With this data protection information, we inform you about our handling of your personal data and about your rights according to the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). Byonoy GmbH (hereinafter referred to as "we" or "us") is responsible for data processing.
If you have any questions or suggestions regarding this information, or if you wish to contact us about asserting your rights, please send your request to
Byonoy GmbH
Schützenstraße 21
22761 Hamburg
Germany
Telephone: +49 40 5379 866 00
Email: team@byonoy.com
The term "personal data" under data protection law refers to all information that relates to an identified or identifiable individual. We process personal data in compliance with the relevant data protection regulations, in particular the GDPR and the BDSG. Data processing by us only takes place on the basis of legal permission. We process personal data only with your consent (Section 25 (1) TTDSG or Art. 6 (1) a GDPR), for the performance of a contract to which you are a party or at your request for the performance of pre-contractual measures (Art. 6 (1) b GDPR), for the performance of a legal obligation (Art. 6 (1) c GDPR) or where processing is necessary for the purposes of protecting our legitimate interests or the legitimate interests of a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require the protection of personal data (Art. 6 (1) f GDPR).
If you apply for a vacant position in our company, we will also process your personal data for the purpose of deciding on the establishment of an employment relationship (Section 26 (1) sentence 1 BDSG).
Unless otherwise stated in the following notes, we only store the data for as long as is necessary to achieve the processing purpose or to fulfill our contractual or legal obligations. Such statutory retention obligations may arise in particular from commercial or tax law regulations. From the end of the calendar year in which the data was collected, we will retain such personal data contained in our accounting records for ten years and retain personal data contained in commercial letters and contracts for six years. In addition, we will retain data in connection with consents requiring proof, as well as with complaints and claims for the duration of the statutory limitation periods. We will delete data stored for advertising purposes if you object to processing for this purpose.
We use processors as part of the processing of your data. Processing operations carried out by such processors include, for example, hosting, emailing, maintenance and support of IT systems, customer and order management, order processing, accounting and billing, marketing activities or file and data media destruction. A processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the data controller. Processors do not use the data for their own purposes, but carry out data processing exclusively for the data controller and are contractually obliged to guarantee appropriate technical and organizational measures for data protection. In addition, we may transfer your personal data to bodies such as postal and delivery services, your house bank, tax consultancy/auditing firm or the tax authorities. Further recipients may result from the following information.
Our data processing operations may involve the transfer of certain personal data to third countries, i.e. countries where the GDPR is not applicable law. Such a transfer takes place in a permissible manner if the European Commission has determined that an adequate level of data protection is required in such a third country. If such an adequate decision by the European Commission does not exist, a transfer of personal data to a third country will only take place if appropriate safeguards pursuant to Article 46 of the GDPR are in place or if one of the conditions of Article 49 of the GDPR is met.
Unless otherwise stated below, we use the EU standard data protection clauses as appropriate safeguards for the transfer of personal data to third countries. You have the possibility to obtain a copy of these EU standard data protection clauses or inspect them. To do so, please contact us at the address given under Contact.
If you consent to the transfer of personal data to third countries, the transfer is made on the legal basis of Art. 49 (1) a GDPR.
If you exercise your rights in accordance with Articles 15 to 22 of the GDPR, we will process the personal data provided for the purpose of implementing these rights by us and to be able to provide evidence of this. We will only process data stored for the purpose of providing information and preparing it for this purpose and for the purpose of data protection control and otherwise, restrict processing in accordance with Art. 18 GDPR.
These processing operations are based on the legal basis of Art. 6 (1) c GDPR in conjunction with Art. 15 to 22 GDPR and Section 34 (2) BDSG.
As a data subject, you have the right to assert your data subject rights against us. In particular, you have the following rights:
In accordance with Article 21 (1) of the GDPR, you have the right to object to processing based on the legal basis of Article 6 (1) e or f of the GDPR on grounds relating to your particular situation. If we process personal data about you for the purpose of direct marketing, you may object to this processing pursuant to Article 21 (2) and (3) of the GDPR.
When you use the website, we collect information that you provide yourself. In addition, during your visit to the website, we automatically collect certain information about your use of the website. In data protection law, the IP address is also generally considered to be personal data. An IP address is assigned to every device connected to the Internet by the Internet provider so that it can send and receive data.
During the purely informative use of our website, general information that your browser transmits to our server is initially stored automatically (i.e. not via registration). This includes by default: browser type/version, operating system used, page accessed, the previously visited page (referrer URL), IP address, date and time of the server request and HTTP status code. The processing is carried out to protect our legitimate interests and is based on the legal basis of Art. 6 (1) f GDPR. This processing serves the technical administration and security of the website. The stored data is deleted after eight weeks unless there is a justified suspicion of unlawful use based on concrete indications and further examination and processing of the information is necessary for this reason. We are not able to identify you as a data subject from the stored information. Articles 15 to 22 of the GDPR, therefore, do not apply pursuant to Article 11 (2) of the GDPR, unless you provide additional information that enables you to be identified in order to exercise your rights set out in these articles.
Our website contains contact forms that you can use to send us messages, request a quote or book an appointment for an online demonstration. The transfer of your data is encrypted (recognizable by the "https" in the address line of the browser). All data fields marked as mandatory are required to process your request. Failure to provide this information will result in us not being able to process your request. The provision of further data is voluntary. Alternatively, you can send us a message via the contact e-mail. We process the data for the purpose of answering your enquiry. Insofar as your enquiry is directed towards the conclusion or performance of a contract with us, Art. 6 (1) b GDPR is the legal basis for the data processing. Otherwise, we process the data on the basis of our legitimate interest in contacting enquirers. The legal basis for the data processing is then Art. 6 (1) f GDPR.
We use the HubSpot service of the provider HubSpot, Inc. (USA) to process the personal data provided via the contact forms. Please note the information in the section "Data transfer to third countries".
On our website, we offer the possibility to register for our newsletter. After registration, we will inform you regularly about the latest news on our offers. A valid e-mail address is required to register for the newsletter. To verify the e-mail address, you will first receive a registration e-mail, which you must confirm via a link (double opt-in). If you subscribe to the newsletter on our website, we process personal data such as your e-mail address and name on the basis of the consent you have given. The processing is based on the legal basis of Art. 6 (1) a GDPR. You can revoke your consent at any time with effect for the future, for example via the "unsubscribe" link in the newsletter or by contacting us via the channels mentioned above. The legality of the data processing operations already carried out remains unaffected by the revocation.
When you register for the newsletter, we also store the IP address and the date and time of registration. The processing of this data is necessary in order to be able to prove that consent has been given. The legal basis results from our legal obligation to document your consent (Art. 6 (1) c in conjunction with Art. 7 (1) GDPR).
We also analyze the reading behavior and opening rates of our newsletter. We evaluate the data generated during the delivery and retrieval of our emails in aggregated and anonymized form (delivery rate, opening rate, click rates, unsubscribe rate, bounce rate, visits, completions) in order to measure the use and success of the emails. The legal basis for the analysis of our newsletter is Art. 6 (1) f GDPR and the processing serves our legitimate interest in optimizing our newsletter. You can object to this at any time by contacting one of the above-mentioned contact channels.
On the other hand, we also evaluate the data generated when you retrieve and use these e-mails (time of opening, hyperlinks clicked on, documents downloaded) as well as movement data on downstream websites on a personal basis in connection with your e-mail address in order to send you individualized information in the future on this basis as well, which takes your interests and needs into account in the best possible way. We use the anonymous and personal data collected to provide you with personalized content and individualized information in our promotional e-mails and downstream websites. The legal basis for data processing in the context of e-mails is Art. 6 (1) a GDPR. You can revoke your consent at any time with effect for the future, for example via the "unsubscribe" link in the newsletter or by contacting us via the above-mentioned channels.
For the administration of the subscriptions, the dispatch of the newsletter and the analysis, we use the service HubSpot of the provider HubSpot, Inc. (USA). Please note the information in the section "Data transfer to third countries".
If you apply to our company, we will process your application data exclusively for purposes related to your interest in current or future employment with us and the processing of your application. Your application will only be processed and noted by the relevant contact persons at our company. All employees entrusted with data processing are obliged to maintain the confidentiality of your data. If we are unable to offer you employment, we will retain the data you have provided for up to six months after any rejection for the purpose of answering questions relating to your application and rejection. This does not apply if legal provisions prevent deletion, if further storage is necessary for the purpose of providing evidence, or if you have expressly consented to longer storage.
The legal basis for data processing is Section 26 (1) sentence 1 BDSG. If we store your application data for longer than six months and you have expressly consented to this, we would like to point out that this consent can be freely revoked at any time in accordance with Article 7 (3) GDPR. Such revocation shall not affect the lawfulness of the processing that was carried out on the basis of the consent until the revocation.
Here you can revoke your consent for cookies.
We use cookies and similar technologies ("cookies") on our website. Cookies are small data sets that are stored by your browser when you visit a website. This identifies the browser used and can be recognized by web servers. You have full control over the use of cookies through your browser. You can delete the cookies in the security settings of your browser at any time. You can object to the use of cookies through your browser settings in principle or for specific cases.
The use of cookies is partly technically necessary for the operation of our website and thus permissible without the consent of the user. In addition, we may use cookies to offer special features and content and for analysis and marketing purposes. These may also include cookies from third-party providers (so-called third-party cookies). We only use such technically unnecessary cookies with your consent in accordance with Section 25 (1) TTDSG and, if applicable, Article 6 (1) a GDPR.
Here you can revoke your consent for cookies.
This website uses a consent management banner to control cookies. The consent banner enables users of our website to give their consent to certain data processing procedures or to revoke the consent they have given. By confirming the "Accept" button or by saving individual cookie settings, you consent to the use of the associated cookies. The legal basis under data protection law is your consent within the meaning of Art. 6 (1) a GDPR.
In addition, the banner supports us in being able to provide evidence of the declaration of consent. For this purpose, we process information about the declaration of consent and further log data about this declaration. Cookies are also used to collect this data.
The processing of this data is necessary in order to be able to prove that consent has been given. The legal basis arises from our legal obligation to document your consent (Art. 6 (1) c in conjunction with Art. 7 (1) GDPR).
Here you can revoke your consent for cookies.
We use the Google Analytics service of the provider Google Ireland Limited (Google Ireland/EU) on our website.
Google Analytics is a web analytics service that allows us to collect and analyze data about the behavior of visitors to our website. Google Analytics uses cookies for this purpose, which enable an analysis of the use of our website. Personal data in the form of online identifiers (including cookie identifiers), IP addresses, device identifiers and information about interaction with our website are processed.
In part, this data is information stored in the terminal device you are using. In addition, further information is also stored on your used end device via the cookies used. Such storage of information by Google Analytics or access to information already stored in your end device will only take place with your consent.
Google Ireland will process the data collected in this way on our behalf in order to evaluate the use of our website by the user, to compile reports on the activities within our website and to provide us with further services associated with the use of our website and Internet use. In doing so, pseudonymous usage profiles of the users can be created from the processed data.
The setting of cookies and the further processing of personal data described here takes place with your consent. The legal basis for the data processing in connection with the Google Analytics service is therefore Art. 6 (1) a GDPR. You can revoke this consent via our Consent Management Tool at any time with effect for the future.
The personal data processed on our behalf to provide Google Analytics may be transferred to any country in which Google Ireland or Google Ireland's sub-processors maintain facilities. Please refer to the notes in the section "Data transfer to third countries".
We only use Google Analytics with IP anonymization activated. This means that the IP address of the user is shortened by Google Ireland within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The IP address transmitted by the user's browser is not merged with other data. Further information on the use of data for advertising purposes can be found in Google's privacy policy at: www.google.com/policies/technologies/ads.
We use the Google Universal Analytics variant. This allows us to assign interaction data from different devices and from different sessions to a unique user ID. This allows us to put individual user actions in context and analyze long-term relationships.
Data on user actions is stored for a period of 14 months and then automatically deleted. In this process, the deletion of data whose storage period has expired occurs automatically once a month.
We also use the Google Analytics advertising functions (remarketing). This function enables us, in conjunction with the cross-device functions of Google, to display advertisements in a more targeted manner and to present users with ads that are tailored to their interests. Via remarketing, users are shown ads and products for which interest has been identified on other websites in the Google network. The function allows us to link advertising target groups created via Google Analytics Remarketing with the cross-device functions of Google Ads. In this way, interest-based, personalized advertising messages that have been adapted to a user depending on previous usage and surfing behavior on one end device (e.g. cell phone) can also be displayed on another end device of the user (e.g. tablet or PC).
If you have given your consent, Google will link your web and app browsing history with your Google account for this purpose. In this way, the same personalized advertising messages can be served on every end device on which you log in with your Google account. The aggregation of the collected data in your Google account is based solely on your consent, which you can give or revoke at Google. For these linked services, data is then collected via Google Analytics for advertising purposes. To support the remarketing function, Google Analytics collects users' google-authenticated IDs, which are temporarily linked to our Google Analytics data. This is used to define and create target groups for cross-device ad advertising.
We use the online advertising program Google Ads of Google Ireland Limited (Ireland, EU) on our website, through which we place advertisements on the Google search engine. When you access our website via a Google ad, Google sets a cookie on your terminal device ("conversion cookie"). In the process, a different conversion cookie is assigned to each Google Ads customer, so that the cookies are not tracked across the websites of different Ads customers. The information obtained with the help of the cookie is used to create conversion statistics. Thus, we learn the total number of users who clicked on one of our Google ads. However, we do not receive any information with which users can be personally identified.
The processing of your data is based on your consent in accordance with Art. 6 (1) a GDPR.
Cookies are set with your consent, which you can revoke at any time with future effect via Consent Management Tool. For more information on data protection at Google, please see Google's privacy policy at https://policies.google.com/privacy#infocollect.
We use the service Microsoft Advertising (formerly Bing Ads) of the provider Microsoft Ireland Operations Limited (Ireland, EU) on our website. Microsoft Advertising is an online marketing service that uses the Universal Event Tracking (UET) tool to help us display targeted advertisements via the search engines Microsoft Bing, Yahoo, AOL, other search partners (e.g. Ecosia, DuckDuckGo) and the Microsoft Audience Network. Microsoft Advertising uses cookies for this purpose. This involves processing personal data in the form of online identifiers (including cookie identifiers), IP addresses, device identifiers, and information about device and browser settings.
Microsoft Advertising collects data via UET that allows us to track target groups thanks to remarketing lists. For this purpose, a cookie is stored on the end device used when visiting our website. Microsoft Advertising can thus recognize that our website has been visited and play an advertisement when the above-mentioned services are used at a later time.
The information is also used to create conversion statistics, i.e. to record how many users have reached our website after clicking on an advertisement. This tells us the total number of users who clicked on our ad and were redirected to our website. However, we do not receive any information with which users can be personally identified.
The processing of your data is based on your consent in accordance with Art. 6 (1) a GDPR.
Cookies are set with your consent, which you can revoke at any time with future effect via our Consent Management Tool. For more information on data protection at Microsoft, please refer to Microsoft's privacy policy at https://privacy.microsoft.com/de-de/privacystatement.
We use the LinkedIn Insight tag on our website, a marketing product of LinkedIn Ireland Unlimited Company (Ireland/EU). For information on the contact details of LinkedIn Ireland Unlimited Company (LinkedIn Ireland) and the contact details of the data protection officer of LinkedIn Ireland, please refer to LinkedIn's data policy at https://www.linkedin.com/legal/privacy-policy.
The LinkedIn Insight tag is a JavaScript code snippet that is triggered by LinkedIn when you visit our website and stores a cookie on the device you are using. Such storage of information by the LinkedIn Insight tag or access to information already stored in your terminal device and also further processing of personal data in connection with the LinkedIn Insight tag will only take place with your consent. The legal basis for the collection and transmission of personal data by us to LinkedIn Ireland is therefore Art. 6 (1) a GDPR.
Via the LinkedIn Insight tag, we can perform various functions, which we describe to you in detail below.
LinkedIn conversion tracking is an analytics function supported by the LinkedIn Insight tag. The LinkedIn Insight tag allows us to collect data about visits to our website, including URL, referrer URL, IP address, device and browser properties (user agent), and timestamp. IP addresses are shortened or (if used to reach members across devices) hashed. LinkedIn does not provide us with personally identifiable information, but only provides reports (in which you are not identified) on on-site audience and ad performance. This allows us to track the effectiveness of LinkedIn ads for statistical and market research purposes.
Members' direct identifiers are removed by LinkedIn within seven days to pseudonymize the data. LinkedIn then deletes this remaining pseudonymized data within 180 days.
This processing is done for the purpose of obtaining information about our website audience and a report on the effectiveness of LinkedIn campaigns.
We also use the Matched Audiences service to target our advertising campaigns to specific audiences. Through LinkedIn Matched Audiences and related data integrations, we can target advertising to specific audiences based on data we provide to LinkedIn (e.g., company lists, hashed contact information, device identifiers, or event data such as websites visited).
This processing is done for the purpose of marketing our offers via the targeted playout of advertising.
We have entered into a joint controller agreement with LinkedIn, which sets out the distribution of data protection obligations between us and LinkedIn. You can view this here:
https://legal.linkedin.com/pages-joint-controller-addendum.
We are represented on several social media platforms with a company page. Through this, we would like to offer further opportunities for information about our company and for exchange. Our company has company pages on the following social media platforms:
When you visit or interact with a profile on a social media platform, personal data about you may be processed. Information associated with a social media profile used also regularly constitutes personal data. This also covers messages and statements made while using the profile. In addition, during your visit to a social media profile, certain information about it is often automatically collected, which may also constitute personal data.
When you visit our Facebook page, through which we present our company or individual products from our range, certain information about you is processed. The sole controller of this processing of personal data is Meta Platforms Ireland Limited (Ireland/EU - "Meta"). For more information about the processing of personal data by Meta, please visit https://www.facebook.com/privacy/explanation. Meta offers the possibility to object to certain data processing; related information and opt-out options can be found at https://www.facebook.com/settings?tab=ads.
Meta provides us with anonymized statistics and insights for our Facebook page, which we use to gain knowledge about the types of actions people take on our page (so-called "page insights"). These Page Insights are created based on certain information about individuals who have visited our Page. This processing of personal data is carried out by Meta and us as joint controllers. The processing serves our legitimate interest to evaluate the types of actions taken on our site and to improve our site based on these insights. The legal basis for this processing is Art. 6 (1) f GDPR. We cannot assign the information obtained via Page Insights to individual user profiles interacting with our Facebook page. We have entered into a joint controller agreement with Meta, which sets out the distribution of data protection obligations between us and Meta. For details about the processing of personal data to create Page Insights and the agreement entered into between us and Meta, please visit https://www.facebook.com/legal/terms/information_about_page_insights_data. With regard to these data processing operations, you have the option of asserting your data subject rights (see "Your rights" in this regard) against Meta as well. Further information on this can be found in Meta's privacy policy at https://www.facebook.com/privacy/explanation.
Please note that, in accordance with the Meta Privacy Policy, user data is also processed in the USA or other third countries. Meta transfers user data only to countries for which an adequacy decision has been issued by the European Commission in accordance with Art. 45 GDPR or on the basis of appropriate guarantees in accordance with Art. 46 GDPR.
LinkedIn Ireland Unlimited Company (Ireland/EU - "LinkedIn") is the sole responsible party for the processing of personal data when you visit our LinkedIn page. For more information about the processing of personal data by LinkedIn, please visit https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy.
When you visit, follow or engage with our LinkedIn company page, LinkedIn processes personal data to provide us with anonymized statistics and insights. This provides us with insights into the types of actions that people take on our site (so-called page insights). For this purpose, LinkedIn processes in particular such data that you have already provided to LinkedIn via the information in your profile, such as data on function, country, industry, seniority, company size and employment status. In addition, LinkedIn will process information about how you interact with our LinkedIn company page, such as whether you are a follower of our LinkedIn company page. With the page insights, LinkedIn does not provide us with any personal data about you. We only have access to the aggregated page insights. It is also not possible for us to draw conclusions about individual members via the information in the page insights. This processing of personal data in the context of the page insights is carried out by LinkedIn and us as joint controllers. The processing serves our legitimate interest to evaluate the types of actions taken on our LinkedIn company page and to improve our company page based on these insights. The legal basis for this processing is Art. 6 (1) f GDPR. We have entered into a joint controller agreement with LinkedIn, which sets out the distribution of data protection obligations between us and LinkedIn. The agreement is available at: https://legal.linkedin.com/pages-joint-controller-addendum.
Thereafter, the following applies:
Please note that according to the LinkedIn Privacy Policy, personal data is also processed by LinkedIn in the US or other third countries. LinkedIn transfers personal data only to countries for which an adequacy decision of the European Commission pursuant to Art. 45 GDPR is available or on the basis of appropriate safeguards pursuant to Art. 46 GDPR.
3.1.3 Twitter
Twitter Inc. (USA) is the sole responsible party for the processing of personal data when visiting our Twitter profile. Further information about the processing of personal data by Twitter Inc. can be found at https://twitter.com/de/privacy.
3.1.4 Xing
New Work SE (Germany/EU) is the sole responsible party for the processing of personal data when visiting our Xing profile. Further information about the processing of personal data by New Work SE can be found at https://privacy.xing.com/de/datenschutzerklaerung.
3.1.5 YouTube
Google Ireland Limited (Ireland/EU) is the sole responsible party for the processing of personal data when visiting our YouTube channel. Further information about the processing of personal data by YouTube and Google Ireland Limited can be found at https://policies.google.com/privacy.
We also process information that you have provided to us via our company page on the respective social media platform. Such information may be the username used, contact details or a message to us. These processing operations by us are carried out as the sole responsible party. We process this data on the basis of our legitimate interest in contacting inquiring persons. The legal basis for the data processing is Art. 6 (1) f GDPR. Further data processing may take place if you have consented (Art. 6 (1) a GDPR) or if this is necessary for the fulfillment of a legal obligation (Art. 6 (1) c GDPR).
As of: June 2022
Please rotate your Device