Data Protection Information pursuant to Art. 13 GDPR
Name and Address of the Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is: noax Technologies AG
Am Forst 6
85560 Ebersberg, Germany
Telephone: +49 (0) 809285360 E-mail: [email protected]
Name and Address of the Data Protection Officer
The Data Protection Officer of the controller is:
Patrick Petzka PETZKA Consulting GmbH
Trostberger Straße 24 83301 Traunreut, Germany
Telephone: +49 (0) 8669 9098975 E-mail: [email protected]
General Information on Data Processing
Legal Basis for the Processing of Personal Data
In accordance with Art. 13 GDPR, we inform you of the legal bases of our data processing. If the legal basis is not explicitly stated in the privacy notice, the following applies:
The legal basis for obtaining consent is Art. 6 para. 1 lit. a in conjunction with Art. 7 GDPR. The legal basis for processing for the performance of our services, contractual measures, and responding to inquiries is Art. 6 para. 1 lit. b GDPR. The legal basis for processing to fulfill our legal obligations is Art. 6 para. 1 lit. c GDPR. If processing of your data is necessary to safeguard a legitimate interest of our company or a third party and if your interests, fundamental rights, and freedoms do not override the former, Art. 6 para. 1 lit. f GDPR serves as the legal basis. In the event that processing personal data is necessary to protect the vital interests of the data subject or another natural person, Art. 6 para. 1 lit. d GDPR serves as the legal basis.
Data Deletion and Storage Duration
We adhere to the principles of data minimization pursuant to Art. 5 para. 1 lit. c GDPR and storage limitation pursuant to Art. 5 para. 1 lit. e GDPR. We store your personal data only as long as required to achieve the purposes stated here or as required by statutory retention periods. After the respective purpose no longer applies or after these retention periods expire, the data is deleted as quickly as possible.
External Links
This website may contain links to third-party websites or other websites under our responsibility. If you follow a link to a website outside our responsibility, please note that these websites have their own privacy notices. We assume no responsibility or liability for these external websites or their privacy policies. Before using such websites, please ensure you agree with the respective privacy notices.
You can recognize external links either by a different color or because they are underlined. Your cursor will indicate external links when hovering over them. Only when you click on an external link will your personal data be transferred to the target website. The operator of the other website will then receive your IP address, the time of the click, the page from which you clicked the link, and further information as stated in their privacy notice.
Please also note that certain links may result in data transfer outside the European Economic Area. This may allow foreign authorities access to your data. You may have no legal recourse against such access. If you do not wish your data to be transferred or exposed to foreign authorities, please do not click external links.
Rights of the Data Subject
As a data subject within the meaning of the GDPR, you may exercise various rights. These include the right of access (Article 15), the right to rectification (Article 16), the right to erasure (Article 17), the right to restriction of processing (Article 18), the right to object (Article 21), the right to lodge a complaint with a supervisory authority, and the right to data portability (Article 20).
Right to Withdraw Consent:
Certain data processing operations require your explicit consent. You may withdraw your consent at any time. The lawfulness of processing based on your consent before withdrawal remains unaffected.
Right to Object:
If processing is based on Art. 6 para. 1 lit. e or f GDPR, you may object at any time to the processing of your personal data for reasons arising from your particular situation. This also applies to profiling based on these provisions pursuant to Art. 4(4) GDPR. Unless we demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or if processing serves the establishment, exercise, or defense of legal claims, we will cease processing after objection.
If personal data is processed for direct marketing purposes, you also have the right to object at any time. The same applies to profiling related to direct marketing. We will stop processing personal data for such purposes upon receipt of your objection.
Right to Lodge a Complaint:
If you believe that processing your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in your place of residence, workplace, or where the alleged infringement occurred, without prejudice to other administrative or judicial remedies.
Right to Data Portability:
If your data is processed based on consent or contract performance and by automated means, you have the right to receive your data in a structured, commonly used, and machine-readable format. You also have the right to request transmission of your data to another controller where technically feasible.
Right of Access, Rectification, and Erasure:
You have the right to obtain information about your processed personal data, including the purpose, categories, recipients, and duration of storage. If you have questions regarding this or any other matter related to personal data, please contact us using the details in the legal notice.
Right to Restriction of Processing:
You may request restriction of processing of your personal data at any time if one of the following applies:
- You contest the accuracy of your personal data; processing may be restricted while its accuracy is being verified.
- Processing is unlawful, but you request restriction instead of deletion.
- We no longer need the data for processing purposes, but you require it for legal claims.
- You object to processing pursuant to Art. 21 para. 1 GDPR and a balance of interests is pending. Processing may be restricted until this assessment is completed.
Once processing is restricted, your personal data may only be processed (apart from storage) with your consent, for legal claims, to protect rights of others, or for important public interests of the EU or a Member State.
Provision of the Website (Web Hosting)
Our website is hosted by:
dogado GmbH
Antonio-Segni-Straße 11, 44263 Dortmund
Germany
When you access our website, we automatically collect and store information in server log files. Your browser automatically transmits this information to our server or to the server of our hosting provider.
This includes:
- IP address of the visitor’s device · Device used
- Hostname of the accessing device · Visitor’s operating system
- Browser type and version
- Name of the requested file · Time of the server request · Data volume
- Information on whether the request was successful
These data are not merged with other data sources.
Instead of operating this website on our own server, we may use an external hosting provider. The personal data collected on this website will then be stored on the hosting provider’s servers. In addition to the data listed above, the hosting provider may store contact inquiries, contact data, names, website access data, metadata, communication data, contract data, and other data generated via the website.
The legal basis for processing these data is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the error-free and optimized presentation of this website. If the website is accessed to initiate or conclude a contract with us, Art. 6 para. 1 lit. b GDPR additionally applies. If we engage a hosting provider, a data processing agreement exists pursuant to Art. 28 GDPR.
Use of Local Storage Items, Session Storage Items and Cookies
Our website uses Local Storage Items, Session Storage Items and/or Cookies. Local Storage stores data in your browser on your device, typically user preferences like “day” or “night mode,” and persists until manually deleted. Session Storage works similarly but lasts only for the active session, meaning it is deleted once the browser tab is closed. Cookies are small information files stored on your device by a web server to identify your device. They may be temporary (session cookies) or permanent.
Such objects may also be set by third-party providers when visiting our website (third-party requests). This allows us and you to benefit from third-party services embedded on our website, such as payment processing or video playback.
These mechanisms serve a variety of functions. They may improve website functionality, manage shopping cart features, enhance security and user experience, or perform analytics. Necessary mechanisms (e.g. essential cookies or performance-related tools) are used based on Art. 6 para. 1 lit. f GDPR. For all other purposes, storage occurs only with your explicit consent (Art. 6 para. 1 lit. a GDPR).
If Local Storage, Session Storage or cookies are used by third parties or for analytics purposes, we provide separate information within this privacy notice. Consent is collected and may be withdrawn at any time.
Use of External Services
Our website uses external services, i.e. services provided by third parties for functions such as video embedding or site security. When using these services, personal data is transferred to the respective providers. If no legitimate interest exists for their use, we obtain your explicit, revocable consent prior to activation (Art. 6 para. 1 lit. a GDPR).
Analytics
To analyze user behavior, we process personal data of website visitors. This enables us to understand usage patterns and improve user-friendliness. Analytics tools may create profiles for targeted advertising, recognize returning users, track click/scroll behavior, generate heatmaps, measure visit durations or bounce rates, or determine visitor origins (city, country, referring website). These insights enhance our marketing and research efforts.
Processing occurs only if you consent through our consent banner. The legal basis is Art. 6 para. 1 lit. a GDPR. Without consent, no analytics processing takes place. If you withdraw consent, processing stops immediately. The lawfulness of processing prior to withdrawal remains unaffected.
Google Analytics
We use Google Analytics, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Use of this service may involve data transfers to third countries (USA). The provider is certified under the EU-U.S. Data Privacy Framework, ensuring an adequate level of protection.
Further information is available at: https://policies.google.com/privacy.
The service uses the following cookies:
| Name | Storage Duration | Type | Purpose |
| _ga | 400 days | 1st party cookie | Contains a randomly generated user ID. Google Analytics can recognize returning users and merge data from previous visits. |
| _ga_85255KZZ3L | 400 days | 1st party cookie | Collects data on how often a user visits the website, along with timestamps for first and last visits. |
Consent Management
To comply with legal requirements, our website uses a consent management tool. It collects and stores necessary consents for cookies and external services.
Processing is necessary for compliance with a legal obligation of the controller. The legal basis is Art. 6 para. 1 lit. c GDPR.
Borlabs Cookie
We use Borlabs Cookie, provided by Borlabs – Benjamin A. Bornstein, Rübenkamp 32, 22305 Hamburg, Germany.
This service is hosted locally on our web server; no data is transferred to third parties. It uses the following cookies:
| Name | Storage Duration | Type | Purpose |
| borlabs-cookie | 60 days | 1st party cookie | Stores visitors’ cookie preferences selected in the Borlabs Cookie Box. |
| borlabs-cookie-gcs | 60 days | 1st party cookie | Stores the user’s consent choices regarding Google Consent Mode (GCS). |
Content Delivery Network (CDN)
We use a Content Delivery Network (CDN) to optimize the performance and availability of our website. The provider processes your IP address and information about your visit. Further details are available in the provider’s privacy notice.
Processing is based on legitimate interest (Art. 6 para. 1 lit. f GDPR).
Our legitimate interest is to display our website quickly, securely, and reliably.
Google Static
We use Google Static, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Use may involve data transfer to the USA. The provider is certified under the EU-U.S. Data Privacy Framework.
More information: https://policies.google.com/privacy.
CRM Systems
We use a Customer Relationship Management (CRM) system to better manage customer relationships. It allows efficient organization of customer data, including existing and potential customers. Personal data such as names and addresses are processed.
Processing occurs only if you consent via our consent banner (Art. 6 para. 1 lit. a GDPR). Without consent, no processing takes place. Upon withdrawal, processing stops immediately.
HubSpot
We use HubSpot, provided by HubSpot Ireland Limited, 1 Sir John Rogerson’s Quay, Dublin 2, Ireland.
Use may involve data transfer to the USA. The provider is certified under the EU-U.S. Data Privacy Framework.
Privacy Policy: https://legal.hubspot.com/privacy-policy.
The service uses the following cookies:
| Name | Storage Duration | Type | Purpose |
| __hssc | 30 minutes | 1st party cookie | Tracks sessions. |
| __hssrc | Session | 1st party cookie | Set whenever HubSpot changes the session cookie to determine if the visitor has restarted their browser. |
| __hstc | 180 days | 1st party cookie | Main visitor tracking cookie: domain, initial timestamp, last timestamp, current timestamp, session number. |
| __hubspotutk | 180 days | 1st party cookie | Tracks visitor identity; transmitted with form submissions and used for deduplication. |
HubSpot Analytics
We use the service HubSpot on our website. The provider of this service is HubSpot Ireland Limited, 1 Sir John Rogerson’s Quay, Dublin 2, Ireland.
HubSpot is an integrated software tool used to analyze user behavior on our website. In this context, information such as page views, sessions, devices used, and interactions with forms is processed.
As part of the use of HubSpot, personal data may be transferred to a third country (USA). HubSpot is certified under the EU-U.S. Data Privacy Framework, which ensures an adequate level of data protection.
Further information on data protection at HubSpot can be found at:
https://legal.hubspot.com/privacy-policy
The HubSpot service sets the following cookies on our website:
| Name | Storage period | Type | Purpose |
| __hssc | 30 minutes | 1st party cookie | This cookie is used to track sessions. |
| __hssrc | Session | 1st party cookie | This cookie is set to determine whether the visitor has restarted their browser. |
| __hstc | 180 days | 1st party cookie | The main cookie for visitor tracking. It contains information about the domain, timestamps of the first and last visit, and the session number. |
| hubspotutk | 180 days | 1st party cookie | This cookie is used to recognize visitors and is passed to HubSpot when a form is submitted. It is used for contact deduplication. |
The processing of data is carried out exclusively on the basis of your consent in accordance with Art. 6(1)(a) GDPR.
You may revoke your consent at any time via the cookie settings.
HubSpot Forms
We use HubSpot Forms, provided by HubSpot Ireland Limited, 1 Sir John Rogerson’s Quay, Dublin 2, Ireland.
Use may involve data transfer to the USA. The provider is certified under the EU-U.S. Data Privacy Framework.
Privacy Policy: https://legal.hubspot.com/privacy-policy.
The service uses the following cookies:
| Name | Storage Duration | Type | Purpose |
| __cf_bm | 30 minutes | 3rd-party cookie, .hsforms.com | Used to distinguish between humans and bots. |
| _cfuvid | Session | 3rd-party cookie, .hsforms.com | Allows Cloudflare WAF to distinguish individuals sharing the same IP address. |
Display Optimization
We use tools that optimize the presentation of our website, e.g. for multilingual display or accessibility.
Processing occurs only if you consent via our consent banner. Legal basis: Art. 6 para. 1 lit. a GDPR.
WPML
We use WPML, provided by OnTheGoSystems Ltd., 22/F 3 Lockhart Road, Wanchai, Hong Kong, China.
The service is hosted locally; no data is transferred to third parties.
Processing is based on legitimate interest (Art. 6 para. 1 lit. f GDPR).
The tool is essential for multilingual website functionality.
The following cookies are used:
| Name | Storage Duration | Type | Purpose |
| wp-wpml_current_language | Session | 1st party cookie | Tracks the user’s language preference. |
Job Portal
We integrate elements from job portals to publish or link job postings.
Processing occurs only with your consent (Art. 6 para. 1 lit. a GDPR).
Coveto
We use Coveto, provided by coveto ATS GmbH, Frankenstraße 45, 63667 Nidda, Germany.
Privacy Policy: https://www.coveto.de/datenschutz.
The following cookies are used:
| Name | Storage Duration | Type | Purpose |
| AMA_2ea7705e02a0170d1d36582f28e9125b | Session | 3rd-party cookie, k57920.coveto.de | Stored locally on the user’s device. |
| i18nLocale | Session | 3rd-party cookie, k57920.coveto.de | Stores the visitor’s selected language. |
Interface Software
Business processes run cheaper, faster, and more reliably when automated via interfaces. We use interface software to link applications and securely transfer personal data between systems.
Processing occurs only with your consent (Art. 6 para. 1 lit. a GDPR).
Google Tag Manager
We use Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Use may involve data transfer to the USA. The provider is certified under the EU-U.S. Data Privacy Framework.
More info: https://policies.google.com/privacy.
Search Engine
To enable easier content search, we use a third-party search engine. Technical data such as the IP address may be transmitted to the provider.
Processing only occurs with your consent (Art. 6 para. 1 lit. a GDPR).
We use the Google search service, provided by Google Ireland Limited.
Data transfers to the USA may occur; the provider is certified under the EU-U.S. Data Privacy Framework.
More info: https://policies.google.com/privacy.
Video/Music Services
Our website includes embedded audio and video content. To play content, your device connects to the respective platform, transmitting personal data (e.g. IP address, location data, browser details).
Processing only occurs with your consent (Art. 6 para. 1 lit. a GDPR).
YouTube
We use YouTube, provided by Google Ireland Limited.
Data transfers to the USA may occur; the provider is certified under the EU-U.S. Data Privacy Framework.
More info: https://policies.google.com/privacy.
YouTube uses cookies and browser storage:
| Name | Storage Duration | Type | Purpose |
| Secure-ROLLOUT_TOKEN | 180 days | 3rd-party cookie, .youtube.com | Used to manage staged rollouts of new features. |
| -2e3f81e6-edb1c36 | Session | 3rd-party session storage | Stored by YouTube. |
| -4b4e791e7a77f635 | Session | 3rd-party session storage | Stored by YouTube. |
| -6ed6d1bf82c576e | Session | 3rd-party session storage | Stored by YouTube. |
| 1a10b20460a8f828 | Session | 3rd-party session storage | Stored by YouTube. |
| iU5q-!O9@$ | Session | 3rd-party session storage | Stored by YouTube. |
| VISITOR_INFO1_LIVE | 180 days | 3rd-party cookie | Estimates bandwidth. |
| VISITOR_PRIVACY_METADATA | 180 days | 3rd-party cookie | Saves the user’s consent status. |
| YSC | Session | 3rd-party cookie | Registers a unique ID to track watched videos. |
| yt-remote-cast-installed | Session | 3rd-party session storage | Stores preferences for embedded video players. |
| yt-remote-connected-devices | Persistent | 3rd-party session storage | Controls embedded player behavior. |
| yt-remote-device-id | Persistent | 3rd-party session storage | Saves user preferences. |
| yt-remote-fast-check-period | Session | 3rd-party session storage | Regulates player behavior. |
| yt-remote-session-app | Session | 3rd-party session storage | Controls embedded player behavior. |
| yt-remote-session-name | Session | 3rd-party session storage | Saves video player preferences. |
| yt.innertube::nextId | Persistent | 3rd-party session storage | Tracks viewed videos. |
| yt.innertube::requests | Persistent | 3rd-party session storage | Tracks viewed videos. |
| ytidb::LAST_RESULT_ENTRY_KEY | Persistent | 3rd-party session storage | Stores user preferences. |
Web Fonts
For uniform appearance of fonts, our website uses web fonts provided by an external provider. The provider learns your IP address during retrieval.
Processing only occurs with your consent (Art. 6 para. 1 lit. a GDPR).
Google Fonts
We use Google Fonts, provided by Google Ireland Limited.
Data transfers to the USA may occur; the provider is certified under the EU-U.S. Data Privacy Framework.
More info: https://policies.google.com/privacy.
Advertising
We use tools to manage advertising and measure ad effectiveness. Personal data such as IP address, access times, and device information may be processed.
Processing only occurs with your consent (Art. 6 para. 1 lit. a GDPR).
Google Ads
We use Google Ads, provided by Google Ireland Limited.
Data transfers to the USA may occur; the provider is certified under the EU-U.S. Data Privacy Framework.
More info: https://policies.google.com/privacy.
Google AdSense
We use Google AdSense, provided by Google Ireland Limited (GV).
Data transfers to the USA may occur; the provider is certified under the EU-U.S. Data Privacy Framework.
The service uses the following cookie:
| Name | Storage Duration | Type | Purpose |
| __gcl_au | 90 days | 1st-party cookie | Used by Google AdSense to test ad efficiency. |
Google DoubleClick
We use Google DoubleClick.
Data transfers to the USA may occur; the provider is certified under the EU-U.S. Data Privacy Framework.
More info: https://policies.google.com/privacy.
Cookie used:
| Name | Storage Duration | Type | Purpose |
| IDE | 390 days | 3rd-party cookie, .doubleclick.net | Advertising cookie on non-Google sites. |
Contact Form
You may contact us via a contact form. Your contact details are required for communication.
The legal basis is Art. 6 para. 1 lit. b GDPR (contract or pre-contract actions). A legitimate interest may also apply (Art. 6 para. 1 lit. f GDPR).
Data are deleted once your inquiry is fully processed unless retention obligations apply.
Telephone or E-mail Contact
You may contact us by phone or e-mail. Data transmitted this way are stored to handle your inquiry. We do not share this data without consent.
If contact is for contractual purposes, Art. 6 para. 1 lit. b GDPR applies. Otherwise, processing is based on legitimate interest (Art. 6 para. 1 lit. f GDPR).
Handling Applicant Data
You may submit job applications via mail, online forms, or e-mail. The personal data you provide will be stored and processed for recruitment purposes.
The legal basis is Art. 6 para. 1 lit. b GDPR or Art. 6 para. 1 lit. a GDPR if consent is given. Where German law applies, § 26 BDSG is used. Consent may be withdrawn anytime.
If employment results, data will be stored for employment purposes (Art. 6 para. 1 lit. b GDPR). If not, data may be stored based on legitimate interest (Art. 6 para. 1 lit. f GDPR) to defend against legal claims.
If consent is given, applicant data may be stored longer. Consent may be withdrawn anytime.
Applicants may be added to a talent pool if they consent. Data will be deleted after two years unless legally required otherwise.
Facebook Presence
Social networks process large amounts of personal data. When visiting our profiles, your IP address and device details may be processed. We cannot influence this.
Our Facebook profile is operated by Meta Platforms Ireland Limited.
Privacy Policy: https://www.facebook.com/about/privacy/.
The purpose is to expand our online presence; legal basis is legitimate interest (Art. 6 para. 1 lit. f GDPR).
We are joint controllers with the platform. You may exercise your rights with Facebook or with us, but we cannot influence Facebook’s processing.
Instagram Presence
We operate an Instagram profile, provided by Meta Platforms Ireland Limited.
Privacy Policy: https://help.instagram.com/519522125107875.
Legal basis: legitimate interest (Art. 6 para. 1 lit. f GDPR).
We are joint controllers with Instagram, but cannot influence their processing.
LinkedIn Presence
We operate a LinkedIn profile, provided by LinkedIn Ireland Unlimited Company.
Privacy Policy: https://www.linkedin.com/legal/privacy-policy.
Legal basis: legitimate interest (Art. 6 para. 1 lit. f GDPR).
Joint controllership applies.
TikTok Presence
We operate a TikTok profile, provided by TikTok Technology Limited.
Privacy Policy: https://www.tiktok.com/legal/privacy-policy?lang=de.
Legal basis: legitimate interest (Art. 6 para. 1 lit. f GDPR).
Joint controllership applies.
YouTube Presence
We operate a YouTube profile, provided by Google Ireland Limited.
Privacy Policy: https://policies.google.com/privacy?hl=de.
Legal basis: legitimate interest (Art. 6 para. 1 lit. f GDPR).
We are joint controllers with YouTube.
Google transfers and processes data in the USA. There is currently no adequate level of protection, posing risks. Google uses Standard Contractual Clauses and participates in the Data Privacy Framework.
