Startbase privacy policy

We, Startbase GmbH, appreciate your interest in using Startbase (hereinafter "Platform"). The protection of personal data is important to us. Personal data is used in accordance with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act and other applicable data protection regulations. In the following, we provide information on what personal data we collect, how we use it and what options are available to shape it.

1 Who is responsible for data processing?

The controller for the processing of personal data is Startbase GmbH, c/o fintogether, Rothebühlstraße 87E, 70178 Stuttgart, website: www.startbase.de, email: hello@startbase.de.

2 Who is my contact for questions about data protection?

The data protection officer for the processing of personal data is Startbase GmbH, Rothebühlstr. 87E, 70178 Stuttgart, e-mail: support@startbase.de.

3 Purpose and legal basis of the processing of personal data

3.1 Data processing in connection with visits to the platform

Each time a website is accessed and each time a file is retrieved, general data about this process is automatically stored in a log file. This data is stored exclusively for system-related and statistical purposes; personal data is not recorded. These are

- Name of the retrieved file

- Date and time of access (time stamp) of the IP address

- Amount of data transferred

- Notification of whether the retrieval was successful

- Description of the type of web browser used

- the operating system used.

The storage of this data serves on the one hand to avert danger in the event of an attack on our information technology systems and on the other hand to improve our offers, also in order to be able to display content in a more interest-oriented manner. We work together with service providers for this purpose.

The processing takes place within the scope of the balancing of interests (Art. 6 para. 1 lit. f GDPR) to ensure that our offer is not misused. our offer is not misused.

3.2 Data processing in connection with making contact

In the If you contact our customer service by email, we will collect the information information provided, including personal data, in order to process the question or request. process the question or request.

The processing takes place within the framework of the balancing of interests (Art. 6 para. 1 lit. f GDPR).

3.3 Data processing when obtaining information

When you register to receive information, we store your email address, first name and surname as well as the date and time of registration. We use this data exclusively for sending the information and for statistical evaluations to analyze system performance. We work together with service providers for this purpose. You can register at any time in your profile settings.

When you register, your data is saved and an additional confirmation message containing a link to the final registration (double opt-in) is generated.

If you no longer agree to the storage of your data for these purposes and no longer wish to use our services, you can unsubscribe from the respective communication lists at any time. You will find a corresponding unsubscribe link at the end of each communication. You can also unsubscribe from information in your profile at any time. You can also send us a message at any time to team@startbase.de, stating your registered e-mail address and requesting to unsubscribe from this information. The data you provide will be deleted after you unsubscribe.

The processing is based on your consent (Art. 6 para. 1 lit. a GDPR).

3.4 Data processing for users of the platform with a user account

(1) In order to be able to post information on Startbase as a user and access further information and access further information and functionalities, it is necessary to to register and enter your first and last name, email address and a e-mail address and a password of your choice (mandatory information). The password is not stored in plain text. When registering as a user, this data is stored and an additional confirmation message containing a link to the final registration registration (double opt-in). If you do not confirm your registration the link in this e-mail, your data will be deleted after 48 hours. hours. Only when you confirm the link will your data for registration as a user will be saved.

This data is required for the conclusion of a contract the use of Startbase's services for information purposes and the communication required in this necessary communication in this context.

The processing takes place for the fulfillment of contractual obligations (Art. 6 para. 1 lit. b GDPR).

The data provided by you will be data will in any case be stored for as long as your registration for Startbase exists. If you no longer consent to the processing of the data you can deactivate your user profile by sending us a message to . sending us a message to team@startbase.de .

(2) Company-related data is stored in anonymized form so that the data cannot be traced back to your your identity, stored for static purposes.

(3) As a registered user of the platform, you can provide further information about yourself, such as your preferred form of address, details of current and former employers and your job title in these companies, private contact options (e.g. e-mail address, own website), links to private profiles on social networks (Facebook, LinkedIn, Twitter). This information is optional and can be edited and deleted at any time in your user profile.

We use this data within the scope selected by you to create the profile about you your person, which can be viewed by other Startbase users.

The processing takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR).

4. cookies

We or our partners use cookies or similar technologies such as Local Shared Objects (hereinafter collectively referred to as "cookies") to collect and store information when our platform is visited. The processing is carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR and in the interest of optimizing or enabling user guidance and adapting the presentation of our website.

Cookies cannot execute programs or transmit viruses to the computer. transfer viruses to your computer. Cookies are small text files that are stored on the hard disk and assigned to the stored on the hard disk and assigned to the browser used and through which we certain information that serves to make the website more user-friendly and more user-friendly and effective. In the browser settings, you can configured accordingly and the acceptance of cookies can be rejected. It is possible that not all functions of the platform can then be used. can be used. Further information on cookies can be found in our cookie information.

5. transfer to service providers

(1) As part of the Startbase offer, we sometimes use third parties as service providers.

For the purpose of sending e-mails and for the purpose of sending newsletters, we use the services of Mailjet SAS, 13-13 bis, rue de l'Aubrac, 75012 Paris, France.

These third parties are processors who process the personal data in accordance with the respective specifications and only for the specific purpose for the controller in accordance with section 1 of this process. In this context, we remain responsible for the processing controller in this context.

(2) Otherwise, we will personal data to third parties without prior consent only if we are if we are legally obliged to do so, e.g. if it serves the purpose of clarification of unlawful use or is necessary for legal prosecution. is necessary. In such a case, personal data may be forwarded to the law enforcement authorities. However, this only happens concrete evidence of unlawful or abusive behavior. behavior. We are also legally obliged to provide information to certain to provide information to certain public authorities on request. These are, for example law enforcement authorities or authorities that prosecute administrative prosecute administrative offenses.

(3) Disclosure to Companies of the Boerse Stuttgart Group, such as Boerse Stuttgart GmbH, Boerse Stuttgart Digital Exchange GmbH, Sowa Labs GmbH, blocknox GmbH, Euwax AG and GmbH, Euwax AG and Boerse Stuttgart Digital Ventures GmbH, we reserve the right to to the extent necessary in individual cases for the provision of services. is necessary.

6 Place of processing

We ourselves do not transfer your personal data to countries outside the European Economic Area, except in cases where this is permitted under the GDPR. In order to ensure the protection of personal rights also in the context of these data transfers, we use the standard contractual clauses of the EU Commission in accordance with Art. 46 para. 2 lit. c GDPR (available at: http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2010:039:0005:0018:DE:PDF) when structuring contractual relationships with recipients in third countries. Alternatively, we will make these documents available on request. For the USA, the European Commission decided on July 12, 2016 that an adequate level of data protection exists under the provisions of the EU-U.S. Privacy Shield (adequacy decision, Art. 45 GDPR). Further information - including on the certification of the service providers we use - can be found at https://www.privacyshield.gov We only use US service providers that are certified in accordance with the EU-U.S. Privacy Shield.

7 Links to other websites and services

(1) Our websites also contain links to third-party websites. We have no influence on whether and how the websites and services of third services process your personal data. The websites and services are not reviewed by us and we are not responsible for such third-party websites and services of third parties or their data protection practices. Please read the privacy policies of the third party websites or services that you access through our websites or services.

(2) If you click on the link to an offer from a third party, such as LinkedIn, personal data may be transferred to providers in countries to providers in countries outside the European Economic Area, which, from the perspective of the European Union ("EU"), do not provide an "adequate level of protection" for the processing of personal data in accordance with EU standards. standards. Please take this into account before you click on such a link and thereby trigger a transfer of your data.

(3) We have integrated YouTube videos into our online offering, which are stored on http://www.youtube.com and can be played directly from our website. These are integrated in "extended data protection mode". Accessing these pages leads to a connection being established with YouTube and the DoubleClick network. If you start the video, this could trigger further data processing operations. We have no influence on this. You can find more information about data protection at YouTube in their privacy policy at: https://www.google.de/intl/de/policies/privacy/.

(4) We also use the provider Vimeo for the integration of videos. Vimeo is operated by Vimeo, LLC, headquartered at 555 West 18th Street, New York, New York 10011. We use Vimeo by embedding individual videos from the platform on our website as so-called iFrames so that they can be played directly on our website. When you visit a page on which a video is embedded, a connection to the Vimeo servers is established and the video is displayed on our website. This tells Vimeo which website you have visited. Your IP address may also be transmitted to Vimeo. If you play an embedded video, this information will also be passed on to Vimeo. If you are logged in as a Vimeo user, Vimeo assigns this data to your user account. When you start the video, this may trigger further data processing operations. We have no influence on this. You can find further information on data processing and information on data protection by Vimeo at: https://vimeo.com/de/features/video-privacy.

8 Rights of data subjects

As a data subject, you have the right to information (Art. 15 GDPR). If incorrect personal data is processed, there is a right to to rectification (Art. 16 GDPR). If the legal requirements are met, the erasure or restriction of processing may be requested, objection to processing may be objection to the processing (Art. 17, 18 and 21 GDPR) and, where applicable a right to data portability (Art. 20 GDPR) can be asserted. If the aforementioned rights are exercised, we will check whether the legal legal requirements for this are met and take them into account.

Consent given to the processing of personal data can be revoked at any time with be revoked at any time with effect for the future. However, this may mean that our services can no longer be used. can no longer be used.

In order to make use of the rights described, a request can be sent to the contact options listed above.

You also have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. For Startbase GmbH this is:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, P.O. Box 10 29 32, 70025 Stuttgart, Königstraße 10a, 70173 Stuttgart, phone: 0711/61 55 41 - 0, fax: 0711/61 55 41 - 15, email: poststelle@lfdi.bwl.de, website: http://www.baden-wuerttemberg.datenschutz.de

9. changes to the privacy policy

From time to time it may be necessary to update our privacy policy - e.g. due to the introduction of new technologies or the expansion of services. We reserve the right to amend or supplement this privacy policy at any time. We will publish the changes at www.startbase.de/privacy-policy/ and/or inform you accordingly (e.g. by e-mail).

---

Cookie information

We use cookies and similar technologies, such as Local Shared Objects (hereinafter collectively referred to as "cookies") in order to recognize user preferences and optimize the design of our website. This makes navigation easier and continuously improves the user-friendliness of our website.

Cookies cannot execute programs or transmit viruses to your computer. Cookies These are small text files that are stored on the hard disk of your device's hard disk. They can be used to determine whether your device has already communicated with our website. has already taken place. Personal data can then be stored in a cookie, consent or if this is technically absolutely necessary, e.g. in the case of a login. in the case of a login.

The browser settings can be configured accordingly and informed about the setting of cookies, refuse the acceptance of cookies in general or only in certain cases. It is possible that not all functions of this functions of this website can no longer be used. Cookies that have already been set can be deleted on the end device at any time; the information provided by the of the browser or the manufacturer of your end device.

We use the following cookies on our websites:

Use of Google Analytics

We use the analytics service Google Analytics. This web analysis service is operated by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). We use Google Analytics to analyze your use of our website and to compile reports on user activities. This analysis tool works in particular on the basis of cookies. A cookie is a data record that is sent when you visit a website and is temporarily stored on the hard disk of the user of the website to enable an analysis of your use of the website. The information stored by the cookie is usually transferred to a Google server in the USA and then stored there. As part of IP anonymization, your IP address will be shortened beforehand by Google within a member state of the EU or another state party to the Agreement on the European Economic Area. Google will use the transmitted information on our behalf to compile a report on the use of the website. We have concluded an order processing contract with Google. If you wish to prevent the use of cookies, you can do so by making local changes to your settings in the Internet browser used on your computer (e.g. Safari, Internet Explorer, Opera, Firefox, etc.), i.e. the program used to open and display Internet pages. You can also prevent the collection and processing of your data by Google's cookie by downloading and installing a browser plug-in offered by Google at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. You can prevent Google Analytics from collecting data by clicking on the following link. An opt-out cookie will then be set to prevent the future collection of your data when you visit this website: Deactivate Google Analytics You can find more information on the terms of use and data protection of Google and Google Analytics at http://www.google.com/analytics/terms/de.html and at https://www.google.de/intl/de/policies/. Please note that the "anonymizeIp" extension has been added to Google Analytics. This ensures anonymized collection of IP addresses. Information on cookies: Categorization for consent: Marketing Cookies used (lifetime in brackets): _ga (2 years), _gid (1 day), _gat_UA-* (1 minute),_utma (2 years), _utmb (30 minutes), _utmc (session), _utmt (10 minutes), _utmz (6 months) Please note that due to the Cloud Act, American intelligence services could possibly gain access to personal data that is inevitably exchanged with Google due to the Internet Protocol when this tool is integrated.

Google Tag Manager

We use the Google Tag Manager from Google. "Google" is a group of companies consisting of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and other affiliated companies of Google LLC. We have concluded an order processing contract with Google. Google Tag Manager is an auxiliary service and processes personal data itself only for technically necessary purposes. The tool ensures that other components are loaded, which in turn may collect data. Google Tag Manager does not access this data. Further information on Google Tag Manager can be found in Google's privacy policy. Please note that American intelligence services may be able to gain access to personal data that is inevitably exchanged with Google when this tool is integrated due to the Internet Protocol.

Google reCAPTCHA

The reCAPTCHA component from Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") is used to protect your communication via the Internet form. With reCAPTCHA, misuse can be reduced through automated, machine processing. reCAPTCHA transmits your IP address and any other data required by Google for reCAPTCHA to Google. Your input via the reCAPTCHA component is transmitted to Google and processed there. By using reCAPTCHA, you agree that the recognition of images provided by you will be included in the digitization of old works. The IP address transmitted by your browser when using reCAPTCHA will not be merged with other Google data. The deviating data protection provisions of Google apply to this data. You can find more information about Google's privacy policy here: https: //www.google.com/intl/de/policies/privacy/. Google reCPATCHA loads Google fonts in order to display the visual CAPTCHA element correctly. The Google fonts are also loaded from a Google server. You can find more information about these Google fonts at https://developers.google.com/fonts/faq. Information on cookies Categorization: Security Cookies used (lifetime in brackets): 1P_JAR (1 month), CGID (6 months), IDE (1 year), ANID (9 months), CONSENT (19 years), NID (6 months), DV (10 minutes), SNID (6 months) . Please note that due to the Cloud Act, American intelligence services may gain access to personal data that is inevitably exchanged with Google due to the Internet Protocol when integrating this tool. Status: 21.09.2022

---

Privacy settings