Privacy Policy

1. Introduction

With the following information, we would like to provide you, as a „data subject,“ with an overview of how we process your personal data and your rights under data protection laws. In general, you can use our website without providing any personal data. However, if you wish to use specific services offered by our company through our website, the processing of personal data may be necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we will generally obtain your consent.

The processing of personal data—such as your name, address, or email address—is always carried out in accordance with the General Data Protection Regulation (GDPR) and in compliance with the country-specific data protection regulations applicable to the company. Through this Privacy Policy, we would like to inform you about the scope and purpose of the personal data we collect, use, and process.

As the data controller, we have implemented numerous technical and organizational measures to ensure the most comprehensive protection possible of the personal data processed through this website. However, internet-based data transmissions can generally be subject to security vulnerabilities, meaning that absolute protection cannot be guaranteed. For this reason, you are free to provide us with personal data through alternative means, such as by phone or mail.

You, too, can take simple and easy-to-implement measures to protect yourself against unauthorized access to your data by third parties. We would therefore like to provide you with some tips on how to handle your data securely:

Protect your account (login, user account, or customer account) and your IT system (computer, laptop, tablet, or mobile device) with strong passwords.
Only you should have access to the passwords.
Make sure you always use your passwords for only one account (login, user account, or customer account).
Do not use the same password for different websites, applications, or online services.
This is especially important when using IT systems that are accessible to the public or shared with others: You should always log out after each session on a website, in an application, or on an online service.

Passwords should be at least 12 characters long and chosen so that they cannot be easily guessed. Therefore, they should not contain common everyday words, your own name, or the names of relatives, but should include uppercase and lowercase letters, numbers, and special characters.

2. Data Controller

The controller within the meaning of the GDPR is:

mg: Mannheim Startup Centers GmbH

1 Julius-Hatry Street
68163 Mannheim

Managing Director: Christian Sommer

Email: info@next-mannheim.de

Legal Notice

3. Data Protection Officer

You can contact the Data Protection Officer as follows:

Data Protection Officer
mg:gmbh
Michael Mayer
1 Julius-Hatry Street
68163 Mannheim

Email: datenschutz@next-mannheim.de

If you have any questions or suggestions regarding data protection, you can contact our Data Protection Officer directly at any time.

4. Legal Basis for Processing

Article 6(1)(a) of the GDPR (in conjunction with Section 25(1) of the TTDSG) serves as the legal basis for our company’s processing activities in which we obtain consent for a specific processing purpose.

If the processing of personal data is necessary for the performance of a contract to which you are a party—as is the case, for example, with processing operations required for the delivery of goods or the provision of other services or consideration— then the processing is based on Article 6(1)(b) of the GDPR. The same applies to processing operations necessary for the implementation of precontractual measures, such as in cases of inquiries regarding our products or services.

If our company is subject to a legal obligation that requires the processing of personal data—such as to comply with tax obligations—the processing is based on Article 6(1)(c) of the GDPR.

In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were injured on our premises and, as a result, their name, age, health insurance information, or other vital information had to be disclosed to a doctor, a hospital, or other third parties. In such cases, the processing would be based on Article 6(1)(d) of the GDPR.

Ultimately, processing activities may be based on Article 6(1)(f) of the GDPR. This legal basis applies to processing operations not covered by any of the aforementioned legal bases if the processing is necessary to safeguard a legitimate interest of our company or a third party, provided that the interests, fundamental rights, and fundamental freedoms of the data subject do not take precedence. We are permitted to carry out such processing operations in particular because they were specifically mentioned by the European legislator. In this regard, the legislator took the view that a legitimate interest could be assumed if you are a customer of our company (Recital 47, Sentence 2 of the GDPR).

5. Technology

5.1 SSL/TLS Encryption

This site uses Warranty SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential information—such as orders, login credentials, or contact requests—that you send to us as the operator. You can recognize an encrypted connection by the fact that the browser’s address bar displays „https://“ instead of „http://“ and by the padlock icon in your browser’s address bar.

We use this technology to protect the data you submit.

6. Cookies

6.1 General Information About Cookies

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site.

The cookie stores information that is specific to the device being used. However, this does not mean that we thereby gain direct knowledge of your identity.

We use cookies to make your experience on our website more enjoyable. For example, we use so-called session cookies to recognize that you have already visited certain pages on our website. These cookies are automatically deleted when you leave our site.

In addition, to optimize user-friendliness, we also use temporary cookies that are stored on your device for a specific, predetermined period of time. When you visit our site again to use our services, the system automatically recognizes that you have visited us before and recalls the information and settings you entered, so you do not have to re-enter them.

In addition, we use cookies to collect statistical data on the use of our website and to evaluate our offerings for the purpose of optimization. These cookies allow us to automatically recognize that you have previously visited our website when you return. The cookies set in this way are automatically deleted after a specified period of time. The specific retention period for each cookie can be found in the settings of the consent tool used.

6.2 Legal Basis for the Use of Cookies

The data processed by cookies, which is necessary for the proper functioning of the website, is therefore required to safeguard our legitimate interests and those of third parties pursuant to Article 6(1)(f) of the GDPR.

For all other cookies, you have provided your consent via our opt-in cookie banner in accordance with Article 6(1)(a) of the GDPR.

6.3 Instructions for Blocking Cookies in Common Browsers

Through the settings of the browser you are using, you can delete cookies, allow only selected cookies, or disable cookies entirely at any time. For more information, please visit the support pages of the respective providers:

Chrome: https://support.google.com/chrome/answer/95647?tid=311178978.
Safari: https://support.apple.com/de-at/guide/safari/sfri11471/mac?tid=311178978.
Firefox: https://support.mozilla.org/de/kb/cookies-und-website-daten-in-firefox-loschen?tid=311178978.
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-l%C3%B6schen-63947406-40ac-c3b8-57b9-2a946a29ae09.

6.4. Use of Cookies on the Websites

Our websites use cookies. Cookies are small text files that are stored on your device. Technically necessary cookies are used to provide certain features on our websites, such as language settings.
In addition to technically necessary cookies, we may also use third-party cookies to analyze your usage behavior on our websites and optimize our marketing activities. We obtain your express consent in advance for the use of such cookies.
To obtain and document your consent to the use of third-party cookies, we use the Borlabs feature, a plugin solution provided by Borlabs (Rübenkamp 32, 22305 Hamburg; hereinafter „Borlabs“). Through the Borlabs cookie box, you can manage your cookie settings and view further details about the cookies used on our websites (name, purpose, duration). The Borlabs plugin stores the status of your consent. The legal basis for this data processing is our legal obligation to obtain and document your consent, Article 6(1)(c) of the GDPR.
You can generally configure your browser to notify you when cookies are set, allowing you to decide on a case-by-case basis whether to accept them, or to block cookies in specific cases or generally. If you do not accept technically necessary cookies, the functionality of our websites may be limited.
If personal data is processed using technically necessary cookies, the legal basis for this is our legitimate interest in maintaining the functionality of our websites, Article 6(1)(f) of the GDPR.
The data collected through technically necessary cookies is not used to create user profiles.

7. Content on Our Website

7.1 Contacting Us / Contact Form

When you contact us (e.g., via the contact form or email), personal data is collected. The specific data collected when using a contact form is indicated on the respective contact form. This data is stored and used exclusively for the purpose of responding to your inquiry or for establishing contact and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your inquiry pursuant to Article 6(1)(f) of the GDPR. If your contact is intended to lead to the conclusion of a contract, an additional legal basis for the processing is Article 6(1)(b) of the GDPR. Your data will be deleted once your inquiry has been fully processed; this is the case when the circumstances indicate that the matter in question has been conclusively resolved and there are no legal retention requirements preventing deletion.

7.2 Booking an Event

To process event bookings, we process only those data that are necessary for organizing the event and handling the associated payment processes. The legal basis for this is Article 6(1)(b) of the GDPR, which pertains to the initiation or performance of a contract with us.
To do this, we primarily use the i-ticket store system (https://i-ticket.io/) based on a data processing agreement pursuant to Article 28 of the GDPR, incorporating the EU Standard Contractual Clauses.
We have integrated PayPal components into this website to process payments. PayPal’s European operating company is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg. PayPal is an online payment service provider. Payments are processed through so-called PayPal accounts, which are virtual personal or business accounts. PayPal also offers the option to process virtual payments via credit cards if a user does not have a PayPal account. A PayPal account is managed using an email address, which is why there is no traditional account number. PayPal allows users to initiate online payments to third parties or to receive payments. PayPal also acts as an escrow service and offers buyer protection services.
If you select „PayPal“ as your payment method during the ordering process in our online store, your data will be automatically transmitted to PayPal. By selecting this payment option, you consent to the transmission of personal data necessary for payment processing.
The personal data transmitted to PayPal generally includes first and last names, address, email address, IP address, phone number, cell phone number, or other data necessary for processing the payment. Personal data related to the specific order is also required to fulfill the purchase agreement.
The purpose of transmitting this data is to process payments and prevent fraud. We will transfer personal data to PayPal, in particular, when there is a legitimate interest in doing so. The personal data exchanged between PayPal and us may be transferred by PayPal to credit bureaus. The purpose of this transfer is to verify identity and creditworthiness.
PayPal may disclose personal data to affiliated companies and service providers or subcontractors to the extent necessary to fulfill contractual obligations or to process the data on its behalf.

You have the option to revoke your consent to the processing of personal data at any time by notifying PayPal. Such a revocation does not affect personal data that must be processed, used, or transmitted for the purpose of (contractual) payment processing.
PayPal is used to ensure proper and smooth payment processing. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR. Your personal data will be transferred only if you provide your express consent in accordance with Article 6(1)(a) of the GDPR.
PayPal's current privacy policy can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full can be accessed.

8. Newsletter Distribution

8.1 Advertising Newsletter

Our website offers you the opportunity to subscribe to our company’s newsletter. The personal data provided to us when you subscribe to the newsletter is determined by the form used for this purpose.

We periodically inform our customers and business partners about our offers through a newsletter. You can generally only receive our company’s newsletter if

You have a valid email address and
You have signed up to receive the newsletter.

For legal reasons, a confirmation email will be sent to the email address you provided when you first subscribed to the newsletter, using the double-opt-in process. This confirmation email is intended to verify that you, as the owner of the email address, have authorized receipt of the newsletter.

When you subscribe to the newsletter, we also store the IP address assigned by your Internet service provider (ISP) to the device you were using at the time of registration, as well as the date and time of registration. The collection of this data is necessary to be able to trace any (potential) misuse of your email address at a later date and therefore serves to protect us legally.

The personal data collected when you subscribe to the newsletter will be used exclusively for sending our newsletter. Furthermore, newsletter subscribers may be notified by email if this is necessary for the operation of the newsletter service or for registration purposes, such as in the event of changes to the newsletter content or modifications to the technical specifications. Personal data collected as part of the newsletter service will not be disclosed to third parties. You may cancel your subscription to our newsletter at any time. The consent you have given us to store personal data for the purpose of sending the newsletter may be revoked at any time. A link to revoke consent is included in every newsletter. You may also unsubscribe from the newsletter at any time directly on our website or notify us of your wish to unsubscribe by other means.

The legal basis for data processing for the purpose of sending the newsletter is Article 6(1)(a) of the GDPR.

8.2 Newsletter Tracking

Our newsletters contain what are known as tracking pixels. A tracking pixel is a tiny graphic embedded in emails sent in HTML format to enable log file recording and analysis. This allows for a statistical evaluation of the success or failure of online marketing campaigns. Using the embedded web beacon, the company can determine whether and when you opened an email and which links contained in the email you clicked on.

We store and analyze such personal data collected via the tracking pixels contained in the newsletters in order to optimize the distribution of newsletters and to tailor the content of future newsletters even better to your interests. This personal data is not disclosed to third parties. Data subjects are entitled at any time to revoke the separate declaration of consent provided via the double opt-in procedure. Upon revocation, we will delete this personal data. We automatically interpret unsubscribing from the newsletter as a revocation of consent.

Such processing is carried out, in particular, in accordance with Article 6(1)(f) of the GDPR, based on our legitimate interests in displaying personalized advertising, conducting market research, and/or tailoring our website to user needs.

8.3 Newsletter Distribution Service Providers

Our email newsletters are sent via the technical service provider The Rocket Science Group, LLC, d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA, to whom we disclose the data you provided when you subscribed to the newsletter. This transfer takes place within the framework of data processing on our behalf by MailChimp. Please note that your data is generally transferred to and stored on a MailChimp server in the United States.

MailChimp uses this information to send and analyze the statistics of the newsletters on our behalf. For the purpose of analysis, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. This allows us to determine whether a newsletter message has been opened and, if so, which links were clicked. In addition, technical information is collected (e.g., the time of access, the IP address, the browser type, and the operating system). The data is collected exclusively in pseudonymized form and is not linked to your other personal data. Direct personal identification is therefore ruled out. This data is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses may be used to better tailor future newsletters to the interests of the recipients.

If you wish to object to the analysis of your data for statistical purposes, you must unsubscribe from the newsletter.

You may revoke the consent you have given at any time. You can also prevent the processing of your data at any time by unsubscribing from the newsletter. You can also prevent cookies from being stored by adjusting your web browser settings accordingly. By disabling JavaScript in your web browser or installing a JavaScript blocker (e.g.,. https://noscript.net or https://www.ghostery.com), You can prevent the storage and transmission of personal data. Please note that taking these measures may result in some features of our website no longer being available.

Furthermore, MailChimp may use this data itself in accordance with Article 6(1)(f) of the GDPR based on its own legitimate interest in tailoring and optimizing the service to meet user needs, as well as for market research purposes—such as to determine which countries the recipients are from. However, MailChimp does not use the data of our newsletter subscribers to contact them directly or to share it with third parties.

To protect your data in the United States, we have entered into a Data Processing Agreement with MailChimp based on the European Commission’s Standard Contractual Clauses to enable the transfer of your personal data to MailChimp. If you are interested, you can view this Data Processing Agreement at the following web address: https://mailchimp.com/legal/forms/data-processing-agreement/.

You can view MailChimp's privacy policy here: https://mailchimp.com/legal/privacy/

9. Our Activities on Social Media

To enable us to communicate with you on social media and keep you informed about our services, we maintain our own pages on these platforms. When you visit one of our social media pages, we are jointly responsible with the provider of the respective social media platform for the processing operations triggered thereby, within the meaning of Article 26 of the GDPR.

We are not the original providers of these pages; rather, we simply use them within the scope of the options offered to us by the respective providers.

Therefore, as a precautionary measure, we would like to point out that your data may also be processed outside the European Union or the European Economic Area. Using this service may therefore involve data protection risks for you, as it may be more difficult to exercise your rights—such as the right to access, erasure, and objection, etc., may be more difficult, and processing on social networks is often carried out directly by the providers for advertising purposes or to analyze user behavior, over which we have no control. When the provider creates usage profiles, cookies are often used, or your usage behavior is linked to the member profile you have created on the social network.

The processing of personal data described above is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest and the legitimate interest of the respective provider, in order to communicate with you in a timely manner and to inform you about our services. If you, as a user, are required to provide consent to data processing with the respective providers, the legal basis is Article 6(1)(a) of the GDPR in conjunction with Article 7 of the GDPR.

Since we do not have access to the providers’ databases, we would like to point out that the best way to exercise your rights (e.g., the right to access, correction, deletion, etc.) is to contact the respective provider directly. We have provided further information below regarding the processing of your data on social media platforms and your ability to exercise your right to object or withdraw consent (known as “opt-out”) for each social media provider we use:

9.1 Facebook

(Joint) Data Controller in Europe:

Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland

https://www.facebook.com/about/privacy

9.2 Instagram

(Joint) Data Controller in Germany:

Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland

https://instagram.com/legal/privacy/

9.3 LinkedIn

(Joint) Data Controller in Europe:

LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

https://www.linkedin.com/legal/privacy-policy

9.4 Twitter

(Joint) Data Controller in Europe:

Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland

https://twitter.com/de/privacy

Information about your data:

https://twitter.com/settings/your_twitter_data

9.5 YouTube

(Joint) Data Controller in Europe:

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

https://policies.google.com/privacy

9.6 XING (New Work SE)

(Joint) Data Controller in Germany:

New Work SE, Am Strandkai 1, 20457 Hamburg, Germany

https://privacy.xing.com/de/datenschutzerklaerung

Inquiries for XING members:

https://www.xing.com/settings/privacy/data/disclosure

10. Web Analytics

10.1 eTracker

Our website uses the etracker analytics service. The provider is etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Germany. Usage profiles may be created from the data under a pseudonym. Cookies may be used for this purpose. The data collected using etracker technologies will not be used to personally identify visitors to our website without your express consent, nor will it be combined with personal data regarding the individual behind the pseudonym.

etracker cookies remain on your device until you delete them.

These processing activities take place exclusively upon the granting of explicit consent in accordance with Article 6(1)(a) of the GDPR.

You may object to the collection and storage of your data at any time, effective for the future.

You can view eTracker's privacy policy at: https://www.etracker.com/de/datenschutz.html.

We have entered into a contract with etracker for data processing on behalf of a client and fully comply with the strict requirements of the German data protection authorities when using etracker.

10.2 Google Tag Manager

We use Google Tag Manager on our website. Google Tag Manager is a solution that allows us to manage so-called website tags via a user interface and thereby integrate additional services into our online offering. Tag Manager itself, which implements the tags, does not process any of the users’ personal data. With regard to the processing of personal data, please refer to the following information regarding the individual services used.

For more information: Google's Privacy Policy: https://policies.google.com/privacy

10.3 Google Ads Conversion Tracking

We use Google Ads conversion tracking to measure the success of our advertising campaigns. If you arrive at our website via a Google ad, a cookie is stored on your device. This cookie expires after 30 days and is not used to identify you personally. If you perform certain actions on our website (e.g., submitting a form, signing up for a newsletter), we can recognize that you came to us via an ad and record this conversion for statistical purposes.
We use the information obtained in this way to optimize our advertising efforts and to compile anonymized statistics.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Legal Basis: Use of your data is based on your consent in accordance with Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG.
Data Transfer to Third Countries: Data processing may also take place in the United States. The European Commission has issued an adequacy decision for the United States. This decision is based on the EU-U.S. Data Privacy Framework (DPF). Google is certified under the DPF.
Withdrawal: You can withdraw your consent at any time using our cookie consent tool. You can also disable interest-based advertising on Google: https://adssettings.google.com
For more information: Privacy Policy: https://policies.google.com/privacy
Google Ads: https://support.google.com/google-ads/answer/2404190

10.4 Google Ads Remarketing

We use Google Ads Remarketing to target visitors to our website with ads on other websites in the Google Display Network and on YouTube. To do this, a cookie is set when you visit our website, which records your user behavior in a pseudonymized form. Based on this information, we can show you interest-based ads.
Through remarketing, we can show you ads tailored to your previous visits and usage behavior on our website. This data is not combined with any other personal data.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Legal Basis: Use of your data is based on your consent in accordance with Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG.
Data Transfer to Third Countries: Data processing may also take place in the United States. The European Commission has issued an adequacy decision for the United States. This decision is based on the EU-U.S. Data Privacy Framework (DPF). Google is certified under the DPF.
Withdrawal: You can withdraw your consent at any time using our cookie consent tool. You can also opt out of interest-based advertising on Google at: https://adssettings.google.com or through the Network Advertising Initiative’s opt-out page: https://optout.networkadvertising.org
For more information: Privacy Policy: https://policies.google.com/privacy
Google Remarketing: https://support.google.com/google-ads/answer/2453998

10.1.5 Web Analytics / Umami Analytics

To statistically analyze the use of our website, we use self-hosted web analytics software based on Umami. The software is operated on servers located within Germany. No analytics data is transferred to third parties or to third countries. The web analytics tool used has been configured to respect privacy. No cookies are set for analytics purposes, and no personal user profiles are created. Statistical usage data is processed as part of the service. This includes, in particular:

Pages and subpages viewed
Date and time of access
Referrer URL
Browser Type
Operating System
Device Type
approximate geographic origin (e.g., country or region)

IP addresses are not stored. The data is processed solely for the purpose of generating statistical analyses and for the technical and economic optimization of our online services. The legal basis for this processing is your consent pursuant to Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect via the privacy settings or the consent banner.

11. Plugins and Other Services

11.1 Google Maps

We use Google Maps (API) on our website. Google Maps is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is part of the Google group of companies, headquartered at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Maps is a web service for displaying interactive (map) maps to visually present geographic information. By using this service, for example, you can view our location and more easily find your way here.

When you click „Show Map“ on pages that integrate the Google Maps service, information about your use of our website (such as your IP address) is transmitted to Google’s servers in the United States and stored there. This occurs regardless of whether you have a Google user account through which you are logged in or whether you do not have a user account. If you are logged in to Google, your data will be directly associated with your account. If you do not want this data to be associated with your Google profile, you must log out of your Google user account. Google stores your data (even for users who are not logged in) as usage profiles and analyzes them. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Google.

If you do not consent to your data being transmitted to Google in the future when using Google Maps, you also have the option to completely disable the Google Maps web service by turning off JavaScript in your browser. In that case, Google Maps—and thus the map display on this website—will no longer be available.

These processing activities are carried out only upon the granting of explicit consent in accordance with Article 6(1)(a) of the GDPR.

You can view Google's Terms of Service at https://www.google.de/intl/de/policies/terms/regional.html; the additional Terms of Service for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html

You can view the Google Maps privacy policy at: („Google Privacy Policy“): https://www.google.de/intl/de/policies/privacy/.

11.2 Vimeo (Videos)

Our website incorporates plugins from the video portal Vimeo, operated by Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA. When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to Vimeo’s servers. The plugin’s content is transmitted directly from Vimeo to your browser and integrated into the page. Through this integration, Vimeo receives the information that your browser has accessed the corresponding page on our website, even if you do not have a Vimeo account or are not currently logged in to Vimeo. This information (including your IP address) is transmitted directly from your browser to a Vimeo server in the United States and stored there.

If you are logged in to Vimeo, Vimeo can immediately associate your visit to our website with your Vimeo account. If you interact with the plugins (such as by clicking the play button on a video), this information is also transmitted directly to a Vimeo server and stored there.

If you do not want Vimeo to directly associate the data collected through our website with your Vimeo account, you must log out of Vimeo before visiting our website.

For Vimeo videos embedded on our site, the Google Analytics tracking tool is automatically integrated. This is Vimeo’s own tracking system, to which we have no access and which cannot be influenced by our site. Google Analytics uses so-called „cookies“ for tracking; these are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie regarding your use of this website is generally transmitted to a Google server in the United States and stored there.

These processing activities are carried out only upon the granting of explicit consent in accordance with Article 6(1)(a) of the GDPR.

You can view Vimeo's privacy policy at: https://vimeo.com/privacy.

11.3 YouTube (Videos)

We have integrated YouTube components into this website. YouTube is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

If you are logged into YouTube at the same time, YouTube will recognize which specific page of our website you are visiting when you access a subpage that contains a YouTube video. This information is collected by YouTube and Google and associated with your YouTube account.

YouTube and Google receive information via the YouTube component that you have visited our website whenever you are logged into YouTube at the same time you access our website; this occurs regardless of whether you click on a YouTube video or not. If you do not wish for this information to be transmitted to YouTube and Google, you can prevent it by logging out of your YouTube account before visiting our website.

These processing activities are carried out only upon the granting of explicit consent in accordance with Article 6(1)(a) of the GDPR.

You can view YouTube's privacy policy at
https://www.google.de/intl/de/policies/privacy/.

12. Your Rights as a Data Subject

12.1 Right to Confirmation

You have the right to request confirmation from us as to whether personal data concerning you is being processed.

12.2 Right of Access—Art. 15 of the GDPR

You have the right to receive, at any time and free of charge, information from us regarding the personal data we have stored about you, as well as a copy of this data, in accordance with the provisions of the law.

12.3 Right to Rectification, Art. 16 of the GDPR

You have the right to request the correction of inaccurate personal data concerning you. Furthermore, you have the right to request that incomplete personal data be completed, taking into account the purposes of the processing.

12.4 Erasure—Article 17 of the GDPR

You have the right to request that we delete your personal data without delay, provided that one of the grounds specified by law applies and the processing or storage of such data is not necessary.

12.5 Restriction of Processing, Art. 18 of the GDPR

You have the right to request that we restrict the processing of your personal data if any of the legal requirements are met.

12.6 Data Portability, Art. 20 of the GDPR

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller—to whom the personal data has been provided—without hindrance from us, provided that the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR or a contract pursuant to Article 6(1)(b) of the GDPR, and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

Furthermore, when exercising your right to data portability pursuant to Art. 20(1) of the GDPR, you have the right to have your personal data transmitted directly from one data controller to another, provided that this is technically feasible and does not infringe upon the rights and freedoms of others.

12.7 Right to Object Under Article 21 of the GDPR

You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you that is carried out pursuant to Article 6(1)(e) (data processing in the public interest) or (f) (data processing based on a balancing of interests) of the GDPR.

This also applies to profiling based on these provisions within the meaning of Article 4(4) of the GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.

In certain cases, we process personal data for the purpose of direct marketing. You may object at any time to the processing of your personal data for the purpose of such marketing. This also applies to profiling to the extent that it is related to such direct marketing. If you object to our processing of your personal data for direct marketing purposes, we will no longer process your personal data for these purposes.

In addition, you have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you that we carry out for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) of the GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.

In connection with the use of information society services, notwithstanding Directive 2002/58/EC, you are free to exercise your right to object through automated means that use technical specifications.

12.8 Withdrawal of Consent Under Data Protection Law

You have the right to withdraw your consent to the processing of personal data at any time, effective for the future.

12.9 Filing a Complaint with a Regulatory Authority

You have the right to file a complaint with a data protection supervisory authority regarding our processing of personal data.

13. Current Status and Changes to the Privacy Policy

This Privacy Policy is currently in effect as of March 2022.

As we continue to develop our website and services, or due to changes in legal or regulatory requirements, it may become necessary to amend this Privacy Policy. The most current version of the Privacy Policy is available at any time on the website under „https://next-mannheim.de/datenschutz“ can be accessed and printed by you.