Table of contents
1 person responsible
2 Data Protection Officer
3 Provision of the website
4 cookies
5 contact options
6 Use of third-party services
7 Social networks
8 Your rights
9 Timeliness and changes to the privacy policy
1 person responsible
Responsible person within the meaning of the GDPR is:
anybill GmbH
Franz-Mayer-Strasse 1
93053 Regensburg
email: datenschutz@anybill.de
https://anybill.de/impressumTelephone: +49 941 7508 9008
2 Data Protection Officer
You can contact our data protection officer as follows:
Kertos GmbH
DSB: Dr. Kilian Schmidt
Adresse: Klosterhofstraße 6, 80331 München
E-Mail: dsb@kertos.io
You can contact our data protection officer directly at any time if you have any questions or suggestions regarding data protection and to exercise your rights.
3 Provision of the website
3.1 General information
When using our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (in so-called “server log files”). Each time you visit a page, our server collects a range of general data and information. This general data and information is stored in the server's log files. It is possible to record the
• Browser type and browser version
• operating system used
• Referrer URL
• Host name of the accessing computer
• Time of server request
• IP address
3.2 Hosting und Content Delivery Networks (CDN)
Unsere Website wird bei einem externen Dienstleister (nachfolgend als "Host" bezeichnet) gehostet. Personenbezogene Daten, die über diese Website erfasst werden, werden auf den Servern des Hosts gespeichert. Zu diesen Daten können unter anderem IP-Adressen, Kontaktanfragen, Metadaten, Kommunikationsdaten, Vertragsinformationen, Kontaktdaten, Namen, Websitezugriffe und andere durch die Websitenutzung generierte Daten gehören.
Der Einsatz des Hosts erfolgt zum Zweck der Vertragserfüllung gegenüber unseren potenziellen und bestehenden Kunden (Art. 6 Abs. 1 lit. b DSGVO) sowie im Interesse einer sicheren, schnellen und effizienten Bereitstellung unseres Online-Angebots durch einen professionellen Anbieter (Art. 6 Abs. 1 lit. f DSGVO).
Unser Host wird Ihre Daten nur insoweit verarbeiten, wie dies zur Erfüllung seiner Leistungspflichten erforderlich ist, und wird unsere Weisungen in Bezug auf diese Daten befolgen.
Wir setzen folgenden Host ein:
Webflow, Inc.
398 11th Street, 2nd Floor
San Francisco, CA 94103, Vereinigte Staaten von Amerika
Um die datenschutzkonforme Verarbeitung zu gewährleisten, haben wir einen Auftragsverarbeitungsvertrag mit unserem Host abgeschlossen.
3.2 Purpose of processing
When using this general data and information, we do not draw any conclusions about you personally. The purposes we pursue include in particular:
• ensuring a smooth connection to the website,
• ensuring convenient use of our website,
• clarifying acts of abuse or fraud,
• network problem analyses,
• evaluation of system security and stability, and
• other administrative purposes.
3.3 Legal basis
The legal basis for data processing is our legitimate interest within the meaning of Article 6 (1) (f) GDPR. We have a legitimate interest in being able to offer our offer in a technically flawless manner.
3.4 Storage period
For security reasons (e.g. to investigate abusive or fraudulent acts), the log files are stored for a maximum of 7 days and then deleted. Data whose further storage is necessary for evidentiary purposes will be kept until the matter is finally resolved.
4 cookies
4.1 General information
We use cookies on our website. These are text files that your browser automatically creates and that are stored on your IT system when you visit our site. Information relating to the specific device used is stored in the cookie.
4.2 Technically necessary cookies
We use technically necessary cookies. These are cookies that are technically necessary to provide all functions of our website.
4.2.1 Purpose of processing
We use technically necessary cookies for the following purposes in order to:
• to provide services,
• to enable the use of our website features,
• as well as to offer different languages.
4.2.2 Legal basis
The legal basis for data processing is our legitimate interest within the meaning of Article 6 (1) (f) GDPR. We have a legitimate interest in being able to offer our offer in a technically flawless manner.
4.2.3 Storage period
We delete your personal data as soon as it is no longer required to achieve the purpose for which it was collected. Technically necessary cookies are only stored for each session. When you leave our website and close your browser, the cookies are deleted.
4.3 Analytical and marketing cookies
We also use analysis and marketing cookies. These are cookies that are not technically necessary. We use them to understand your behavior on our website and to improve our offerings.
4.3.1 Purpose of processing
We use technically necessary cookies for the following purposes:
• range measurement and tracking,
• evaluation of visitor behavior,
• optimization of our offering,
• as well as targeted advertising.
4.3.2 Legal basis
The legal basis for data processing is your consent in accordance with Article 6 (1) (a) GDPR. The cookies are only set after you have given your consent via our cookie banner.
4.3.3 Storage period
We delete your personal data as soon as it is no longer required to achieve the purpose for which it was collected. The storage period of personal data depends on the providers used. For information, see the “Using Third Party Providers” section.
5 contact options
5.1 General information
You can contact us via our website by e-mail or via our form. As part of contacting you and responding to your request, we process the following personal data from you:
• Name
• Email• Date and time of request• IP address• Other personal data that you provide to us when you contact us.
• Telefonnummer
• Datum und Zeit der Anfrage
• IP-Adresse
• Weitere personenbezogene Daten, die Sie uns im Rahmen der Kontaktaufnahme mitteilen.
5.2 Purpose of processing
We process your data to answer your request and other resulting issues.
5.3 Legal basis
If your request is based on pre-contractual measures or with an existing contract with us, the legal basis is the performance of the contract and implementation of pre-contractual measures in accordance with Article 6 (1) (b) GDPR.
If your request is made independently of contractual or pre-contractual measures, and not via our contact form, our legitimate interests are the legal basis in accordance with Art. 6 (1) (f) GDPR. The legitimate interest corresponds to the purposes set out above.
5.4 Storage period
We delete your personal data as soon as it is no longer required to achieve the purpose for which it was collected. In the context of contact requests, this is generally the case if the circumstances show that the specific issue has been finally dealt with.
6 Use of third-party services
We use the following third-party services on our website:
6.1 Marketing
Service | Provider | Purpose | Legal basis | Storage period--- | --- | --- | ---Google Analytics 4 | Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland | Preparation of evaluations and reports of website user activities, remarketing | Your consent in accordance with Art. 6 (1) (a) GDPR | Users' personal data will be deleted or anonymized after 14 months, unless there are legal storage obligations.Google Ads | Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland | Optimizing our advertising on Google | Your consent in accordance with Art. 6 (1) (a) GDPR | We delete your personal data as soon as it is no longer required to achieve the purpose of collection.Google Tag Manager | Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland | Management and integration of tags on our website | Your consent in accordance with Art. 6 (1) (a) GDPR | We delete your personal data as soon as it is no longer required to achieve the purpose of collection.LinkedIn Insight Tag | LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland | Collection and analysis of LinkedIn members on our website | Your consent in accordance with Art. 6 (1) (a) GDPR | We delete your personal data as soon as it is no longer required to achieve the purpose of collection.YouTube video | Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland | Inclusion of a YouTube video on our website | Your consent in accordance with Art. 6 (1) (a) GDPR | We delete your personal data as soon as it is no longer required to achieve the purpose of collection.
Anbieter: Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Irland
Zweck: Erstellung von Auswertungen und Reports der Website Aktivitäten der User, Remarketing
Rechtsgrundlage: Ihre Einwilligung gem. Art. 6 Abs. 1 S. 1 lit. a DSGVO
Speicherdauer: Personenbezogenen Daten der Nutzer werden nach 14 Monaten gelöscht oder anonymisiert, soweit keine Rechtspflichten zur Aufbewahrung bestehen.
Dienst: Google Ads
Anbieter: Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Irland
Zweck: Optimierung unserer Werbung auf Google
Rechtsgrundlage: Ihre Einwilligung gem. Art. 6 Abs. 1 S. 1 lit. a DSGVO
Speicherdauer: Wir löschen Ihre personenbezogenen Daten, sobald sie für die Erreichung des Zweckes der Erhebung nicht mehr erforderlich sind.
Dienst: Google Tag Manager
Anbieter: Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Irland
Zweck: Verwaltung und Einbindung von Tags auf unserer Website
Rechtsgrundlage: Ihre Einwilligung gem. Art. 6 Abs. 1 S. 1 lit. a DSGVO
Speicherdauer: Wir löschen Ihre personenbezogenen Daten, sobald sie für die Erreichung des Zweckes der Erhebung nicht mehr erforderlich sind.
Dienst: LinkedIn Insight Tag
Anbieter: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Irland
Zweck: Erfassung und Analyse von LinkednIn-Mitgliedern auf unserer Webseite
Rechtsgrundlage: Ihre Einwilligung gem. Art. 6 Abs. 1 S. 1 lit. a DSGVO
Speicherdauer: Wir löschen Ihre personenbezogenen Daten, sobald sie für die Erreichung des Zweckes der Erhebung nicht mehr erforderlich sind.
Dienst: Youtube-Video
Anbieter: Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Irland
Zweck: Einbindung eines Youtube-Videos auf unserer Website
Rechtsgrundlage: Ihre Einwilligung gem. Art. 6 Abs. 1 S. 1 lit. a DSGVO
Speicherdauer: Wir löschen Ihre personenbezogenen Daten, sobald sie für die Erreichung des Zweckes der Erhebung nicht mehr erforderlich sind.
6.2 Presentation of the website and fonts
Dienst: Google Fonts
Anbieter: Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Irland
Zweck: Bereitstellung von verschiedenen Schriftarten für unser Online-Angebot
Rechtsgrundlage: Berechtigte Interessen gem. Art. 6 Abs. 1 S. 1 lit. f DSGVO. Das berechtigte Interesse entspricht unseren Zweck der Verarbeitung.
Speicherdauer: Wir löschen Ihre personenbezogenen Daten, sobald sie für die Erreichung des Zweckes der Erhebung nicht mehr erforderlich sind.
6.3 Cloud services and email delivery
Dienst: Microsoft Azure
Anbieter: Microsoft Ireland Operations Limited, 70 Sir John Rogerson's Quay, Dublin 2, Irland
Zweck: Bereitstellung der technischen Infrastruktur zum hosten der Webseite
Rechtsgrundlage: Berechtigte Interessen gem. Art. 6 Abs. 1 S. 1 lit. f DSGVO. Das berechtigte Interesse entspricht unseren Zweck der Verarbeitung.
Speicherdauer: Wir löschen Ihre personenbezogenen Daten, sobald sie für die Erreichung des Zweckes der Erhebung nicht mehr erforderlich sind.
Dienst: Mailjet
Anbieter: Mailjet GmbH Alt-Moabit 2, 10557 Berlin; Mailgun Technologies inc., 112 E Pecan St #1135, San Antonio, TX 78205, USA
Zweck: Versendung von E-Mails
Rechtsgrundlage: Ihre Einwilligung gem. Art. 6 Abs. 1 S. 1 lit. a DSGVO
Speicherdauer: Wir löschen Ihre personenbezogenen Daten, sobald sie für die Erreichung des Zweckes der Erhebung nicht mehr erforderlich sind.
6.4 Transfer of personal data to third countries
Insofar as we transfer personal data to a third country for processing, we ensure compliance with Art. 44 ff. GDPR, i.e. that we check whether an adequate level of protection is ensured before any transfer of personal data to third parties in a country outside the European Union (“EU”) or the European Economic Area (“EEA”).
Dienst: Google
Drittland:USA
Geeignete Garantie gem. Art. 44 ff. DSGVO: Standarddatenschutzklauseln, Standarddatenschutzklauseln Google Ads, Bei Google Analytics 4 ist die Anonymisierung von IP-Adressen standardmäßig aktiviert.
Dienst: LinkedIn
Drittland:USA
Geeignete Garantie gem. Art. 44 ff. DSGVO: Standarddatenschutzklauseln
Dienst: Mailjet
Drittland:USA
Geeignete Garantie gem. Art. 44 ff. DSGVO: Standarddatenschutzklauseln
Dienst: Microsoft
Drittland:USA
Geeignete Garantie gem. Art. 44 ff. DSGVO: Standarddatenschutzklauseln
Dienst: Webflow
Drittland:USA
Geeignete Garantie gem. Art. 44 ff. DSGVO: Standarddatenschutzklauseln
7 Social networks
7.1 General information
We maintain a presence on social networks so that we can communicate with you and inform you about our services.
If you visit one of our pages maintained there, we may be jointly responsible with the provider of the respective platform within the meaning of Article 26 GDPR with regard to the processing operations that involve personal data.
As part of the processing operations, the following data, among others, are processed:
• Inventory data (e.g. first and last name, address, age, gender)
• Content data (e.g. texts, photographs, videos)
• Usage data (e.g. visits to websites, interests)
• Metadata (e.g. device information, IP address)
This usage data is often processed in social and professional networks for advertising purposes or to analyze user behavior by providers, without us being able to influence this. In addition, providers often create user profiles, on the basis of which user-based advertising can then be placed within and outside the network. Cookies are often used for this purpose or the usage behavior is assigned directly to your own network member profile (if you are logged in here). We also use user data to communicate with you via the respective network and to provide you with information. If you interact with our company profile in the respective network (e.g. visit our company profile, comment on or “like” something), it is possible that your user profile and personal data will be made public as a result.
Information on the processing of your data in social and professional networks and the option to exercise your right of objection or withdrawal (opt-out) is provided below.
7.2 Purpose of processing
We process your personal data for the following purposes:
• Public relations and marketing purposes, i.e. we provide information about our services and offers and communicate with you, among other things
• Staff recruitment
7.3 Legal basis
The legal basis for processing personal data is our overriding legitimate interest in accordance with Article 6 (1) (f) GDPR. The overriding legitimate interest corresponds to the purposes set out above.
7.4 Storage period
In principle, your data is stored by the respective network provider and not directly by us. We store your activities and personal data published on our website until the purpose of processing has ceased or your consent has been withdrawn, unless there are any storage obligations to the contrary.
7.5 Recipients of personal data
Social network | Provider | Third country | Appropriate guarantees | More information--- | --- | --- | ---LinkedIn | LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland | USA | Standard Privacy Clauses | Privacy Policy, Opt-out and Advertising Settings, Joint Responsibility AgreementTwitter | Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland | USA | Standard Privacy Clauses | Privacy Policy, Opt-Out SettingsFacebook | Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland | USA | Standard Privacy Clauses | Privacy Policy, Objection Settings, Joint Responsibility AgreementInstagram | Meta Platforms Ireland Limited 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland | USA | Standard Privacy Clauses | Privacy Policy, Objection SettingsXing | New Work SE Am Strandkai 1 20457 Hamburg | Germany | Standard Privacy Clauses | Privacy Policy, Objection SettingsYoutube | Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland | USA | Standard Privacy Clauses | Privacy Policy, Objection SettingsWakalet | Wakelet Limited, 76 Quay Street, Manchester, M3 4PR, United Kingdom | UK | Appropriateness Decision | Privacy Policy, Dispute Settings
Anbieter: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Irland
Drittland: USA
Geeignete Garantien: Standarddatenschutz-klauseln
Weitere Informationen: Datenschutzerklärung, Opt-out und Werbeeinstellungen, Vertrag zur gemeinsamen Verantwortlichkeit
Soziales Netzwerk: Facebook
Anbieter: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland | USA
Drittland: USA
Geeignete Garantien: Standarddatenschutz-klauseln
Weitere Informationen: Datenschutzerklärung, Widerspruchseinstellungen, Vertrag zur gemeinsamen Verantwortlichkeit
Soziales Netzwerk: Instagram
Anbieter: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland | USA
Drittland: USA
Geeignete Garantien: Standarddatenschutz-klauseln
Weitere Informationen: Datenschutzerklärung, Widerspruchseinstellungen, Vertrag zur gemeinsamen Verantwortlichkeit
Soziales Netzwerk: Youtube
Anbieter: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland
Drittland: USA
Geeignete Garantien: Standarddatenschutz-klauseln
Weitere Informationen: Datenschutzerklärung, Widerspruchseinstellungen
8 Your rights
8.1 Right to confirmation
You have the right to request confirmation from us as to whether personal data concerning you is being processed.
8.2 Information (Art. 15 GDPR)
You have the right to receive free information from us about the personal data stored about you and a copy of this data in accordance with legal provisions at any time.
8.3 Correction (Art. 16 GDPR)
You have the right to request that incorrect personal data concerning you be corrected. You also have the right to request the completion of incomplete personal data, taking into account the purposes of processing.
8.4 Deletion (Article 17 GDPR)
You have the right to request that we delete personal data relating to you immediately if one of the reasons provided for by law applies and insofar as processing or storage is not necessary.
8.5 Restriction of processing (Art. 18 GDPR)
You have the right to ask us to restrict processing if one of the legal requirements is met.
8.6 Data portability (Article 20 GDPR)
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transfer this data to another person responsible without hindrance from us to whom the personal data has been provided, provided that the processing is based on consent in accordance with Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR or on a contract in accordance with Article 6 (1) (b) GDPR and the processing is carried out using automated procedures, provided that the processing is not necessary for the performance of a task that is in the public interest or in the exercise of public interest Violence takes place that has been given to us.
In addition, when exercising your right to data portability in accordance with Article 20 (1) GDPR, you have the right to have the personal data transmitted directly from one person responsible to another person responsible, insofar as this is technically feasible and provided that this does not affect the rights and freedoms of other persons.
8.7 Objection (Article 21 GDPR)
For reasons arising from your particular situation, you have the right to object at any time to the processing of personal data concerning you based on data processing in the public interest in accordance with Article 6 (1) (e) GDPR or on the basis of our legitimate interest in accordance with Article 6 (1) (f) GDPR.
This also applies to profiling based on these provisions within the meaning of Art. 4 No. 4 GDPR.
If you file an objection, we will no longer process your personal data unless we can prove compelling legitimate reasons for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
In individual cases, we process personal data for direct marketing purposes. You can object to the processing of personal data for the purpose of such advertising at any time. This also applies to profiling insofar as it is associated with such direct advertising. If you object to us processing for direct marketing purposes, we will no longer process the personal data for these purposes.
In addition, you have the right, for reasons arising from your particular situation, to object to the processing of personal data concerning you carried out by us for scientific or historical research purposes or for statistical purposes in accordance with Article 89 (1) GDPR, unless such processing is necessary to perform a task in the public interest.
8.8 Withdrawal of consent under data protection law
You have the right to withdraw your consent to the processing of personal data at any time with effect for the future.
8.9 Complaint to a supervisory authority
You have the right to complain to a supervisory authority responsible for data protection about our processing of personal data.
9 Timeliness and changes to the privacy policy
This privacy policy is currently valid and is as of June 2024.
If we continue to develop our website and offers or legal or regulatory requirements change, it may be necessary to change this privacy policy. You can access the latest privacy policy here at any time.
