Name and contact of the responsible person according to Article 4 (7) GDPR

We collect data from you and process it. Which? Why? Where from? For how long? And are we allowed to do so at all?

Data categories

We process

- Information that you have given us on the occasion of your newsletter registration via SMS, e-mail or online or together with your business cards, such as contact details (e.g. address, e-mail address, telephone number),
- Verification data, which allow us to draw conclusions about the origin, correctness and status of a consent or registration (e.g. contact ID, registration status, bounce status, entry date, SMS message, IP address or mobile phone number of the entry, confirmation date, IP address of the confirmation, unsubscription date, IP address unsubscription, referrer),
- Usage data from which we can directly or indirectly determine how you react to information sent and/or provided by us.

Sources

- Some information, such as your contact information, we receive together with your consent via SMS, e-mail, online form or your business card from you,
- some information, such as verification data, is obtained from responses to e-mails or SMS sent by us to you and/or by you to us, as well as from the respective e-mails or SMS.

Purposes and legal basis

- If we send you the information you requested (e.g. newsletter, slides for the presentation, etc.), our processing is based on Art. 6 para. 1 lit a GDPR.
- If we retain data that we are legally obliged to retain, this allows us Art. 6 para. 1 lit c GDPR.
- If we use your email address with your consent in the context of custom audience from Facebook or corresponding offers from other providers, our processing is based on Art. 6 (1) lit a of the GDPR.
- Since we have a legitimate interest in obtaining an overview of the success or failure of our information and/or advertising campaigns, Art. 6 (1) lit f GDPR allows us to process data that shows us whether and, if so, how you respond to the information we send you and the information we provide.
- Since we have a legitimate interest in being able to defend ourselves against unjustified claims by third parties, Art. 6 (1) lit f GDPR allows us to process such data as is necessary to defend against unjustified claims.

Storage period

After revocation of your consent, we will delete all data that was processed on the basis of the revoked consent, except for that which we still need or are required by law to retain in order to defend against unjustified claims. This data will be deleted when all claims have become time-barred and the retention periods have expired. The same applies to data whose further processing you have objected to within the scope of a right of objection to which you are entitled.

What do you need to know about your consent, your right of revocation and your right to object?

You can revoke your consent to receive our information (e.g. by SMS or e-mail) at any time with effect for the future. To do so, send us an e-mail to the e-mail address listed under "Who is responsible?" or use the unsubscribe link, which you will find in the footer of each e-mail.

If you do not want us to be able to track whether and how you have reacted to the content we send you (e.g. e-mails), you can object to the processing of your data for this purpose.

Do we disclose your data and, if applicable, to whom?

We disclose your data to external service providers who assist us in the following activities: Collecting your business card, storing and managing data (including sending SMS and emails), IT support, running events (including our webinars), evaluating our campaigns.

In doing so, we ensure that these service providers are carefully selected, contractually bound in accordance with data protection requirements, and audited. These service providers may also include companies that process your data outside the European Economic Area or are based there. Among these companies, we only select companies that process the data in locations for which there is an adequacy decision by the Commission (Article 45 GDPR). If this requirement is not met, we only engage these service providers if they provide sufficient security guarantees (Article 46 GDPR), for example by agreeing to the EU standard contractual clauses. On the pages of the European Commission, you can find out which countries are covered by adequacy decisions (as of November 2019: ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en) and which EU standard contractual clauses may be applied (https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en).

Are we required to collect data? What happens if we do not collect this data?

There is no legal obligation to collect the aforementioned data. However, if we do not collect certain data, it may not be possible to pursue the purposes we pursue with this data, such as sending you the information you requested, and you may therefore not receive the information you requested.

What rights do you have?

You have

- a right of withdrawal, with which you can at any time withdraw your consent to the future storage and/or processing of data relating to you,
- a right of access, with which you can request information about the personal data that we have about you and numerous circumstances relating to the processing of this data (Art. 15 GDPR),
- a right to rectification, with which you can request the correction of incorrect and/or completion of incomplete data relating to you (Art. 16 GDPR),
- a right to erasure, with which you can essentially demand the erasure of such data whose storage and/or processing we are not - any longer - permitted to carry out (Art. 17 GDPR),
- a right to restriction of processing, with which you can, under certain circumstances, prevent data stored about you from being further processed for certain purposes (Art. 18 GDPR),
- a right to object to processing, with which you can, under certain circumstances, prevent such processing which is only permitted to us on the basis of a balancing of our and your interests (Art. 21 (1) GDPR),
- Right to object to the processing of your data for the purposes of direct marketing, with which you can prevent, for example, the sending of direct marketing by post, SMS, email, Whatsapp, etc. (Art. 21(2) GDPR),
- Right to data portability, with which you can request the surrender of data concerning you and which we have received from you digitally in a common exchange format from us (Art. 20 GDPR).

We do not use automated decision-making, so that you do not need the right - to which everyone is entitled - to personal knowledge and decision (Art. 22 GDPR).

If, after you have exercised your rights in this regard, we have had to restrict the processing of data, delete data or correct data, we are legally obliged to inform third parties to whom the data affected by your exercise of rights have been transmitted of the correction, deletion and/or restriction (Art. 19 GDPR).

Right of complaint

If you have any doubts regarding the lawfulness of our handling of your data, you can contact the following supervisory authority responsible for us in data protection matters at any time:

The Saxon Data Protection Commissioner
Devrientstrasse 5
01067 Dresden
Telephone: 0351/85471 101
Fax: 0351/85471 109
Internet: www.datenschutz.sachsen.de
E-Mail: This email address is being protected from spambots. You need JavaScript enabled to view it.

Data processing on this website

2b AHEAD appreciates your visit to our website and your interest in our company and our services. Personal data is only collected on this website to the extent technically necessary. Under no circumstances will the collected data be sold or passed on to third parties for other reasons.

2b AHEAD automatically collects and stores in the server log files information that your browser sends to us. These are:

• browser type/version
• Operating system used
• Referrer URL (the previously visited page)
• Host name of the accessing computer (IP address)
• Time of the server request
• Duration of the visit.

Cookies

The Internet pages use so-called cookies in several places. They serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are so-called "session cookies". They are automatically deleted after the end of your visit. Cookies do not cause any damage to your computer and do not contain viruses.

Further information
Your trust is important to us. Therefore, we would like to answer your questions regarding the processing of your personal data at any time. If you have any questions that are not answered by this data protection declaration or if you would like more detailed information on any point, please contact us at any time.

Notice regarding the use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google, Inc. (Google) Google Analytics uses so-called cookies, text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

This data cannot be assigned by 2b AHEAD to specific persons. This data will not be merged with other data sources. Unless this information is provided voluntarily by you, e.g. in the context of a registration, an information request, a promotion or for the execution of a contract.

If you have previously given us your consent, or if you have not objected - where required by law - or if you have a business relationship with 2b AHEAD, we will also use this data for product-related surveys, invitations to 2b AHEAD events, newsletters and our own marketing purposes.

Your personal data will not be passed on, sold or otherwise transferred to third parties unless this is necessary for the purpose of processing the contract or you have given your express consent.

How do we use Klick-Tipp?

(1) In our online communication with you, we use the services of KLICK-TIPP LIMITED, 15 Cambridge Court, 210 Shepherd's Bush Road, London W6 7NJ, United Kingdom. We obtain these services through a principal contractual relationship with Digistore24 GmbH, St.-Godehard-Straße 32, 31139 Hildesheim, Germany. Digistore24 is a reseller that procures products or services, such as Klick-Tipp, and sells them to buyers without significant further processing. With Klick-Tipp itself, we have additionally concluded an order processing in the sense of Article 28 DSGVO. This ensures that we have full control over the personal data processed there and that Klick-Tipp implements our instructions in a mirror image.

(2) We store your contact data at Klick-Tipp and, where applicable, process the data we process via the online marketing tools described in more detail in this privacy policy. This is because these providers are fully integrated with Klick-Tipp via a secure interface. Therefore, it is possible that Klick-Tipp takes note of this data, whereby - as already mentioned above - Klick-Tipp has no own right of use with regard to this data and is fully subject to our instructions.

(3) Furthermore, Klick-Tipp allows us to link your personal data with so-called tags. Klick-Tipp distinguishes between two types of tags:
SmartTags: when a contact registers via a registration form, he automatically receives a tag with the name of the registration form in question. Klick-Tipp also automatically sets the tags "Email received", "Email opened", "Email clicked" and "Email viewed in browser".
Manual tags: In addition to SmartTags, manual tags can be created. For example, you can tag contacts with the tag "Customer" or, more specifically, with the tag "Product B purchased".

(4) The details about these and other options we use at Klick-Tipp can be found in the Klick-Tipp manual.

(5) Klick-Tipp's privacy policy can be found here.

(6) Klick-Tipp's anti-spam policy can be found here.

Contact person for data protection
Katharina Fischer, This email address is being protected from spambots. You need JavaScript enabled to view it.

2b AHEAD ThinkTank GmbH

Spinnereistrasse 7 | Hall 20
D-04179 Leipzig
Phone: +49 (0)341 124 79 61 0
Fax: +49 (0)341 124 79 61 1