Keyword Hero’s
Imprint & Privacy Policy

 

________________________

Privacy Policy

This Privacy Policy deals with all personal data relating to you as a natural person, e.g. that is generated as you surf on our website, sign up for an account or apply for a job. It does not apply to the data the Keyword Hero uses to provide his services, i.e. Google Analytics data and the like Keyword Hero customers grant us access to; the processing of such data shall exclusively be governed by the Keyword Hero Terms and Conditions.

 

In A Nutshell:
In general, our website may be used anonymously. Providing personal data is purely voluntary and you will always be informed if and for what purpose we want to store your data. Personal data are data that enable us to identify you personally and/or to contact you, such as your name, address or e-mail address.

 

In Detail:

Who We Are And How You Can Reach Us

The controller of the processing of personal data on this website is cross platform solutions GmbH, address: Alte Schönhauser Str. 38, 10119 Berlin, Germany, e-mail: privacy@keyword-hero.com.

What Data We Do (Not) Process, For What Purpose, For How Long And On What Legal Basis

In general: If we intend to store data about you, we will always point this out to you and they will not be used for any purpose other than those expressly stated in this privacy policy.

Anonymous Use Of Our Website

You may use our website anonymously. When you visit our website, your web browser tells our web server your IP address so that communication is possible. Your IP address may be used to identify you. However, we do not store your IP address. You remain completely anonymous to us when visiting our website.

We use various additions to our website, such as Google Analytics. Further information can be found below under the respective subheadings. Here, too, you remain anonymous for us.

Data Processing Upon Contact

If you send us a message, for example via a form or by e-mail, we need your e-mail address if you want us to reply to you. You may use a pseudonym instead of your name. We will use this data as well as data and time of your contact exclusively to handle your request. Your data will not be passed on to third parties but only internally to the department responsible for your particular request. We will delete your data as soon as it is no longer needed for this purpose, i.e. usually three months after the last contact with you. If you have any further questions, please contact us again within three months. The legal basis for the data processing is Art. 6 para. 1 subpara. 1 letters b and f GDPR. The legitimate interest in processing on the basis of Art. 6 para. 1 subpara. 1 letter f GDPR is to fulfil your request.

Exceptions: We are required to retain business and commercial letters and other tax-relevant documents in order to fulfil our commercial and tax law archiving obligations; we will delete them by 31 March of the seventh calendar year following their creation, and in the case of booking receipts of the eleventh calendar year following their creation. Our accounting department has access to these data. The legal basis for tax law retention is Art. 6 Para. 1 Para. 1 Letter c GDPR in connection with sections 147 AO, 257 HGB.

If your request is for a special purpose (e.g. order), only the explanations in the respective section for that special purpose apply to data processing in this context. You may receive these separately.

Data Processing When You Post Comments Or Questions

If you want to publish comments or questions, you don’t have to enter your real name, you can use a pseudonym. Your comment or question will be published along with your name. If you publish comments or questions that make you recognizable as an author, you can ask us to delete them at any time, i.e. revoke your consent. Otherwise, the comments and questions will be published for an unlimited period of time.

The legal basis for data processing is Art. 6 para. 1 subpara. 1 letters a, b and f GDPR. The legitimate interest in processing on the basis of Art. 6 para. 1 subpara. 1 letter f GDPR is the provision of a service with user comments and the opportunity to ask questions publicly, in particular the publication of the comment or the question at the request of the respective user. Published data can be accessed by anyone.

Data Processing For Orders, Information And Quotation Requests

When you place an order or request information or a quotation, we require certain information from you depending on the type of product or service. The order or quotation form indicates what information is required and what information is voluntary; if you contact us informally and the necessary information is missing, we will get in touch with you or ask for it. Your data will not be passed on to third parties. Any exceptions (e.g. if we only arrange third-party services) are clearly communicated when you place your order. We use your data only for handling your enquiry, processing orders and complaints, for customer service and to send you advertisements about similar goods and services from us and to prove that we may send you such advertisements. We are also required to store your order and any related communication and invoice and payment data for tax and commercial law reasons; we will delete this data in the case of business and commercial letters and other tax-relevant documents by 31 March of the seventh calendar year after creation, and in the case of booking receipts of the eleventh calendar year after creation. For the purpose of order and complaint processing, we will delete your data 27 months after delivery of your order or three months after expiry of the warranty period if the warranty period is longer than 24 months; for the purpose of customer service (including handling your inquiry), as soon as you object or by 31 March of the fifth calendar year following your last order, request for information or offer or expression of interest; for the purpose of advertising as soon as you object or we finally discontinue advertising activities; for the purpose of proving your order and the similarity of the advertised goods and services by March 31 of the fourth calendar year following the last advertising campaign. Your data can be accessed by our marketing department, our customer service and our accounting department, and the legal department if required.

The legal basis for data processing is Art. 6 para. 1 subpara. 1 letter b (for processing and handling your request or order) and f GDPR. For processing for the purpose of proof of your inquiry or order, the legal basis is Art. 6 para. 1 subpara. 1 letter c in connection with Art. 5 para. 2 GDPR and Art. 24 para. 1 GDPR as well as Art. 6 para. 1 subpara. 1 letter f GDPR. The legal basis for tax law retention is Art. 6 para. 1 subpara. 1 letter c GDPR in connection with sections 147 AO, 257 HGB. The legitimate interests in processing on the basis of Art. 6 para. 1 para. 1 letter f GDPR are the fulfilment of your request, the promotion of the sale of our products and services, corresponding advertising, the establishment or exercise of legal claims or the defence against legal claims.

Google Analytics

We use Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). For more information on how Google uses data when you use websites or apps provided by Google’s partners, click here: https://policies.google.com/technologies/partner-sites?hl=en

Google Analytics uses “cookies”, small text files that are stored in your web browser and that permit to analyse how you use our website. The information generated by the cookie regarding your use of our website is normally transferred to a Google server in the USA, and is stored there. As the IP anonymize function is activated on our website, your IP address will, within Member States of the European Union or other contracting states of the Agreement on the European Economic Area, first be shortened by Google. Only in exceptional cases will Google transfer the full IP address to a Google server in the USA, and will shorten it there. On behalf of us, Google will use this information in order to analyse your usage of our website, to compile reports on website activities, and to provide further services to us relating to the usage of the website and the internet. The IP address transferred by your browser within the framework of Google Analytics will not be combined by Google with other data.

You can prevent the storage of cookies by setting your browser software, however, in such case, you may possibly not be able to fully use all features on our website. Furthermore, you can prevent collection by Google of the data generated by the cookie and relating to your use of our website (including your IP address), as well as processing of these data by Google, by downloading and installing the browser plug-in provided under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

As an alternative to the browser plugin or within browsers on mobile devices, you can click this link in order to opt-out from being tracked by Google Analytics within our website in the future (the opt-out applies only for the browser in which you set it and within this domain): Click here to opt-out. An opt-out cookie will be stored on your device, which means that you’ll have to click this link again if you delete your cookies.

The legal basis for data processing is Art. 6 para. 1 subpara. 1 letter f GDPR. The legitimate interests in processing on the basis of Art. 6 para. 1 para. 1 letter f GDPR are our interest in the analysis, optimization and economical operation of our website and of our marketing and a better promotion of the sale of our products and services.

Google is certified under the Privacy Shield and thus offers an adequate level of data protection as decided by the EU Commission in an adequacy decision: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Use Of Google Adwords Conversion Tracking

Our website uses Google AdWords. This is an analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). In the context of use, Google Adwords will place a cookie on your computer (“conversion cookie”) once you click on a Google advertisement and thereby access our website. The cookies do not contain personal data and are thus not used for personal identification of the user. If you visit our Platform within the lifetime of the conversion cookie, Google and we will be informed of the fact that you have seen the advertisement provided by Google. As every AdWords customer is given a different cookie, cookies may not be traced via the websites of AdWords customers. The information gained with the help of the conversion cookie is used to compile conversion statistics for AdWords customers, who have opted-in to conversion tracking. AdWords customers learn how many users have clicked on their advertisement and have been redirected to a website provided with a conversion tracking tag. However, they do not obtain any information that could be used to identify any particular user. If you do not wish to participate in the tracking procedure you may reject the setting of the cookie required for the process – for example by deactivating the automatic setting of cookies in your browser settings. You may also deactivate cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com”. Google’s privacy policy for conversion tracking can be found at https://services.google.com/sitestats/de.html

The legal basis for data processing is Art. 6 para. 1 subpara. 1 letter f GDPR. The legitimate interests in processing on the basis of Art. 6 para. 1 para. 1 letter f GDPR are our interest in the analysis, optimization and economical operation of our marketing and a better promotion of the sale of our products and services.

Google is certified under the Privacy Shield and thus offers an adequate level of data protection as decided by the EU Commission in an adequacy decision: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Use Of Google Remarketing Services

We use the marketing and remarketing services (“Google Marketing Services”) of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

The Google Marketing Services allow us to target ads for our website in order to present users only with ads that potentially match their interests. When you visit a website that uses Google Marketing Services, (re)marketing tags (invisible graphics or code, also known as “web beacons”) are integrated into the website. With their help, an individual “cookie”, i.e. a small text file, will be stored in your web browser (comparable technologies can also be used instead of cookies). By using the cookie, Google will collect information about which websites you have visited, which contents you are interested in and which ads you have clicked on, as well as technical information about the browser and operating system, referring websites, visit times and other information about the use of the website. As mentioned in the context of Google Analytics, your IP address will be anonymised within the European Union or the European Economic Area and only in exceptional cases completely transferred to a Google server in the USA and anonymised there. The IP address transferred by your browser within the framework of Google Remarketing Services will not be combined by Google with other data. The above information may also be combined by Google with such information from other sources. If you then visit other websites, the ads tailored to your interests can be displayed.

Users’ data will be processed pseudonymously within the framework of Google Marketing Services. This means that Google does not store and process, for example, the names or e-mail addresses of users but processes the relevant data cookie-related within pseudonymous user profiles. This means that from Google’s point of view, the ads are not managed and displayed for a specifically identified person but for the web browser that has the cookie set, regardless of who is using that web browser. This does not apply if a user has expressly permitted Google to process the data without pseudonymisation. The information collected by Google Marketing Services about users is transmitted to Google and stored on Google’s servers in the USA.

We use the Google Marketing Service “Google AdWords”. Each AdWords customer is given a different “conversion cookie”. Users can therefore not be tracked across the websites of more than one AdWords customer. The information collected with the help of the cookie is used to generate conversion statistics. We learn the total number of users who clicked on our ads and were redirected to a page with a conversion tracking tag but no information that identifies users.

Further information on Google’s use of data for marketing purposes can be found at https://www.google.com/policies/technologies/ads. Google’s Privacy Policy can be found at https://www.google.com/policies/privacy

You can object to interest-based advertising by Google marketing services by using the setting and opt-out options provided by Google at https://www.google.com/ads/preferences.

The legal basis for data processing is Art. 6 para. 1 subpara. 1 letter f GDPR. The legitimate interests in processing on the basis of Art. 6 para. 1 para. 1 letter f GDPR are our interest in the analysis, optimization and economical operation of our marketing and a better promotion of the sale of our products and services.

Google is certified under the Privacy Shield and thus offers an adequate level of data protection as decided by the EU Commission in an adequacy decision: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Use Of Google Tag Manager

We use the Google Tag Manager on our website to manage content such as tags on our website, for example for AdWords Conversion Tracking, Google Analytics and AdWords Remarketing. Tags are small code elements on our website that are used, among other things, to measure traffic and visitor behavior, to measure the impact of online advertising and social channels, to use remarketing and targeting, and to test and optimize our website.

The tool Google Tag Manager itself (which implements the tags) is a cookieless domain. The tool triggers other tags (such as Google Analytics, Adwords or Remarketing) that may in turn collect data. Google Tag Manager does not access this data.

The legal basis for data processing is Art. 6 para. 1 subpara. 1 letter f GDPR. The legitimate interests in processing on the basis of Art. 6 para. 1 para. 1 letter f GDPR are our interest in the analysis, optimization and economical operation of our marketing and a better promotion of the sale of our products and services.

Google is certified under the Privacy Shield and thus offers an adequate level of data protection as decided by the EU Commission in an adequacy decision: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Data Processing In Connection With Third-Party Content Such As Quantcast and LinkedIn

Our website uses third-party content. This is: Quantcast, LinkedIn, and more. When you visit our website, your browser establishes a direct connection to the respective third-party provider, so that the third party provider is technically required to know your IP address and other data about your browser, which it automatically sends with it. The legal basis for the processing is Art. 6 para. 1 subpara. 1 letter f GDPR. Legitimate interest is our and your interest in the availability of this special and particularly relevant content for the target group and its appealing presentation on our website. If data processing is carried out by third parties outside the European Economic Area, transmission to them is permitted pursuant to Art. 49 para. 1 subpara. 1 letter c GDPR in order to fulfil the contract concluded in your interest on the use of the respective content.

Data that are transmitted are, for example, which page you have visited and your IP address. If you are logged in to the provider or the provider can otherwise identify you, for example via cookies stored on your computer, the provider can link the information that you have visited our website with the other information about you, such as your user account with the provider. If you do not want the provider to associate this information with your other information, you should log out there beforehand, preferably also delete the cookies in your web browser.

If you disclose data to third parties, they are subject to their respective privacy policies. We cannot make any representations for these. Please note that the country in which the third party is located may not have such strict data protection as ours. You can find out more about the privacy policies of the third-party providers here:

Quantcast

LinkedIn

__________________

Data Processing Upon Job Applications

We are aware that job applications contain sensitive personal data. We therefore ask you not to send applications to our general postal or e-mail address but to the e-mail address specially designated for applications.

Your data will initially be processed exclusively for the purpose of the application procedure. If your application is successful, it will be used in your personnel file and for the execution and termination of the employment relationship and deleted in accordance with the regulations applicable to personnel files. If we are currently unable to offer you employment, we will continue to process your data for up to six months after the notification of rejection in order to defend ourselves against possible legal claims, in particular due to alleged discrimination in the application process. If you receive cost reimbursements or other tax-relevant transactions (e.g. invitation to a meal), the corresponding accounting documents will be kept until March 31 of the eleventh calendar year after payment at the latest, in the case of commercial and business letters and other tax-relevant documents of the seventh calendar year after their creation in order to fulfil the commercial and tax retention obligations. Your data can initially be accessed by our human resources department, but if required also by the department of the position to which you applied, the legal department and the accounting department.

The legal basis for data processing in the application procedure and as part of the personnel file are Section 26 para. 1 sentence 1 BDSG and Art. 6 para. 1 subpara. 1 letter b GDPR and, if you have given your consent, Art. 6 para. 1 subpara. 1 letter a GDPR. The legal basis for data processing after a refusal is Art. 6 para. 1 subpara. 1 letter f GDPR. The legal basis for the retention under commercial and tax law is Art. 6 para. 1 subpara. 1 lit. c GDPR in connection with Sections 147 AO, 257 HGB. The legitimate interest in processing on the basis of Art. 6 para. 1 para. 1 subpara. 1 letter f GDPR is the defence against legal claims. The legal basis for the fulfilment of the statutory rights of the works council is Art. 6 para. 1 subpara. 1 letter c GDPR in connection with Section 80 BetrVG, Section 26 para. 1 sentence 1 last half sentence BDSG.

In general, we do not need to have any special categories of personal data within the meaning of Art. 9 GDPR for the application process such as information about your health, religion, ethnic origin, sexual orientation. We ask you not to send us any such information from the outset. If such information exceptionally is relevant to the application process, we will process it together with your other applicant data. This may include, for example, information about a severe disability which you may voluntarily provide us with and which we must then process in order to fulfil our special obligations with regard to severely disabled persons. In these cases, processing serves the exercise of rights or the fulfilment of legal obligations under labour law, social security law and social protection. The legal basis for data processing is then Art. 9 para. 2 lit. b GDPR, Sections 26 para. 3 BDSG, 164 SGB IX.

Voluntary Provision Of Your Data

You are not obliged to provide us with personal data. If you do not provide us with certain information that we need to handle your request (for example a way to contact you if you want an answer from us), we may not be able to do so. In the context of special procedures (e.g. when you place an order or apply for a job) it may be necessary for you to provide us with certain information because otherwise we will not be able to process your order or judge your application. However, we will always point this out to you in the specific situation.

Recipients Of The Data

Your personal data will remain in our area of responsibility, except in special exceptional cases, in which we expressly inform you, however, to whom your data will be sent. In some cases it may be necessary to pass on your data to external advisors, for example in the case of legal disputes to lawyers (legal basis Art. 6 para. 1 subpara. 1 letter f GDPR; purpose and legitimate interest: establishment, exercise or defence of legal claims). Our administrators have the possibility to access data processed by IT. We list further recipients of your data in the notes on the respective data processing. In certain cases, we may need to disclose your personal data to third parties so that you can obtain the desired service, in particular to vicarious agents such as banks and other payment service providers as well as postal and parcel service providers or forwarding companies.

If you choose to pay via Stripe, the payment itself will be processed by Stripe. We do not have access to your payment details, such as your bank account or credit card number. Please see Stripe’s privacy policy for details.

In certain areas, such as web hosting and e-mail hosting, we use specialized service providers, such as 1&1. These are strictly bound to our instructions by an agreement on commissioned data processing and may not process the data for their own purposes. Processing takes place in Germany. Please note, however, that if you activate third-party content, your browser transfers data to the respective third party provider who can process this data outside the European Union in a country with a lower level of data protection.

Automated Decision Making, Profiling

Automated decision making or profiling does not take place.

Your Rights

You have a right of access, to rectification or erasure, restriction of processing, to object to processing and to data portability under the respective statutory preconditions with regard to the personal data concerning you. In particular, you have the right to object to the processing of your data for advertising purposes at any time without incurring costs other than the transmission costs according to the basic rates of your provider (e.g. the costs of an e-mail = usually none). This applies, for example, if you have ordered something from us and do not want to receive offers for similar goods and services. If the data processing is based on a consent, you have the right to withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of consent until the withdrawal or of the processing on another legal basis. If you want to exercise these rights, you can simply write to privacy@keyword-hero.com or click on the unsubscribe link in any email to unsubscribe. If we call you, you can of course also tell us directly in the conversation.

You also have the right to complain to a data protection supervisory authority about our processing of your personal data, for example to the supervisory authority responsible for us: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Friedrichstr. 219, 10969 Berlin, Germany, phone +49 30 13889-0, e-mail mailbox@datenschutz-berlin.de If you have any questions or requests regarding data protection, please feel free to contact us at any time: Your contact is privacy@keyword-hero.com.

Your Right To Object To Processing

To the extent that processing of your personal data is based on Art. 6 para. 1 subpara. 1 lit. e or f GDPR, you have the right to object to processing in accordance with Art. 21 GDPR. If your objection is made for reasons arising from your particular situation, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms of or for the establishment, exercise or defence of legal claims. If your objection is directed against direct marketing, including profiling, insofar as it is connected with such direct marketing, we will no longer process your personal data for these purposes.