Data Protection

Your cookie setting

Consent choices

International privacy notices

The following information describes how WAVESTONE deal with personal data and the way we ensures the implementation of data protection. The following is the information pursuant to Articles 13, 14 and 21 GDPR on the processing of personal data by WAVESTONE as well as the claims and rights data subjects are entitled in according to the data protection regulations. Which data is processed by WAVESTONE and in which way it is used depends decisively on the existing relationship between the data subject and WAVESTONE.

Who is responsible for data processing and whom can data subjects contact?

Controller:

WAVESTONE AG
Leopoldstraße 28a
80802 Munich
Phone: +49 89 45599-0
Fax: +49 89 45599-100
Email: info@wavestone.eu

Our data protection officer is available at:

WAVESTONE AG
Data protection officer
80802 München
Phone: +49 89 45599-0
E-Mail: datenschutz@wavestone.eu

Information for users of our website

1. What sources and data do we use?

a) Technically necessary collection of data

If you merely use our website for information purposes i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the data that is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):

b) Use of cookies:

This chapter b) only applies to a limited extent if the Borlabs Cookie Plugin is used before visiting our website. In this case, the use of cookies or other web tracking technologies as well as the information collected with them is subject to the options selected in the Borlabs cookie plugin. In Addition, cookies are stored on your computer when you visit our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which certain information flows to the company that sets cookies (in this case by us). Cookies cannot run programs or transmit viruses to your computer. They serve to make the Internet offer more user-friendly and effective overall. Our website uses the following types of cookies, the scope and functionality of which are explained below: 

Transient Cookies

Transient cookies are deleted automatically when you close your browser. In particular, these include session cookies. These store a so-called session ID with which various requests from your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser. 

Persistent Cookies

Persistent cookies are automatically deleted after a specified period which may vary depending on the cookie in question. You may delete the cookies at any time in the security settings of your browser. You are able to configure your browser settings according to your wishes and for example, refuse to accept third-party cookies or other cookies. In this case, you may not be able to use all the functions of our website. 

2. What data do we use for other functions and offers of our website?

In addition to the purely informational use of our website, we offer various services that you can use if you are interested. For this purpose, you usually must provide further personal data that we use to provide the respective service and to which the aforementioned data processing principles apply. In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us. In addition, these are bound by our instructions and are checked randomly and on certain occasions. Furthermore, we may pass on your personal data to third parties if services are provided by us together with partners. You will receive further information on this in connection with the specification of your personal data or within the scope of the offer description. As part of a global group, we have affiliated companies and external service providers both within and outside the European Economic Area (“EEA”). As a result, whenever we use or otherwise process your personal data for the purposes described in this Privacy Policy, we may transfer your personal data to countries outside the EEA, including countries where there is a level of data protection that is not comparable to the level of data protection within the EEA. Such a transfer is in any case subject to the standard contractual clauses in accordance with Decision of the EU Commission 2010/87/EU or Implementing Decision (EU) 2021/914 in order to contractually ensure the protection of your personal data by a level of protection applicable in the EEA. You can request an edited version of these SCC without commercial content and information that is not relevant at datenschutz@wavestone.eu. 

a) Contact Form

When you contact us via a contact form, the data you provide (your e-mail address, if applicable your name and telephone number, company, areas of interest, etc.) will be stored by us to answer your questions and to send you industry-specific information or information on WAVESTONE services as well as invitations to our events. If you do not agree to the storage of data for marketing purposes or have objected to it, we will delete the data collected in this context after the storage is no longer necessary or restrict the processing if there are statutory retention obligations. 

b) Newsletter

You can subscribe to our newsletter, with which we inform you about WAVESTONE in general as well as current topics and events. To subscribe to our newsletter, we use the so-called double opt-in procedure. This means that after your registration we will send you an e-mail to the e-mail address in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration, you will not be included in the newsletter mailing list and will not receive a newsletter. In addition, we store your IP addresses and times of registration and confirmation. The purpose of the procedure is to verify your registration and, if necessary, to be clarify a possible misuse of your personal data. The data fields marked in the form are mandatory for sending the newsletter. This information is necessary to contact you personally. After your confirmation we will store the data provided for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR. We would like to point out that we evaluate your user behavior when sending the newsletter. For this evaluation, the e-mails sent contain so-called tracking pixels, which represent one-pixel image files stored on our website and count calls when the e-mails are opened. For the evaluation purposes, we link the data mentioned in section 1 a) and the tracking pixels with your e-mail address and an individual ID. Links received in the newsletter also contain this ID and are tracked on our website using JavaScript. With the data obtained in this way, we create a user profile to customize the newsletter to your individual interests. We record when you open our newsletters, which links you click in it and infer your personal interests from this. We link this data how you use our website. To prevent the tracking of openings, you may deactivate the display of images in your e-mail program by default. In this case, the newsletter will not be displayed completely and you may not be able to use all functions. The above-mentioned tracking will occur when you display the images manually. 

c) Getty Images

The pictures of the stock image provider Getty Images may be integrated. The pictures are recognizable by a frame with the reference “Getty Images”. For these pictures to be displayed, Getty Images requires the user’s IP address to be visible so that the images can be delivered to the user’s browser. Your IP address is therefore necessary to display this content. According to the current state of knowledge, the IP address is only used for this purpose. However, we have no control on whether Getty Images stores the IP address, for example, for statistical purposes. As far as we become aware of this, we will inform you about it or remove the pictures within the scope of this Privacy Policy. For more information please refer to the privacy policy of Getty Images:: https://www.gettyimages.de/Corporate/PrivacyPolicy.aspx 

d) Google reCAPTCHA

To protect your requests via the Internet form we use the service reCAPTCHA from Google. The tool checks whether the input is made by a human being or abusively by automated processing. This service involves sending Google the IP address and any other data required by Google for the reCAPTCHA service. For this purpose, your input will be transmitted to Google and used there. Your IP address will be truncated by Google within the member states of the European Union or in other parties to the Agreement on the European Economic Area. Only in exceptional cases will the entire IP address be transmitted to a Google server in the USA and truncated there. Google will use this information to evaluate your use of this service on behalf of the operator of this website. The IP address transmitted by your browser as part of reCAPTCHA is not conflated with other Google data. This data is subject to the privacy policy of Google Inc. For more information about Google’s privacy policy, please visit: https://www.google.com/intl/de/policies/privacy/ .

e) GoToWebinar

When conducting webinars, we use the webinar software GoToWebinar from LogMeIn, Inc. 333 Summer Street, Boston, MA 02210 USA. LogMeIn, Inc. is responsible for the provision of this service and the associated data processing. You can view LogMeIn’s Privacy Policy here. In order to be able to conduct webinars the following data is requested: Salutation, first name, surname, company name, job title, industry (optional), country, e-mail address, telephone (optional) (hereinafter referred to as “registration data”). Additional data may be queried specifically for the respective webinars. We transmit this registration data to LogMeIn, Inc. The processing of your data takes place on the basis of your consent (Art. 6 para. 1 lit a GDPR). An encrypted connection will be established between you and the webinar organizer to conduct the webinar. Both before and after the webinar, you will receive information from us in connection with the webinar. The webinars are regularly recorded in order to make them available on the WAVESTONE website for later retrieval. Questions and related answers asked by participants during the webinar will also be recorded and played back when the webinar is later retrieved. Statistical data will be collected during and after the webinar. 

By clicking on “Join the Webinar” you confirm that you will not create a recording or screenshot of this session. 

If you attend a webinar, in addition to your registration data, we will receive information about the duration of the participation, interest in the webinar, questions asked or answers given for the purpose of further customer service or to enhance user experience. You may end the session at any time by simply closing the browser window. If the person responsible for conducting the webinar terminates the session, your session participation will also be terminated automatically. 

Mentimeter

As part of the conduct of surveys, we use the – Mentimeter software provided by Mentimeter AB, Tulegatan 11, SE-113 86 Stockholm,Sweden. Mentimeter AB is responsible for the provision of this service and the associated data processing. You can view Mentimeter’s privacy policy here. In order to carry out the surveys, the following data is required: title, first name, surname, company name, job title, industry (optional), country, e-mail address, telephone (optional) (hereinafter referred to as “registration data”). For the use of the functions of Mentimeter, the following data is also used: information, contact data to send the surveys or presentations by e-mail, contact data for marketing purposes and cookie information according to the cookie information of Mentimeter. Participation in the surveys is voluntary. Your data will be used to create anonymous surveys. Further data can be queried specifically for and in the respective surveys. The processing of your data takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR).

To carry out the survey, an encrypted connection is established between you and Mentimeter. You can stop participating in the survey at any time by simply closing the browser window.

f) Google Analytics

Our website uses Google Analytics. Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, which are text files stored on your computer that enable the analysis of the way in which you use the website. We use Google Analytics to analyze and regularly improve the function of our website and make it more interesting for you as a user. The information generated by the cookie about your use of this website is regularly transmitted to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the entiere IP address be transmitted to a Google server in the USA and truncated there. For these exceptional cases, Google uses the standard contractual clauses. The legal basis for the use of Google Analytics is your consent (Art. 6 para. 1 sentence 1 lit. a  GDPR),which you can revoke at the top of this page under “Cookie Settings”. 
On our behalf, Google will use this information to evaluate your use of our website, to compile reports on website activity and to provide us with other services relating to website activity and Internet usage.The IP address transmitted by your browser as part of Google Analytics is not conflated with other Google data.You may prevent the saving of cookies by selecting the appropriate settings in your browser. We would like to point out, however, that doing this may mean that not all functions of this website can be used to their full extent. You may also prevent the data generated by cookies concerning your use of the website (incl. your IP address) from being transmitted to Google, and the processing of this data by Google, by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. This website uses Google Analytics with the extension “_anonymizeIp()”. As a result, IP addresses are further processed in abbreviated form, so that personal reference can be excluded. Information from the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use:  http://www.google.com/analytics/terms/de.html, Overview of data protection:  http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the data protection declaration:  http://www.google.de/intl/de/policies/privacy.

g) Integration of YouTube videos

We have included YouTube videos in our online service, which are stored on http://www.YouTube.com  and are playable directly from our website. These are all included in the extended data protection mode. Only when you play the video data is transmitted to YouTube. We have no control over the extent of data transmission. 

a) Disclosure of data to YouTube

When you visit the website, YouTube receives, among other things, the information that you have accessed the corresponding subpage of our website. This takes place regardless of whether YouTube makes available a user account via which you are logged into or no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile when using YouTube, you must first log out before clicking the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or requirements-oriented design of its website. Such evaluation also takes place (even for users who are not logged in) for the purposes of providing customized advertising and to inform other social network users about activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. 

b) Further information on the purpose and scope of data collection by YouTube

For more information on the purpose and scope of data collection and processing by YouTube, please refer to the privacy policy. There you will also find further information on your corresponding rights and settings options for protecting your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA using the standard contractual clauses. 

h) Integration of Google Maps

On our website we use the services of Google Maps. This allows us to show you interactive maps directly on the website.

a) Transmission of data to Google

By visiting the website Google receives the information, among other things, that you have accessed the corresponding subpage of our website. This takes place regardless of whether Google makes available a user account via which you are logged into or no user account exists. If you are logged into Google, your information will be directly associated with your account. If you do not wish to be associated with your profile when using Google, you must first log out before clicking the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or needs-based design of its website. 

b) Further information on the purpose and scope of data collection by Google

For more information on the purpose and scope of data collection and processing by Google, please refer to Google’s privacy policy. There you will also find further information on your corresponding rights and settings options for protecting your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA using the standard contractual clauses.

i) Borlabs cookie

Our website uses Borlabs Cookie, which sets two technically necessary cookies (borlabsCookie and borlabsCookieUnblockContent) to store your cookie preference. Borlabs Cookie does not process any personal data.The borlabsCookie stores your chosen preference, which you selected when you entered the website. The borlabsCookieUnblockContent cookie stores which (external) media/content you want to have automatically unlocked at all times. If you wish to revoke these settings, simply delete the cookies in your browser. When you re-enter/reload the website, you will be asked again for your cookie preference.  

j) Social-Media Buttons

We use social media buttons on our homepage and use a Shariff button for this purpose. This Shariff plugin we use protects your personal data by establishing direct contact between the social network and you only when you click on this Shariff button. 

3. What do we process your data for (purpose of processing) and on what legal basis? 

We process personal data in accordance with the provisions of the European Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) on the following legal bases: 

a) For the fulfilment of contractual obligations (Art. 6 para. 1 lit.b) GDPR) 

The processing of personal data (Art. 4 No. 2 GDPR) is carried out to establish, implement and terminate the contracts concluded or to be concluded with you via our website as well as all activities necessarily associated with the operation and administration of a company.The purposes of the data processing depend primarily on the contractual relationship. Further details for the purpose of data processing are set out in the respective contractual conditions.  

b) In the context of the balancing of interests (Art. 6 para. 1 lit. f) GDPR) 

If necessary, we process your data to protect our legitimate interests or those of third parties. This includes in particular: