Privacy Policy

Website project-a.com, last amended: January 2021

We have created this privacy policy to inform you about how personal data is collected, processed and used when you visit our website. The careful handling of personal data is of great concern to us. During processing, therefore, we naturally comply with legal regulations and protect your privacy.

1. Contact person

The website www.project-a.com is provided by Project A Services GmbH & Co. KG, Julie-Wolfthorn-Straße 1, 10115 Berlin (hereinafter referred to as “Project A” or “we”). Project A is also the controller within the meaning of the EU General Data Protection Regulation (GDPR) for the collection, processing and use of personal data of website visitors (hereinafter referred to as “you”). Should you have any questions or suggestions regarding data protection, please do not hesitate to contact us. You are welcome to direct your data protection concerns to our data protection team by sending an email to datenschutz@project-a.com. In addition, you always have the possibility to contact our data protection officer by post at the above address (keyword: "data protection officer"). Our full contact details are available here.

2. Data processing when you use our website

2.1 Visiting the site. In principle, it is possible to visit our website without providing personal data. Personal data is only collected if this is necessary for technical reasons to use our website or if you use certain functions or services offered on our website, e.g. the application form.
The following access data are automatically recorded every time our website is accessed:

  • date and time of access

  • name of the file requested

  • website from which the file was requested

  • access status (e.g. file transferred, file not found)

  • your web browser and your device’s operating system

  • the IP address of the requesting device

It is necessary to process this data to make it possible to visit the website and to guarantee the long-term functionality, availability and security of our systems. The legal basis for this data processing is Art. 6(1) lit b GDPR.

For the purposes described above, the access data specified is also temporarily stored in internal log files in order to generate statistical data on the use of our website, to further develop our website with regard to the usage habits of our visitors (e.g. if the proportion of mobile devices with which the pages are accessed increases) and for the general administrative maintenance of our website. The legal basis for this data processing is Art. 6(1) lit. f GDPR, based on our legitimate interest in appropriately optimising our website.

The information stored in the log files does not allow any conclusions about your person and we only store IP addresses in the log files in shortened, anonymised form.

2.2. Applying to Project A. You have the possibility to use our online application form. Please note the separate privacy notice for the Project A application system.

2.3 Recommending friends. In certain cases, we pay a bonus for successful recommendations that result in someone being employed at Project A or one of the ventures in our portfolio. Please visit our careers page to find out which vacancies are currently offering a bonus. When someone recommends another person, this generates a recommendation code which can be used later on to identify whether the recommendation was successful. This recommendation code will therefore be stored together with the data of the recommended applicant.

Of course, no content from the application process will be passed on to the person from whom the recommendation originates. We store the recommendation code for a period of 12 months in order to be able to verify a successful recommendation during this period. The legal basis of the processing of data for our friend recommendation scheme is Art. 6(1) lit. b GDPR. Where information on the payment of a bonus has to be retained for accounting reasons, it will be retained for a period of six years. The legal basis for this retention is Art. 6(1) lit.c GDPR in conjunction with Section 257 of the German Commercial Code (HGB) and Section 147 of the Fiscal Code (AO).

2.4 Project A newsletter and job alerts. You have the opportunity to subscribe to our Project A newsletter, which informs you quarterly about news from Project A and our ventures, new investments, milestones and events, and you can register for our job alert, which keeps you regularly updated about new job vacancies at Project A and the ventures in our portfolio.

When registering for the Project A newsletter and the job alert, we ask you to provide your email address so that we can send you the respective newsletter. In addition, you have the opportunity to tell us your name.

We use the so-called double opt-in procedure, which means that we will only send you information by email if you click on a link in our notification email to confirm that you are the owner of the email address provided. If you confirm your email address, we will store your email address, the time of registration and the IP address assigned to you when registering until you unsubscribe from the newsletter. The sole purpose of storing this information is to send you the newsletters and to be able to prove that you registered. You can unsubscribe from the newsletter at any time. A corresponding unsubscribe link can be found in every email. It is of course also sufficient if you notify us using the contact details provided above or in each email (e.g. by email or letter). The legal basis of the data processing in connection with registering for the Project A newsletter and the job alert is your consent pursuant to Art. 6(1) lit. a GDPR.

We use the US provider “MailChimp” for sending and managing our newsletters. MailChimp is provided by The Rocket Science Group, LLC, 512 Means Street, Suite 404 Atlanta, GA 30318 (“MailChimp”). MailChimp offers a well-thought-out and technically convincing software solution and the provider is reliable as a security-conscious and responsible company. Since personal data is transferred to the USA in the course of processing by MailChimp, MailChimp has contractually assured us of compliance with the European Data Protection Principles. However, we inform you, that in the case of data processing outside of Europe, it may in individual cases be the case that the rights of EU citizens cannot or cannot fully be enforced, e.g. if US security authorities store and analyse data. We will transmit the data concerning your registration for the newsletter to MailChimp, which will store it for as long as you remain registered for the newsletter.

In our newsletters, we use market-standard technologies to allow us to measure interactions with the email (e.g. opening of the email, which links are clicked on). We use this data for general statistical evaluations as well as to optimise and further develop our content and customer communication. This is done with the help of small graphics (pixels) embedded in the emails. The data is collected in pseudonymous form only and not linked to your other personal data. The legal basis for this is our aforementioned legitimate interest pursuant to Art. 6(1) lit. f GDPR. With our newsletters, our aim is to share content that is as relevant as possible for our users and to better understand what the readers are actually interested in. If you do not want your usage behaviour to be analysed in this way, you can unsubscribe from the newsletter at any time or disable the display of graphics in your email client by default. The data about how you interact with our newsletters is stored in pseudonymous form for 30 days before being completely anonymised.

YouTube. We have embedded videos on our website that are stored on YouTube and can be played directly on our website. YouTube is a service provided by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (“YouTube”), which is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") for users from the European Economic Area, Switzerland and Liechtenstein and by Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA for all other users. When you visit subpages on which YouTube videos are embedded, Google receives the information that you have retrieved from the corresponding subpage of our website. This happens regardless of whether you are logged in to Google or a YouTube account or not. If you are logged in, the information that you played the video will be directly assigned to your Google and YouTube accounts. If you do not want this to happen, you will need to log out before playing the video. Google stores your data and may use it for purposes of advertising, market research and the demand-oriented design of its own websites. Such an evaluation even occurs for users who are not logged in. You can configure your browser to refuse the storage of cookies as described above, or you can prevent the recording of data generated by cookies and relating to your use of this website and the processing of this data by Google by disabling the "Ads Personalisation" button in Google’s Ads Settings. In this case, Google will then also only display general advertising in connection with YouTube, which has not been selected based on information collected about you. If Google transfers data to companies outside Europe (e.g. to the USA), Google has taken contractual precautions to ensure compliance with the European data protection principles. However, when personal data is processed outside Europe, it may in individual cases be the case that the rights of EU citizens cannot or cannot fully be enforced, e.g. when US security authorities store and analyse data.

The legal basis for integrating YouTube and the associated data processing is Art. 6(1) lit.f GDPR, based on our legitimate interest in integrating video and visual content to make our website more attractive.

3. Cookies and usage analysis

3.1 General use of cookies and comparable technologies. When you visit and use our website, a variety of cookies and comparable technologies (e.g. storage of data in the local memory of your device, so-called local storage technology or counting pixels, which serve to (temporarily) store information on specific users or usage processes) are used. Cookies are small text files stored in your web browser’s memory that contain information that can be used to recognise you when you visit web servers later on. Cookies cannot execute any programs or transfer viruses to your computer. For reasons of readability for cookies and the comparable technologies mentioned, the term "cookies" is used in the following.
The primary purpose of our own cookies is rather to make using our service as time-saving and user-friendly as possible.

We use cookies in particular:

  • for load balancing;

  • to store language settings;

  • to store form data; and

  • to note that information placed on our website has been displayed to you so that it will not be displayed again the next time you visit the website.

We do this to be able to make your use of our website more convenient and personalised. The processing of the respective cookies is based on our aforementioned legitimate interests, meaning the legal basis is Art. 6(1) lit. f GDPR.

You can prevent the storage of cookies by adjusting your browser settings to disable the acceptance of cookies via this website. If you do not accept cookies, however, this may in some cases lead to considerable functional restrictions on our website.

Other cookies are used to analyse the use of our websites for statistical purposes. This enables us to find out, for example, which type of device was used to access our websites and how the use was made. This enables us to adjust the pages and the layout and the individual page elements to the most important browser types and end devices and to adapt them to actual usage habits. We only use these analysis cookies if you agree to this use via our cookie banner. The legal basis for the data processing in connection with the analysis cookies is your consent Art. 6 (1) lit. a DSGVO. You can revoke your consent by calling up the cookie settings and declining all optional cookies via the cookie settings adjustment button at the bottom of the page.

We also use cookies for advertising purposes when we use techniques to display ads or references to our job advertisements on other pages and, for example, in social networks for users who have already visited our website (so-called retargeting). We also only use these marketing cookies if you agree to this use via our cookie banner. The legal basis for the data processing in connection with the marketing cookies is your consent, Art. 6 (1) lit. a DSGVO. You can revoke your consent by calling up the cookie settings and changing the corresponding selection there.

Overview Cookies

  • name: _ga, purpose: distinguish unique users, type: Permanent, storage duration: 2 years, domain: Google

  • name: _gid, purpose: tracking user journey, type: Permanent, storage duration: 24 hours, domain: Google

  • name: _gat_UA_29602520-1, purpose: throttling request rate, type: Permanent, storage duration: 1 minute, domain: Google

  • name: bscookie, purpose: tracking user journey, type: Permanent, storage duration: 2 years, domain: .www.linkedin.com

  • name: fr, purpose: tracking user journey, type: Permanent, storage duration: 3 months, domain: .facebook.com

  • name: JSESSIONID, purpose: distinguish unique users, type: Session, storage duration: Session, domain: .www.linkedin.com

  • name: lissc, purpose: tracking user journey, type: Permanent, storage duration: 1 year, domain: .linkedin.com

  • name: lang, purpose: language preference, type: Session, storage duration: Session, domain: .ads.linkedin.com

  • name: bcookie, purpose: Linkedin login, type: Permanent, storage duration: 2 years, domain: .linkedin.com

  • name: lidc, purpose: tracking user journey, type: Permanent, storage duration: 1 day, domain: .linkedin.com

  • name: personalization_id, purpose: tracking user journey, type: Permanent, storage duration: 2 years, domain: .twitter.com

  • name: UserMatchHistory, purpose: tracking user journey, type: Permanent, storage duration: 30 days, domain: .linkedin.com

  • name: _fbp, purpose: tracking user journey, type: Permanent, storage duration: 3 months, domain: Facebook

  • name: lang, purpose: language preference, type: Session, storage duration: Session, domain: .linkedin.com

  • name: _gat, purpose: throttling request rate, type: Permanent, storage duration: 10 minutes, domain: .linkedin.com

  • name: AMCVS_14215E3D5995C57C0A495C55%40AdobeOrg, purpose: Analytic, Measurement and Performance, type: Permanent, storage duration: 2 years, domain: .linkedin.com

  • name: aam_uuid, purpose: distinguish unique users, type: Permanent, storage duration: 30 days, domain: .linkedin.com

  • name: _parsely_visitor, purpose: distinguish unique users, type: Session, storage duration: Session, domain: Medium

The external services used and their cookies are explained below.


3.2 Cookies and other technologies from third-party providers. In addition, we also use cookies and technologies from third-party providers for analysis and marketing purposes as part of the statistical recording and analysis of general usage behaviour based on access data. We use the results of such analyses to improve our website and adapt it to the actual needs of our users. The legal basis for the individual examples of data processing described below is Art. 6(1) lit. f GDPR, based on our legitimate interest in the demand-oriented design and continuous optimisation of our website and in the advertising of our services.

Google Analytics. Google Analytics. Our website uses the web analytics service Google Analytics, which is offered for users from the European Economic Area, Switzerland and Liechtenstein by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") and for all other users by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses analysis cookies to record your access data when you visit our website. On our behalf, Google combines the access data into pseudonymous user-profiles and transmits it to a Google server in the USA. Your IP address is anonymised beforehand. We can therefore not determine which usage profiles belong to a particular user. The data collected by Google can therefore neither identify you nor determine how you actually use our website. It is only possible to see that a user has already visited the site within the last 14 months. In the event that personal data is transferred to the USA in the course of processing by Google, we have contractually agreed with Google to observe the European data protection principles. However, in the case of data processing outside of Europe, it may in individual cases be the case that the rights of EU citizens cannot or cannot fully be enforced, e.g. if US security authorities store and analyse data. Data transfer to the USA is only carried out if you have agreed to the use of Google Analytics within the framework of our cookie banner. You can revoke your consent at any time by deactivating the web analysis by Google via the cookie settings. On our behalf, Google uses the information generated by cookies for the purpose of evaluating the usage of our website, compiling reports on website activity, and providing us with other services relating to website usage and internet usage. For further information, please refer to the Google Analytics privacy policy.

The legal basis for the described data processing is Art. 6 (1) lit. a GDPR, based on your consent, which you have given via our cookie banner. If you have not given your consent to the use of the analysis cookies, your data will not be collected within the context of Google Analytics. The data collected with Google Analytics is stored for a period of 14 months and then completely deleted.

You can prevent the collection of data generated by the cookie and relating to your use of our website and the processing of this data by Google on all websites and revoke any consent you may have given by downloading and installing a browser add-on provided by Google (the add-on does not work in conjunction with mobile devices).

You also have the option of changing the settings in Google ad personalisation settings in general.

You can also disable the Google cookie at any time by going to our cookie settings linked above and changing the appropriate choice.

For further information about Google Analytics, please refer to Google’s privacy policy.

a. Google Tag Manager. Our website uses Google Tag Manager, a service, which is offered for users from the European Economic Area, Switzerland and Liechtenstein by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") and for all other users by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.. The Google Tag Manager is used to manage tracking tools and other services, so-called website tags. A tag is an element that is stored in the source code of our website, for example, to record predefined usage data. The Google Tag Manager works without the use of cookies. The Google Tag Manager ensures that the usage data required by our partners (cf. the data processing procedures described above) is forwarded to them. The Google Tag Manager itself does not collect any personal data itself. The tool ensures that other tags are triggered, which in turn may collect data and which are further explained in this privacy notice. If no consent is given to the use of the analysis and marketing cookies, no data will be processed in connection with the Tag Manager. You can also read more about the Tag Manager in Google's Tag Manager information. The use of the Tag Manager is technically necessary.

Facebook conversion and retargeting tags. We use so-called conversion and retargeting tags (also "Facebook pixels") of the social network Facebook, a service of Facebook Inc., 1601 Willow Road, Menlo Park, California 94025, USA ("Facebook"). We use the Facebook Pixel to track the effectiveness of Facebook advertising ("Conversion") and to display personalised advertisements and notices on Facebook based on your interest in our company and, if applicable, individual jobs or roles ("Re-Targeting"). We use Facebook Pixels to analyse the general use of our website and to track the effectiveness of Facebook advertising (“conversion”). We may also use Facebook Pixels to show you individualised advertising messages based on your interest in our website and our services (“retargeting”). For this purpose, Facebook processes data that the service collects via cookies and similar technologies on our website. Facebook thereby receives the information that you have visited our website with a terminal device with a specific IP address. If you are a member of Facebook, Facebook can allocate your visit to our website to your Facebook account according to your privacy settings for your Facebook account and use this information for the placement of personalised Facebook advertisements. Your access data can also be transferred by Facebook to a server in the USA and stored there. In the event that personal data is transferred to the USA in the course of processing by Facebook, we have contractually agreed with Facebook to observe the European Data Protection Principles. However, in the case of data processing outside of Europe, it may in individual cases be the case that the rights of EU citizens cannot or cannot fully be enforced, e.g. if US security authorities store and analyse data. The data transfer to the USA is only carried out if you have agreed to the use of marketing cookies within our cookie banner. You can revoke this consent at any time by deactivating the web analysis by Facebook via the cookie settings.

If you are not a member of Facebook, you can prevent Facebook from processing your data by clicking on the deactivation button for the provider “Facebook” on the external TrustArc opt-out website.

If you disable data processing by Facebook, Facebook will only display general Facebook ads that are not selected based on information recorded about you.

The cookies used in connection with Facebook are marketing cookies. We only use these cookies in accordance with Art. 6 (1) lit. a GDPR if you have agreed to this use via the cookie banner. If you do not give your consent, the data processing described here will not be carried out by Facebook on our website. You can deactivate data collection by the Facebook pixel at any time by calling up our cookie settings linked above and changing the relevant selection there.

Please refer to Facebook’s data policy for further details.

Twitter Ads. On our website, we use services of the short message service Twitter, Twitter International Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07 Ireland (“Twitter”). Twitter enables us to use visitor interaction pixels to deploy target group-based advertising, retargeting and conversion measurements for online advertising. This involves deploying offers for certain target groups based on a selection of general criteria, e.g. demographic characteristics, regions or interests. Twitter also allows us to display targeted ads based on a user’s previous page views. For example, ads about our services can be shown to the respective user if that user has previously been interested in certain information or offers on our website. In the event that personal data is transferred to the USA in the course of processing by Twitter, Twitter has contractually agreed to observe the European Data Protection Principles. However, in the case of data processing outside of Europe, it may in individual cases be the case that the rights of EU citizens cannot or cannot fully be enforced, e.g. if US security authorities store and analyse data. The data transfer to the USA is only carried out if you have agreed to the use of marketing cookies within our cookie banner. You can revoke this consent at any time by deactivating the web analysis by Twitter via the cookie settings. You can also prevent this data processing by disabling the storage of cookies in your browser by adjusting the settings as described above. If you are a Twitter user, you can also prevent the aforementioned data processing in your Twitter account by adjusting the “Personalized ads” setting in the “Personalization and Data” area. On mobile devices, the aforementioned data processing can also be prevented using the system settings “Limit Ad Tracking” (iOS) or “Interest-based ads” (Android). For further information, please refer to the Twitter ads website.

b. LinkedIn conversion tracking. We use the LinkedIn conversion tracking retargeting tool, provided by LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”). For this purpose, the LinkedIn Insight Tag is integrated into our website, which enables LinkedIn to collect pseudonymous data about your visit and the use of our website and to provide us with corresponding aggregated statistics on this basis. In addition, this information is used to show you interest-based and relevant offers and recommendations after you have shown an interest in certain information and e.g. job vacancies on our website. This information is assigned via a cookie. In the event that personal data is transferred to the USA in the course of processing by LinkedIn, LinkedIn has contractually agreed to observe the European Data Protection Principles. However, in the case of data processing outside of Europe, it may in individual cases be the case that the rights of EU citizens cannot or cannot fully be enforced, e.g. if US security authorities store and analyse data. The data transfer to the USA is only carried out if you have agreed to the use of marketing cookies within our cookie banner. You can revoke this consent at any time by deactivating the web analysis by LinkedIn via the cookie settings. You can also prevent the storage of cookies by adjusting your browser settings. Alternatively, you can object to this form of data processing by using the following link to place an opt-out cookie, which will remain on your device until you delete the cookie. This option is available to both LinkedIn members and non-members: Information about LinkedIn conversion tracking
For further information, please refer to the LinkedIn privacy policy.

4. Links to other websites and online content

Our website may contain links to websites and online content of other providers not affiliated with us. If you activate these links, we naturally no longer have any influence on which data is collected by the respective providers and which data they record. For more detailed information on data collection and use, please refer to the privacy policies of the respective providers. Since the collection and processing of data by third parties is beyond our control, we cannot assume any responsibility for this.

5. Features from social networks

Social plug-ins from various social networks are integrated into our website:

  • Facebook (Facebook, Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA), Data Policy

  • Twitter (Twitter, Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA), Privacy Policy

  • LinkedIn (LinkedIn Corporation, 2029 Stierlin Ct. Ste. 200 Mountain View, California 94043, USA), Privacy Policy

Social plug-ins can be recognised by the logos of the individual providers.

If you retrieve an article or a subpage on our website that contains these social plug-ins, a direct connection is established with the servers of the respective social networks, and from there the visible image of the plug-in and the functions behind it are transmitted directly to your browser, which then integrates them into the presentation of our site. If you are logged in to the respective social network at that moment with your username and password, the information that you are visiting our site will be transferred to the social network and the respective provider may assign this information to your user account. If you interact with the social plug-ins, for example by using the Facebook “like” or Twitter “Tweet This” function, the content of our pages will be linked to your Facebook or Twitter profile.

If you are not a member of the respective social networks or have logged out of the providers’ websites before visiting our website, it is still possible that at least your IP address will be transmitted and stored there.

We would like to point out that the content and scope of data collected directly by and transmitted to the social networks via the social plug-ins, but also the storage period of up to 250 days and the purposes for which the data is used, are determined exclusively by the respective providers. However, we receive statistics from the providers about the use of and visits to our company profiles on the social networks (e.g. information about the number of hits, interactions such as likes and comments, and summarised demographic and other information or statistics). We do not provide the respective social networks with any information about our customers, but only with certain general parameters about our company and the services offered in our company profile. The social networks use this information to compile more detailed statistics. In addition, the providers may use the data for their own purposes, over which we have no further influence. For further information, please refer to the providers’ privacy notices, links to which are provided above.

If we receive your personal data within the scope of our social media profiles (e.g. in the context of communication), you are entitled to the rights stated in this data protection declaration (see section 7 "Your rights"). You can address your enquiries regarding data processing within the scope of our company profiles to us via the contact data mentioned in section 1.

If you also want to assert your rights against the social network provider, the easiest way to do so is to contact the respective provider directly. The provider knows both the details of the technical operation of the platform and the associated data processing as well as the specific purposes of data processing and can implement appropriate measures at your request if you exercise your rights. The contact details can be found in the data protection information linked above. We are also happy to support you in asserting your rights as far as we are able to.

The legal basis for the aforementioned data processing is Art. 6 (1) lit. b GDPR if we receive and process your data in the context of an enquiry from you via our social media profiles and the legal basis for linking and operating our company profiles in the social networks, including receiving statistics on the use of our company profiles is Art. 6 (1) lit. f GDPR based on our legitimate interest in our corporate communications in the respective social networks. The legal basis of the data processing in the context of any social plug-ins is your consent Art. 6 (1) lit. a GDPR if you have agreed to the use of marketing cookies via the cookie banner. If you do not give your consent, the data processing described here will not be carried on our website.

5.1 Additional information on our Facebook fan page
If you visit our Facebook fan page, your data may also be processed in countries outside the European Union where the level of data protection is lower than in the European Union (e.g. the USA). We have contractually agreed with Facebook to comply with the European Data Protection Principles, in the case of data processing outside Europe. However, it may in individual cases be possible that the rights of EU citizens cannot be enforced or cannot be fully enforced, e.g. if US security authorities store and analyse data. Please therefore check carefully what personal information and messages you share on Facebook and, if in doubt, use other contact options offered by us to get in touch with us.

For more information on the type and scope of the statistics that we receive from Facebook about the visits and interactions with our fan page (so-called insights), please also see the Facebook information on page insights. Here you will also find a detailed description of the data that is processed when you visit the fan page to create these statistics (e.g. the content accessed, likes, subscriptions, recommendations and comments as well as clicks, mouse movements and date, time, Facebook user ID and demographic data. If you want to assert your rights against Facebook, you can use an online form from Facebook or contact us as mentioned above.

5.2 Additional information on our Twitter profile
We are responsible for our tweets and information shared by us. Twitter provides the technical platform and infrastructure for message exchange. If you communicate with us via Twitter and respond to our tweets, your data may also be processed in countries outside the European Union where the level of data protection is lower than in the European Union (e.g. in the USA). We have contractually agreed with Twitter to respect the European data protection principles. However, when data is processed outside Europe, it may in individual cases be the case that the rights of EU citizens cannot or cannot fully be enforced, e.g. when US security authorities store and analyse data. Please check carefully what personal information and messages you share on Twitter and, if in doubt, use other contact options offered by us.

We may also receive statistics from Twitter about the reach of our social media activity (e.g. the number of hits, interactions such as retweets and aggregated demographic and other information or audience insights and other statistics about followers).

5.3 Additional information on our LinkedIn profile
We are responsible for our own content in our LinkedIn company profile and information shared by us there. LinkedIn provides the technical platform and infrastructure for the social network. If you communicate with us on LinkedIn, your data may also be processed in countries outside the European Union where the level of data protection is lower than in the European Union (e.g. the USA). We have contractually agreed with LinkedIn to respect the European Data Protection Principles. However, when data is processed outside Europe, it may in individual cases not be possible to enforce the rights of EU citizens, or not fully enforce them, e.g. when US security authorities store and analyse data. Please check carefully what personal information and messages you provide via LinkedIn and if in doubt, use other contact options we offer.

We may also receive statistics from LinkedIn regarding the use of our social media presence (such as the number of views of articles and posts, interactions such as "likes" and comments, and aggregated demographic and other information such as aggregated positions and locations of followers and group members or other statistics).

6. Disclosure of data

In principle, we will only pass on the data we collect if:

  • you have given your express consent to this pursuant to Art. 6(1) lit. a GDPR (e.g. in connection with the Project A talent pool);

  • disclosure is necessary pursuant to Art. 6(1) lit. f GDPR in order to assert, exercise or defend legal claims and there is no reason to assume that there is an overriding legitimate interest in not disclosing the data;

  • we are legally obliged to do so under Art. 6(1) lit. c GDPR; or

  • this is permitted by law and is required under Art. 6(1) lit. b GDPR for the processing of contractual relationships with you or for taking steps at your request prior to entering into a contract.

Part of the data processing described in this privacy policy may be carried out by our service providers. In addition to the service providers mentioned in this privacy policy, this may, in particular, include data centres that store our website and databases, IT service providers that maintain our systems, and consulting firms. If we pass data on to our service providers, they may use the data exclusively for the fulfilment of their tasks. We have carefully selected and commissioned the service providers. They are contractually bound by our instructions, have appropriate technical and organisational measures in place to protect the rights of data subjects, guarantee an appropriate level of data protection and are carefully monitored by us.

In addition, data may be disclosed in connection with official requests, court orders and legal proceedings if this is necessary to pursue or enforce rights.

7. Your rights

You have the right to information about how we process your personal data at any time. When providing this information, we will explain the data processing to you and provide you with an overview of the data stored about you.

If data stored by us is incorrect or no longer up to date, you have the right to have this data corrected.

You may also demand that your data be erased. Should the erasure not be possible in exceptional cases due to other legal regulations, the data will be blocked so that it is only available for that legal purpose.

You are also entitled to have the processing of your data restricted, e.g. if you believe that the data we have stored is incorrect. You also have the right to data portability, which means that on request we will send you a digital copy of the personal data you have provided.

In order to assert your rights described here, you can contact us at any time using the contact details provided in Section 1 above. This also applies if you wish to receive copies of safeguards in order to prove an adequate level of data protection.
In addition, you have the right to object to data processing if it occurs based on Art. 6(1) lit. f GDPR or for direct marketing purposes. Finally, you have the right to lodge a complaint with our competent data protection supervisory authority. You can assert this right by contacting a supervisory authority in the Member State of your habitual residence, your place of work or the place of the alleged infringement. The competent supervisory authority in Berlin is: Berlin Commissioner for Data Protection and Freedom of Information, Friedrichstr. 219, 10969 Berlin.

Right of withdrawal and objection. Pursuant to Art. 7(3) GDPR, you have the right to withdraw the consent you gave us at any time. As a result of this, we will cease the data processing based on this consent with future effect. This withdrawal of your consent will not affect the lawfulness of the processing carried out on the basis of the consent prior to the withdrawal.

If we process your data on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right under Art. 21 GDPR to object to the processing of your data, and to give us reasons which arise from your particular situation which, in your opinion, show that your legitimate interests override ours. If your objection is to data processing for direct marketing purposes, you have a general right of objection, which we will implement without requiring you to give reasons.

If you would like to make use of your right of withdrawal or objection, it is sufficient to simply notify us using the contact details provided above.