Privacy Policy

1. General information about data processing

In the following, we would like to inform you about the processing of your personal data by us, our data protection principles and your rights as a data subject.

This Privacy Policy applies to the use of our web pages and also to the establishment and implementation of customer relationships. It also applies to any contact or supplier relationships that you enter into with us, when subscribing to our newsletter, for advertising, when holding a webinar, when using our blog and when ordering from our weclapp store. This Privacy Policy also applies if we expressly refer to it elsewhere.

The responsible authority is:

weclapp GmbH
Friedrich-Ebert-Straße 28
97318 Kitzingen
Germany

Telephone: +49 (0)9321 9064 1800
Email: info@weclapp.com

You can contact our data protection officer at:

weclapp GmbH
Data Protection Officer
Friedrich-Ebert-Straße 28
97318 Kitzingen

Email: datenschutz@weclapp.com

We process personal data that is collected within the scope of application of this Privacy Policy pursuant to the respective applicable legal provisions on data protection, in particular pursuant to the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) issued for this purpose.

1.1. Data collection and origin of data

We collect the data that you provide to us when using our web pages.

Furthermore, we collect data in order to establish and develop a customer relationship with you as a customer or to enter into contracts with partners or provide services or for billing purposes. We collect data that you provide to us when registering for use of our services, in particular software, and when placing orders.

If you enter into a “contact relationship” with us (e.g. enquiries or offers for services via a contact form, newsletter registration, submit of ideas for product improvement via weclapp product portal, partner requests), conclude supplier contracts with us or apply for a job with us, we will collect and process this data – insofar as this is necessary or appropriate according to Article 6 (f) GDPR.

We will also continue to collect data from publicly accessible sources (e.g. company register, your web pages, press articles, etc.) within the scope of permissibility according to Article 6 (f) GDPR.

Personal data that we collect and store in this way may include:

IP address and usage data when retrieving website content
Name and address and other contact details (telephone numbers, email address, fax number, etc.), registration numbers, names and addresses of authorised representatives, account information and the relevant data of relevant contact persons specified by you as a customer of our services plus other data you enter, e.g. data concerning your customers or employees, in particular with respect to use of our software (including during any free-of-charge trial periods)
Name and contact details in the context of establishing and handling a contact relationship or a supplier relationship

Name, email, password and requested web address when registering for use of our services
Name and email address when subscribing to the newsletter and dispatch information about the respective newsletters
Email address, name and other data entered when submitting ideas
Email address for the purpose of holding a webinar
Name and address and other contact details (telephone number, email address, etc.), names and addresses of authorised representatives, account information and the relevant data of relevant contact persons specified by you as a partner for use of our services plus other data you enter, e.g. data concerning your employees, in particular when ordering our partner training sessions
Name when using the comment function in our blog
Last name, first name and email address when including applicant in our talent pool
Last name, first name and other data entered when using our chat-system
IP address when using the Albacross service
IP address and name when using the Productboard service
IP address when logging in with your Google account in our software
IP address and information about browser settings when using Microsoft Advertising
Name when using the Meta Lead Ad campaign
IP address for the Hotjar analysis service
IP address when visiting our website

All personal data is only collected within the framework of legal permission or if you have granted us your consent to do so.

1.2. General information about using and sharing personal data

We use your personal data to enable you to use our website. Furthermore, data is processed and transmitted when you use our web pages for the purpose of anonymised analysis (e.g. Google Analytics, LinkedIn Insight Tag) if you have given your consent.
In general, we use your personal data in order to establish and fulfil a contract with you as a customer or partner, and also for billing purposes. If you want to use our services, you first have to register via our website and enter your details.

If you enter into a contact, supplier or application relationship with us, we will use your data to establish and fulfil or handle this relationship and – where applicable – for billing purposes.

In addition, we use data lawfully obtained by us for the purpose of advertising by post and additionally by email or telephone, provided that you have specifically and legitimately consented to this.

Overall, it may also be necessary for us to disclose your data to external service providers as part of order processing. We will not sell your personal data to third parties or market it in some other way.

Data may be transferred to third countries within the context of the administration, development and operation of IT systems and only to the extent that a) the transfer is generally permitted and b) the particular requirements for a transfer to third countries are satisfied, in particular the data importer shall guarantee an appropriate level of data protection according to the EU standard contractual clauses for the transfer of personal data to processors established in third countries. The basis for this are the provisions of the GDPR and the German Federal Data Protection Act. Data may also be transferred when you use our web pages.

A processing of data takes place when using the service of Intercom to conduct product tours, to send messages and to provide information via the chat system.

In addition, processing and transfer of data occurs when using our websites when we place advertisements with Google Ads or Microsoft Advertising.

If you send us ideas via our website or messages via our system after registration, processing and transmission of your data will take place.

If you send us your ideas via our weclapp Product Portal, we will process and transmit the data you enter there.

If you apply to us via our online application form, we process and transmit the data you enter there.

If you visit our website, we use the Albacross service and process and transmit your data if you have consented to this.

Data is processed when Meta Lead Ads is used to carry out a lead campaign.

Data is also processed by Hotjar when you use our website to analyze your website visit if you have consented to this.

2. Purposes of data processing

We process the above personal data in accordance with the provisions contained in the GDPR and the German Federal Data Protection Act (BDSG).

2.1. Processing for the fulfilment of contractual or pre-contractual obligations (Article 6 (1) (b) GDPR)

Personal data is processed in order to enable you to use our website, to fulfil a contract with you as a customer or partner, and also to establish a contact or application relationship. The purposes of data processing and its necessity are primarily based on the purposes specifically defined by the aforementioned legal relationships.

In the context of a contract with you as a customer or partner, this includes in particular the establishment, development and fulfilment of such a contract, including elements relating to consultation and billing, in addition to the services ordered by you.

Your registration as a customer allows us to process your orders and handle internal administrative matters.

Processing also takes place in order to handle your queries, initiate a customer relationship or a comparable contact relationship and also to process applications.

If you log into your Google account in our software, data is processed to enable you to use it.

It may also be necessary for us to disclose your data to group companies or external service providers as part of order processing for the aforementioned purposes.

2.2. Processing in the balancing of interests (Article 6 (1) (f) GDPR)

To the extent necessary for our purposes, we process your data beyond the actual fulfilment of the pre-contract or contract in order to safeguard our legitimate interests or those of third parties, provided that your interests do not outweigh the prevention of such processing:

Anonymisation of IP addresses when using our website for statistical purposes, data security and website optimisation
Use of technically necessary cookies (essential) to ensure optimal functionality of the website and guarantee a user-friendly and effective website
Potential measures for the data security of our website such as, in particular, saving IP addresses, assuming that the specific threat situation makes this appropriate
Establishment and fulfilment of contact relationships to the extent required
Processing applications to the extent required
Collection of outstanding debts; here we cooperate with reliable partners
Holding our webinars to the extent required
Processing your request and answering inquiries
Use of our weclapp product portal to submit ideas
Using our software and website with Intercom to conduct product tours, send messages, and provide information through the chat system
Use of our blog to submit a comment
Use of our website with Personio to apply for a job through an online application form
Use of our website with YouTube to market our products
Use of LinkedIn for page insights to analyse the types of actions taken on our page
Use of Facebook and Instagram for page insights when you visit our company pages on Facebook and Instagram to analyse the types of actions taken on our page
Meta Lead Ads for the implementation of a lead ad campaign to market our offer

2.3. Processing in the context of your consent (Article 6 (1) (a) GDPR)

If you give us your consent to the processing of personal data for a specific purpose in accordance with the existing requirements (e.g. Receipt of a newsletter, use of Google Analytics, Google Ads, Microsoft Advertising to record user behavior, inclusion of the applicant in our talent pool, and use of Albacross to analyze your surfing behavior, Meta Lead Ads for direct advertising measures, Meta Pixel to record the effectiveness of Facebook ads, use of Hotjar to analyze your user behavior, use of LinkedIn Insight Tag to create reports on the website target group and ad performance), we will process this data within the scope of the consent. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

2.4. Processing due to legal requirements (Article 6 (1) (c) GDPR)

We will process your personal data insofar as we are subject to a statutory obligation, for example:

Statutory retention requirements or disclosure or supervisory obligations vis-à-vis public institutions within the legal framework
For the purpose of obtaining consent to data processing activities (e.g. with the consent management tool CookieFirst) and documentation matters

3. Data transmission to third parties

Within our company, your data can be accessed by people who are involved in its processing, to the extent necessary or appropriate. Service providers and vicarious agents used by us, for example, service providers in the area of IT services, telecommunications and logistics, can also receive access to the personal data for these purposes if they observe our written data protection instructions as well as general data secrecy as part of order processing and – to the extent applicable – the secrecy of telecommunications.

We cooperate with third parties for the purpose of collecting outstanding debts.

In particular, we do not share personal data with third parties for purposes of advertising or address trading.

When using our website, data will be transmitted to analysis services. If you send us your ideas via our weclapp Product Portal, your data will be transmitted to Productboard. If you use our product tours, if we send you a message via Intercom or if we provide you with information via the chat system, some data will be transmitted to Intercom. If you use the Albacross service on our website, data will be transmitted to Albacross.

4. Data transmission to third countries or international organisations

Data transmission to countries outside the EU or EEA (“third countries) will only take place if this is deemed necessary for the purpose of executing the contractual relationship. With respect to other contractual relationships, for example, a contact relationship or an application, such data transmission will only take place for the purpose of fulfilling this contractual relationship or where this is deemed appropriate based on a legitimate interest in exceptional cases. The same applies to the use of our web pages from locations outside the EU or EEA.

When using our website, data is transmitted to analysis services. If you send us your ideas via our weclapp Product Portal your data will be transmitted to Productboard.

5. Length of data storage

We store your IP address and usage data for the duration of your visit whenever you access our web pages. Furthermore, the IP address is stored to the extent appropriate for data security and information or preventing security or data protection breaches, whereby appropriateness is determined by the specific threat situation. In this case, the IP addresses are only stored for as long as is deemed appropriate for the aforementioned purposes, and generally speaking for a period not exceeding three months. In the event of a criminal charge or prosecution, or the enforcement of claims against individuals who have committed security or data protection breaches, the data can be stored and used until the matter is finally resolved or the claims are enforced.

We store the data for the purpose of establishing, developing and fulfilling a contract with you as a customer or partner. The data is deleted once it is no longer required. The data can be stored for the period in which claims against us can be asserted. If we are legally required to retain data, for example, because of tax or commercial obligations, we will store the data for the respective period (up to 10 years). If you as a payer raise an objection within the period prescribed, the data will be stored until the objections or collection of unpaid amounts have been resolved.

As part of a contact relationship, contact details and communications data are stored and used to the extent deemed necessary for the respective communication purpose or as deemed appropriate.

If you want to watch a webinar, your email address will be stored provided that this is required for the purposes of the webinar.

As part of an application relationship, contact details and application data are stored and used to the extent deemed necessary for the respective application purpose or as deemed appropriate. If the application is unsuccessful, the data will be deleted following communication of this decision, unless there are other legitimate interests on the part of the controller preventing this. Other legitimate interests in this context may include, for example, a burden of proof in proceedings in accordance with the General Act on Equal Treatment (AGG).

If you as an applicant grant us your consent to be included in the talent pool, your data will be stored until you revoke your consent or we delete your profile.

If you subscribe to our newsletter, we will store and use your data until you unsubscribe from the newsletter or we decide to cancel the newsletter. Your consent and the dispatch history will continue to be stored until any potential injunctive claims on your side become time-barred. However, we will no longer use the data to continue sending newsletters.

6. Collection of outstanding debts

Where, in the context of safeguarding our legitimate interests, the collection of outstanding debts is required from the contractual relationship or in some other way – and to the extent that these do not outweigh the interests or fundamental rights and freedoms of the data subject that require the protection of personal data – we will assign legal persons the task of collecting the debts. The data required for the collection will be communicated to the assigned legal person. The legal basis is Article 6 (1) (b) and Article 6 (1) (f) GDPR.

7. Processing during website usage

7.1. Data processing and logging during accesses from the internet

Your internet browser automatically transmits data to our web server for technical reasons when you access our website. The web server automatically saves a server log file of the transmitted data. For example, the name and URL of the retrieved data, IP address and date/time of the retrieval are collected. This data is processed to enable you to use the website, to ensure smooth operation of the website and to optimise the website.

7.2. Cookies

Some of these web pages use cookies. Cookies are not harmful to your computer and do not contain any viruses. Cookies are used to make our website more user-friendly, efficient and secure. Cookies are small text files stored on your computer and saved by your browser.

You can configure your browser in such a way that you are informed about the use of cookies; you can allow cookies in individual cases only, accept cookies for specific cases or generally exclude them. You can also activate the automatic deletion of cookies when you close the browser. You may not be able to use all of the functions of this website if you disable cookies.

We use technically necessary cookies (essential) so that we can provide the service you access in a secure, effective and user-friendly manner.

You can configure your browser in such a way that you only allow cookies in individual cases, activate the automatic deletion of cookies when you close your browser or exclude the acceptance of cookies in certain situations or generally.

You can use the browser setting “Do-Not-Track” if you do not want your activities to be recorded. If you activate this setting, no usage data concerning your visit will be stored.

7.3. Google Analytics

If you have given your consent, this website uses Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; (“Google”). Google Analytics uses “cookies”, text files which are stored on your computer and make it possible to analyse your use of the website.

As a rule, the information generated by the cookie about your use of this website will be transmitted to and stored by Google servers in the United States.

We use Google Signals. This allows Google Analytics to collect additional information about users who have personalized ads enabled (interests and demographics) and ads can be delivered to these users in cross-device remarketing campaigns.

Google Analytics has IP address anonymization enabled by default. If IP anonymisation is activated on this website, your IP address will be truncated beforehand by Google within Member States of the European Union or in the countries and territories of other signatories of the Agreement on the European Economic Area. Only in exceptional cases will your complete IP address be transferred to a Google server in the United States and shortened there.

On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports about website activities and to provide further services associated with website use and internet use for the website operator.

According to Google, Google will not associate the IP address transmitted by your browser within the framework of Google Analytics with any other data held by Google.

You can prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to reject all cookies, this may result in a restriction of functionalities on this and other websites.

You can also prevent the collection of data generated by the cookie regarding your use of the website (including your IP address) to Google as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link: tools.google.com/dlpage/gaoptout

More information about data protection at Google is available at https://policies.google.com/privacy?hl=en&gl=en and https://policies.google.com/technologies/cookies?hl=en.

7.4. Microsoft Advertising

On our website, we use the Microsoft Advertising service of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18. Microsoft Advertising is an online marketing service that helps us to display targeted advertisements via the Microsoft Bing search engine. Microsoft Advertising uses cookies for this purpose. Personal data such as IP addresses and information about browser settings are processed.

Microsoft Advertising is used for the purpose of optimizing the placement of advertisements. You can find more information about data protection at Microsoft in the Microsoft data protection information at https://privacy.microsoft.com/de-de/privacystatement.

7.5. Productboard

We use for our weclapp Product Portal, the service provided by Productboard Inc, 612 Howard St., 4th Floor, San Francisco, CA 94105, USA, to collect ideas from users for product improvement. By giving us your message via Productboard, your data (such as e-mail address, name and other voluntarily provided data) will be transmitted to servers of Productboard Inc. and stored for us.

Further details and information on the specific data protection provisions of Productboard can be found at https://www.productboard.com/privacy-policy/2021-10-20/.

7.6. YouTube

Our website uses YouTube for the incorporation of videos. YouTube is a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). If you call up a page on our website containing such a feature, the data collected by Google will usually be sent to a server of Google LLC, USA and stored there. The content of the YouTube button is directly transmitted from Google to your browser, where it is incorporated into the website. We therefore have no influence over the scope of the data collected by Google with this feature, but assume that your IP address will also be included.

For more information on the purpose and scope of data collection, the further processing and use of information by Google, the rights you have in this regard and the privacy options available to you, please refer to Google’s data protection information concerning YouTube integration at https://policies.google.com/privacy?hl=en&gl=en.

If you are a YouTube member and do not wish for Google to use our internet presence as a way to collect details about you and to link this information with the membership data about you which Google has stored, then you must log out of YouTube before visiting our website.

7.7. Google Maps

On individual web pages, we use Google Maps, a service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), to display maps, locations and for route planning. By embedding Google Maps, your IP address is transmitted to Google and a cookie is stored. You can inform yourself at any time about the data processing by Google at http://www.google.de/intl/de/policies/privacy and object to it.

7.8. Albacross

We use the Albacross service of Albacross Nordic AB (Kungsgatan 26, 111 35, Stockholm, Sweden) to identify visitors to our websites and to obtain information about the respective organization. When you visit our website, a cookie is stored on your computer. This analyzes surfing behavior by processing your IP address and other information. This allows us to determine to which organization your IP address belongs.

Further details and information on the specific privacy policy of Albacross can be found at https://albacross.com/privacy-policy/.

7.9. Google Tag Manager

We use Google Tag Manager, a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), on our website in order to connect external web services to a website.

Google Tag Manager allows us to connect our website to other services, for example, Google Analytics, provided you have given your consent to the respective services on our site. In this instance, Google Tag Manager is only used for implementing the services in our website. No personal data is collected, stored or processed.

For more information on Google’s use policy for Google Tag Manager, please visit: https://www.google.com/intl/de/tagmanager/use-policy.html

7.10. Google Ads

We use the online advertising program “Google Ads” including conversion tracking (evaluation of user actions) on our website. Google conversion tracking is an analysis service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). If your habitual residence is in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) will be the controller responsible for your data. Google Ireland Limited is therefore the Google-affiliated company responsible for processing your data and adhering to the applicable data protection laws.
When you click an ad delivered by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited period of validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, we and Google will be able to recognise that you have clicked the ad and proceeded to that page. Every Google Ads customer receives a different cookie. This means that there is no way that cookies can be tracked through the websites of Google Ads customers.
The information obtained using the conversion cookie is used to generate conversion statistics. This allows us to see the total number of users that have clicked one of our ads and proceeded to a page featuring a conversion tracking tag. However, we do not receive any information that can be used to personally identify users. Your data may be transmitted to the USA. You can disable personalised advertising in the advertising settings for Google. Instructions are available at https://support.google.com/ads/answer/2662922?hl=en.
For more information and for details on Google’s privacy policy, please visit: https://policies.google.com/privacy.

7.11. Intercom

We use the provider Intercom R&D Unlimited Company, 18-21 St. Stephen’s Green, Dublin 2, Ireland for product tours and for sending our messages in our software and when using the chat system on our website to provide information.

We transmit some of your information (such as email address and date of registration) to Intercom. Intercom collects publicly available contact information associated with you, such as company name and website URLs, for the purpose of improving your user experience.

For more information about Intercom’s privacy practices, please visit https://www.intercom.com/legal/privacy

7.12. CookieFirst

We use the consent management tool CookieFirst on our website. The provider of CookieFirst is Digital Data Solutions B.V., Plantage Middenln 42a, 1018 DH Amsterdam. The tool enables you to give your consent to data processing via the website, in particular the setting of cookies. You can also use the tool to exercise your right to withdraw consent you have already given.

The tool stores the consent you gave when you visited the website.

If you have given your consent via the consent tool, you can revoke your consent by accessing the settings in the tool and changing your selection there.

Further information on data protection at CookieFirst can be found at https://cookiefirst.com/legal/privacy-policy/

7.13. Personio

We offer you as an applicant the possibility to apply via an online application form. To provide the application form, we use the services of the personnel and applicant management software Personio of Personio GmbH, Rundfunkplatz 4, 80335, Munich, Germany.

If you apply via the form, the data entered (e.g. first and last name, contact data such as e-mail, as well as application documents) will be transmitted to Personio and stored for us.

Further details and information on Personio’s specific data protection provisions can be found at https://www.personio.de/datenschutzerklaerung/.

7.14. Brevo

We use the service Brevo of Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany, for sending newsletters. Brevo is a service with which the newsletter dispatch can be organized and analyzed. The data you enter for the purpose of receiving newsletters (e.g. e-mail address) is stored on the servers of Sendinblue GmbH.

Our newsletters sent with Brevo enable us to analyze the behavior of the recipients of the newsletters. Among other things, this allows us to analyze how many recipients have opened the newsletter message and how often which link in the newsletter was clicked. All links in the email are so-called tracking links, which can be used to count your clicks.

If you do not want any analysis by Brevo, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message. Furthermore, you can also revoke your consent at any time with effect for the future by sending an e-mail to the address stored in this declaration (see above).

The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of Sendinblue GmbH after you unsubscribe from the newsletter.

For more details, please refer to the privacy policy of Sendinblue GmbH at: https://www.brevo.com/de/legal/privacypolicy/.

7.15. Google account registration

We allow our customers in our software to log in to their Google account to access their data. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Through the registration and subsequent confirmation of access, personal data may be transmitted from us to Google and from Google to us (e.g. IP address).

Further information and Google’s privacy policy can be found at https://policies.google.com/privacy?hl=de.

7.16. Meta Pixel

We use the meta pixel of Meta Platforms Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland (“Meta”) to track user behavior on our websites. By calling up this pixel from your browser, Meta can subsequently recognize whether an advertisement was successful. For this purpose, we only receive statistical data from Meta without reference to a specific person. This allows us to record the effectiveness of Facebook ads for statistical and market research purposes.

If you are logged in to Facebook, we also refer you to their data protection information https://www.facebook.com/about/privacy/.

You have the option of changing your settings on Facebook at https://www.facebook.com/settings?tab=ads.

7.17. Hotjar

We use the Hotjar service on our website. The provider is Hotjar Ltd, Level 2, St Julians Business Center, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe.

Hotjar is a tool for analyzing your user behavior on this website. Hotjar allows us to record your mouse and scroll movements and clicks, among other things. Hotjar can also determine how long you remain with the mouse pointer in a certain place. We can also determine how long you stayed on a page and when you left it. Hotjar can also be used to obtain direct feedback from website visitors. This function serves to improve the website operator’s web offerings. Hotjar uses technologies that enable the recognition of the user for the purpose of analyzing user behavior.

Further information and Hotjar’s privacy policy can be found at https://www.hotjar.com/legal/policies/privacy/

7.18. LinkedIn Insight Tag

We use the “LinkedIn Insight Tag” tool from LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”) on our website. This tool creates a cookie in your web browser and collects data from you (e.g. IP address). This data is encrypted, anonymized within seven days and the anonymized data is deleted within 90 days. LinkedIn provides anonymized reports on website audience and ad performance. We can use this data to display targeted advertising outside its website without identifying you as a website visitor.

Further information and LinkedIn’s privacy policy can be found at https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy.

8. Social media presence

8.1. Meta Services Facebook and Instagram

We are represented with company pages on Facebook and Instagram. Facebook and Instagram are websites provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Meta”). The information collected automatically by Meta about your use of our online presence is generally transferred to a server of Meta Platforms, Inc., USA and stored there.

Certain information concerning you is processed when you visit our Facebook or Instagram pages. Meta is the sole controller for this processing of personal data. For more details about the processing of personal data by Meta, please visit https://www.facebook.com/privacy/explanation.

Meta-Insights

Meta provides statistics in anonymised form that gives us insights into actions taken by individuals on our page (so-called “page insights”). These page insights are created on the basis of specific information about individuals who have visited our page. This processing of personal data is carried out by Meta and ourselves as joint controllers. For details about the processing of personal data in order to create page insights and the agreement concluded between us and Meta, please visit https://www.facebook.com/legal/terms/information_about_page_insights_data.

Meta Lead Ads

We use Meta’s “Lead Ads” function to collect and process certain personal data from interested parties – so-called leads – via a contact form displayed on Facebook websites (so-called “instant form”). The content and scope of the data requested in this form depends on the focus of the respective lead campaign. The processing of the data is strictly bound to the purposes pursued with the respective lead ad campaign. These purposes are clearly stated in the lead ad or on the form provided before the specified data is transmitted. The data will not be passed on to third parties. Further information on data processing via Facebook Lead Ads can be found in Meta’s privacy policy at https://de-de.facebook.com/privacy/explanation

With regard to data processing activities, you also have the option of exercising your rights as a data subject against Meta. For more information, please refer to Meta’s privacy policy at https://www.facebook.com/privacy/explanation.

8.2. LinkedIn

LinkedIn is a website provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). The information collected automatically by LinkedIn about your use of our online presence on LinkedIn is generally transferred to a server of LinkedIn Corporation, USA and stored there.

Certain information concerning you is processed when you visit our LinkedIn company page. LinkedIn is the sole controller for this processing of personal data. For more details about the processing of personal data by LinkedIn, please visit https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy.

LinkedIn provides statistics in anonymised form that give us insights into actions taken by individuals on our LinkedIn page (so-called “page insights”). These page insights are created on the basis of specific information about individuals who have visited our page. This processing of personal data is carried out by LinkedIn and ourselves as joint controllers. For details about the processing of personal data in order to create page insights and the agreement concluded between us and LinkedIn, please visit https://legal.linkedin.com/pages-joint-controller-addendum.

8.3. Xing

If you visit our XING profile, your data will be processed by New Work SE, Am Strandkai 1, 20457 Hamburg, Germany (“XING”). For more information about XING’s privacy policy, please visit https://privacy.xing.com/en.

8.4. Twitter

If you visit our profile on Twitter, your data will be processed by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (“Twitter”). The information collected automatically by Twitter about your use of our online presence on Twitter is generally transferred to a server of Twitter, Inc., USA and stored there. For more information about Twitter’s privacy policy, please visit https://twitter.com/en/privacy.

9. Consent clause

You may provide your express consent to the receipt of newsletters as outlined below and this consent will then be logged. We will keep the content of consent available for retrieval at any time. Of course, you can object to the use of your data for the following purposes at any time or revoke your consent.

Newsletter subscription

By subscribing to the newsletter, I confirm that weclapp GmbH is permitted to send me regular emails containing interesting information about offers, promotions and news relating to weclapp GmbH. I can revoke this consent at any time by clicking the “Unsubscribe from newsletter” link at the end of the newsletter. Further information: Privacy Policy.

10. Provision of data

In the context of the business relationship with you, you must provide such personal data that is required for the establishment, implementation, termination and fulfilment of the associated contractual obligations. You are also required to provide personal data that we are legally obliged to collect. Generally speaking, we will not be able to conclude, implement or terminate a contract with you without this data.

11. Your rights as a data subject

Every data subject has the right to information according to Article 15 GDPR, the right to rectification according to Article 16 GDPR, the right to erasure according to Article 17 GDPR, the right to the restriction of processing according to Article 18 GDPR, the right to object from Article 21 GDPR and the right to data portability from Article 20 GDPR. The restrictions under Sections 34 and 35 BDSG apply to the right to information and the right to erasure.

Finally, you have a right to lodge a complaint with the data protection supervisory authority responsible for you.

Information about your right to object pursuant to Article 21 GDPR

Insofar as we process personal data to protect our legitimate interests that prevail in the process of balancing interests, you as a data subject can object to this processing at any time. You can also exercise this right to object if processing takes place for purposes of direct marketing. If processing takes place for other purposes, you have the right to object for reasons relating to your particular situation.

If you file an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for its processing, which override the interests, rights and freedoms of the data subject or such processing is used for the establishment, exercise or defence of legal claims.

However, this does not apply in the case of processing for purposes of direct marketing. If you object to data processing for purposes of direct marketing, we will no longer process your personal data for these purposes.

You can revoke consent issued to us previously for the processing of personal data at any time. This also applies to the revocation of declarations of consent that were issued to us before the EU General Data Protection Regulation came into force, i.e. prior to 25 May 2018. Please note that such revocation only applies to the future. Processing that takes place prior to consent being issued is not affected by such.

Please contact our data protection officer if you have any questions concerning the processing of your personal data or your aforementioned rights.

Last revised: March 2024

Template for a Data Processing Agreement pursuant to Art. 28 General Data Protection Regulation (GDPR) The establishment of a Data Processing Agreement must be drawn up in writing pursuant to the GDPR, which is also permitted in an electronic format. Therefore, you can send the signed contract to us by email at dataprocessing@weclapp.com.
Our template for a Data Processing Agreement is available here.