Data protection policy

Adform A/S, Wildersgade 10B, sal.1, DK-1408 Copenhagen, Denmark (provider of Adform), https://site.adform.com/

We use Adform's retargeting technology on our website. This enables us to target those Internet users who have already shown an interest in our website and our products on our partners’ websites. The advertising material is displayed during retargeting on the basis of a cookie-based analysis of previous user behaviour. The cookie is set as soon as you have contact with a PAYONE advertising medium (e.g. advertising banner) activated via Adform. The cookie contains an advertising ID and is created with a validity of 60 days. There are no characteristics (e.g. full IP address, first or last name, address or email address) that can be used to identify you personally. However, we can recognise which ad directed you to PAYONE on the basis of the advertising ID. PAYONE never links the advertising ID to personal data.

An analysis of your usage behaviour using Adform will only take place with your express consent (opt-in). You can withdraw your consent at any time with future effect under Point 2.5 Cookie settings and revocation within this Data Protection Policy.  The legal basis for the use of Adform is § 25 (1) TDDDG and Art. 6 (1) 1 lit. a) GDPR.

More details are available in the Adform Data Protection Policy.

Axel Springer Teaser Ad GmbH, Axel-Springer-Straße 65, 10888 Berlin (provider of Ad Up), https://www.adup-tech.com/en/

We use tracking from Ad Up, a technology and service provider of Axel Springer Teaser Ad GmbH, on our website. By collecting anonymized and/or pseudonymous data (e.g. browser ID and data, time and type of interaction on our website, interaction ID, campaign ID and creative ID of the relevant campaign or advertising material, request ID and, if applicable, meta-information about the page, such as the page name), Ad Up can deliver relevant, interest-based advertisements to you on websites for a certain period of time.

Ad Up uses cookies in order to be able to offer us as the advertiser so-called conversion tracking, which determines the effectiveness of our ads and keywords.

An analysis of your usage behavior using Ad Up Technology will only be carried out with your express consent (opt-in). You can withdraw your consent at any time with effect for the future under point 2.5 Cookie settings and revocation within this Data Protection Policy. The legal basis for the use of Ad Up Technology is § 25 (1) TDDDG and Art. 6 (1) 1 lit. a) GDPR.

You can find more information on data protection at Axel Springer Teaser Ad GmbH at https://www.adup-tech.com/en/privacy-policy/. You can also use the "Activate Opt-Out Cookie" button there to set an opt-out cookie in your browser and thus deactivate Ad Up in this browser.

Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (provider of Facebook Pixel), https://www.facebook.com/

We use the Facebook "conversion pixel" on our website (now: Meta Platforms). The Facebook pixel is used for the purpose of analysis, optimisation and the economic operation of our website, advertising presence and marketing measures through ads on Facebook ("Facebook Ads").

The use of the Facebook pixel aims to ensure that our Facebook ads correspond to the potential interest of the users and are not a nuisance. The pixel enables us to identify our website visitors as the target group for our Facebook ads. The Facebook pixel is used for the purpose of only displaying the Facebook ads we have created to those Facebook users who have shown an interest in our website or who have characteristics based on their user behaviour (e.g. interests in certain topics or products, which are determined on the basis of the visited websites) which we specify on Facebook ( "Custom Audiences").

We also use the Facebook pixel for statistical and market research purposes. For this purpose, we can use the Facebook pixel to track whether the users were forwarded to our website after clicking on Facebook ads and made a purchase there ( “Conversion”).

An analysis of your usage behaviour using the Facebook pixel will only be carried out with your express consent (opt-in). You can withdraw your consent at any time with future effect under Point 2.5 Cookie settings and revocation within this Data Protection Policy. The legal basis for the use of the Facebook pixel is § 25 (1) TDDDG and Art. 6 (1) 1 lit. a) GDPR. In addition to the opt-in/opt-out for our website, you can also check and adjust your personal advertising preferences on Facebook at any time.

Meta is headquartered in the USA. The EU Commission has confirmed that all companies certified under the EU-U.S. Data Privacy Framework have an adequate level of data protection comparable to that in the EU. The companies that are part of the EU-U.S. Data Privacy Framework can be viewed at https://www.dataprivacyframework.gov/s/participant-search. Meta is certified accordingly.

Further information about how user data is handled by Facebook is available in the Facebook Data Protection Policy.

Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (Provider of Facebook Lead Ads), https://www.facebook.com

We use the Facebook Lead Ads function (now: Meta Platforms - so-called "Facebook Ads") on our website. Facebook Ads are used for the purpose of generating leads in order to collect and process certain personal data from interested parties - so-called leads - via a contact form displayed on Facebook websites (so-called "instant form"). The content and scope of the data requested in this form depends on the focus of the respective lead campaign.

The processing of personal data is strictly bound to the purposes pursued with the respective lead ad campaign. These purposes are clearly stated in the lead ad or on the form provided before the specified data is transmitted. We use this data exclusively for our own marketing purposes.

Lead campaigns are only activated with your express consent (opt-in). You can withdraw your consent at any time directly via Facebook in the lead campaign. The legal basis for the use of Facebook Lead Ads is § 25 (1) TDDDG and Art. 6 (1) 1 lit. a) GDPR. In addition to the opt-in for our website, you also have the option of reviewing and adjusting your personal advertising preferences on Facebook at any time.

Meta is headquartered in the USA. The EU Commission has certified that all companies certified under the EU-U.S. Data Privacy Framework have an adequate level of data protection comparable to that in the EU. The companies that are part of the EU-U.S. Data Privacy Framework can be viewed at https://www.dataprivacyframework.gov/s/participant-search. Meta is certified accordingly.

Further information about how user data is handled by Facebook is available in the Facebook Data Protection Policy.

Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (provider of Google Analytics), https://www.google.de/intl/de/analytics/

This website uses Google Analytics, a web analytics service provided by Google Inc. Google Analytics makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and analyse the activities of a user across devices in this way.

Google Analytics enables an analysis of your use of the website. The information generated by Google Analytics about your use of this website is usually transferred to a Google server in the USA and stored there. By interposing a proxy server for server-side tagging of our data, we ensure that any PII (Personally Identifiable Information) is deleted or modified in such a way that user recognition is not possible. Only after this step is the tagged data sent to Google Analytics. Likewise, no data is collected or shared across websites. Google will use this information on our behalf to evaluate your use of the website, compile reports on website activity and provide us with other services related to website activity and Internet usage.

Your usage behaviour will only be analysed by Google Analytics with your express consent (opt-in). You can withdraw your consent at any time with future effect under Point 2.5 Cookie settings and revocation within this Data Protection Policy. The legal basis for the use of Google Analytics is § 25 (1) TDDDG and Art. 6 (1) 1 lit. a) GDPR.

Google is headquartered in the USA. The EU Commission has confirmed that all companies certified under the EU-U.S. Data Privacy Framework have an adequate level of data protection comparable to that in the EU. The companies that are part of the EU-U.S. Data Privacy Framework can be viewed at https://www.dataprivacyframework.gov/s/participant-search. Google is certified accordingly.

The data sent by us and linked with cookies, user IDs (e.g. user ID) or advertising IDs will be automatically deleted after 14 months. Data with an expired retention period is automatically deleted once a month.

More details are available in Google’s Terms of use and data protection policy.

Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (provider of Google Analytics Audience), https://www.google.de/intl/de/analytics/

Our website uses Google Analytics Audience, a service provided by Google Inc. (hereinafter: Google). Google Analytics Audience allows users who have visited our website to be shown targeted advertising from us on other external sites in the Google Partner Network. By interposing a proxy server for server-side tagging of our data, we ensure that any PII (Personally Identifiable Information) is deleted or modified in such a way that user recognition is not possible. Only after this step is the tagged data sent to Google Analytics Audience. Likewise, no data is collected or shared across websites.

An analysis of your usage behaviour using Google Analytics Audience will only be carried out with your express consent (opt-in). You can withdraw your consent at any time with future effect under Point 2.5 Cookie settings and revocation within this Data Protection Policy. The legal basis for the use of Google Analytics Audience is § 25 (1) TDDDG and Art. 6 (1) 1 lit. a) GDPR.

Google is headquartered in the USA. The EU Commission has confirmed that all companies certified under the EU-U.S. Data Privacy Framework have an adequate level of data protection comparable to that in the EU. The companies that are part of the EU-U.S. Data Privacy Framework can be viewed at https://www.dataprivacyframework.gov/s/participant-search. Google is certified accordingly.

The data sent by us and linked with cookies, user IDs (e.g. user ID) or advertising IDs will be automatically deleted after 14 months. Data with an expired retention period is automatically deleted once a month.

More details can be viewed in Google’s Terms of use and data protection policy and by following this link.

Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (provider of Google Ads), https://www.doubleclickbygoogle.com/de/

We use Google Ads, a service provided by Google Inc. (hereinafter: Google). Google Ads makes it possible to place user-based advertisements. Google Ads recognizes which ad has already been placed in your browser and whether you have accessed our website via a placed ad. In addition, subsequent interactions on our website are analyzed in order to measure the success of the Ads campaign. By interposing a proxy server for server-side tagging of our data, we ensure that any PII (Personally Identifiable Information) is deleted or altered in such a way that user recognition is not possible. Only after this step is the tagged data sent to Google Ads. Likewise, no data is collected or shared across websites.

We will only show you ads tailored to your interests with your express consent (opt-in). You can withdraw your consent at any time with future effect under Point 2.5 Cookie settings and revocation within this Data Protection Policy. The legal basis for the use of Google Ads is § 25 (1) TDDDG and Art. 6 (1) 1 lit. a) GDPR.

Google is headquartered in the USA. The EU Commission has confirmed that all companies certified under the EU-U.S. Data Privacy Framework have an adequate level of data protection comparable to that in the EU. The companies that are part of the EU-U.S. Data Privacy Framework can be viewed at https://www.dataprivacyframework.gov/s/participant-search. Google is certified accordingly.

More details are available in Google’s Terms of use and data protection policy. 

Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (provider of Google Tag Managers), https://www.google.com/intl/de/tagmanager/

For reasons of transparency, we would like to point out that we use Google Tag Manager. Google Tag Manager does not collect any personal data itself. The Tag Manager makes it easier for us to integrate and manage our tags. Tags are small code elements that serve, among other things, to measure traffic and visitor behaviour, record the impact of online advertising and social channels, set up remarketing and targeting groups and test and optimise websites. We use the tools described in this Data Protection Policy. If you have performed a deactivation, this will remain in effect for all tracking tags that have been implemented with this Tag Manager.

Google Tag Manager is only used with your express consent (opt-in). You can withdraw your consent at any time with future effect under Point 2.5 Cookie settings and revocation within this Data Protection Policy. The legal basis for the use of Manager is § 25 (1) TDDDG and Art. 6 (1) 1 lit. a) GDPR.

Google is headquartered in the USA. The EU Commission has confirmed that all companies certified under the EU-U.S. Data Privacy Framework have an adequate level of data protection comparable to that in the EU. The companies that are part of the EU-U.S. Data Privacy Framework can be viewed at https://www.dataprivacyframework.gov/s/participant-search. Google is certified accordingly.

Further information about Google Tag Manager is available here: https://www.google.com/intl/de/tagmanager/use-policy.html.

Hearts & Science München GmbH, Blumenstraße 28, 80331 Munich, Germany

We use the technology of the marketing agency Hearts & Science on our website. This enables us to evaluate the success of our online sales partners' advertising measures as part of affiliate marketing campaigns and to remunerate their advertising performance accordingly.

The advertising of PAYONE products and services is made possible for online partners via the partner programs at financeAds GmbH & Co.KG and lead alliance GmbH. Website operators can use these partner programs to advertise PAYONE products and services on their websites. After checking their website(s), they receive access to PAYONE advertising material, which they can integrate into their website. If users reach the PAYONE websites via these advertising media (e.g. by clicking on an advertising banner), PAYONE sets a cookie which contains information about the advertising media and the advertising partner via which the user reached the PAYONE websites. Furthermore, in the event of a subsequent order, the order number and other parameters without personal reference (click ID, agent number, advertising material displayed, order date) are processed to determine the success of the referral. The cookie is deleted after 45 days. The IP address or other personal data is not stored.

The success of the advertising measures is measured using Hearts & Science technology only with your express consent (opt-in). You can revoke your consent at any time with effect for the future under point 2.5 Cookie settings and revocation within these data protection provisions. The legal basis for the use of Hearts & Science technology is § 25 para. 1 TDDDG.

Further information on the handling of user data by Hearts & Science, financeads and leadalliance can be found in the respective privacy policies of the providers:

• Hearts & Science: https://partner.payone.com/
• financeAds: https://www.financeads.net/datenschutz/  
• lead alliance: https://www.lead-alliance.net/dataprotection2 and/or https://www.payone-partner.de/dataprotection

Hotjar Ltd., Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta (provider of Hotjar), https://www.hotjar.com/.

We use Hotjar to better understand the needs of our users and to optimise the content of this website. With Hotjar's technology, we get a better understanding of our users' experiences (e.g. how much time users spend on which pages, which links they click on, what they like and what they don't like, etc.) and this helps us to align our content on the basis of user feedback. Hotjar works with cookies and other technologies to collect information about the behaviour of our users and their end devices (in particular the IP address of the device is recorded and saved in anonymised form, screen size, device type (Unique Device Identifiers), information about the browser used, location (country only), preferred language for displaying our website). Hotjar stores this information in a pseudonymised user profile. The storage period is 365 days. The information is not used by Hotjar or us to identify individual users and is not combined with other data about individual users. Further information is provided in Hotjar’s Data Protection Policy.

Your user behaviour will only be analysed by Hotjar with your express consent (opt-in). You can withdraw your consent at any time with future effect under Point 2.5 Cookie settings and revocation. The legal basis for the use of Hotjar is § 25 (1) TDDDG and Art. 6 (1) 1 lit. a) GDPR.

LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA (provider of LinkedIn-Pixels), https://www.linkedin.com/

We use conversion tracking technology and the retargeting function of LinkedIn on our website. This technology enables visitors to this website to play personalised advertisements on LinkedIn. It is also possible to create anonymous reports about the performance of the advertisements and information about website interaction. For this purpose, the LinkedIn Insight Tag (LinkedIn pixel) is integrated on this website, which creates a connection to the LinkedIn server if you visit this website and give your consent.

Your usage behaviour will only be analysed using the LinkedIn pixel with your express consent (opt-in). You can withdraw your consent at any time with future effect under Point 2.5 Cookie settings and revocation within this Data Protection Policy.  The legal basis for the use of the LinkedIn Pixel is § 25 (1) TDDDG and Art. 6 (1) 1 lit. a) GDPR.

LinkedIn is headquartered in the USA. The EU Commission has confirmed that all companies certified under the EU-U.S. Data Privacy Framework have an adequate level of data protection comparable to that in the EU. The companies that are part of the EU-U.S. Data Privacy Framework can be viewed at https://www.dataprivacyframework.gov/s/participant-search. LinkedIn is certified accordingly.

Further information on how LinkedIn deals with user data can be found in the LinkedIn Data Protection Policy.

Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (Provider of Microsoft Ads), https://about.ads.microsoft.com/en

We use Microsoft Ads, a service provided by Microsoft Ireland Operations Limited (Microsoft). Microsoft Ads is an online advertising program from Microsoft and allows us to place user-based advertisements. We use the so-called Universal Event Tracking (UET) within the Microsoft Advertising service, which collects and stores data on this website for marketing and optimization purposes. Microsoft Ads places a cookie on your device if you have reached our website via a Microsoft ad. In this way, Microsoft and we can recognize that you have clicked on an ad, have been redirected to our website and, for example, which offers you have viewed. In addition, subsequent interactions on our website are analyzed in order to measure the success of the ads campaign.

We will only show you advertising tailored to your interests with your explicit consent (opt-in). You can revoke your consent at any time with effect for the future under point 2.5 Cookie settings and revocation within this privacy policy. The legal basis for the use of Microsoft Ads is § 25 (1) TDDDG and Art. 6 (1) 1 a) GDPR.

Microsoft is headquartered in the US. The EU Commission has certified that all companies certified under the EU-U.S. Data Privacy Framework have an adequate level of data protection comparable to that in the EU. The companies that are part of the EU-U.S. Data Privacy Framework can be viewed at https://www.dataprivacyframework.gov/s/participant-search. Microsoft is certified accordingly.

You can find more information on this in Microsoft's terms of use and privacy policy.

Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (Provider of Microsoft Clarity), https://clarity.microsoft.com/

We use Microsoft Clarity on our website. Microsoft Clarity is a tool to check the usability of our website. For this purpose, Microsoft Clarity creates a heat map with which we can record and analyze the behavior of users on our website. Microsoft Clarity records how you use and interact with our website. This allows us to find out, for example, which areas of our website are particularly popular and which are not, and how changes to the website are received by our users. It is also possible to record sessions and view them afterwards. We use the knowledge gained from this to optimize our website.

For this purpose, Microsoft Clarity collects and processes your IP address, your location, browser information, screen resolution, language settings, information about the website and subpages visited, date and time of access to the website as well as clicks, scrolls and mouse movements and evaluates these.

Your usage behavior will only be analyzed using Microsoft Clarity with your express consent (opt-in). You can revoke your consent at any time with effect for the future under point 2.5 Cookie settings and revocation within this privacy policy. The legal basis for the use of Microsoft Clarity is § 25 (1) TDDDG and Art. 6 (1) 1 lit. a) GDPR.

Microsoft Corporation is headquartered in the USA. The EU Commission has confirmed that all companies certified under the EU-U.S. Data Privacy Framework have an adequate level of data protection comparable to that in the EU. The companies that are part of the EU-U.S. Data Privacy Framework can be viewed at https://www.dataprivacyframework.gov/s/participant-search. Microsoft Corporation is certified accordingly.

Further information on data protection at Microsoft can be found in Microsoft's privacy policy at https://privacy.microsoft.com/de-de/privacystatement.

XING AG, Gänsemarkt 43, 20354 Hamburg (provider of XING Pixel), https://www.xing.com/

We use XING tracking technology on our website to display online advertising based on target groups and for conversion tracking. For this purpose, we have implemented a XING tag (XING pixel) on our website. If you have given your consent, this tag makes a direct connection to the XING servers when you visit our website and a notification is sent that you have visited our website and whether you have made a request or taken any other action. XING assigns this information to your personal XING user account. In this way, we can target ads based on your previous webpage views and activities (remarketing). The data processed by XING does not allow us to identify you personally. We do not combine the pseudonymous information with your other personal information.

An analysis of your usage behaviour using the XING pixel is only carried out with your express consent (opt-in). You can withdraw your consent at any time with future effect under Point 2.5 Cookie settings and revocation within this Data Protection Policy. The legal basis for use of the XING pixel is § 25 (1) TDDDG and Art. 6 Para. 1 (1) lit. a) GDPR.

You can find further information about how XING handles user data, as well as your rights and settings options to protect your privacy in the XING Privacy Policy.

Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (provider of Google Fonts), https://fonts.google.com/ 

We use Google Fonts on our website. These are "Google fonts" which are downloaded from a Google server to be displayed on our website. You do not need to log in or enter a password to use Google fonts. No cookies are stored in your browser when using Google Fonts. However, the IP address and URL of the page from which you as a user access our website are transferred to Google in order to display the fonts in your browser. The files required to display the fonts are requested via the Google domains fonts.googleapis.com and fonts.gstatic.com. According to Google, the inquiries in the context of Google Fonts are separate from all other Google services and the data collected is not merged with other data. According to Google, an evaluation is only carried out in an aggregated form.  

Google fonts are only displayed with your express consent (opt-in). You can withdraw your consent at any time with future effect under Point 2.5 Cookie settings and revocation within this Data Protection Policy. The legal basis for the use of Google Fonts is § 25 (1) TDDDG and Art. 6 (1) 1 lit. a) GDPR.

Google is headquartered in the USA. The EU Commission has confirmed that all companies certified under the EU-U.S. Data Privacy Framework have an adequate level of data protection comparable to that in the EU. The companies that are part of the EU-U.S. Data Privacy Framework can be viewed at https://www.dataprivacyframework.gov/s/participant-search. Google is certified accordingly.

More details are available in Google’s Terms of use and data protection policy.

Vimeo.com, Inc, 330 West 34th Street, 10th Floor, New York, New York 10001, USA (provider of Vimeo), https://vimeo.com/ 

We embed videos from the Vimeo platform on our website. For this purpose, the videos are loaded directly from the Vimeo server. The Vimeo server is automatically informed of your IP address and a cookie is set which, among other things, analyzes which of our pages you have visited. If you are logged into your Vimeo account, this allows Vimeo to assign your usage behavior directly to your personal profile.

Videos from Vimeo will only be displayed with your express consent (opt-in). You can revoke your consent at any time with effect for the future under point 2.5 Cookie settings and revocation within this privacy policy. The legal basis for the use of Vimeo is § 25 (1) TDDDG and Art. 6 (1) 1 lit. a) GDPR.

Vimeo is headquartered in the USA. The EU Commission has certified that all companies certified under the EU-U.S. Data Privacy Framework have an adequate level of data protection comparable to that in the EU. The companies that are part of the EU-U.S. Data Privacy Framework can be viewed at https://www.dataprivacyframework.gov/s/participant-search. Vimeo is certified accordingly.

You can find more information on this in Vimeo's privacy policy.

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (provider of YouTube), https://www.youtube.com/?gl=DE

We embed videos from the YouTube platform on our website. The videos are loaded directly from the YouTube server for this purpose. The YouTube server is automatically informed of your IP address and which of our pages you have visited. If you are logged into your YouTube account, this allows Google to assign your usage behaviour directly to your personal profile.

YouTube videos are only shown with your express consent (opt-in). You can withdraw your consent at any time with future effect under Point 2.5 Cookie settings and revocation within this Data Protection Policy. The legal basis for the use of YouTube is § 25 (1) TDDDG and Art. 6 (1) 1 lit. a) GDPR.

Google is headquartered in the USA. The EU Commission has confirmed that all companies certified under the EU-U.S. Data Privacy Framework have an adequate level of data protection comparable to that in the EU. The companies that are part of the EU-U.S. Data Privacy Framework can be viewed at https://www.dataprivacyframework.gov/s/participant-search. Google is certified accordingly.

More details are available in Google’s Terms of use and data protection policy.

Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (provider of Google reCAPTCHA), https://www.google.com/recaptcha/intro/v3.html

We integrate the "reCaptcha" function from Google Inc. for the detection of bots, for example when inputting details in contact forms. The behavioural information of users (e.g. mouse movements or queries) are included in the “captchas" evaluated to distinguish people from bots. The name "bot" is a short form of the English term "robot" (robot). These are controlled by a computer program, which, like an automated machine, is programmed to process certain tasks without human intervention.  The “captchas” are another security function on our website. “Captcha” stands for “Completely Automated Public Turing test to tell Computers and Humans Apart”. In German this means: “Vollautomatischer öffentlicher Turing-Test zur Unterscheidung von Computern und Menschen”. When you visit our website, we transfer information to Google about your access. Google in particular uses the following information to check whether you are a human or a computer:

• The IP address of your end device
• Referrer (address of the website where the captcha is used)
• Information about the browser you are using (e.g. browser type and version, screen resolution, language, installed plugins, time and date)
• If you are registered and logged in to Google, your Google account
• Your surfing behaviour on websites
• Your input behaviour (e.g. your mouse movements on the reCAPTCHA areas)
• In some cases, small tasks where you have to identify pictures or numbers

The legal basis for the use of Google reCAPTCHA is Art. 6 (1) 1 lit. c) in conj. with Art. 24, 32 GDPR. The use serves the fulfilment of a legal obligation (obligation to secure our website against external attacks as well as fraud prevention) to which we as are subject. reCaptcha supports us with suitable technical measures to ensure a level of protection appropriate to the risk.

Google is headquartered in the USA. The EU Commission has confirmed that all companies certified under the EU-U.S. Data Privacy Framework have an adequate level of data protection comparable to that in the EU. The companies that are part of the EU-U.S. Data Privacy Framework can be viewed at https://www.dataprivacyframework.gov/s/participant-search. Google is certified accordingly.

More details are available in Google’s Terms of use and data protection policy.