Privacy Policy
This information, provided in accordance with Article 13 et seq. of the GDPR, fulfils our obligation to inform you when collecting personal data on our website.
This website uses MailerLite to send newsletters. The provider is UAB “MailerLite”, J. Basanaviciaus 15, LT-03108 Vilnius, Lithuania (hereinafter “MailerLite”).
MailerLite is a service that can be used to organise and analyse the sending of newsletters, among other things. The data you enter for the purpose of subscribing to the newsletter will be stored on MailerLite’s servers.
Data analysis by MailerLite: With the help of MailerLite, we are able to analyse our newsletter campaigns. For example, we can see whether a newsletter message has been opened and which links, if any, have been clicked on. In this way, we can determine which links have been clicked on particularly often. We can also recognise whether certain previously defined actions have been carried out after opening/clicking (conversion rate). For example, we can recognise whether you have made a purchase after clicking on the newsletter.
If you do not wish to be analysed by MailerLite, you must unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message.
MailerLite also allows us to subdivide (“cluster”) the newsletter recipients according to various categories. The newsletter recipients can be categorised by age, gender or place of residence, for example. In this way, the newsletters can be better customised to the respective target groups.
The legal basis for the processing is Art. 6 para. 1 lit. a of the GDPR, i.e. your express and voluntary consent. You can revoke this consent at any time with effect for the future.
Detailed information on the functions of MailerLite can be found at the following link: https://www.mailerlite.com/features
You can find MailerLite’s privacy policy at https://www.mailerlite.com/legal/privacy-policy
1. General Notes and Mandatory Information
1.1 Data Protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done. We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.
1.2 Name and Contact Details of the Controller
Software4You Planungssysteme GmbH
Zielstattstr. 44 44
D-81379 München
Telefon: +49 89 7105040
E-Mail: info@software4you.com
(hereinafter referred to as “Software4You”, “we”, “us”).
1.3 Contact Details of the Data Protection Officer:
Holzhofer Consulting GmbH
Martin Holzhofer
Lochhamer Str. 31
82152 Planegg
Phone: (0 89) 1 25 01 56 00
E-Mail: datenschutz@software4you.com
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).
2. Data Collection on this Website
2.1 Processing of Access Data
For technical reasons, we process a limited amount of data (so-called connection data) each time our website is accessed. This data is technically necessary to establish and execute a connection between your end device and our servers. This data is processed in the main memory of the web server for the duration of the connection:
The following data or data categories are collected:
- IP-address
- MAC address
- Source port of the calling device or a gateway (e.g. firewall or proxy)
- Timestamp (date and time) of the retrieval
- Amount of data transferred
- Operating system used
- Message whether the request was successful (via HTTP error code)
- Message indicating why a request may have failed (using HTTP error code)
- Referrer (website from which our main page or subpages were accessed)
- User agent (browser type with which you access our website and version)
- Width and height of the display screen
- Language settings of your browser
The IP address, timestamp, HTTP error code, referrer and user agent are automatically logged when our web pages are accessed in order to ensure the
to ensure the functionality and protection of our websites. The logs are also used to optimize the website. Your IP address is only processed in the logs in abbreviated form and is therefore anonymized. It is not possible for us to create personal user profiles with this data.
The storage of information in the end user’s terminal equipment or access to information is carried out in accordance with § 25 para. 2 No. 2 TTDSG. The processing of personal data is based on our legitimate interest in accordance with Art. 6 para. 1 lit. f of the GDPR. A balancing of interests was carried out and came to the conclusion that the processing is necessary to safeguard our legitimate interests and that these outweigh your interests, fundamental rights and freedoms that require the protection of personal data. We have a legitimate interest in making this website and the services offered on it available to users.
2.2 Cookies and Related Technologies
2.2.1 General Information
This website partly uses so-called cookies and related technologies (e.g. scripts). Cookies do not damage your computer and do not contain viruses. Cookies are used to make our website more user-friendly, effective and secure. These are small text files that are stored on your device and saved by your browser, for example to “remember” information about you, such as your language settings or login information. Some of these cookies are set by us and are referred to as first-party cookies. We also use third-party cookies and related technologies that originate from a domain other than that of the website you are visiting.
By selecting the appropriate technical settings in your Internet browser, you can be notified before cookies are set and decide whether to accept them individually and prevent the storage of cookies and transmission of the data they contain. Cookies that have already been saved can be deleted at any time. However, we would like to point out that you may then not be able to use all the functions of this website to their full extent.
You can find out how to manage (including deactivating) cookies in the most important browsers by clicking on the links below:
We basically distinguish between the following categories:
- Technically necessary cookies and related technologies (“Essential”)
- Analytical cookies and related technologies (“statistics”)
- Cookies and related technologies from external media
- Cookies and related technologies for marketing purposes
Further information on the individual categories and the option of rejecting each category (with the exception of those that are technically necessary) can also be found in the “Data protection settings” under the following link:
2.2.2. Technically Required Cookies and Related Technologies
Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Such cookies are absolutely technically necessary for the operation of the website and to provide the service requested by the user and therefore cannot be deactivated.
The storage of information in the end user’s terminal equipment or access to information is carried out in accordance with Section 25 para. 2 No. 2 TTDSG. The processing of personal data is based on our legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offer in accordance with Art. 6 para. 1 lit. a and f of the GDPR. A balancing of interests was carried out and came to the conclusion that the processing is necessary to safeguard our legitimate interests and that these outweigh your interests, fundamental rights and freedoms that require the protection of personal data.
2.2.3 Cookies Requiring Consent such as Analysis and Tracking Cookies and Related Technologies (e.g. Tracking Scripts)
Advertising, marketing and analysis tools from third-party providers are also integrated on our website. These are not technically necessary for the operation of the website, but serve, for example, to record the behavior of the user, to display advertising tailored to this or to enable an analysis of the use of our website (e.g. Google Analytics and Google Ads / DoubleClick).
We use these tools to collect the following information, for example:
- Which links do users click on other websites to get to this website?
- Which subpages of this website are visited when, how often and in what order?
- What information are website users looking for?
- Which links or offers do website users click on?
We use this information to compile statistics that help us, for example, to understand the following questions:
- Which pages of the website are particularly attractive to users?
- What information are users most interested in?
- What offers should we make to our users?
An overview of all third-party services integrated on the website, as well as detailed information on each of these services, can be found in section 11.
2.3 Hosting
This website is hosted externally. The personal data collected on this website is stored on the hoster’s servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact data, names, website accesses and other data generated via a website.
External hosting is carried out for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. f of the GDPR for business customers) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f of the GDPR).
Our hoster will only process your data to the extent necessary to fulfill its performance obligations and follow our instructions with regard to this data.
We use the following hoster:
WebhostOne GmbH Rheinvogtstraße 7 D-79713 Bad Säckingen
2.4 Processing when Contacting us by E-Mail, Telephone or Fax
If you contact us by e-mail, telephone or fax on your own initiative, we will only collect your personal data (name, e-mail address, individual message) to the extent provided by you. The purpose of data processing is to process and respond to your contact request. This data will not be shared without your consent.
The legal basis for the processing of your data is our legitimate interest in accordance with Art. 6 para. 1 lit. f of the GDPR. A balancing of interests was carried out and came to the conclusion that the interests of the data subjects do not outweigh our interests in the processing. We have a legitimate interest in effectively responding to your request and, if necessary, in carrying out pre-contractual measures (e.g. advice on purchase interest, preparation of offers) with business customers, for which the processing of the data and data categories mentioned here is necessary.
The data you send to us via contact requests will remain with us until you ask us to delete it or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
2.5 Processing in Connection with the Newsletter Registration
You can subscribe to a regular e-mail newsletter, for example on product news, case studies, events and other interesting topics, by completing the relevant registration form on our website. You will then receive an activation link to the e-mail address provided, which you must click on to complete the registration (so-called double opt-in procedure).
Your subscription to the newsletter only becomes active when you click on the activation link. If you do not click on the link, your data will be automatically deleted after 30 days. This ensures that no third party has misused your personal data.
The following data or data categories are collected and processed:
- E-mail address
- First name (optional)
- Last name (optional)
- Company (voluntary information)
The fields marked with “*” must be filled in. If you do not provide us with this information, you will not be able to subscribe to the newsletter, and we will not be able to send you the requested information. All other information is voluntary.
The legal basis for the processing is Art. 6 para. 1 lit. a of the GDPR, i.e. your express and voluntary consent in combination with the double opt-in procedure.
You can revoke your consent at any time and without giving reasons. You have various options to choose from:
- You can unsubscribe by clicking on the “Unsubscribe” button, which can be found in every newsletter.
- You can send an informal e-mail with your unsubscribe request to .
The fields marked with “*” must be filled in. If you do not provide us with this information, you will not be able to subscribe to the newsletter, and we will not be able to send you the requested information. All other information is voluntary.
We use the e-mail marketing tool MailerLite from UAB “MailerLite”, J. Basanaviciaus 15, LT-03108 Vilnius, Lithuania, to send newsletters and manage newsletter campaigns. Details on this third-party provider can be found under 11.11.
The data you provide us with for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and deleted from the newsletter distribution list after you unsubscribe from the newsletter or after the purpose no longer applies. We reserve the right to remove e-mail addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest in accordance with Art. 6 para. 1 lit. f of the GDPR to delete or block them. Data stored by us for other purposes remains unaffected by this.
After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist if this is necessary to prevent future mailings. The data from the blacklist is only used for this purpose and is not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f of the GDPR). Storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.
3.0 General Information on the Legal Basis of Data Processing on this Website
As a rule, the provision of the personal data mentioned in section 2 is neither legally nor contractually required. You are not obliged to provide the data. Non-provision therefore has no consequences. This only applies unless otherwise stated in the respective processing operations.
Automated individual case decisions including profiling pursuant to Art. 22 para. 1 and 4 GDPR do not take place on the part of Software4You.
4.0 Data Protection Officer
Although we are not legally required to appoint a data protection officer, Software4You has designated an external expert to support our data protection efforts.
Data Protection Officer:
Holzhofer Consulting GmbH
Attn.: Martin Holzhofer
(See section 1.3 for contact details)
You are welcome to contact our data protection officer with questions about our processing of personal data or to exercise your rights. Inquiries will be treated confidentially.
5.0 Note on Data Transfer to Third Countries
- an adequacy decision of the European Commission within the meaning of Art. 45 GDPR.
- an approved certification mechanism in accordance with Art. 42 of the GDPR together with legally binding and enforceable obligations of the controller or processor in the third country.
- of standard data protection clauses adopted by the Commission in accordance with the examination procedure in accordance with Art. 93 para. 2 in the GDPR were issued.
- Transmission of data to Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.
- Transmission of data to YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.
- Transmission of data to Calendly LLC, 271 17th St NW, 10th Floor, Atlanta, Georgia 30363, USA.
- Transmission of data to HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA.
5.1 Revocation of your Consent to Data Processing
You may revoke your consent to the processing of your personal data at any time with future effect. The legality of the data processing carried out prior to the revocation remains unaffected.
Please note that revoking your consent may affect the availability or functionality of certain website features or services that rely on that consent.
6.0 Recipients of Data and Data Sources
6.1 Categories of Recipients of Data
- Provider of servers for the purpose of hosting our websites (
- IT service provider for the maintenance of our IT infrastructure
- Providers of marketing, analysis and other third-party services (e.g. Google and Calendly)
- Service provider for CRM, marketing and appointment booking (HubSpot)
- Service provider for e-mail marketing tool (MailerLite)
- Other processors within the meaning of Art. 28 of the GDPR in the course of order processing
6.2 Data Sources
We collect personal data directly from you when you use our website or complete online forms.
7.0 Data Retention and Deletion
Unless a specific retention period is stated elsewhere in this policy, personal data will be stored only as long as necessary to fulfil the stated purposes or as required by applicable legal obligations (e.g. tax or commercial law). After these purposes or obligations no longer apply, your data will be deleted in accordance with legal requirements.
We store your data for advertising purposes until you object to such use, withdraw your consent, or contacting you is no longer legally permitted. We retain other personal data as long as needed to fulfil the specific purpose (e.g. contract performance), and delete it once the purpose no longer applies.
Connection data is automatically deleted from the web server shortly after the session ends. Anonymized access logs are stored for 30 days. If specific log entries are required to preserve evidence (e.g. in the case of a security incident), they may be retained until the matter is resolved.
8.0 Your Rights as a Data Subject
As a data subject under the GDPR, you have the following rights in relation to your personal data:
- Right of access (Art. 15): You can request confirmation and access to the data we store about you.
- Right to rectification (Art. 16): You may request correction of inaccurate or incomplete data.
- Right to erasure (Art. 17): You may request the deletion of your data if it is no longer required or if you withdraw your consent.
- Right to restriction of processing (Art. 18): You may request that processing of your data be restricted under certain conditions.
- Right to data portability (Art. 20): You may receive your personal data in a machine-readable format.
- Right to object (Art. 21): You may object to data processing based on legitimate interests or public interest.
- Right to withdraw consent (Art. 7(3)): If processing is based on consent, you may revoke it at any time with future effect.
To exercise your rights, contact us using the details provided in section 1.2. All requests will be handled in accordance with the applicable data protection regulations.
9.0 Right to Lodge a Complaint
If you believe your rights under the GDPR have been infringed, you have the right to lodge a complaint with a supervisory authority pursuant to Article 77 of the GDPR. The competent authority for us is:
Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18, 91522 Ansbach, Germany
P.O. Box 1349, 91504 Ansbach
Email: poststelle@lda.bayern.de
Phone: +49 (0) 981 180093-0
You may also contact your local data protection authority.
10.0 Technical and Organisational Security Measures
To protect your data during transmission, we use TLS encryption (TLS 1.2 and 1.3). You can recognise an encrypted connection by the padlock symbol in your browser and the change in the URL from “http://” to “https://”. This ensures that the data you transmit to us cannot be read by third parties.
11. Data Protection Information for Third-Party Services Integrated on this Website
11.1 Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
Google Analytics uses technologies such as cookies, web storage in the browser and tracking pixels that enable your use of the website to be analyzed. Among other things, the following information can be collected:
- Host name of the accessing computer (IP address)
- Browser type/version
- operating system used,
- Referrer URL (the previously visited page),
- Click path
- Mouse and scroll movements
- Date and time of the server request
- Location data
- Purchasing activities
Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices and all other data that Google has about you.
The storage period for the data generated by Google Analytics is 14 months. All data is then automatically deleted. We have also added the code “anonymizeIP” to Google Analytics on this website.
The data generated about your use of this website is usually transferred to a Google server in the USA and stored there. For the USA, the EU Commission has adopted an adequacy decision in accordance with Article 45(3) of the GDPR, which applies to the EU–US Data Privacy Framework (EU-US DPF). For data transfers to recipients in the USA that are certified under the DPF, the level of data protection is therefore considered adequate. Google is certified under the DPF and has thus committed to complying with European data protection principles.
The data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. On behalf of the operator of this website, Google will therefore use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/
The storage of and access to information in the end user’s terminal equipment is based on informed consent in accordance with Section 25 para. 1 TTDSG. The legal basis for the further processing of your personal data is your voluntary and informed consent in accordance with Art. 6 para. 1 p. 1 lit. a of the GDPR. You give the corresponding consent via the Consent Banner.
Further information on how Google Analytics handles user data can be found under the following links:
https://support.google.com/analytics/answer/6004245?hl=en
11.2 Use of Google Tag Manager
This website uses the Google Tag Manager of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
This service allows website tags to be managed via an interface. This application is used to manage JavaScript tags and HTML tags that are used to implement tracking and analysis tools in particular. Data processing serves the purpose of designing and optimizing our website to meet your needs. The Google Tool Manager only implements tags. This means that no cookies are used and, as a rule, no data is collected. The Google Tag Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, it will remain in place for all tracking tags if they are implemented with Google Tag Manager.
However, Google Tag Manager records your IP address, which may be transmitted to a Google server in the USA and stored there. For the USA, the EU Commission has adopted an adequacy decision in accordance with Article 45(3) of the GDPR, which applies to the EU–US Data Privacy Framework (EU-US DPF). For data transfers to recipients in the USA that are certified under the DPF, the level of data protection is therefore considered adequate. Google has certified itself in accordance with the DPF and has therefore undertaken to comply with European data protection principles.
The storage of and access to information in the end user’s terminal equipment is based on informed consent in accordance with Section 25 para. 1 TTDSG. The legal basis for the further processing of your personal data is your voluntary and informed consent in accordance with Art. 6 para. 1 p. 1 lit. a of the GDPR. You grant the corresponding consent via the consent banner.
You can find more information about Google Tag Manager at: https://developers.google.com/tag-platform/tag-manager/
11.3 Use of DoubleClick & Floodlight
This website uses the online marketing tool DoubleClick by Google and the associated conversion tracking (visit action evaluation). This is an analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA (“Google”).
DoubleClick uses cookies to serve ads that are relevant to users, to improve campaign performance reports or to prevent a user from seeing the same ads more than once. Google uses a cookie ID to record which ads are displayed in which browser and can thus prevent them from being displayed more than once. In addition, DoubleClick can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a DoubleClick ad and later accesses the advertiser’s website with the same browser and buys something there. According to Google, DoubleClick cookies do not contain any personal data.
Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge:
By integrating DoubleClick, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out your IP address and store it. The information collected with the help of the DoubleClick cookie is used to create conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. However, we do not receive any information with which users can be personally identified
In addition, the DoubleClick Floodlight cookies used enable us to understand whether you perform certain actions on our website after you have accessed or clicked on one of our display/video ads on Google or on another platform via DoubleClick (conversion tracking). DoubleClick uses this cookie to understand the content you have interacted with on our websites in order to be able to send you targeted advertising later.
Your data is usually transmitted to the servers of Google LLC in the USA. For the USA, the EU Commission has adopted an adequacy decision in accordance with Article 45(3) of the GDPR, which applies to the EU–US Data Privacy Framework (EU-US DPF). For data transfers to recipients in the USA that are certified under the DPF, the level of data protection is therefore considered adequate. Google has certified itself in accordance with the DPF and has therefore undertaken to comply with European data protection principles.
The storage of and access to information in the end user’s terminal equipment is based on informed consent in accordance with Section 25 para. 1 TTDSG. The legal basis for the further processing of your personal data is your voluntary and informed consent in accordance with Art. 6 para. 1 p. 1 lit. a of the GDPR. You grant the corresponding consent via the Consent Banner.
Further information on DoubleClick and data protection at Google can be found under the following links:
11. 4 Use of Google Maps
This website uses Google Maps to display interactive maps and to create directions. Google Maps is a map service provided by Google Inc. LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
By using Google Maps, information about the use of this website, including your IP address and the (start) address entered as part of the route planner function, may be transmitted to Google in the USA. For the USA, an adequacy decision by the EU Commission within the meaning of Art. 45 para. 3 GDPR, which extends to the EU-US Data Privacy Framework (EU-US DPF). For data exports to recipients in the USA that are certified in accordance with the DPF, the level of data protection is therefore considered appropriate. Google has certified itself in accordance with the DPF and has therefore undertaken to comply with European data protection principles.
When you access a web page on our website that contains Google Maps, your browser establishes a direct connection to Google’s servers. The map content is transmitted by Google directly to your browser, which integrates it into the website. We therefore have no influence on the scope of the data collected by Google in this way. To the best of our knowledge, this is at least the following data:
- Date and time of the visit to the website in question,
- Internet address or URL of the website accessed,
- IP address, (start) address entered during route planning.
We have no influence on the further processing and use of the data by Google and can therefore accept no responsibility for this.
If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. In this case, however, you cannot use the map display.
The storage of and access to information in the end user’s terminal equipment is based on informed consent in accordance with Section 25 para. 1 TTDSG. The legal basis for any further processing of your personal data is your voluntary and informed consent in accordance with Art. 6 para. 1 p. 1 lit. a of the GDPR. You give the corresponding consent via the consent banner or alternatively via a so-called “two-click solution” (click to load) directly on the map.
For more information on the purpose and scope of data collection and the further processing and use of data by Google, please refer to Google’s privacy policy
11.5 Use of Google Fonts
External fonts such as Google Fonts and gStatic are used on this website for better visual presentation. These are services provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA (“Google”).
Google Fonts are, by default, installed locally on our website. In this context, no connection is established to Google’s servers.
However, if Google Maps is activated, Google uses dynamic Google Fonts for the purpose of uniform display of fonts. These web fonts are integrated via a server call, usually a Google server in the USA. This establishes a connection with your end device and transmits to the server, among other things, which of our Internet pages you have visited. Google also collects the IP address of your device’s browser. This data is not linked to your Google account.
Your data may be transferred to the USA. For the USA, an adequacy decision by the EU Commission within the meaning of Art. 45 para. 3 GDPR, which extends to the EU-US Data Privacy Framework (DPF). For data exports to recipients in the USA that are certified in accordance with the DPF, the level of data protection is therefore considered appropriate. Google has certified itself in accordance with the DPF and has therefore undertaken to comply with European data protection principles.
The storage of and access to information in the end user’s terminal equipment takes place on the basis of informed consent in accordance with § 25 para. 1 TTDSG. The legal basis for the further processing of your personal data is your voluntary and informed consent in accordance with Art. 6 para. 1 p. 1 lit. a of the GDPR. You grant the corresponding consent via the consent banner.
You can find more information at:
https://developers.google.com/fonts/faq?tid=331597391040 or https://policies.google.com/
11.6 Use of Google AdSense
This website uses Google AdSense. This is a service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), for the integration of advertisements.
Google AdSense uses cookies. These are files that Google can store on your PC to analyze data about your use of our website. In addition, Google AdSense also uses web beacons, invisible graphics that enable Google to analyze clicks on this website, traffic on this website and similar information.
The information obtained via cookies and web beacons, your IP address and the delivery of advertising formats are generally transmitted to a Google server in the USA and stored there. For the USA, an adequacy decision by the EU Commission within the meaning of Art. 45 para. 3 of the GDPR, which extends to the EU-US Data Privacy Framework (DPF). For data exports to recipients in the USA that are certified in accordance with the DPF, the level of data protection is therefore considered appropriate. Google has certified itself in accordance with the DPF and has therefore undertaken to comply with European data protection principles.
According to its own information, Google will not merge your IP address with other stored data.
You can prevent these cookies from being stored on your PC by making the appropriate settings in your Internet browser. However, this may mean that the content of this website can no longer be used to the same extent.
The storage of and access to information in the end user’s terminal equipment is based on informed consent in accordance with Section 25 para. 1 TTDSG. The legal basis for the further processing of your personal data is your voluntary and informed consent in accordance with Art. 6 para. 1 p. 1 lit. a of the GDPR. You grant the corresponding consent via the Consent Banner.
You can find more information about Google AdSense at:
11.7 Use of Google Ads Remarketing Audiences
We use Google Ads remarketing audiences, created through “Audiences” in Google Analytics, based on user data collected on our website. The service is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), and enables targeted advertising to users who have previously visited our website.
This service is used to collect and store data from which pseudonymized user profiles are created. This technology allows users who have visited our website to be shown targeted advertising from us on other external sites in the Google Partner Network.
GA Audiences uses cookies, among other things, which are stored on your computer and other mobile devices (e.g. smartphones, tablets, etc.) and which enable an analysis of the use of the respective devices. In some cases, the data is analyzed across devices.
In the course of use, data such as the IP address and user activities may be transmitted to a Google server in the USA and stored there. For the USA, an adequacy decision of the EU Commission within the meaning of Art. 45 para. 3 of the GDPR, which extends to the EU-US Data Privacy Framework (EU-US DPF). For data exports to recipients in the USA that are certified in accordance with the DPF, the level of data protection is therefore considered appropriate. Google has certified itself in accordance with the DPF and has thus undertaken to comply with European data protection principles.
Google LLC may pass this information on to third parties if this is required by law or if this data is processed by third parties.
The storage of and access to information in the end user’s terminal equipment is based on informed consent in accordance with Section 25 para. 1 TTDSG. The legal basis for the further processing of your personal data is your voluntary and informed consent in accordance with Art. 6 para. 1 p. 1 lit. a of the GDPR. You give the corresponding consent via the Consent Banner.
Further information on data protection in connection with the use of remarketing audiences via Google Analytics can be found here:
https://support.google.com/analytics/answer/2700409?hl=en
Further information on data protection in connection with the use of Google Ads remarketing audiences can be found here:
https://support.google.com/google-ads/answer/2549063?hl=en
11.8 Use of YouTube
We use the function for embedding YouTube videos from YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (“YouTube”) on our website. YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
The YouTube videos can be played directly from our website. With this integration, content from the YouTube website is displayed in parts of a browser window. However, the YouTube videos can only be accessed by clicking on them separately. This technique is also known as “framing”. When you call up a (sub)page of our website on which YouTube videos are integrated in this form, a connection to the YouTube servers is established and the content is displayed on the website by notifying your browser.
The integration of YouTube content only takes place in “extended data protection mode”. This is provided by YouTube itself and ensures that YouTube does not initially store any cookies on your device. However, when the relevant pages are accessed, the IP address and other data (e.g. browser used, operating system and its interface, language and version of the browser software, date and time of the query) are transmitted and thus, in particular, which of our Internet pages you have visited. However, this information cannot be assigned to you unless you have logged in to YouTube or another Google service (e.g. Google+) before accessing the page or are permanently logged in.
As soon as you start playing an embedded video by clicking on it, YouTube only stores cookies on your device through the extended data protection mode, which do not contain any personally identifiable data, unless you are currently logged in to a Google service. These cookies can be prevented by appropriate browser settings and extensions.
If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.
The data collected is usually transferred to a YouTube or Google server in the USA and stored there. For the USA, an adequacy decision of the EU Commission within the meaning of Art. 45 para. 3 in the GDPR, which extends to the EU-US Data Privacy Framework (EU-US DPF). For data exports to recipients in the USA that are certified in accordance with the DPF, the level of data protection is therefore considered appropriate. YouTube and Google have certified themselves in accordance with the DPF and are therefore obliged to comply with European data protection principles.
The storage of and access to information in the end user’s terminal equipment is based on informed consent in accordance with Section 25 para. 1 in TTDSG. The legal basis for the further processing of your personal data is your voluntary and informed consent in accordance with Art. 6 para. 1 p. 1 lit. a of the GDPR. You give the corresponding consent via the consent banner or alternatively via a so-called “two-click solution” (click to load) directly with the respective video.
Further information on the collection and use of data by YouTube and Google can be found in YouTube’s privacy policy at https://www.youtube.com/t/privacy
11.9 Use of Borlabs Cookie
This website uses the Borlabs Cookie Consent Management Platform to obtain your consent to the storage of certain cookies and related technologies on your end device and to document this in compliance with data protection regulations. The provider of this technology is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg (hereinafter referred to as “Borlabs”).
Borlabs is used to consent to the storage of cookies and related technologies in a legally compliant manner and to ensure the revocation of this consent. Furthermore, consent is documented for legal proof and the setting of cookies and related technologies is technically controlled. Borlabs stores information about the categories of cookies and related technologies used by the website and whether users have given or withdrawn their consent to the use of the individual categories. Among other things, this enables us to prevent cookies and related technologies from being set in the user’s browser, even though no consent has been given for this.
Borlabs itself uses a cookie to store information so that the preferences of returning visitors can be saved. The following information is collected and stored in connection with this:
- Your consent(s) or the revocation of your consent(s)
- Cookie runtime
- Cookie version
- Domain and path of the WordPress website
- UID (a randomly generated ID and therefore not a personal date)
This data is not passed on to Borlabs. The data collected will be stored until you ask us to delete it, delete the Borlabs cookie yourself or until the purpose for storing the data no longer applies. Mandatory statutory retention obligations remain unaffected.
Since the cookie used by Borlabs serves the sole purpose of managing your consent and is therefore technically necessary so that the telemedia service expressly requested by you can be provided, no consent is required for this in the present case (see Section 25 (2) No. 2 TTDSG). Borlabs is generally used to obtain the legally required consents for the use of cookies and related technologies. The legal basis is Article 6(1)(c) of the General Data Protection Regulation (GDPR).
Further information on data protection at Borlabs can be found at
11.10 Use of Calendly
You can make appointments with us on our website. We use the “Calendly” tool to book appointments. The provider is Calendly LLC, 271 17th St NW, 10th Floor, Atlanta, Georgia 30363, USA (hereinafter “Calendly”). By clicking on the “Book appointment” or “Book demo now” button, you will be redirected to the calendly.com website.
To book an appointment, enter the requested data (name, e-mail address, telephone number, company, position, request) and the desired date in the form provided. The data entered will be used for the planning, realisation and, if necessary, the follow-up of the appointment. The appointment data is stored for us on the servers of Calendly, whose privacy policy you can view here: Privacy Notice | Calendly
In the course of use, data may be transferred to a Calendly server in the USA and stored there. For the USA, an adequacy decision by the EU Commission within the meaning of Art. 45 para. 3 GDPR, which extends to the EU-US Data Privacy Framework (EU-US DPF). For data exports to recipients in the USA that are certified in accordance with the DPF, the level of data protection is therefore considered appropriate. Calendly has certified itself in accordance with the DPF and is therefore committed to complying with European data protection principles.
The data you have entered will remain with us until you ask us to delete it or the purpose for which it was stored no longer applies. Mandatory statutory provisions – in particular retention periods – remain unaffected.
The legal basis for data processing is generally Art. 6 para. 1 lit. f of the GDPR. A balancing of interests was carried out and concluded that the processing is necessary to safeguard our legitimate interests and that these outweigh your interests, fundamental rights and freedoms that require the protection of personal data. We have a legitimate interest in making appointments with interested parties and customers as uncomplicated as possible.
11.11 Use of MailerLite
This website uses MailerLite to send newsletters. The provider is UAB “MailerLite”, J. Basanaviciaus 15, LT-03108 Vilnius, Lithuania (hereinafter “MailerLite”).
MailerLite is a service that can be used to organise and analyse the sending of newsletters, among other things. The data you enter for the purpose of subscribing to the newsletter will be stored on MailerLite’s servers.
Data analysis by MailerLite: With the help of MailerLite, we are able to analyse our newsletter campaigns. For example, we can see whether a newsletter message has been opened and which links, if any, have been clicked on. In this way, we can determine which links have been clicked on particularly often. We can also recognise whether certain previously defined actions have been carried out after opening/clicking (conversion rate). For example, we can recognise whether you have made a purchase after clicking on the newsletter.
If you do not wish to be analysed by MailerLite, you must unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message.
MailerLite also allows us to subdivide (“cluster”) the newsletter recipients according to various categories. The newsletter recipients can be categorised by age, gender or place of residence, for example. In this way, the newsletters can be better customised to the respective target groups.
The legal basis for the processing is Art. 6 para. 1 lit. a of the GDPR, i.e. your express and voluntary consent. You can revoke this consent at any time with effect for the future.
Detailed information on the functions of MailerLite can be found at the following link:
https://www.mailerlite.com/features
You can find MailerLite’s privacy policy at
11.12 Privacy notice on the use of HubSpot
We use the “HubSpot” platform provided by HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA. For customers in the European Economic Area, the service is provided by HubSpot Ireland Limited, 1 Sir John Rogerson’s Quay, Dublin 2, Ireland. HubSpot is used as a processor within the meaning of Article 28 GDPR. Data is generally processed in data centres within the European Union. However, access from third countries (in particular the United States) cannot be excluded.
We use HubSpot for the following purposes:
a) Meeting scheduling
On our website, you may schedule a meeting with us via an embedded booking widget. In this context, the data you provide (name, email address, where applicable telephone number, company, and your preferred appointment time) is processed for the purposes of scheduling, conducting and following up on the meeting.
The legal basis for this processing is Article 6(1)(b) GDPR (performance of pre-contractual measures) and Article 6(1)(f) GDPR (legitimate interest in enabling a straightforward process for scheduling meetings with prospective and existing customers).
b) Customer relationship management
We use HubSpot as a CRM system for the management and maintenance of our business contacts. In this context, contact data (name, email address, company, position and communication history) is stored and processed for the purposes of handling enquiries, managing contacts and maintaining existing business relationships.
The legal basis for this processing is Article 6(1)(f) GDPR (legitimate interest in the efficient management of business contacts) and, where applicable, Article 6(1)(b) GDPR (performance of a contract or pre-contractual measures).
c) Webinar and event management
We use HubSpot to organise and conduct webinars and events, including registration, participant management and follow-up. In this context, the data you provide during registration (name, email address, company and, where applicable, additional information) is processed.
The legal basis for this processing is Article 6(1)(b) GDPR (performance of the event for which you have registered) and, where applicable, Article 6(1)(a) GDPR where you have provided your consent to receive further information.
d) Email marketing and newsletters
Where you have provided your consent, we use HubSpot in part and MailerLite for the distribution of newsletters and marketing emails (e.g. webinar invitations, product updates and specialist articles). HubSpot also enables us to analyse our email campaigns (e.g. open rates and click behaviour).
The legal basis for this processing is Article 6(1)(a) GDPR (your explicit consent). You may withdraw your consent at any time, for example via the unsubscribe link included in each email.
Cookies and tracking
When embedding content on our website, HubSpot uses cookies (e.g. __hs_opt_out, __hs_do_not_track, hubspotutk) which serve, among other things, to recognise returning visitors and to analyse user behaviour. The storage of and access to information on the end user’s device is carried out on the basis of informed consent pursuant to Section 25(1) TTDSG. The legal basis for the further processing of your personal data is your freely given and informed consent in accordance with Article 6(1), first sentence, point (a) GDPR. The relevant consents are obtained via the consent banner.
Further information on data protection at HubSpot can be found at:
https://legal.hubspot.com/privacy-policy
The integration of HubSpot content (e.g. booking widgets or forms) only takes place after you have given your explicit consent via our consent banner. Cookies are set and a connection to HubSpot servers is established only after consent has been granted. You may withdraw your consent at any time via the cookie settings.
Where technically feasible, integration takes place in so-called “consent mode”, meaning that no non-essential cookies are set prior to your consent.
Transfers of data to third countries
Although HubSpot hosts data of European customers within the EU, the use of the service may result in the transfer of data to servers of HubSpot, Inc. in the United States. An adequacy decision of the European Commission pursuant to Article 45 GDPR (EU–US Data Privacy Framework) exists for the United States. HubSpot is certified under the DPF. In addition, where required, we have concluded standard contractual clauses in accordance with Article 46 GDPR.
Data processing agreement
We have concluded a data processing agreement (DPA) with HubSpot. This ensures that personal data of our website visitors and contacts is processed solely on our behalf and in accordance with our instructions, as well as in compliance with the GDPR.
Data retention
Data processed via HubSpot is retained by us until you request its deletion, withdraw your consent, or the purpose for storing the data no longer applies. Mandatory statutory provisions – in particular retention periods – remain unaffected.
Further information on data protection at HubSpot can be found at:
11.13 Use of Microsoft Clarity
This website uses Microsoft Clarity, a service provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (“Clarity”).
Clarity is a tool for analysing user behaviour on our website. The tool captures mouse movements and generates heatmaps to show which areas of the site are most frequently scrolled or clicked. It can also record usage sessions as videos and provide insights into general user behaviour.
Clarity uses technologies such as cookies and device fingerprinting to recognise users for analytical purposes. Your personal data is stored on Microsoft servers (Microsoft Azure Cloud Service) in the USA.
The use of Clarity is based on your voluntary and informed consent in accordance with Art. 6 para. 1 p. 1 lit. a of the GDPR and Section 25 para. 1 TTDSG. This consent can be withdrawn at any time with effect for the future. If no consent is given, the processing is based on Art. 6 para. 1 p. 1 lit. f of the GDPR due to our legitimate interest in optimising the user experience of our website.
Your data may be transferred to the USA. For the USA, an adequacy decision by the European Commission in accordance with Art. 45 para. 3 in the GDPR applies, based on the EU-U.S. Data Privacy Framework (EU-US DPF). Data transfers to U.S. recipients certified under the DPF are considered to offer an adequate level of data protection. Microsoft is certified under the DPF and has committed to comply with European data protection principles.
We have concluded a data processing agreement (DPA) with Microsoft to ensure that personal data collected via Clarity is processed strictly in accordance with our instructions and in full compliance with the GDPR.
More information is available here:
12. Group Collaboration and Shared Systems
This company is part of a European corporate group that collaborates across entities using shared internal systems and services for business functions such as customer relationship management (CRM), marketing, HR, payroll, finance, IT, compliance, and administrative support.
Depending on the internal function, one group entity may process personal data on behalf of another (e.g., in relation to HR, finance, or IT operations), always under formal intercompany agreements that comply with applicable data protection legislation.
While each group company remains responsible for the personal data it controls, shared platforms may result in limited cross-visibility of information (e.g., business contact data or employee records) across entities. Access to such data is role-based and restricted to authorised personnel only.
The group applies a uniform standard of privacy and security across all its companies in line with the General Data Protection Regulation (GDPR).
Data subjects may exercise their rights under GDPR by contacting the relevant group entity. If uncertain, please use the contact details provided below, and your request will be directed accordingly.
Effective date
Originally effective: June 2025
Last updated: March 2026
This privacy policy is subject to constant review and Software4You reserves the right to make changes at any time. Such changes will be published accordingly on this website.