Privacy Policy

1) Introduction and contact details of the controller

1.1 We are pleased that you are visiting our website and would like to thank you for your interest. Below, we inform you about how your personal data is handled when you use our website. Personal data in this context means all data by which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Inter Medien Networks GmbH, Schlosshof 5a, 17509 Ludwigsburg, Germany, Tel.: +49 38352 66 90 44, email: hello@inter-medien.com. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data collection when you visit our website

2.1 If you use our website purely for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the page server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

• The website visited
• Date and time of access
• Amount of data sent in bytes
• Source/referrer from which you reached the page
• Browser used
• Operating system used
• IP address used (where applicable, in anonymised form)

The processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to review the server log files retrospectively should concrete indications point to unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the string “https://” and the lock symbol in your browser bar.

3) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called “session cookies”), while others remain on your device for longer and allow page settings to be saved (so-called “persistent cookies”). In the latter case, you can find the storage period in the overview of the cookie settings of your web browser.

If personal data is also processed by individual cookies we use, the processing is carried out either in accordance with Art. 6 (1) lit. b GDPR for the performance of the contract, in accordance with Art. 6 (1) lit. a GDPR where consent has been given, or in accordance with Art. 6 (1) lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and in a customer-friendly and effective design of the site visit.

You can set your browser so that you are informed when cookies are set and can decide individually whether to accept them, or so that the acceptance of cookies is excluded in certain cases or in general. Please note that if you do not accept cookies, the functionality of our website may be restricted.

4) Contacting us

4.1 Calendly

To provide an online appointment-booking function, we use the services of the following provider: Calendly, LLC, BB&T Tower, 271 17th St NW, Atlanta, GA 30363, USA.

For the purpose of scheduling appointments, your first and last name and email address (and, where applicable, your telephone number if a telephone appointment is requested) are collected in accordance with Art. 6 (1) lit. b GDPR and, in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in effective customer management and efficient appointment administration, transmitted to the provider and stored there for organising the appointment. After the appointment has taken place or the agreed appointment period has expired, your data will be deleted by the provider.

We have concluded a data processing agreement with the provider which ensures the protection of our site visitors’ data and prohibits unauthorised disclosure to third parties. For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

4.2 Zammad

To process customer enquiries, we use the email ticketing system of the following provider: Zammad GmbH, Marienstraße 11, 10117 Berlin, Germany.

If you send us contact enquiries by email via our website, these are stored and organised in the ticket system to enable chronological processing and to improve the service experience. Using the individually assigned ticket number, you can check the current processing status of your request at any time. For the organisation and processing of enquiries, personal data is collected to the extent you provide it, but in any case your surname, first name and email address, transmitted to the provider, stored there and read out. The legal basis for processing this data is our legitimate interest in the efficient organisation of our customer service, in answering your request as quickly as possible and in optimising our service offering in accordance with Art. 6 (1) lit. f GDPR.

We have concluded a data processing agreement with the provider which ensures the protection of our site visitors’ data and prohibits unauthorised disclosure to third parties.

4.3 General contact

When you contact us (e.g. via our contact form or by email), personal data is processed exclusively for the purpose of handling and answering your enquiry and only to the extent necessary for this. The legal basis for processing this data is our legitimate interest in answering your enquiry in accordance with Art. 6 (1) lit. f GDPR. If your contact is aimed at concluding a contract, an additional legal basis for the processing is Art. 6 (1) lit. b GDPR. Your data will be deleted when it is apparent from the circumstances that the matter in question has been conclusively resolved, provided that no statutory retention obligations prevent this.

5) Use of customer data for direct marketing

5.1 Signing up for our email newsletter

If you sign up for our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing further data is voluntary and is used to address you personally. For sending the newsletter we use the so-called double opt-in procedure, which ensures that you only receive newsletters once you have expressly confirmed your consent to receiving them by clicking a verification link sent to the email address you provided.

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 (1) lit. a GDPR. We store the IP address assigned by your internet service provider (ISP) as well as the date and time of registration so that any possible misuse of your email address can be traced at a later date.

The data we collect when you sign up for the newsletter is used strictly for this purpose. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the controller named at the beginning. After you unsubscribe, your email address will be deleted from our newsletter distribution list without delay, unless you have expressly consented to further use of your data or we reserve the right to use your data in a way that goes beyond this, which is permitted by law and about which we inform you in this policy.

5.2 Sending the email newsletter to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you email offers for goods or services from our range similar to those you have already purchased. Pursuant to § 7 (3) UWG (German Act Against Unfair Competition), we do not need to obtain separate consent from you for this. In this respect, the data processing is carried out solely on the basis of our legitimate interest in personalised direct marketing in accordance with Art. 6 (1) lit. f GDPR.

If you objected to the use of your email address for this purpose from the outset, we will not send you any such emails. You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying the controller named at the beginning. You will only incur transmission costs at the basic rates for this. Upon receipt of your objection, the use of your email address for advertising purposes will cease without delay.

5.3 ActiveCampaign

Our email newsletters are sent via this provider: ActiveCampaign, LLC, 150 N. Michigan Ave Suite 1230, Chicago, IL, USA.

On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided when signing up for the newsletter to this provider in accordance with Art. 6 (1) lit. f GDPR, so that the provider can send the newsletter on our behalf. Subject to your express consent in accordance with Art. 6 (1) lit. a GDPR, the provider also carries out a statistical evaluation of the success of newsletter campaigns using web beacons or tracking pixels in the emails sent, which can measure open rates and specific interactions with the content of the newsletter. In doing so, device information (e.g. time of access, IP address, browser type and operating system) is also collected and evaluated, but not merged with other data sets. You can withdraw your consent to newsletter tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider which protects the data of our site visitors and prohibits disclosure to third parties. For data transfers to the USA, the provider has certified under the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

5.4 Advertising by postal mail

On the basis of our legitimate interest in personalised direct marketing, we reserve the right to store your first and last name, your postal address and – insofar as we have received this additional information from you in the context of the contractual relationship – your title, academic degree, year of birth and your professional, sector or business designation in accordance with Art. 6 (1) lit. f GDPR, and to use this data to send you interesting offers and information about our products by postal mail. You can object to the storage and use of your data for this purpose at any time by contacting us.

6) Data processing for order handling

6.1 Transmission of image files for order processing by email

On our website, we offer customers the option of commissioning the personalisation of products by submitting image files by email. The submitted image is used as a template for the personalisation of the selected product. Via the email address provided on the website, the customer can transmit one or more image files from the storage of the device used to us. We collect, store and use the files transmitted in this way exclusively for producing the personalised product as described in the respective service description on our website.

If the transmitted image files are passed on to specialised service providers for the production and processing of the order, you will be explicitly informed of this. No disclosure beyond this takes place. If the transmitted files or digital images contain personal data (in particular images of identifiable persons), all of the processing operations described above are carried out exclusively for the purpose of processing your online order in accordance with Art. 6 (1) lit. b GDPR. Once the order has been finally processed, the transmitted image files are automatically and completely deleted.

6.2 Transmission of image files for order processing via messaging function

If the customer has the option of commissioning the personalisation of products by submitting image files via the messaging function, the submitted image is used as a template for the personalisation of the selected product. We collect, store and use the files transmitted in this way exclusively for producing the personalised product as described in the respective description of our services. If the transmitted image files are passed on to specialised service providers for the production and processing of the order, you will be explicitly informed of this. No disclosure beyond this takes place.

If the transmitted files or digital images contain personal data, all processing operations are carried out exclusively for the purpose of processing your online order in accordance with Art. 6 (1) lit. b GDPR. Once the order has been finally processed, the transmitted image files are automatically and completely deleted.

6.3 Transmission of image files for order processing via upload function

On our website, we offer customers the option of commissioning the personalisation of products by submitting image files via an upload function. Via the upload form on the website, the customer can transmit one or more image files from the storage of the device used directly to us by automated, encrypted data transfer. We collect, store and use the transmitted files exclusively for producing the personalised product as described in the respective service description on our website.

If the transmitted image files are passed on to specialised service providers for the production and processing of the order, you will be explicitly informed of this. No disclosure beyond this takes place. Once the order has been finally processed, the transmitted image files are automatically and completely deleted.

6.4 Disclosure for delivery and payment processing

Insofar as necessary for the performance of the contract for delivery and payment purposes, the personal data we collect is passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 (1) lit. b GDPR. If, on the basis of a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact details you provided when placing the order (name, address, email address) in order to inform you personally, via a suitable communication channel, about upcoming updates within the legally prescribed period as part of our statutory information obligations in accordance with Art. 6 (1) lit. c GDPR.

6.5 Credit check

Should we perform in advance (e.g. delivery on account), we reserve the right to carry out a credit check based on mathematical-statistical procedures in order to safeguard our legitimate interest in determining the solvency of our customers. We transmit the personal data necessary for a credit check to the following service provider in accordance with Art. 6 (1) lit. f GDPR: Verband der Vereine Creditreform e. V., Hammfelddamm 13, 41460 Neuss, Germany.

The credit report may contain probability values (so-called score values) which are based on a scientifically recognised mathematical-statistical procedure. The calculation of the score values incorporates, among other things but not exclusively, address data. You can object to this processing of your data at any time by sending a message to the controller or to the aforementioned credit agency. However, we may remain entitled to process your personal data if this is necessary for contractual payment processing.

6.6 Debt collection

We reserve the right to pass on your data to the debt collection service provider Verband der Vereine Creditreform e. V., Hammfelddamm 13, 41460 Neuss, Germany, insofar as our payment claim has not been settled despite a prior reminder. The disclosure of your data serves the performance of the contract in accordance with Art. 6 (1) sentence 1 lit. b GDPR and the safeguarding of our legitimate interests – which prevail in the context of a balancing of interests – in the effective assertion and enforcement of our payment claim in accordance with Art. 6 (1) sentence 1 lit. f GDPR.

7) Web analytics services

Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables an analysis of your use of our website. By default, Google Analytics 4 does not use cookies when you visit the website unless you expressly consent to cookies. Instead, information about your usage behaviour is collected and processed via so-called pings. This information also includes your IP address, which, however, is truncated by Google by the last digits in order to rule out any direct identification of your person.

The information is transferred to Google servers and processed further there; transfers to Google LLC, based in the USA, are also possible. Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activity for us and to provide further services associated with website use. The data collected within the scope of Google Analytics is stored for a period of two months and then deleted.

All of the processing operations described above are carried out only if you have given us your express consent in accordance with Art. 6 (1) lit. a GDPR. Without your consent, Google Analytics 4 is not used during your visit to the site. You can withdraw your consent at any time with effect for the future by deactivating this service via the “cookie consent tool” provided on the website.

We have concluded a data processing agreement with Google which ensures the protection of our site visitors’ data and prohibits unauthorised disclosure to third parties. Further legal information on Google Analytics 4 can be found at policies.google.com/privacy.

Demographic characteristics, Google Signals, UserIDs

Google Analytics 4 uses the “demographic characteristics” function and can use it to create statistics on the age, gender and interests of site visitors. As an extension, Google Signals can be used to generate cross-device reports, provided you have activated personalised ads and linked your devices to your Google account. Likewise, the “UserIDs” function can be used to analyse your activities across devices, provided you have set up an account on this website. All of this takes place only subject to your consent in accordance with Art. 6 (1) lit. a GDPR. For data transfers to the USA, the provider has certified under the EU-US Data Privacy Framework.

8) Retargeting/remarketing and conversion tracking

Google Ads conversion tracking

This website uses the online advertising programme “Google Ads” and, within the scope of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. We use Google Ads to draw attention to our offers with the help of advertising material on external websites and to determine the success of individual advertising measures.

The conversion-tracking cookie is set when a user clicks on an Ads advert placed by Google. These cookies generally expire after 30 days and are not used for personal identification. The information obtained with the help of the conversion cookie is used to compile conversion statistics for Google Ads customers. Customers do not receive any information that could be used to personally identify users.

All of the processing operations described, in particular the setting of cookies, are carried out only if you have given us your express consent in accordance with Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the “cookie consent tool” provided on the website. For data transfers to the USA, the provider has certified under the EU-US Data Privacy Framework.

9) Site functionalities

9.1 YouTube

This website uses plugins for displaying and playing videos from the provider Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (data may also be transferred to Google LLC, USA). When you visit a page of our website containing such a plugin, your browser establishes a direct connection to the provider’s servers, whereby, among other things, your IP address is transmitted. If playback is started, the provider also sets cookies. All of the aforementioned processing operations take place only if you have given us your express consent in accordance with Art. 6 (1) lit. a GDPR – revocable via the “cookie consent tool”.

9.2 Google Maps

This website uses Google Maps (API) from Google Ireland Limited to display our location and make it easier to find us. As soon as you access the relevant subpages, information about your use (e.g. your IP address) is transmitted to Google servers, possibly also to servers of Google LLC in the USA. The collection, storage and evaluation take place on the basis of Google’s legitimate interest in accordance with Art. 6 (1) lit. f GDPR. Where legally required, we have obtained your consent for this in accordance with Art. 6 (1) lit. a GDPR, which you can withdraw at any time.

9.3 Google reCAPTCHA

On this website we use the CAPTCHA service of Google Ireland Limited. The service checks whether an input is made by a natural person or improperly by automated processing, and blocks spam, DDoS attacks and similar access. For this purpose, the provider collects, among other things, the IP address, browser and operating system type as well as the date and duration of the visit. The legal basis is our legitimate interest in preventing misuse and spam in accordance with Art. 6 (1) lit. f GDPR.

9.4 Microsoft Teams & 9.5 Zoom

For conducting online meetings, video conferences and/or webinars, we use Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA, and Zoom Video Communications Inc., 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA. The providers process your registration data (name, email address and, where applicable, telephone number) and session data as well as, where applicable, video, audio and chat contributions. The legal basis is Art. 6 (1) lit. b GDPR (performance of a contract), where applicable Art. 6 (1) lit. a GDPR (consent) or our legitimate interest in conducting these effectively in accordance with Art. 6 (1) lit. f GDPR. We have concluded data processing agreements with both providers.

9.6 Applications for job vacancies by email

On our website, we advertise currently vacant positions in a separate section, to which interested parties can apply by email. The data is stored and evaluated exclusively for the purpose of processing the application; the legal basis is Art. 6 (1) lit. b GDPR (or § 26 (1) BDSG, the German Federal Data Protection Act). If special categories of personal data (e.g. health data) are requested, the processing takes place in accordance with Art. 9 (2) lit. b or Art. 9 (1) lit. h GDPR. If no candidate is selected, the data will be deleted no later than 6 months afterwards. In the event of a successful application, the data will be processed further for the purpose of carrying out the employment relationship.

10) Tools and miscellaneous

10.1 DATEV

For our bookkeeping, we use the cloud-based accounting software of DATEV eG, Paumgartnerstr. 6-14, 90429 Nürnberg. Insofar as personal data is processed in the course of this, it is processed in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in the efficient organisation and documentation of our business transactions.

10.2 Cookie consent tool

To obtain effective user consent for cookies that require consent, this website uses a “cookie consent tool”. Cookies/services requiring consent are only loaded if the respective user grants the corresponding consent by ticking a box. The tool sets technically necessary cookies to save your cookie preferences. If personal data (e.g. your IP address) is processed in the course of this, the processing takes place in accordance with Art. 6 (1) lit. f and lit. c GDPR.

10.3 Wordfence

For security purposes, this website uses the service of Defiant Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA. The provider protects the website against unauthorised third-party access, cyberattacks as well as viruses and malware by recording IP addresses and, where applicable, further access data and comparing them with a list of known attackers. The processing takes place in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in protecting the website. We have concluded a data processing agreement with the provider; for data transfers to the USA, the provider relies on standard contractual clauses of the European Commission.

11) Rights of the data subject

11.1 With regard to the processing of your personal data, applicable data protection law grants you the following data subject rights (rights of access and intervention) vis-à-vis the controller:

• Right of access in accordance with Art. 15 GDPR
• Right to rectification in accordance with Art. 16 GDPR
• Right to erasure in accordance with Art. 17 GDPR
• Right to restriction of processing in accordance with Art. 18 GDPR
• Right to be informed in accordance with Art. 19 GDPR
• Right to data portability in accordance with Art. 20 GDPR
• Right to withdraw consent given in accordance with Art. 7 (3) GDPR
• Right to lodge a complaint in accordance with Art. 77 GDPR

11.2 Right to object: If, in the context of a balancing of interests, we process your personal data on the basis of our overriding legitimate interest, you have the right at any time to object to this processing with effect for the future on grounds relating to your particular situation. If you exercise your right to object, we will cease processing the data concerned – however, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing which override your interests, or if the processing serves the establishment, exercise or defence of legal claims. If your data is processed for direct marketing purposes, you have the right to object to this at any time.

12) Duration of storage of personal data

The duration of the storage of personal data is determined by the respective legal basis, the purpose of the processing and – where relevant – additionally by the respective statutory retention period (e.g. retention periods under commercial and tax law). When processing is based on express consent in accordance with Art. 6 (1) lit. a GDPR, the data concerned is stored until you withdraw your consent. Where statutory retention periods exist, the data is routinely deleted after their expiry, provided it is no longer required for the performance of the contract. When processing is based on Art. 6 (1) lit. f GDPR, the data is stored until you exercise your right to object under Art. 21 GDPR. Otherwise, stored personal data is deleted when it is no longer necessary for the purposes for which it was collected.