1. Definitions

The data protection declaration of SUNZINET GmbH is based on the terms used by the European Data Protection Supervisor when issuing the General Data Protection Regulation (GDPR). Our data protection declaration should be easy to read and understand for the general public as well as for our customers and business partners. In order to ensure this, we would like to explain the terms used in advance.

In this data protection declaration, we use, among others, the following terms:

• Personal data

  Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person. 

• Data subject

  Data subject means any identified or identifiable natural person whose personal data are processed by the data controller.

• Processing

  Processing means any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organisation, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

• Restriction of processing

  Restriction of processing means the marking of stored personal data with the aim of limiting their future processing. 

• Profiling

  Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements. 

• Pseudonymisation

  Pseudonymisation means the processing of personal data in such a way that the data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures ensuring that the personal data are not attributed to an identified or identifiable natural person. 

• Data controller

  Data controller means the natural or legal person, public authority, agency or another body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for by Union or Member State law. 

• Processor

  Processor means a natural or legal person, public authority, agency or another body which processes personal data on behalf of the data controller. 

• Recipient

  Recipient means a natural or legal person, public authority, agency or another body to which personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients. 

• Third party

  Third party means any natural or legal person, public authority, agency or body other than the data subject, the data controller, the processor and persons who, under the direct authority of the controller or the processor, are authorised to process personal data. 

• Consent

  Consent means any freely given, specific and informed indication of the data subject’s wishes, in the form of a statement or another unambiguous affirmative action, by which the data subject signifies agreement to the processing of personal data relating to him or her. 

2. Name and address of the data controller

The data controller within the meaning of the General Data Protection Regulation, other data protection provisions applicable in the Member States of the European Union and other data protection regulations is:

SUNZINET GmbH
Schanzenstr. 23
51063 Cologne
Germany
Tel: +49 221 3550090
E-mail: info@sunzinet.com
Website: https://www.sunzinet.com/en/

3. Cookies

Many websites and servers use cookies. Many cookies contain a so‑called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters by which websites and servers can be assigned to the specific Internet browser in which the cookie was stored. This enables visited websites and servers to distinguish the individual browser of the data subject from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified using the unique cookie ID.

Through the use of cookies, SUNZINET GmbH can provide users of this website with more user‑friendly services that would not be possible without the use of cookies.

By means of a cookie, the information and offers on our website can be optimized for the user. Cookies enable us, as already mentioned, to recognize users of our website. The purpose of this recognition is to make it easier for users to use our website. For example, a user of a website that uses cookies does not have to re‑enter access data each time the website is visited, because this is handled by the website and the cookie stored on the user’s computer system. Another example is a shopping cart cookie in an online shop. The online shop remembers the items placed in the virtual shopping cart via a cookie.

The data subject may, at any time, prevent the setting of cookies by our website by selecting the appropriate settings in the Internet browser used and may therefore permanently object to the setting of cookies. In addition, cookies that have already been set can be deleted at any time via an Internet browser or other software programs. This is possible in all common Internet browsers. If the data subject disables the setting of cookies in the Internet browser used, not all functions of our website may be fully available.

4. Collection of general data and information

The website of SUNZINET GmbH collects a series of general data and information whenever a data subject or automated system accesses the website. This general data and information is stored in server log files. The following data may be collected:
(1) browser types and versions used,
(2) the operating system of the accessing system,
(3) the website from which the accessing system accesses our website (so‑called referrer),
(4) sub‑pages accessed via the accessing system on our website,
(5) the date and time of access to the website,
(6) the Internet Protocol address (IP address),
(7) the Internet service provider of the accessing system, and
(8) other similar data and information used to prevent threats in the event of attacks on our IT systems.

When using this general data and information, SUNZINET GmbH does not draw any conclusions about the data subject. Rather, this information is required
(1) to correctly deliver the content of our website,
(2) to optimize the content of our website and advertising for it,
(3) to ensure the long‑term functionality of our IT systems and website technology, and
(4) to provide law‑enforcement authorities with the information necessary for prosecution in the event of a cyberattack.

Therefore, SUNZINET GmbH analyzes anonymously collected data and information on the one hand, and on the other hand, uses them with the aim of increasing data protection and data security within our company to ensure an optimal level of protection of the personal data we process. Anonymous data from the server log files is stored separately from any personal data provided by a data subject.

5. Subscription to our newsletter

On the website of SUNZINET GmbH, users are given the opportunity to subscribe to our company’s newsletter. The personal data transmitted to the data controller when subscribing to the newsletter are specified in the registration form used for this purpose.

SUNZINET GmbH regularly informs its customers and business partners about company offers by means of a newsletter. As a general rule, the data subject may receive our newsletter only if (1) the data subject has a valid e‑mail address and (2) the data subject registers for the newsletter subscription. For legal reasons, a confirmation e‑mail is sent to the e‑mail address provided by the data subject using the double opt‑in procedure. This confirmation e‑mail serves to verify whether the owner of the e‑mail address, as the data subject, has authorised receipt of the newsletter.

When registering for the newsletter, we also store the IP address of the computer system used by the data subject at the time of registration, as assigned by the Internet service provider (ISP), as well as the date and time of registration. The collection of this data is necessary in order to be able to trace any possible misuse of the data subject’s e‑mail address at a later point in time and therefore serves the legal protection of the data controller.

The personal data collected in the course of newsletter registration are used exclusively for sending our newsletter. In addition, newsletter subscribers may be informed by e‑mail if this is necessary for the operation of the newsletter service or the related registration, for example in the event of changes to the newsletter offer or changes in technical circumstances. No personal data collected as part of the newsletter service will be disclosed to third parties.

The subscription to our newsletter can be cancelled at any time. The consent to the storage of personal data granted for the purpose of newsletter distribution may be withdrawn at any time. A corresponding link for withdrawing consent can be found in each newsletter. Furthermore, it is also possible to unsubscribe directly via the data controller’s website at any time or to inform the data controller in another manner.

6. Newsletter-Tracking

The newsletters of SUNZINET GmbH contain so‑called tracking pixels. A tracking pixel is a miniature graphic embedded in e‑mails sent in HTML format in order to enable log file recording and analysis. This makes it possible to statistically evaluate the success or failure of online marketing campaigns. Based on the embedded tracking pixel, SUNZINET GmbH can determine whether and when an e‑mail was opened by a data subject and which links contained in the e‑mail were clicked by the data subject.

Personal data collected via tracking pixels contained in the newsletters are stored and evaluated by the data controller for the purpose of optimising newsletter distribution and better tailoring the content of future newsletters to the interests of the data subject. This data will not be disclosed to third parties. Data subjects have the right to revoke the separate consent granted via the double opt‑in procedure at any time. Upon revocation, the personal data will be deleted by the data controller. SUNZINET GmbH automatically regards the withdrawal from receiving the newsletter as a revocation of consent.

7. Contact via the website

On the basis of statutory provisions, the website of SUNZINET GmbH contains information enabling quick electronic contact with our company as well as direct communication with us, including a general address of so‑called electronic mail (e‑mail address).

If a data subject contacts the data controller by e‑mail or via a contact form, the personal data transmitted by the data subject will be stored automatically. Such personal data transmitted voluntarily by the data subject will be stored for the purpose of processing the request or contacting the data subject. These personal data will not be disclosed to third parties.

8. Comment function in the blog on the website

SUNZINET GmbH offers users the opportunity to leave individual comments on individual blog posts published on a blog located on the data controller’s website. A blog is a portal, usually publicly accessible, maintained on a website, in which one or more persons, referred to as bloggers or web bloggers, can publish articles or write down thoughts in so‑called blog posts. Blog posts can usually be commented on by third parties.

If a data subject leaves a comment on the blog published on this website, in addition to the comments submitted by the data subject, information on the time of posting the comment and the user name (pseudonym) chosen by the data subject will be stored and published. In addition, the IP address assigned by the Internet service provider (ISP) of the data subject is also stored. This storage of the IP address takes place for security reasons and in the event that the data subject violates the rights of third parties by publishing a comment or posting illegal content. The storage of these personal data is therefore in the data controller’s own interest in order to enable a defence in the event of an infringement. No personal data collected in this context will be disclosed to third parties unless such disclosure is required by law or serves the legal defence of the data controller.

9. Subscription to comments in the blog on the website

The comments published on the blog of SUNZINET GmbH may be subscribed to by third parties. In particular, a commentator may subscribe to the comments appearing after his or her comment on a specific blog post.

If a data subject opts to subscribe to comments, the data controller will send an automatic confirmation e‑mail in order to verify, using the double opt‑in procedure, that the owner of the indicated e‑mail address has indeed selected this option. The option to subscribe to comments can be terminated at any time.

10. Routine deletion and blocking of personal data

The data controller processes and stores the personal data of the data subject only for the period necessary to achieve the purpose of storage or insofar as this is provided for by European directives and regulations or other legal provisions to which the data controller is subject.

If the purpose of storage ceases to apply or if a storage period prescribed by European directives and regulations or another competent legislator expires, the personal data shall be routinely blocked or deleted in accordance with applicable legal provisions.

11. Rights of the data subject

Right of confirmation

Every data subject has the right, granted by the European Directive and Regulation, to obtain confirmation from the data controller as to whether personal data concerning him or her are being processed. If a data subject wishes to exercise this right of confirmation, he or she may contact the data controller at any time.

Right of access

Every data subject has the right, granted by the European Directive and Regulation, to obtain from the data controller, at any time and free of charge, information about the personal data stored concerning him or her as well as a copy of such data. Furthermore, the European Directive and Regulation grant the data subject access to the following information:

• the purposes of the processing
• the categories of personal data concerned
• the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations
• where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period
• the existence of the right to request rectification or erasure of personal data, or restriction of processing by the data controller, or to object to such processing
• the existence of the right to lodge a complaint with a supervisory authority
• where the personal data are not collected from the data subject: any available information as to their source
• the existence of automated decision‑making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject

In addition, the data subject has the right to be informed whether personal data are transferred to a third country or to an international organisation. Where this is the case, the data subject also has the right to be informed of the appropriate safeguards relating to the transfer.

If a data subject wishes to exercise this right of access, he or she may contact an employee of the data controller at any time.

Right to rectification

Every data subject has the right, granted by the European Directive and Regulation, to request the immediate rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject also has the right to have incomplete personal data completed, including by means of a supplementary statement.

If a data subject wishes to exercise this right to rectification, he or she may contact the data controller at any time.

Right to erasure (right to be forgotten)

Every data subject has the right, granted by the European Directive and Regulation, to obtain from the data controller the erasure without undue delay of personal data concerning him or her where one of the following grounds applies and insofar as the processing is not necessary:

• the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed
• the data subject withdraws consent on which the processing is based pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR and there is no other legal ground for the processing
• the data subject objects to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects pursuant to Article 21(2) of the GDPR
• the personal data have been unlawfully processed
• the personal data must be erased for compliance with a legal obligation under Union or Member State law to which the data controller is subject
• the personal data have been collected in relation to the offer of information society services pursuant to Article 8(1) of the GDPR

If any of the above grounds applies and a data subject wishes to request the erasure of personal data stored by SUNZINET GmbH, the data subject may contact the data controller at any time. An employee of SUNZINET GmbH will ensure that the erasure is carried out without delay.

Where SUNZINET GmbH has made the personal data public and is obliged pursuant to Article 17(1) of the GDPR to erase the personal data, SUNZINET GmbH shall take reasonable measures, including technical measures, to inform other data controllers that the data subject has requested the erasure of any links to, or copies or replications of, those personal data, unless processing is required. An employee of SUNZINET GmbH will arrange the necessary measures on a case‑by‑case basis.

Right to restriction of processing

Every data subject has the right, granted by the European Directive and Regulation, to obtain from the data controller restriction of processing where one of the following applies:

• the accuracy of the personal data is contested by the data subject, for a period enabling the data controller to verify the accuracy of the personal data
• the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead
• the data controller no longer needs the personal data for processing purposes, but the data subject requires them for the establishment, exercise or defence of legal claims
• the data subject has objected to processing pursuant to Article 21(1) of the GDPR and it is not yet clear whether the legitimate grounds of the data controller override those of the data subject

If one of the above conditions is met and a data subject wishes to request the restriction of processing of personal data stored by SUNZINET GmbH, the data subject may contact the data controller at any time. An employee of SUNZINET GmbH will arrange the restriction of processing.

Right to data portability

Every data subject has the right, granted by the European Directive and Regulation, to receive the personal data concerning him or her which have been provided to a data controller, in a structured, commonly used and machine‑readable format, and has the right to transmit those data to another data controller without hindrance, provided that the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR, and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.

Furthermore, when exercising the right to data portability pursuant to Article 20(1) of the GDPR, the data subject has the right to have the personal data transmitted directly from one data controller to another, where technically feasible and where this does not adversely affect the rights and freedoms of others.

To exercise the right to data portability, the data subject may contact the data controller at any time.

Right to object

Every data subject has the right, granted by the European Directive and Regulation, to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her which is based on Article 6(1)(e) or (f) of the GDPR. This also applies to profiling based on those provisions.

In the event of an objection, SUNZINET GmbH shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.

Where SUNZINET GmbH processes personal data for direct marketing purposes, the data subject has the right to object at any time to such processing, including profiling to the extent that it is related to such direct marketing. If the data subject objects, SUNZINET GmbH will no longer process the personal data for such purposes.

In addition, the data subject has the right, on grounds relating to his or her particular situation, to object to the processing of personal data concerning him or her which is carried out by SUNZINET GmbH for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) of the GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

The right to object may be exercised by contacting the data controller directly. The data subject may also exercise this right using automated procedures based on technical specifications in connection with the use of information society services, notwithstanding Directive 2002/58/EC.

Automated decision‑making, including profiling

Every data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her, provided that the decision:

• is not necessary for entering into, or performance of, a contract between the data subject and the data controller, or
• is authorised by Union or Member State law and provides suitable safeguards for the rights and freedoms and legitimate interests of the data subject, or
• is based on the data subject’s explicit consent.

Where a decision is necessary for entering into or performance of a contract or is based on explicit consent, SUNZINET GmbH shall implement suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, including at least the right to obtain human intervention, to express his or her point of view and to contest the decision.

To exercise rights relating to automated decision‑making, the data subject may contact the data controller at any time.

Right to withdraw consent

Every data subject has the right, granted by the European Directive and Regulation, to withdraw consent to the processing of personal data at any time.

If the data subject wishes to exercise the right to withdraw consent, he or she may contact the data controller at any time.

12. Data protection during job applications and the application procedure

The data controller collects and processes the personal data of applicants for the purpose of carrying out the application procedure. Processing may also be carried out by electronic means. This is particularly the case if an applicant submits relevant application documents to the data controller by electronic means, for example by e‑mail or via a web form available on the website.

If the data controller concludes an employment contract with the applicant, the data transmitted by the applicant shall be stored for the purpose of processing the employment relationship in accordance with statutory provisions. If the data controller does not conclude an employment contract with the applicant, the application documents shall be automatically deleted two months after notification of the rejection decision, provided that there is no other legitimate interest of the data controller that conflicts with such deletion. Another legitimate interest in this sense may be, for example, the obligation to provide evidence in proceedings based on equal treatment legislation.

13. data protection provisions on the use and application of Facebook

The data controller has integrated components of Facebook on this website. Facebook is a social network.

A social network is an online community operated on the Internet that generally allows users to communicate with each other and interact in virtual space. A social network can serve as a platform for sharing opinions and experiences or enable the online community to provide personal or business-related information. Facebook allows users of the social network, among other features, to create private profiles, upload photos and connect with other users via friend requests.

The operating company of Facebook is Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. The controller of personal data, if a data subject resides outside the United States or Canada, is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Each time one of the individual pages of this website operated by the data controller and on which a Facebook component (Facebook plug‑in) has been integrated is accessed, the Internet browser on the data subject’s IT system is automatically prompted by the respective Facebook component to download a representation of that Facebook component from Facebook. A complete overview of all Facebook plug‑ins can be found at developers.facebook.com/docs/plugins/. As part of this technical procedure, Facebook receives information about which specific subpage of our website is visited by the data subject.

If the data subject is logged into Facebook at the same time, Facebook recognizes which specific subpage of our website the data subject is visiting each time the data subject accesses our website and for the entire duration of the stay on our website. This information is collected by the Facebook component and assigned by Facebook to the respective Facebook account of the data subject. If the data subject activates one of the Facebook buttons integrated on our website, such as the “Like” button, or posts a comment, Facebook assigns this information to the personal Facebook user account of the data subject and stores the personal data.

Facebook always receives information via the Facebook component that the data subject has visited our website if the data subject is logged into Facebook at the time of accessing our website; this takes place regardless of whether the data subject clicks on the Facebook component or not. If the data subject does not desire this transmission of information to Facebook, he or she may prevent it by logging out of the Facebook account before accessing our website.

The data policy published by Facebook, available at facebook.com/about/privacy/, provides information about the collection, processing and use of personal data by Facebook. It also explains the settings options Facebook offers to protect the privacy of data subjects. In addition, various applications are available that allow the suppression of data transmission to Facebook. Such applications may be used by the data subject to suppress data transmission to Facebook.

14. Data protection provisions on the use and application of Google Analytics (with anonymisation function)

The data controller has integrated the Google Analytics component (with anonymisation function) on this website. Google Analytics is a web analytics service. Web analytics is the collection, compilation and evaluation of data relating to the behaviour of visitors to websites. A web analytics service collects, among other things, data on the website from which a data subject accessed a website (so‑called referrer), which sub‑pages of the website were accessed and how often and for how long a sub‑page was viewed. Web analytics is mainly used to optimise a website and to analyse the cost‑effectiveness of online advertising.

The operator of the Google Analytics component is Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043‑1351, USA. With regard to data protection matters in the EU, the EEA and the United Kingdom, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is responsible.

The data controller uses the “_gat._anonymizeIp” extension for web analytics via Google Analytics. By means of this additional function, the IP address of the Internet connection of the data subject is shortened and anonymised by Google if access to our websites takes place from a Member State of the European Union or from another state party to the Agreement on the European Economic Area.

The purpose of the Google Analytics component is to analyse visitor traffic on our website. Google uses the data and information obtained, among other things, to evaluate the use of our website, to compile online reports showing activities on our website and to provide other services related to the use of our website.

Google Analytics sets a cookie on the data subject’s information technology system. Cookies have already been explained above. By setting a cookie, Google is enabled to analyse the use of our website. Each time one of the individual pages of this website operated by the data controller and on which the Google Analytics component is integrated is accessed, the Internet browser on the data subject’s IT system automatically transmits data to Google for the purpose of web analytics. As part of this technical process, Google obtains knowledge of personal data, such as the IP address of the data subject, which Google uses, among other things, to track the origin of visitors and clicks and subsequently enable commission settlements.

By means of the cookie, personal data such as the time of access, the location from which access was made and the frequency of visits to our website by the data subject are stored. Each time the data subject visits our website, these personal data, including the IP address of the Internet connection used by the data subject, are transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may share this personal data collected via this technical process with third parties.

The data subject may at any time prevent the setting of cookies on our website, as already described above, by selecting the appropriate settings in the Internet browser used and thus permanently object to the setting of cookies. Such browser settings will also prevent Google from placing a cookie on the data subject’s IT system. In addition, cookies already set by Google Analytics may be deleted at any time via an Internet browser or other software programs.

Furthermore, the data subject has the possibility to object to the collection of data generated by Google Analytics relating to the use of this website and to the processing of such data by Google, and to prevent such processing. For this purpose, the data subject must download and install the browser add‑on available at tools.google.com/dlpage/gaoptout. This browser add‑on informs Google Analytics via JavaScript that no data or information about visits to websites may be transmitted to Google Analytics. The installation of the browser add‑on is regarded by Google as an objection. If the data subject’s IT system is deleted, formatted or newly installed at a later point in time, the browser add‑on must be reinstalled in order to deactivate Google Analytics. If the browser add‑on is uninstalled or deactivated by the data subject or another person within the data subject’s sphere of control, it may be reinstalled or reactivated.

Further information and Google’s applicable privacy policy can be found at https://policies.google.com/privacy and www.google.com/analytics/terms/gb.html. Google Analytics is described in more detail at https://marketingplatform.google.com/about/analytics/.

15. Data protection provisions on the use and application of Google Remarketing

The data controller has integrated Google Remarketing services on this website. Google Remarketing is a function of Google AdWords that enables a company to display advertisements to Internet users who have previously visited the company’s website. The integration of Google Remarketing allows a company to create user‑related advertising and consequently to display advertisements relevant to the interests of Internet users.

The company operating the Google Remarketing services is Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043‑1351, USA. With regard to data protection matters within the EU, the EEA and the United Kingdom, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is responsible.

The purpose of Google Remarketing is to display interest‑based advertising. Google Remarketing enables us to display advertisements via the Google advertising network or to have such advertisements displayed on other websites that are tailored to the individual needs and interests of Internet users.

Google Remarketing places a cookie on the data subject’s information technology system. Cookies have already been explained above. By setting the cookie, Google is able to recognise visitors to our website when they subsequently visit websites that are also members of the Google advertising network. Each time a website on which the Google Remarketing service has been integrated is accessed, the Internet browser of the data subject automatically identifies itself to Google. As part of this technical procedure, Google obtains knowledge of personal data, such as the IP address or the user’s Internet browsing behaviour, which Google uses, among other things, to display interest‑based advertising.

By means of the cookie, personal data such as the websites visited by the data subject are stored. Each time the data subject visits our website, personal data, including the IP address of the Internet connection used by the data subject, are transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may share the personal data collected in the course of this technical process with third parties.

The data subject may, at any time, prevent the setting of cookies on our website, as already described above, by selecting the appropriate settings in the Internet browser used and thus permanently object to the setting of cookies. Such browser settings will also prevent Google from placing a cookie on the data subject’s information technology system. In addition, cookies already set by Google Analytics may be deleted at any time via an Internet browser or other software programs.

Furthermore, the data subject has the possibility to object to interest‑based advertising displayed by Google. To do so, the data subject must visit https://adssettings.google.com/anonymous?hl=en using any Internet browser and make the appropriate settings there.

Further information and Google’s applicable privacy policy can be found at https://policies.google.com/privacy?hl=en-US.

16. Data protection provisions on the use and application of Google Ads 

The data controller has integrated Google Ads on this website. Google Ads is an online advertising service that allows advertisers to place advertisements in Google search engine results as well as within the Google advertising network. Google Ads enables advertisers to define specific keywords that will be used to display an advertisement in Google’s search engine results only when a user uses the search engine to retrieve search results relevant to those keywords. Within the Google advertising network, advertisements are distributed on topic‑related websites using an automated algorithm and in accordance with the previously defined keywords.

The company operating the Google Ads services is Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043‑1351, USA. With regard to data protection matters within the EU, the EEA and the United Kingdom, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is responsible.

The purpose of Google Ads is to advertise our website by displaying interest‑based advertisements on the websites of third‑party companies and in the search engine results of the Google search engine, as well as to display third‑party advertisements on our website.

If a data subject accesses our website via a Google advertisement, a so‑called conversion cookie is stored by Google on the data subject’s information technology system. Cookies have already been explained above. A conversion cookie loses its validity after thirty days and is not used to identify the data subject. The conversion cookie is used to track whether certain subpages, for example the shopping cart of an online shop system, have been accessed on our website, provided that the cookie has not yet expired. Using the conversion cookie, both we and Google can determine whether a data subject who arrived at our website via a Google Ads advertisement generated a transaction, i.e. completed or cancelled a purchase.

The data and information collected through the use of the conversion cookie are used by Google to compile visit statistics for our website. These visit statistics are in turn used by us to determine the total number of users who were referred to our website via Google Ads advertisements, i.e. to assess the success or failure of a particular Google Ads campaign and to optimise our Google Ads advertisements for the future. Neither our company nor other Google Ads advertisers receive information from Google that would allow identification of the data subject.

By means of the cookie, personal data such as the websites visited by the data subject are stored. Each time the data subject visits our website, personal data, including the IP address of the Internet connection used by the data subject, are transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may share these personal data collected via this technical process with third parties.

The data subject may at any time prevent the setting of cookies on our website, as already described above, by selecting the appropriate settings in the Internet browser used and thus permanently object to the setting of cookies. Such browser settings will also prevent Google from placing a conversion cookie on the data subject’s information technology system. In addition, cookies already set by Google Ads may be deleted at any time via an Internet browser or other software programs.

Furthermore, the data subject has the option to object to interest‑based advertising displayed by Google. To do so, the data subject must visit https://www.google.com/settings/ads using any Internet browser and make the appropriate settings there.

Further information and Google’s applicable privacy policy can be found at https://policies.google.com/privacy?hl=en-US.

17. Data protection provisions on the use and application of Instagram

The data controller has integrated components of the Instagram service on this website. Instagram is a service that qualifies as an audiovisual platform and allows users to share photos and videos and to distribute such content on other social networks.

The company operating Instagram services is Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA, USA. With regard to data protection matters within the EU, the EEA and the United Kingdom, Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, is responsible.

Each time one of the individual pages of this website operated by the data controller and on which an Instagram component (Insta button) has been integrated is accessed, the Internet browser on the data subject’s information technology system is automatically prompted to download a representation of the corresponding Instagram component from the Instagram service. As part of this technical procedure, Instagram receives information about which specific subpage of our website is visited by the data subject.

If the data subject is logged into Instagram at the same time, Instagram recognises which specific subpage the data subject is visiting each time the data subject accesses our website and for the entire duration of the stay on our website. This information is collected by the Instagram component and assigned by Instagram to the respective Instagram account of the data subject.

If the data subject activates one of the Instagram buttons integrated on our website, the data and information transmitted in this way are assigned to the personal Instagram user account of the data subject and stored and processed by Instagram.

Instagram always receives information via the Instagram component that the data subject has visited our website if the data subject is logged into Instagram at the time of accessing our website; this takes place regardless of whether the data subject clicks the Instagram component or not.

If the data subject does not wish such information to be transmitted to Instagram, he or she may prevent this transmission by logging out of the Instagram account before accessing our website.

Further information and the applicable Instagram privacy policy can be found at https://help.instagram.com/519522125107875 and https://privacycenter.instagram.com/policy/?hl=en.

18. Privacy policy on the use and application of LinkedIn 

The data controller has integrated components of LinkedIn Corporation on this website. LinkedIn is an Internet‑based social network that allows users to connect with existing business contacts and to establish new business contacts. More than 400 million registered individuals use LinkedIn in over 200 countries. LinkedIn is currently the largest platform for business contacts and one of the most frequently visited websites worldwide.

The company operating LinkedIn services is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. With regard to data protection matters outside the United States, LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible.

Each time one of the individual pages of this website operated by the data controller and on which a LinkedIn component (LinkedIn button) has been integrated is accessed, the Internet browser on the data subject’s information technology system is automatically prompted to download a representation of the corresponding LinkedIn component from LinkedIn. Further information on LinkedIn plug‑ins can be found at developer.linkedin.com/plugins. As part of this technical procedure, LinkedIn receives information about which specific subpage of our website is visited by the data subject.

If the data subject is logged into LinkedIn at the same time, LinkedIn recognises which specific subpage of our website the data subject is visiting each time the data subject accesses our website and for the entire duration of the stay on our website. This information is collected by the LinkedIn component and assigned by LinkedIn to the respective LinkedIn account of the data subject.

If the data subject activates one of the LinkedIn buttons integrated on our website, the data and information transmitted in this way are assigned to the personal LinkedIn user account of the data subject and stored and processed by LinkedIn.

LinkedIn always receives information via the LinkedIn component that the data subject has visited our website if the data subject is logged into LinkedIn at the time of accessing our website; this occurs regardless of whether the data subject clicks the LinkedIn component or not.

If the data subject does not want this information to be transmitted to LinkedIn, he or she may prevent such transmission by logging out of the LinkedIn account before accessing our website.

LinkedIn offers the possibility to unsubscribe from e‑mail messages, SMS messages and interest‑based advertising and to manage advertising settings at www.linkedin.com/psettings/guest-controls. LinkedIn also uses partners such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua and Lotame, which may set cookies. Such cookies may be rejected at www.linkedin.com/legal/cookie-policy. The applicable LinkedIn privacy policy is available at www.linkedin.com/legal/privacy-policy, and the LinkedIn cookie policy is available at www.linkedin.com/legal/cookie-policy.

19. Data protection provisions on the use and application of Platform X (formerly Twitter) 

The data controller has integrated components of Platform X on this website. Platform X is a multilingual, publicly accessible microblogging service on which users can publish and share so‑called tweets, i.e. short messages limited to 280 characters. These short messages may be accessible to anyone, including persons who are not registered on Platform X. Tweets are also displayed to so‑called followers of the respective user. Followers are other Platform X users who follow that user’s tweets. Furthermore, Platform X enables communication with a broad audience through hashtags, links or reposts (retweets).

The company operating Platform X is X Corp., c/o X Corp., Palo Alto, California, USA. With regard to data protection matters outside the United States, X Internet Unlimited Company (Attn: Data Protection Officer), One Cumberland Place, Fenian Street, Dublin 2, Ireland, is responsible.

Each time one of the individual pages of this website operated by the data controller and on which a Platform X component (X button) has been integrated is accessed, the Internet browser on the data subject’s information technology system is automatically prompted to download a representation of the corresponding Platform X component from Platform X. Further information on Platform X buttons can be found at https://developer.x.com/en/docs/x-for-websites/tweet-button/overview. As part of this technical procedure, Platform X receives information about which specific subpage of our website is visited by the data subject. The purpose of integrating the Platform X component is to enable users to disseminate content from this website, to increase the visibility of this website in the digital world and to increase visitor numbers.

If the data subject is logged into Platform X at the same time, Platform X recognises which specific subpage of our website the data subject is visiting each time the data subject accesses our website and for the entire duration of the stay on our website. This information is collected by the Platform X component and assigned to the respective Platform X account of the data subject.

If the data subject activates one of the Platform X buttons integrated on our website, the data and information transmitted in this way are assigned to the personal Platform X user account of the data subject and stored and processed by Platform X.

Platform X always receives information via the Platform X component that the data subject has visited our website if the data subject is logged into Platform X at the time of accessing our website; this occurs regardless of whether the data subject clicks the Platform X component or not.

If the data subject does not want this information to be transmitted to Platform X, he or she may prevent such transmission by logging out of the Platform X account before accessing our website.

The applicable data protection provisions of Platform X are available at https://x.com/en/privacy.

20. Data protection provisions on the use and application of Xing

The data controller has integrated components of Xing on this website. Xing is an Internet‑based social network that enables users to connect with existing business contacts and to establish new professional contacts. Individual users can create a personal profile on Xing. Companies can, for example, create company profiles or publish job offers on Xing.

The company operating Xing services is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany.

Each time one of the individual pages of this website operated by the data controller and on which a Xing component (Xing plug‑in) has been integrated is accessed, the Internet browser on the data subject’s information technology system is automatically prompted to download a representation of the corresponding Xing component from Xing. Further information on Xing plug‑ins can be found at dev.xing.com/plugins. As part of this technical procedure, Xing receives information about which specific subpage of our website is visited by the data subject.

If the data subject is logged into Xing at the same time, Xing recognises which specific subpage of our website the data subject is visiting each time the data subject accesses our website and for the entire duration of the stay on our website. This information is collected by the Xing component and assigned by Xing to the respective Xing account of the data subject.

If the data subject activates one of the Xing buttons integrated on our website, the data and information transmitted in this way are assigned to the personal Xing user account of the data subject and stored and processed by Xing.

Xing always receives information via the Xing component that the data subject has visited our website if the data subject is logged into Xing at the time of accessing our website; this occurs regardless of whether the data subject clicks the Xing component or not.

If the data subject does not want this information to be transmitted to Xing, he or she may prevent such transmission by logging out of the Xing account before accessing our website.

Current information on data protection published by Xing is available in the privacy policy at https://www.xing.com/privacy. The principles governing data processing in connection with the integration of social media functions, including the “Share” button, result from this privacy policy and from the relevant technical information provided by the service operator.

21. Data protection provisions on the use and application of YouTube

The data controller has integrated components of YouTube on this website. YouTube is an Internet video portal that enables video publishers to upload video clips free of charge and allows other users to view, rate and comment on such videos, also free of charge. YouTube permits the publication of all types of videos, making it possible to access full-length films and television programmes as well as music videos, trailers or videos created by users themselves.

The company operating YouTube is YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043‑1351, USA. With regard to data protection matters within the EU, the EEA and the United Kingdom, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is responsible.

Each time one of the individual pages of this website operated by the data controller and on which a YouTube component (YouTube video) has been integrated is accessed, the Internet browser on the data subject’s information technology system is automatically prompted to download a representation of the corresponding YouTube component from YouTube. Further information on YouTube is available at www.youtube.com/yt/about/en/. As part of this technical procedure, YouTube and Google receive information about which specific subpage of our website is visited by the data subject.

If the data subject is logged into YouTube at the same time, YouTube recognises which specific subpage of our website the data subject is visiting when accessing a subpage containing a YouTube video. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.

YouTube and Google always receive information via the YouTube component that the data subject has visited our website if the data subject is logged into YouTube at the time of accessing our website; this occurs regardless of whether the data subject clicks on the YouTube video or not.

If the data subject does not want this information to be transmitted to YouTube and Google, he or she may prevent such transmission by logging out of the YouTube account before accessing our website.

The data protection provisions published by YouTube, available at www.policies.google.com/privacy?hl=en, provide information on the collection, processing and use of personal data by YouTube and Google.

22. Legal basis for processing 

Article 6(1)(a) of the GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, with processing operations required for the delivery of goods or the provision of another service or consideration, the processing is based on Article 6(1)(b) of the GDPR. The same applies to such processing operations that are necessary for the implementation of pre‑contractual measures, for example in the case of enquiries concerning our products or services.

If our company is subject to a legal obligation that requires the processing of personal data, such as for compliance with tax obligations, the processing is based on Article 6(1)(c) of the GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This may be the case, for example, if a visitor to our premises were injured and it was necessary to transmit the person’s name, age, health insurance details or other vital information to a doctor, hospital or another third party. In such a case, the processing would be based on Article 6(1)(d) of the GDPR.

Finally, processing operations may be based on Article 6(1)(f) of the GDPR. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, provided that such interests are not overridden by the interests, fundamental rights or freedoms of the data subject. Such processing operations are permitted because they have been expressly mentioned by the EU legislator. In this context, it was recognised that a legitimate interest may exist where the data subject is a customer of the data controller (Recital 47, sentence 2 GDPR).

23. Legitimate interests pursued by the data controller or a third party 

Where the processing of personal data is based on Article 6(1)(f) of the GDPR, our legitimate interest is the conduct of our business activities for the benefit of all our employees and shareholders.

24. Storage period for personal data 

The criterion used to determine the storage period of personal data is the respective statutory retention period. After expiry of this period, the corresponding data are routinely deleted, provided that they are no longer required for the performance or initiation of a contract.

25. Legal or contractual requirements to provide personal data 

The provision of personal data may be required by law in certain cases (e.g. tax regulations) or may arise from contractual provisions (e.g. information relating to a contracting partner). In some instances, it may be necessary for a data subject to provide personal data to us in order to conclude a contract, which must then be processed by us. For example, a data subject is obliged to provide us with personal data if our company enters into a contract with that person. Failure to provide the personal data would mean that the contract with the data subject could not be concluded.

Before a data subject provides personal data, the data subject must contact one of our employees. Our employee will inform the data subject in each individual case whether the provision of the personal data is required by law or contract, whether it is necessary for the conclusion of a contract, whether there is an obligation to provide the personal data, and what the consequences of failing to provide such data would be.

26. Existence of automated decision‑making 

As a responsible company, we do not use automated decision‑making or profiling.

27. Privacy policy on the use and application of Google Fonts 

SUNZINET uses external fonts provided by Google Fonts on its website. Google Fonts is a service of Google Inc. (“Google”). The integration of these web fonts takes place via a connection to a server, usually a Google server located in the United States. This transmits to the server information about which of our web pages you have visited. The IP address of the browser of the end device visiting these websites is also stored by Google.

Further information can be found in Google’s privacy policy, available at:
www.google.com/fonts#AboutPlace:about
www.google.com/policies/privacy

28. Privacy policy on the use and application of Adobe Fonts 

We use Adobe Fonts to display fonts on our website. Adobe Fonts is a service that provides access to a font library and is operated by Adobe Inc., 345 Park Avenue, San Jose, CA 95110‑2704, USA. The controller of personal data for the EU/EEA/UK region is Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland.

When you access our website, your browser loads the required web fonts into the browser cache in order to display text and fonts correctly. In the course of providing Adobe Fonts, no cookies are set or used to deliver fonts. For the provision of the Adobe Fonts service, Adobe may collect information about the fonts used to identify the website itself and the associated Adobe Fonts account.

Further information can be found in the Adobe Fonts privacy information and in Adobe’s privacy policy:
https://www.adobe.com/privacy/policies/adobe-fonts.html

29. Privacy policy on the use of surfersIdent 

We use surfersIdent to monitor and optimise our website in accordance with the surfersIdent privacy policy. Visitors to our website accept this policy by visiting our site. The terms are available at: www.surfersident.de.

For the continuous optimisation and analysis of our online offering, data are collected and processed anonymously on this website using the analytical tool “surfersIdent”. Pseudonyms are created in order to generate anonymous user profiles. Under no circumstances are the data used to personally identify the visitor (even if this were technically possible), nor are they merged with information about the owner of the pseudonym.

If you do not agree with this service, you may object to the use of your visit data and completely deactivate website tracking by clicking the following link:
http://www.surfersident.de/surfersident/public/auth/deactivatevisitor

30. Privacy policy on the use and application of HubSpot 

Our registration service allows visitors to our website to learn more about our company, download content and provide their contact details and other demographic information. This information is stored on servers operated by our software partner HubSpot. It may be used by us to contact visitors to our website and to determine which of our company’s services are of interest to them.

All information we collect is subject to this privacy policy. We use all collected information exclusively for the purpose of optimising our marketing activities. HubSpot is subject to the TRUSTe Privacy Seal and the EU‑US and US‑Swiss Safe Harbor frameworks.

The data controller for HubSpot is HubSpot Inc., Two Canal Park, Cambridge, MA 02141, USA. The entity responsible for the processing of personal data of users from the EU/EEA/UK is HubSpot Ireland Ltd., HubSpot House, One Sir John Rogerson’s Quay, Dublin 2, Ireland.

31. Privacy policy on the use and application of Crazy Egg

We use the analytics tool Crazy Egg on our website. In addition to the standard display options of Google Analytics services, it offers additional functions that allow more detailed analysis of user behaviour.

Using Crazy Egg technology, information about visitors is collected and transmitted to Crazy Egg servers. The analyses include in particular:

• Heatmaps: which elements, links and areas are clicked most frequently on a page
• Scrollmaps: how users scroll, which sections of the website are viewed longest or not at all

Crazy Egg does not collect IP addresses or other personal data, meaning that data collection and analysis are completely anonymous. The identity of the user remains unknown. You may object to data collection by Crazy Egg by adjusting your browser settings or using the opt‑out options provided by Crazy Egg:
https://www.crazyegg.com/opt-out

The operator of Crazy Egg is Crazy Egg, Inc., 16220 E. Ridgeview Lane, La Mirada, CA 90638, USA.

32. Data protection provisions on the use and application of Mouseflow

This website uses Mouseflow, an analytics tool provided by Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark, for the purpose of collecting and storing data for marketing and optimisation purposes.

Pseudonymised usage profiles may be created from this data. Randomly selected visits (only with anonymised IP addresses) are recorded. This creates a record of mouse movements and clicks with the intention of replaying visits and identifying potential improvements to the website.

The data collected by Mouseflow are not used to personally identify the visitor without separate consent of the data subject and are not combined with personal data of the pseudonym holder. If you do not wish to be recorded, you can globally deactivate tracking on all websites that use Mouseflow for the browser you are currently using by clicking the following link:
https://mouseflow.com/opt-out

33. Data protection provisions on the use and application of smashleads 

We use the smashleads™ lead generator to generate and store personal data, i.e. leads. All information on how smashleads™ stores and processes data can be found at:
https://smashleads.de/data-processing.html

The operator of the smashleads service is smashleads UG (limited liability), Kiebitzweg 5, 50354 Hürth, Germany.

Final Provisions

Compliance with applicable data protection regulations, in particular the General Data Protection Regulation (GDPR), is a matter of course for us. Accordingly, we ensure a responsible and lawful handling of personal data.

Where the processing of personal data is based on consent, such consent may be withdrawn at any time with effect for the future. Subject to the statutory requirements, data subjects are entitled in particular to the right of access to the personal data processed about them, as well as the right to rectification, erasure or restriction of processing of such data.

If you have any questions regarding data protection or wish to exercise your data subject rights, you may contact our Data Protection Officer at any time:
dsgvo@sunzinet.com

This Privacy Policy applies to all visitors to the website www.sunzinet.com operated by the Internet agency SUNZINET GmbH. By using this website, users acknowledge the contents of this Privacy Policy.

The content of this website has been compiled with the greatest possible care. However, editorial errors cannot be completely excluded. We therefore appreciate any comments or corrections submitted via our contact form.

Liability for the accuracy, completeness and timeliness of the information provided is excluded to the extent permitted by law. In particular, SUNZINET GmbH shall not be liable for any damages or consequences arising from the direct or indirect use of the content provided.

As a service provider, SUNZINET GmbH is responsible for its own content in accordance with general statutory provisions. References to external content provided by third parties (“external links”) must be distinguished from our own content. SUNZINET GmbH has no influence over the content of external websites and does not adopt such content as its own. External content linked to by SUNZINET GmbH does not reflect the opinion of SUNZINET GmbH, but serves solely to provide information and illustrate connections. Responsibility for such external content rests exclusively with the respective provider.

All content published on this website (including layout, text, images and graphics) is subject to copyright law. Any use beyond what is permitted by statutory copyright provisions requires the prior written consent of the respective rights holder. In particular, this applies to reproduction, editing, translation, storage, processing or reproduction of content in databases or other electronic media and systems. Downloading or copying content is permitted solely for private, non‑commercial use.