Privacy policy

Privacy policy Startbase

We, Startbase GmbH, appreciate your interest in using Startbase (hereinafter referred to as the "Platform"). The protection of personal data is important to us. The use of personal data is in accordance with the EU General Data Protection Regulation (DS-GVO), the Federal Data Protection Act and other applicable data protection regulations. In the following, we provide information about which personal data is collected by us, how it is used by us and what options exist in this regard.

1 Who is responsible for data processing?

The person responsible for processing personal data is Startbase GmbH, c/o fintogether, Rothebühlstraße 87E, 70178 Stuttgart, website: www.startbase.de, e-mail: hello@startbase.de.

2. who is my contact person for questions regarding data protection?

The data protection officer for the processing of personal data is Startbase GmbH, Rothebühlstr. 87E, 70178 Stuttgart, e-mail: support@startbase.de.

3 Purpose and legal basis of the processing of personal data

3.1 Data processing in connection with visits to the platform

Every time a website is accessed and every time a file is retrieved, general data about this process is automatically stored in a log file. The storage serves exclusively system-related and statistical purposes, personal data is not recorded here. These are:

- Name of the retrieved file

- date and time of the retrieval (timestamp) of the IP address

- amount of data transferred

- message whether the retrieval was successful

- description of the type of web browser used

- operating system used.

The storage of this data serves, on the one hand, to avert danger in the event of an attack on our information technology systems and, on the other hand, to improve our offers, also in order to be able to display content in a more interest-oriented manner. For this purpose, we work together with service providers.

The processing takes place within the framework of (Art. 6 Para. 1 lit. f DS-GVO) in order to ensure that our offer is not our offer is not abused.

3.2 Data processing in connection with contacting us

In the In the event of contacting our customer service by e-mail, we collect the information information provided, including the personal data, in order to process the question or to process the question or request.

The processing is carried out within the framework of the balancing of interests (Art. 6 para. 1 lit. f DS-GVO).

3.3 Data processing when receiving information

When registering to receive information, your e-mail address, first and last name, as well as the date and time of registration are stored by us. We use this data exclusively for sending the information and for statistical evaluations to analyze system performance. For this purpose we cooperate with service providers. You can register at any time in your profile settings.

During registration, your data is stored in each case and an additional confirmation message containing a link to the final registration (double opt-in) is generated.

If you no longer agree to the storage of data for these purposes and no longer wish to use our offers, you can unsubscribe from the respective communication lists at any time. You will find a corresponding unsubscribe link at the end of each communication. You can also unsubscribe from information in your profile at any time. In addition, you can send us a message at any time to team@startbase.de, stating the registered e-mail address, with a request to unsubscribe from this information. The data you provide will be deleted after unsubscribing.

The processing is based on your consent (Art. 6 para. 1 lit. a DS-GVO).

3.4 Data processing for users of the platform with user account

(1) In order to be able to post information on Startbase as a user and to access further information and functionalities, it is necessary to register and enter the first and last name, the e-mail address and a self-selected and a self-selected password (mandatory information). The password is not stored in plain text. When registering as a user, these data are stored and an additional confirmation message, which contains a link to the final registration (double opt-in). If you do not confirm the registration the link in this e-mail, your data will be deleted after 48 hours. hours. Only by confirming the link will your user registration data registration as a user is stored.

This information is required for the conclusion of a contract on the use of the services of Startbase for information purposes and the necessary communication necessary in this context.

The processing is carried out for the fulfillment of contractual obligations (Art. 6 para. 1 lit. b DS-GVO).

The data provided by you data provided by you will be stored in any case for as long as your registration for Startbase exists. If you no longer agree to the processing of your data you can deactivate your user profile by sending us a message at a message to team@startbase.de send us a message.

(2) Company-related data is stored in anonymous form, so that the data can not be traced back to your identity. your identity, for static purposes.

(3) As a registered user of the platform, you can provide additional information about yourself, such as your preferred form of address, information about current and former employers and your job title in these companies, private contact options (e.g. e-mail address, own website), links to private profiles on social networks (Facebook, LinkedIn, Twitter). This information is optional and can be edited and deleted at any time in your user profile.

We use this data within the scope selected by you to create the profile about you Your person, which is visible to other users of Startbase.

The processing is based on your consent (Art. 6 para. 1 lit. a DS-GVO).

4 Cookies

Cookies or similar technologies such as Local Shared Objects (hereinafter collectively "Cookies") are used by us or our partners to collect and store information when our platform is visited. The processing is based on Art. 6 para. 1 p.1 lit. f DS-GVO and in the interest of optimizing or enabling the user experience and customizing the presentation of our website.

Cookies cannot execute programs or transmit viruses to the computer. transferred to the computer. They are small text files that are stored on the hard drive and assigned to the and assigned to the browser used and through which we receive certain certain information, which serve to make the Internet offer more user-friendly and more more user-friendly and effective. In the browser settings can be configured accordingly and the acceptance of cookies can be refused. It is possible that then not all functions of the platform can be used. can be used. More information about cookies can be found in our cookie instructions.

5. transfer to service providers

(1) Within the scope of the Startbase offer, we sometimes use third parties as service providers.

For the purpose of sending e-mails and for the purpose of the newsletter dispatch, we use the services of Mailjet SAS, 13-13 bis, rue de l'Aubrac, 75012 Paris, France.

These third parties are processors who process the personal data according to the respective specifications and only for the respective specific purpose for the controller according to point 1 of this declaration. process. In this context, we remain the processing controller.

(2) In all other respects we will disclose personal data to third parties without prior consent only if we are if we are legally obligated to do so, e.g. if it is necessary for the clarification of an illegal use or is necessary for the prosecution. is necessary. In such a case, personal data may be forwarded to the law enforcement authorities. However, this only happens if there are concrete indications of unlawful or abusive behavior. abusive behavior. We are also legally obligated to provide information public authorities upon request. These are e.g. law enforcement agencies or authorities that prosecute fined administrative offenses.

(3) A passing on to Companies of the Boerse Stuttgart group, such as Boerse Stuttgart GmbH, the Boerse Stuttgart Digital Exchange GmbH, the Sowa Labs GmbH, the blocknox GmbH, the Euwax AG and the Boerse Stuttgart Digital Ventures GmbH we reserve the right to to the extent that this is necessary in individual cases for the provision of services. is necessary.

6. place of processing

We ourselves do not transfer your personal data to countries outside the European Economic Area, except in cases where it is permitted under the DS-GVO. In order to ensure the protection of personal rights also in the context of these data transfers, we make use of the standard contractual clauses of the EU Commission pursuant to Article 46 (2) c DS-GVO (available at: http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2010:039:0005:0018:DE:PDF) when structuring contractual relationships with recipients in third countries. Alternatively, we will provide these documents upon request. For the U.S., the European Commission issued a decision on 12.7.2016 that an adequate level of data protection exists under the regulations of the EU-U.S. Privacy Shield (adequacy decision, Art. 45 DS-GVO). Further information - including on the certification of the service providers we use - can be found at https://www.privacyshield.gov. We only use U.S. service providers that are certified under the EU-U.S. Privacy Shield.

7 Links to other websites and services

(1) Our websites also contain links to websites of third parties. We have no influence on whether and how the websites and services of third parties Services of third parties process your personal data. The websites and services are not reviewed by us and we are not responsible for such third party third party websites and services or their privacy practices. Please read the privacy statements of the websites or services of third parties, that you access through our websites or services.

(2) If you click on the link to an offer of a third party such as LinkedIn, it is possible that personal data may be transferred to reach providers in countries outside the European Economic Area, which, from the perspective of the European Union ("EU"), does not provide an "adequate level of protection" for the processing of personal data. ensure. Please consider this before you click on such a link and thereby trigger a transfer of your data.

(3) We have integrated YouTube videos into our online offer, which are stored on http://www.youtube.com and can be played directly from our website. These are integrated in "extended data protection mode". Calling up these pages leads to a connection being established with YouTube and the DoubleClick network. If you start the video, this could trigger further data processing operations. We have no influence on this. For more information about data protection at YouTube, please see their privacy policy at: https://www.google.de/intl/de/policies/privacy/.

(4) We also use the provider Vimeo for the integration of videos. Vimeo is operated by Vimeo, LLC with headquarters at 555 West 18th Street, New York, New York 10011. We use Vimeo by embedding individual videos from the platform on our website as a so-called iFrame, so that they can be played directly on our website. When you visit a page on which a video is embedded, a connection is established to the Vimeo servers and the video is displayed within our website. This transmits to Vimeo which website you have visited. If applicable, your IP address will also be transmitted to Vimeo. If you play an embedded video, this information is also passed on to Vimeo. If you are logged in as a Vimeo user, Vimeo assigns this data to your user account. If you start the video, this could trigger further data processing operations. We have no influence on this. Further information on data processing and notes on data protection by Vimeo can be found at: https://vimeo.com/de/features/video-privacy.

8. rights of data subjects

As a data subject, you have the right to information (Art. 15 DS-GVO). Should incorrect personal data be processed, there is a right to to rectification (Art. 16 DS-GVO). If the legal requirements are met, the deletion or restriction of processing may be demanded, objection may be against the processing (Art. 17, 18 and 21 DS-GVO) as well as, if applicable. a right to data portability (Art. 20 DS-GVO) may be asserted. If the aforementioned rights are exercised, we will check whether the legal requirements for this legal requirements for this are met and take them into account.

Consent given to the processing of personal data may be revoked at any time with be revoked at any time with effect for the future. However, this may mean that our offers can no longer be used. can no longer be used.

In order to make use of the rights outlined, a request can be sent to the above-mentioned contact options.

In addition, there is a right to complain to a supervisory authority in accordance with Art. 77 DS-GVO. For Startbase GmbH, this is:

The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, P.O. Box 10 29 32, 70025 Stuttgart, Königstraße 10a, 70173 Stuttgart, Tel.: 0711/61 55 41 - 0, Fax: 0711/61 55 41 - 15, E-Mail: poststelle@lfdi.bwl.de, Website: http: //www.baden-wuerttemberg.datenschutz.de

9. changes to the privacy policy

From time to time, we may need to update our privacy policy - for example, due to the introduction of new technologies or the expansion of services. We reserve the right to change or amend this Privacy Policy at any time. We will publish the changes at www.startbase.de/privacy-policy/ and/or inform accordingly (e.g. via e-mail).

---

Cookie Notice

We use cookies and similar technologies, such as Local Shared Objects (hereinafter collectively referred to as "cookies") to recognize user preferences and to be able to to be able to design our website optimally. This facilitates navigation and continuously improves the user-friendliness of our website.

Cookies cannot execute programs or transfer viruses to your computer. They are small text files that are stored on the hard drive of your end device. hard drive of your terminal device. They can be used to determine whether communication to our website has already taken place from your end device. has already taken place. Personal data can then be stored in a cookie, if you agree or if this is technically absolutely necessary, e.g. in the case of a login. case of a login.

The browser settings can be configured accordingly and informed about the setting of cookies. be informed about the setting of cookies, the acceptance of cookies in general or only in certain cases. reject in certain cases. It is possible that then no longer all functions of this website can be used. Cookies that have already been set can be deleted from the end device at any time; the information provided by the browser or of the browser or the manufacturer of your end device.

We use the following cookies on our websites:

Use of Google Analytics

We use the analysis service Google Analytics. This web analytics service is operated by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). We use Google Analytics to evaluate your use of our website and to compile reports on user activities. This analysis tool works in particular on the basis of cookies. A cookie is a data record that is sent when you visit a website and is temporarily stored on the hard drive of the user of the website to enable an analysis of your use of the website. The information stored by the cookie is usually transferred to a Google server in the USA and then stored there. In the context of IP anonymization, your IP address will be shortened beforehand by Google within a member state of the EU or another state party to the Agreement on the European Economic Area. On our behalf, Google will use the transmitted information to compile a report on the use of the website. We have concluded an order processing contract with Google. If you wish to prevent the use of cookies, you can do so by locally making changes to your settings in the Internet browser used on your computer (e.g. Safari, Internet Explorer, Opera, Firefox, etc.), i.e. the program used to open and display Internet pages. Furthermore, you can prevent the collection and processing of your data by the cookie from Google, by downloading and installing a browser plugin offered by Google at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. You can prevent the collection by Google Analytics by clicking on the following link. Then a so-called opt-out cookie will be set, which prevents the future collection of your data when visiting this website: Deactivate Google Analytics Further information on the terms of use and data protection of Google and Google Analytics can be found at http://www.google.com/analytics/terms/de.html and at https://www.google.de/intl/de/policies/. We would like to point out that the extension "anonymizeIp" has been added to Google Analytics. This ensures anonymized collection of IP addresses. Information on cookies: categorization for consent: Marketing Cookies used (lifetime in brackets): _ga (2 years), _gid (1 day), _gat_UA-* (1 minute),_utma (2 years), _utmb (30 minutes), _utmc (session), _utmt (10 minutes), _utmz (6 months) Please note that due to the Cloud Act, American intelligence agencies may gain access to personal data that is inevitably exchanged with Google due to the Internet Protocol when embedding this tool.

Google Tag Manager

We use the Google Tag Manager from Google. "Google" is a group of companies and consists of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland as well as Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and other affiliates of Google LLC. We have concluded an order processing agreement with Google. Google Tag Manager is a utility service and itself processes personal data only for technically necessary purposes. The tool takes care of loading other components, which in turn may collect data. Google Tag Manager does not access this data. For more information about Google Tag Manager, please see Google's privacy policy. Please note that, due to American laws, American intelligence agencies may have access to personal data that is inevitably exchanged with Google when this tool is integrated due to the Internet protocol.

Google reCAPTCHA

To protect your communication via internet form, the component reCAPTCHA of the company Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") is used. With reCAPTCHA, misuse can be reduced through automated, machine processing. reCAPTCHA transmits your IP address and possibly other data required by Google for reCAPTCHA to Google. Your input via the reCAPTCHA component is transmitted to Google and further processed there. By using reCAPTCHA, you agree that the recognition of images you have provided will be used for the digitization of old works. The IP address transmitted by your browser in connection with the use of reCAPTCHA will not be merged with other Google data. The deviating data protection regulations of the Google company apply to this data. More information on Google's privacy policy can be found here: https://www.google.com/intl/de/policies/privacy/. Google reCPATCHA reloads Google Fonts in order to display the visual CAPTCHA element correctly. The Google fonts are also loaded from a Google server. For more information about these Google Fonts, please visit https://developers.google.com/fonts/faq. Information about cookies Categorization: security Cookies used (lifetime in parentheses): 1P_JAR (1 month), CGID (6 months), IDE (1 year), ANID (9 months), CONSENT (19 years), NID (6 months), DV (10 minutes), SNID (6 months) . Please note that due to the Cloud Act, American intelligence agencies may gain access to personal data that is inevitably exchanged with Google when this tool is embedded due to the Internet Protocol. Status: 21.09.2022

---

Privacy Settings