Data protection

Name and address of the person responsible

We, Catworkx GmbH, are to be designated as the controller within the meaning of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) as well as other data protection regulations for our website and the associated data processing. Comprehensive information about our company can be found in the imprint.

catworkx GmbH

Schellerdamm 16

21079 Hamburg

E-mail address:

Data Protection Officer

You can contact our data protection officer at datenschutz@catworkx.de and via our postal address with the addition "Attn: Data Protection Officer".

Provision of the website and log files

Description and scope of data processing

Each time our website is accessed, our system, i.e. the web server, automatically collects information from the system of the accessing computer or end device of the user.

We collect the following data:

• Information about the browser type and version used
• the operating system of the user's device
• the user's internet service provider
• the IP address of the user
• the date and time of access
• the previous website from which the user accessed our website

Legal basis for data processing

The legal basis for the temporary storage of this data and the log files is Art. 6 para. 1 lit. f) GDPR (legitimate interests of us as the responsible website operator).

Purpose of the data processing

The temporary storage of the user's IP address by our system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must necessarily remain stored for the duration of the session.

The above-mentioned data is stored in the log files in order to ensure the functionality of our website. We also use this data to optimize the website and to ensure the security of our information technology systems (e.g. to detect attacks). The data is not analyzed for marketing purposes in this context.

Duration of storage

The above-mentioned data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

If the data is stored in log files, the user's IP address is deleted or anonymized by us so that it is no longer possible to identify the accessing client and the data no longer contains any personal reference.

E-mail contact and contact form

If users fill out forms on our website, the user's content and metadata are processed.

Categories of data affected by processing.

• Inventory data (e.g. names, addresses).
• Contact data (e.g., e-mail, telephone numbers).
• Content data (e.g., text entries, photographs, videos).
• Usage data (e.g., websites visited, links clicked, interest in content, access times).
• Meta/communication data (e.g., device information, IP addresses).
• Interest data: Click paths and behavior on our website

Description and scope of data processing

We can be contacted via our contact form and the email address provided. In this case, the personal data of the sender, i.e. the user, transmitted with the inquiry will be stored.

Legal basis for data processing

The legal basis for the processing of this data, which is transmitted in the course of sending an inquiry, is Art. 6 para. 1 lit. f) GDPR (legitimate interests of us as the controller).

If the request is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b) GDPR (fulfillment of a contract).

Purpose of the data processing

The processing of this personal data serves us solely to process the contact.

Duration of storage

The above-mentioned data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected.

For personal data sent by email or via the contact form, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

Possibility of objection

The user has the option to object to data processing at any time. The objection should be sent to the following email address: kontakt@stagil.com

All personal data stored in the course of contacting us will be deleted in this case.

Registration and login area

Description and scope of data processing

On our website, we offer users the opportunity to register by providing personal data. The data is entered into an input mask and transmitted to us and stored. This data is not passed on to third parties.

The following data is collected as part of the registration process:

• User name
• password
• e-mail address
• user name
• The user's IP address
• Date and time of registration

The following data is collected as part of the login process:

• Username
• password

The following data is also stored at the time of login:

• The user's IP address
• Date and time of the login

Legal basis for data processing

The legal basis for the processing of the data is Art. 6 para. 1 lit. b) GDPR (fulfillment of a contract), as the registration and the login area are necessary for the fulfillment of the contract or for the implementation of pre-contractual measures.

Purpose of the data processing

The purpose of registration and login is to provide a support function with a service desk.

Duration of storage

The above-mentioned data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

This is the case for the data during the registration process for the fulfillment of a contract or for the implementation of pre-contractual measures if the data is no longer required for the implementation of the contract. Even after conclusion of the contract, it may be necessary to store personal data of the contractual partner in order to comply with contractual or legal obligations (e.g. tax retention obligation).

Possibility of objection

Registered users can cancel their registration at any time. The data stored about the user can be changed by the user at any time. The corresponding request should be sent to the following email address: kontakt@stagil.com

Tracking by Google Analytics

Description and scope of data processing

We use the tracking tool Google Analytics on our website. Google Analytics primarily uses cookies to record and systematically analyze the interactions of users of our website. If individual pages of our website are accessed, the following data is stored

• Three bytes of the IP address of the user's accessing system (anonymized IP address)
• The website accessed
• The website from which the user accessed the page on our website (referrer)
• The subpages that are accessed from the accessed page
• The time spent on the website
• The frequency with which the website is accessed

The software is set so that the IP addresses are not stored in full, but the last octet of the IP address is masked (e.g.: 192.168.79.***). In this way, it is no longer possible to assign the shortened IP address to the calling computer or end device of the user.

Legal basis for data processing

The legal basis for the processing of users' personal data is Art. 6 para. 1 lit. f) GDPR (legitimate interests of us as the responsible website operator).

Purpose of the data processing

The processing of the user's personal data with the help of Google Analytics enables us to analyze the surfing behavior of our users. By analyzing the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to constantly improve our own website and its user-friendliness.

Duration of storage

The data stored through tracking is deleted as soon as it is no longer required for our recording purposes.

Possibility of objection

With the help of a browser add-on to deactivate Google Analytics JavaScripts (ga.js, analytics.js, dc.js), the user can prevent Google Analytics from using their data on our website.

If the user wishes to deactivate Google Analytics, they can download and install the add-on for their own web browser. The add-on for deactivating Google Analytics is compatible with the common versions of Chrome, Internet Explorer, Safari, Firefox and Opera. For the add-on to work, it must be loaded and executed correctly in the browser. For Internet Explorer, third-party cookies must also be activated.

Interested users can find more information under the following link:

Other tools in use on our website

Google Tag Manager

We use Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), for the purpose of designing and optimizing our website in line with requirements on the basis of Art. 6 para. 1 lit. f) GDPR (legitimate interests of us as the responsible website operator).

This enables us to manage the website analysis and tracking services described in this data protection information via a central interface and integrate them into our website. The user's web browser automatically establishes a connection to Google's servers, during which the data mentioned above under "Provision of the website and log files" is transferred from the browser to Google. We have no influence on this data transfer and further data processing by Google.

According to Google, no personal data of the user is processed by the Tag Manager itself. Further information can be found in the

MyFonts Counter

We use the web analysis service of MyFonts Inc, 500 Unicorn Park Drive, Woburn, MA 01801, USA ("MyFonts") on the basis of Art. 6 para. 1 lit. f) GDPR (legitimate interests of us as the responsible website operator). Due to the license terms, page view tracking is carried out by counting the number of visits to the website for statistical purposes and transmitting them to MyFonts. MyFonts only collects anonymized data. The data may be passed on by activating JavaScript code in the user's browser. Further information on MyFonts Counter can be found in the

To prevent the execution of JavaScript code from MyFonts altogether, the use of JavaScript can be deactivated in the user's browser settings or a JavaScript blocker can be installed (e.g.

Matelso

We use the call tracking technology of matelso GmbH, Heilbronnerstr. 150, 70191 Stuttgart ("Matelso") on the basis of Art. 6 para. 1 lit. f) GDPR (legitimate interests of us as the responsible website operator). Each telephone number provided on our website may be a so-called call tracking number, in which the time, date, call acceptance and duration of the call as well as the telephone numbers of both subscribers are recorded, stored and forwarded to Matelso and the called subscriber for the purpose of determining advertising effectiveness. Further information on this can be found in the

In order to prevent the execution of JavaScript code from Matelso altogether, the use of JavaScript can be deactivated in the user's browser settings or a JavaScript blocker can be installed (e.g.

Hubspot CRM platform

We use HubSpot, a digital marketing tool, on our website. The service provider is the American company HubSpot, Inc, 25 First St 2nd Floor Cambridge, MA, USA. The company has its European headquarters in Ireland at Ground Floor, Two Dockland Central, Guild Street, Dublin 1, Ireland.

This is an integrated software solution that covers various aspects of online marketing. Among other things, Hubspot enables us to manage existing and potential customers and customer contacts. With the help of Hubspot CRM, we are able to record, sort and analyze customer interactions via email, social media or telephone across various channels. The personal data collected in this way can be evaluated and used for communication with potential customers or for marketing measures (e.g. newsletter mailings). With HubSpot CRM, we are also able to record and analyze the user behavior of our contacts on our website.

HubSpot uses cookies, small text files that are stored locally in the cache of your web browser on your end device and enable us to analyze your use of the website. HubSpot evaluates the information collected (e.g. IP address, geographical location, type of browser, duration of the visit and pages accessed) on our behalf so that we can generate reports on the visit and the pages visited.

Information collected by HubSpot is stored on the servers of HubSpot's service providers. The processing of personal data exclusively within the EU is contractually agreed. Nevertheless, we would like to point out that it cannot be completely ruled out that personal data may be transferred to the USA or that US security authorities may gain access to it.

For the USA, there is an adequacy decision of the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies with certification under the EU-U.S. Data Privacy Framework. HubSpot, Inc. is certified in accordance with the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link: www.dataprivacyframework.gov/s/participant-search. This means that any data transfer to the USA is unobjectionable due to the current adequacy decision of the European Commission of July 10, 2023.

For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, standard data protection clauses pursuant to Art. 46 para. 2 lit. c) GDPR have also been agreed. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe. The Data Processing Agreement, which corresponds to the standard contractual clauses, can be found at https//legal.hubspot.com/dpa.

Purpose and legal basis

Data is only collected and stored with your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR. This can be revoked at any time with effect for the future.

Storage period

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected.

The specific storage period of the processed data cannot be influenced by us, but is determined by HubSpot, Inc. Further information can be found in the privacy policy for HubSpot CDN: https://legal.hubspot.com/de/privacy-policy.

You can permanently object to the collection of data by HubSpot and the setting of cookies by preventing the storage of cookies through your browser settings. You can object to the processing of your personal data at any time with effect for the future.

Further information on data protection can be found in HubSpot's privacy policy: HubSpot privacy policy, HubSpot information on the EU GDPR, information on the cookies used by HubSpot. "

Note on the withdrawal of consent:

A data subject has the right to withdraw their declaration of consent under data protection law at any time. However, this does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

Information on lodging a complaint with a supervisory authority:

Without prejudice to any other administrative or judicial remedy, a data subject shall have the right to lodge a complaint with a supervisory authority - in particular in the Member State of the user's habitual residence, place of work or place of the alleged infringement - if the user considers that the processing of his or her personal data by us infringes the GDPR.