Introduction and General Information

Thank you for your interest in our website. The protection of your personal data is of great importance to us. Below you will find information on how we handle your data collected through your use of our website. The processing of your data is carried out in accordance with the legal regulations on data protection.

Controller within the meaning of the GDPR:

Humboldt-Innovation GmbH
Ziegelstraße 30
10117 Berlin
Telephone number: +49 30 2093 70752
Email: info@humboldt-innovation.de

Contact details of the data protection officer:

Proliance GmbH / www.datenschutzexperte.de
Data Protection Officer
Leopoldstr. 21
80802 Munich
datenschutzbeauftragter@datenschutzexperte.de 

When contacting the data protection officer, please specify the company to which your request relates. Please refrain from attaching sensitive information, such as a copy of an ID, to your request.

Definitions:

Our privacy policy is intended to be simple and understandable for everyone. In this privacy policy, we generally use the official terms of the General Data Protection Regulation (GDPR). The official definitions are explained in Art. 4 GDPR.

Access to and storage of information on terminal equipment:

By using our website, access to information (e.g., IP address) or storage of information (e.g., cookies) on your terminal equipment may occur. This access or storage may involve further processing of personal data within the meaning of the GDPR.
In cases where such access to information or storage of information is absolutely necessary for the technically error-free provision of our services, this is done on the basis of § 25 (1) sentence 1, (2) no. 2 TTDSG.
In cases where such a process serves other purposes (e.g., the user-friendly design of our website), this is done on the basis of § 25 (1) TTDSG only with your consent in accordance with Art. 6 (1) lit. a GDPR. Consent can be revoked at any time for the future. The processing of your personal data is subject to the provisions of the GDPR and the Federal Data Protection Act (BDSG).
For further information on the processing of your personal data and the relevant legal bases in this context, please refer to the following sections on specific processing activities on our website.

Web hosting

This website is hosted by an external service provider (host). The hosting of this website takes place in Germany and in France. Personal data collected on this website is stored on the servers of the host. This may include, in particular, IP addresses, contact requests, meta and communication data, website access, and other data generated via a website.
We collect the listed data to ensure smooth connection establishment of the website and technically error-free provision of our services. The processing of this data is absolutely necessary to provide you with the website. The legal basis for the processing of data is our legitimate interest in the correct presentation and functionality of our website in accordance with Art. 6 (1) lit. f GDPR.
We have concluded a data processing agreement with the provider in accordance with the requirements of Art. 28 GDPR, in which we oblige them to protect the data of our customers and not to disclose it to third parties.

Cookies

Our website uses so-called "cookies." Cookies are small text files that are either temporarily stored for the duration of a session (session cookies) or permanently (permanent cookies) on your end device. Session cookies are automatically deleted after your visit ends. Permanent cookies remain stored on your end device until you delete them yourself or until automatic deletion by your web browser.
Cookies serve various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g., the shopping cart function or language settings). Other cookies are used to analyze user behavior or display advertising.
The processing of data by the use of absolutely necessary cookies is based on a legitimate interest pursuant to Art. 6 (1) lit. f GDPR in the technically error-free provision of our services. For details on the processing purposes and legitimate interests, please refer to the explanations on the specific data processing.
The processing of personal data by the use of other cookies is based on consent in accordance with Art. 6 (1) lit. a GDPR. Consent can be revoked at any time for the future. If such cookies are used for analysis and optimization purposes, we will inform you separately within this privacy policy and obtain consent in accordance with Art. 6 (1) lit. a GDPR.

You can set your browser to:

Cookie settings can be managed using the following links for the respective browsers:

You can also individually manage cookies from many companies and functions used for advertising. Use the corresponding user tools, available at https://www.aboutads.info/choices/ oder http://www.youronlinechoices.com/uk/your-ad-choices.

Most browsers also offer a so-called "do-not-track" feature, with which you can specify that you do not want to be tracked by websites. When this feature is enabled, your browser informs advertising networks, websites, and applications that you do not want to be tracked for behavioral advertising or similar purposes.

For instructions on how to manage this and other browser settings, please refer to the information provided by your browser manufacturer or provider.

Change Cookie Settings

You can revoke or change your cookie settings at any time. To do this, simply access the cookie settings again via the corresponding link at the bottom of the website.

External Links

Social networks (LinkedIn, Instagram, Youtube, Facebook) are merely linked to the respective services on our website. After clicking on the embedded text/image link, you will be redirected to the page of the respective provider. Only after redirection will user information be transmitted to the respective provider. For information on how your personal data is handled when using these websites, please refer to the respective privacy policies of the providers you use.

Data Disclosure and Recipients

We do not transmit your personal data to third parties unless:

Furthermore, we use external service providers to process our services, whom we have carefully selected, commissioned in writing, and with whom we have, if necessary, concluded data processing agreements pursuant to Art. 28 GDPR. These service providers are bound by our instructions and are regularly monitored by us. These include, among others, service providers for hosting, email dispatch, and maintenance and care of our IT systems, etc. The service providers do not disclose this data to third parties.

External Services

Below you will find more information on the external services integrated into our website.

Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses so-called "cookies."
Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage to the website operator. The IP address sent by your browser as part of Google Analytics will not be merged with other data from Google. The processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR based on the consent you have given.
We only use Google Analytics with IP anonymization enabled. This means that your IP address will be truncated by Google within member states of the European Union or other parties to the Agreement on the European Economic Area.
We have entered into a data processing agreement with the service provider, in which we obligate them to protect the data of our customers and not to disclose it to third parties.
As the transmission of personal data by Google to affiliated companies and subcontractors in countries outside the EU and the EEA is possible, further protective mechanisms are necessary to ensure the level of data protection required by the GDPR. For the USA, the European Commission has issued an adequacy decision pursuant to Art. 45 para. 1 GDPR with regard to companies certified under the EU-U.S. Data Privacy Framework. Google LLC is certified under the EU-U.S. Data Privacy Framework and therefore commits to compliance with adequate data protection standards, which can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search 
The terms of use of Google Analytics and information on data protection can be accessed via the following links: 
http://www.google.com/analytics/terms/de.html
https://www.google.de/intl/de/policies/

The data will be deleted as soon as it is no longer necessary for the purpose of its collection. Data at the user and event level associated with cookies, user IDs (e.g., User ID), and advertising IDs (e.g., DoubleClick cookies, Android advertising ID, IDFA [Apple identifier for advertisers]) will be deleted no later than 14 months after collection.
You can prevent the storage of cookies by adjusting the settings of your browser software accordingly. However, we would like to point out that in this case, you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting and processing the data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plugin available at https://tools.google.com/dlpage/gaoptout?hl=de .

Google Marketing Platform (formerly DoubleClick)

This website uses DoubleClick from the Google Marketing Platform, a service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland ("Google").
DoubleClick uses cookies to present you with relevant advertisements. Your browser or device is assigned a pseudonymous identification number (ID) to check which ads have been displayed in your browser and which ads have been clicked. This allows for the improvement of campaign performance or, for example, prevents you from seeing the same ad multiple times. Additionally, Google can capture conversions, associated with ad requests, using cookie IDs. This occurs when a user sees a Campaign Manager ad and later, with the same browser, visits the advertiser's website and makes a purchase. According to Google, the cookies do not contain personally identifiable information. If you have given us your consent, the data processing is carried out under Art. 6 para. 1 lit. a GDPR.
Due to the technology used, your browser automatically establishes a direct connection to Google's server. We have no control over the scope and further use of the data collected by Google through the use of this tool and therefore inform you to the best of our knowledge: By integrating DoubleClick, Google receives information that you have accessed the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or not logged in, it is possible for the provider to obtain and store your IP address.
As Google may transfer personal data to affiliated companies and subcontractors in countries outside the EU and the EEA, additional protective mechanisms are required to ensure the level of data protection mandated by the GDPR. For the USA, the European Commission has issued an adequacy decision pursuant to Art. 45 para. 1 GDPR regarding companies certified under the EU-U.S. Data Privacy Framework. Google LLC is certified under the EU-U.S. Data Privacy Framework and therefore commits to compliance with adequate data protection standards, which can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision of the European Commission, we have also agreed on standard data protection clauses pursuant to Art. 46 para. 2 lit. c GDPR with the provider. These clauses oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.
Further information about the Google Marketing Platform can be found at https://marketingplatform.google.com/about/ sowie zum Datenschutz bei Google allgemein: https://www.google.de/intl/de/policies/privacy.

Google Fonts

Wir verwenden auf unserem Internetauftritt "Google Fonts", einen Dienst der We use "Google Fonts," a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "Google"), on our website. Google Fonts allows us to use external fonts. When you access our website, the required Google Fonts are loaded into your browser cache from our web server. This is necessary for your browser to display our text in an optically improved manner. If your browser does not support this function, a standard font will be used from your computer for display.
The fonts are hosted by us and therefore not loaded from an external provider. Processing your IP address is necessary for this purpose.
We use Google Fonts for optimization purposes, particularly to improve the usability of our website for you and to make its design more user-friendly. The legal basis for data processing is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.

Google Maps

Our website uses the Google Maps online mapping service provider via an interface. This allows us to display interactive maps directly on the website and enables you to conveniently use the map function. The provider of the mapping service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. To use the functionalities of Google Maps, it is necessary to store your IP address.
Google uses cookies to collect information about user behavior. The legal basis for processing your personal data is your consent pursuant to Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TTDSG.
As Google may transfer personal data to affiliated companies and subcontractors in countries outside the EU and the EEA, additional protective mechanisms are required to ensure the level of data protection mandated by the GDPR. For the USA, the European Commission has issued an adequacy decision pursuant to Art. 45 para. 1 GDPR regarding companies certified under the EU-U.S. Data Privacy Framework. Google LLC is certified under the EU-U.S. Data Privacy Framework and therefore commits to compliance with adequate data protection standards, which can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search 
For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision of the European Commission, we have also agreed on standard data protection clauses pursuant to Art. 46 para. 2 lit. c GDPR with the provider. These clauses oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.
 
Further information about how user data is handled can be found in Google's privacy policy:
https://www.google.de/intl/de/policies/privacy/
Opt-out: https://www.google.com/settings/ads/

YouTube

On our website, we embed videos from "YouTube," a social media platform owned by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as "Google"). The legal basis for the processing of your personal data in this context is your consent pursuant to Art. 6 para. 1 lit. a GDPR.
When the playback of embedded YouTube videos is initiated with your consent, a server call is made, usually to a server operated by Google in the USA. This transmits to the server which page you have visited and the IP address of the visitor's browser is transmitted to Google and stored by Google.
In addition, the provider "YouTube" uses cookies in the event of your consent to collect information about user behavior. According to "YouTube," these cookies are used, among other things, to capture video statistics, improve user-friendliness, and prevent abusive behavior. If you are logged in to Google, your data may also be associated with your account when you click on a video. If you do not wish for this association with your profile on YouTube, you must log out before activating the button. Google stores this data as usage profiles and uses it for advertising, market research, and/or the needs-based design of its websites. Such evaluation is carried out, in particular (also for non-logged-in users), for the purpose of displaying needs-based advertising and informing other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. Please contact Google directly for this purpose.
As Google may transfer personal data to affiliated companies and subcontractors in countries outside the EU and the EEA, additional protective mechanisms are required to ensure the level of data protection mandated by the GDPR. For the USA, the European Commission has issued an adequacy decision pursuant to Art. 45 para. 1 GDPR regarding companies certified under the EU-U.S. Data Privacy Framework. Google LLC is certified under the EU-U.S. Data Privacy Framework and therefore commits to compliance with adequate data protection standards, which can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search 
For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision of the European Commission, we have also agreed on standard data protection clauses pursuant to Art. 46 para. 2 lit. c GDPR with the provider. These clauses oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.
Further information on data protection and data use by Google can be found on the following Google website: https://policies.google.com/privacy?hl=de&gl=de

Vimeo

This website embeds videos from "Vimeo." "Vimeo" is operated by Vimeo.com Inc., 330 West 34th Street, 5th Floor, New York, New York 10001, USA.
If you have given us your consent, processing is carried out for the optimal marketing of our offering pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.
For videos from "Vimeo" embedded on our website, the tracking tool Google Analytics is automatically integrated. We have no influence on the tracking settings or the analysis results obtained through this and cannot view them. In addition, web beacons are set by embedding "Vimeo videos" for website visitors.
To prevent Google Analytics tracking cookies from being set, you can prevent the storage of cookies by adjusting your browser software accordingly; however, please note that if you do this, you may not be able to use all the functions of this website to their full extent.
You can also prevent Google from collecting and processing the data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de
As personal data is transferred to the USA, additional protective measures are required to ensure the level of data protection mandated by the GDPR. To ensure this, we have agreed on standard data protection clauses pursuant to Art. 46 para. 2 lit. c GDPR with the provider. These clauses oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even through this contractual extension, we strive for additional regulations and commitments from the recipient in the USA.
For the purpose and scope of data collection and further processing and use of the data by the providers, as well as your related rights and privacy protection settings, please refer to the privacy policy of "Vimeo":  https://vimeo.com/privacy

Data Security

In accordance with Art. 32 GDPR, we implement appropriate technical and organizational measures to ensure a level of protection appropriate to the risk, taking into account the state of the art, implementation costs, the nature, scope, circumstances, and purposes of processing as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons. For security reasons and to protect the transmission of confidential content, this website uses SSL encryption.

Duration of Personal Data Storage

The duration of the storage of personal data is determined by the relevant statutory retention periods (e.g., from commercial law and tax law). After the respective period has expired, the corresponding data is routinely deleted. If data is required for contract fulfillment or initiation or if we have a legitimate interest in continued storage, the data will be deleted when it is no longer required for these purposes or if you have exercised your right of revocation or objection.

Your Rights

Below you will find information on the rights granted to you by applicable data protection law with regard to the processing of your personal data by the data controller:
processing of your personal data by the data controller: The right, pursuant to Art. 15 GDPR, to obtain information about your personal data processed by us. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected from us, and the existence of automated decision-making, including profiling, and, where applicable, meaningful information about its details.
The right, pursuant to Art. 16 GDPR, to demand without delay the correction of incorrect or completion of your stored personal data.
The right, pursuant to Art. 17 GDPR, to request the deletion of your personal data stored by us, unless processing is necessary for exercising the right to freedom of expression and information, for fulfilling a legal obligation, for reasons of public interest or for asserting, exercising, or defending legal claims.
The right, pursuant to Art. 18 GDPR, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is contested by you, the processing is unlawful, but you oppose its deletion and we no longer need the data, but you require it for the assertion, exercise, or defense of legal claims or you have objected to the processing pursuant to Art. 21 GDPR.
The right, pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request its transmission to another controller.
The right, pursuant to Art. 77 GDPR, to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of the federal state of our registered office or, if applicable, your usual place of residence or workplace for this purpose.
The right to revoke consent granted pursuant to Art. 7 para. 3 GDPR: You have the right to revoke consent to the processing of data once granted at any time with effect for the future. In the event of revocation, we will immediately delete the data concerned unless further processing can be based on a legal basis for processing without consent. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until revocation.

Right to Object

If your personal data is processed by us on the basis of legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR, you have the right pursuant to Art. 21 GDPR to object to the processing of your personal data, provided that there are reasons for this arising from your particular situation or if the objection is directed against processing for direct marketing purposes, you have a general right of objection without the requirement of specifying a particular situation.
If you would like to exercise your right of revocation or objection, simply send an email to info@humboldt-innovation.de

Legal Obligations

The provision of personal data for the decision on conclusion of a contract, contract fulfillment or to carry out pre-contractual measures is voluntary. However, we can only make the decision in the context of contractual measures if you provide such personal data that are necessary for the conclusion of the contract, fulfillment of the contract, or pre-contractual measures.

Automated Decision Making

Automated decision-making or profiling pursuant to Art. 22 GDPR does not take place.

Reservation of Change

We reserve the right to amend or update this data protection declaration as necessary in compliance with the applicable data protection regulations. In this way, we can adapt it to current legal requirements and changes in our services, e.g., when introducing new services. The current version applies to your visit.

Date of this Data Protection Declaration: January 26, 2024