakalet
Social network: Wakalet
Provider: Wakelet Limited, 76 Quay Street, Manchester, M3 4PR, United Kingdom
Third country: UK
Suitable guarantees: Adequacy resolution
More information: Privacy policy, Objection settings
8. Your rights
8.1 Right to confirmation
You have the right to request confirmation from us as to whether personal data relating to you is being processed.
8.2 Information (Art. 15 GDPR)
You have the right to receive information from us at any time and free of charge about the personal data stored about you as well as a copy of this data in accordance with the statutory provisions.
8.3 Rectification (Art. 16 GDPR)
You have the right to request the rectification of inaccurate personal data concerning you. You also have the right to request that incomplete personal data be completed, considering the purposes of the processing.
8.4 Erasure (Art. 17 GDPR)
You have the right to demand that we erase the personal data concerning you without delay if one of the reasons provided for by law applies and insofar as the processing or storage is not necessary.
8.5 Restriction of processing (Art. 18 GDPR)
You have the right to demand that we restrict processing if one of the legal requirements is met.
8.6 Data portability (Art. 20 GDPR)
You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. Furthermore, you have the right to transfer this data to another controller without hindrance from us, to whom the personal data has been provided, provided that the processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and the processing is carried out with the aid of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
In addition, when exercising your right to data portability pursuant to Article 20 (1) GDPR, you have the right to have the personal data transferred directly from one controller to another controller, insofar as this is technically feasible and provided that this does not adversely affect the rights and freedoms of other individuals.
8.7 Objection (Art. 21 GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of data processing in the public interest pursuant to Article 6 (1) (e) GDPR or on the basis of our legitimate interest pursuant to Article 6 (1) (f) GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of legal claims.
In individual cases, we process personal data in order to carry out direct advertising. You may object to the processing of personal data for the purpose of such advertising at any time. If you object to the processing for direct marketing purposes, we will no longer process the personal data for these purposes.
8.8 Withdraw of consent under data protection law
You have the right to withdraw your consent to the processing of personal data at any time with effect for the future.
8.9 Complaint to a supervisory authority
You have the right to complain about our processing of personal data to a supervisory authority responsible for data protection.
9. Changes of the privacy policy
This privacy policy is currently valid and has the following status: March 2023.
If we continue to develop our website and our offers or if legal or official requirements change, it may be necessary to amend this privacy policy. You can access the current data protection information at any time here.