Privacy policy

The necessary fine print

Privacy Policy
With this privacy policy we would like to inform you about how we process personal data. The protection of your privacy is of the utmost importance to us, so it goes without saying that we comply with the legal stipulations on data protection.

Name and Contact Details of the Responsible Party
Strichpunkt – Agentur für visuelle Kommunikation GmbH
Represented by Philipp Brune
Krefelder Straße 32
70376 Stuttgart

Data Protection Officer
Should you have any questions about our data protection measures, the processing of your data or the protection of your rights as a data subject, you can contact us and our data protection officer as follows:

External Data Protection Officer

ePrivacy GmbH
represented by Prof. Dr. Christoph Bauer
Große Bleichen 21, 20354 Hamburg

If you have any questions or concerns regarding your information, please contact datenschutz@sp.design.

If you wish to communicate directly with our data protection officer (because you have a particularly sensitive matter for example), please contact them by post, as communication by e-mail could always have security gaps. Please state in your request that your concern relates to the company Strichpunkt – Agentur für visuelle Kommunikation GmbH bezieht.

Personal Data
Personal data is all information about identified or identifiable person. This includes the following categories of personal data that we process:

  • Your contact details (such as first and last name, address, e-mail address, phone number),
  • Your correspondence with us,
  • Log files with information about your visit to our website,
  • Online identifiers (such as cookie IDs, IP addresses, advertising IDs),
  • In the course of your application to our company: Cover letter and curriculum vitae, awards (such as references and certificates), photo if applicable, as well as personal data provided voluntarily.

Use of Cookies

General Information About Cookies
A cookie is a text file containing an identification number which, when the website is used, is transmitted to the user's computer together with the other data actually requested and stored there. The file is kept there for later access and serves to authenticate the user. Since cookies are only simple files and not executable programs, they do not pose any danger to the computer.

Depending on the settings selected by the user in their internet browser, the latter automatically accepts cookies. However this setting can be changed and the storage of cookies deactivated or set in such a way that the user is informed as soon as a cookie is set. If the use of cookies is deactivated, some functions of the website may not be available or may only be available to a limited extent. You can prevent the setting of cookies by our website at any time by means of a corresponding setting in the internet browser used and thus permanently object to the setting of cookies.

Cookies that are already active can be deleted at any time via the settings of your internet browser or other software programs. We may work together with advertising partners who help us to make our online offer more interesting for you. In this case, cookies from partner companies may also be stored on your hard drive when you visit our website (cookies from third parties).

Cookie Classification Expiry Provider Status
^_ga$ Analytics 1 year Google Ireland Limited Published
^_gid$ Analytics 1 year Google Ireland Limited Published
^_gat$ Analytics 1 year Google Ireland Limited Published
_ga_9Q6YJKX2H9 Analytics 1 year Google Ireland Limited Published
_gac_UA-197244373-1 Analytics 1 year Google Ireland Limited Published
_gat_gtag_UA_197244373_1 Analytics 1 year Google Ireland Limited Published
_ga_34B604LFFQ Analytics 1 year Google Ireland Limited Published

Purpose of Processing
We process your data for the following purposes:

  • For corresponding with you,
  • For processing contracts with you,
  • To consider your application,
  • For advertising purposes such as the dispatch of our newsletter,
  • On quality assurance and statistics,
  • In order to provide our service,
  • zIn order to improve our service.

Legal Basis
When processing your data, we pursue the following legitimate interests:

  • Your consent, if you have given us such consent (Art. 6 para. 1 lit. a) GDPR),
  • The initiation or execution of a contract with you (Art. 6 para. 1 lit. b) GDPR),
  • The fulfilment of legal obligations (Art. 6 para. 1 lit. c) GDPR),
  • The implementation of our legitimate interests (Art. 6 para. 1 lit. f) GDPR)

Legitimate Interests
When processing your data, we pursue the following legitimate interests:

  • The improvement of our offer,
  • The protection of our systems against misuse,
  • The production of statistics,
  • Marketing purposes,
  • The storage of our correspondence with you.

Requirement or Obligation to Provide Data
Unless this is expressly stated, the provision of your data is not required or obligatory.

Storage Period
We store your data,

  • if you have consented to the processing, at most until you revoke your consent;
  • if we need the data for the execution of a contract, at most for as long as the contractual relationship with you exists;
  • if we use the data on the basis of a legitimate interest, at most for as long as your interest in deletion or anonymisation does not outweigh the data;
  • insofar as statutory storage obligations exist, until the end of the storage periods.

Data Recipient
When processing your data, we work with the following service providers who have access to your data:

Mittwald CM Service
We use Mittwald CM Service GmbH & Co. KG,Königsberger Straße 4-6 32339 Espelkamp for hosting our website. When accessing the website, Mittwald receives content data (e.g. entries in online forms), usage data (e.g. pages accessed) and metadata (e.g. IP address)For more information, please visit https://www.mittwald.de/datenschutz.

Third Parties

Osano
Our website integrates the Consent Management Platform from Osano in order to obtain your consent to the storage of certain cookies on your end device or to the use of certain technologies. The provider of this technology is Osano, Inc, 3800 North Lamar Blvd, Suite 200, Austin, Texas 78756, USA. Osano receives your IP address when loading the Consent Management Platform. You can find more information about the provider at https://www.osano.com/legal/gdpr.

Facebook Fanpage
We operate a Facebook page (so-called "Fanpage") on Facebook, a service of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta").

During your visit, personal data is processed not only by us but also by Meta, even if you do not have a profile on Facebook or are not logged in. While using our fan page, user data (such as contact data), content data (such as entries in forms), usage data (such as websites visited, interests in content, access times), communication data (such as device information, IP addresses), are processed. On the one hand, this is done for the purpose of informing you and for communication, for example via contact requests and feedback forms, as well as for marketing.

If you are logged in when you open our fan page, we can view the information contained in your public Facebook profile. Meta also provides us with anonymous usage statistics ("page insights"). We use these to improve the user experience. However, we do not have access to the usage data that Meta uses to create the statistics.

We are jointly responsible with Meta for collecting data from visitors to our fan page and forwarding it to Meta (this includes information on the types of content viewed, interactions with content, actions taken, technical information such as IP address, operating system, browser type, language settings, cookie data). Interests can be derived from this, and user profiles can be formed, but we cannot draw any conclusions about individual users from this. Meta also uses the data to provide "page insights", which can be used to gain knowledge about interaction with the pages and the associated content. We have therefore entered into a joint responsibility agreement with Meta regarding the processing of your data in accordance with art. 26 GDPR. The agreement with Meta also regulates which security measures Meta must observe. The data subject rights, such as information or other requests, are also to be fulfilled by Meta. You can view terms of this agreement with Meta here. The further processing by Meta is not our joint responsibility.

Meta also stores so-called cookies on your end device when you visit our fan page, even if you do not have a Facebook profile or are not logged in there. This enables Meta to create user profiles based on your preferences and interests and to display advertising tailored to these preferences within and outside of Facebook. Cookies remain on your end device until you delete them. The details of this can be found in Meta's privacy policy (see below).

The data processing is carried out with your consent based on art. 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future via our consent management platform, which you can access here, without affecting the lawfulness of the processing carried out based on the consent until revocation. Furthermore, you can revoke your consent by setting your browser accordingly or as a logged-in user of the social network Facebook at https://www.facebook.com/settings/?tab=ads#_. You can also deactivate user-based advertising via the deactivation page of the network advertising initiative (http://optout.networkadvertising.org/), via http://www.youronlinechoices.com/de/praferenzmanagement/ or the US website (http://www.aboutads.info/choices).

As a logged-in Facebook user, you can make an objection and further settings in the Advertising Settings section.

It cannot be guaranteed that Meta does not transfer data to the USA for the purpose of storage and further processing. If such data transfer to the USA takes place, it is based on the standard contractual clauses of the EU Commission: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

For more information about Page Insights and how to exercise your data protection rights, please see the "Page Insights Informations". For more detailed information on how Meta processes what personal data, including how to exercise your data subject rights against Meta, please refer to Meta's Data Policy at https://www.facebook.com/about/privacy.

Instagram Business Account
We operate an Instagram Business Account on Instagram (hereinafter “Instagram”), a service of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta") with whom we jointfully use technologies, systems, insights, and information. During your visit, personal data is processed not only by us but also by Meta, even if you do not have a profile on Instagram or are not logged in. While visiting our Instagram profile, user data (such as contact data), content data, usage data (such as websites visited, interests in content, access times), communication data (such as device information, IP addresses) are processed. On the one hand, this is done for the purpose of informing you and for communication, for example via contact requests and feedback forms, as well as for marketing.

If you are logged in when you open our Instagram profile, we can view the information contained in your public Instagram profile. Meta also provides us with anonymous usage statistics ("Insights"). We use these to improve the user experience. However, we do not have access to the usage data that Meta uses to create the statistics.

We are jointly responsible with Meta for collecting data from visitors to our Instagram page and forwarding it to Meta (this includes information on the types of content viewed, interactions with content, actions taken, technical information such as IP address, operating system, browser type, language settings, cookie data). Interests can be derived from this, and user profiles can be formed, but we cannot draw any conclusions about individual users from this. Meta also uses the data to provide "page insights", which can be used to gain knowledge about interaction with the pages and the associated content. We have therefore entered into a joint responsibility agreement with Meta regarding the processing of your data in accordance with art. 26 GDPR. The agreement with Meta also regulates which security measures Meta must observe. The data subject rights, such as information or other requests, are also to be fulfilled by Meta. You can view the terms of this agreement with Meta here. The further processing by Meta is not our joint responsibility. Meta also stores so-called cookies on your end device when you visit our Instagram business profile, even if you do not have an Instagram profile or are not logged into it. This enables Meta to create user profiles based on your preferences and interests and to display advertising tailored to these preferences within and outside of Instagram. Cookies remain on your end device until you delete them. The details of this can be found in Meta's privacy policy (see below).

The data processing is carried out with your consent based on art. 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future via our consent management platform, which you can access here, without affecting the lawfulness of the processing carried out based on the consent until revocation. Furthermore, you can revoke your consent by setting your browser accordingly or as a logged-in user of the social network Instagram at the privacy and security settings. You can also deactivate user-based advertising via the deactivation page of the network advertising initiative (http://optout.networkadvertising.org/), via http://www.youronlinechoices.com/de/praferenzmanagement/ or the US website (http://www.aboutads.info/choices).

Als eingeloggter Instagram-Nutzer können Sie einen Widerspruch und weitere Einstellungen in den Datenschutz- und Sicherheitseinstellungen vornehmen.

It cannot be guaranteed that Meta does not transfer data to the USA for the purpose of storage and further processing. If such data transfer to the USA takes place, it is based on the standard contractual clauses of the EU Commission: https://www.facebook.com/legal/EU_data_transfer_addendum and https://facebook.com/help/566994660333381.

For more information about Page Insights, please see the "Page Insights Information". For more detailed information on how Meta processes what personal data, including how to exercise your data subject rights against Meta, please refer to Meta's Data Policy at https://www.facebook.com/about/privacy und https://help.instagram.com. The cookie policy at: https://help.instagram.com/1896641480634370/?helpref=uf_share.

Twitter Fanpage
We operate a Twitter fan page on Twitter, Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (hereinafter "Twitter").

We use the Twitter company profile to interact with Twitter members, visitors and followers and to provide information about our company and its products and services (e.g., to promote new products or exclusive offers, solicit feedback from customers and prospects, answer questions about our products or services, etc.).

Twitter collects and uses data to provide analytics services to site operators to help them gain insights into how people interact with content associated with them. This data includes information about the type of content users view or interact with, or the actions they take, as well as information about the devices users use, such as IP addresses, operating system, browser type, language settings, and cookie data.

For more information about the Twitter Business Account and how you can exercise your rights as a data subject, please see the Twitter Privacy Policy.

LinkedIn Fanpage
We operate a LinkedIn Fan Page ("Company Page") on LinkedIn, a service of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter "LinkedIn").

We use our Company Page to contact and communicate with LinkedIn members and visitors and to provide information about our company and its products and services. When you contact us, we may view the information you have posted on LinkedIn as a LinkedIn member. If you share, like or comment on our content, or if you mention our company profile on LinkedIn, we may also access this information.

When a member visits, follows or engages with the site, LinkedIn processes personal data to provide us with information ("Page Insights") about this. This enables us to improve our marketing activities. LinkedIn processes data that the member has provided to LinkedIn, such as the member's function, country, industry, length of service, company size, and employment status data from the member's profile. In addition, LinkedIn will process information about how a member has interacted with our company page.

We have entered into an agreement with LinkedIn, the Page Insights Joint Controller Addendum (the "Addendum"). This agreement is part of the LinkedIn Pages Terms and sets out the responsibilities of LinkedIn and us in relation to Page Insights processing. The Page Insights Joint Controller Addendum is available here: https://legal.linkedin.com/pages-joint-controlleraddendum.

For more information about Page Insights and how you can exercise your rights as a data subject, please see the "Page Insights Information." For more detailed information about how LinkedIn processes what personal data and how you can exercise your rights as a data subject against LinkedIn, please see LinkedIn's Privacy Policy, which is published here: https://www.linkedin.com/legal/privacy-policy.

Vimeo
Social media plugins from Vimeo LLC, 555 West 18th Street, NY 10011, USA, are integrated on our website. This allows us to embed videos from Vimeo. When you visit our website, a connection is established with the servers of Vimeo. Vimeo also receives the information that you have visited our site with your IP address. If you are logged in on Vimeo, Vimeo can assign the visit to our website to your user account. If you interact with the plugin (e.g. click on an embedded video), this will be assigned to your profile by Vimeo and stored. We have no influence on the scope and content of the data collected by Vimeo.

Privacy policy of Vimeo: https://vimeo.com/privacy

To prevent the assignment of the collected data to your profile, you must log out of your account.

Google Analytics
We use the Google Analytics service of Google Ireland Limited, Gordon House Barrow Street Dublin 4, Ireland (hereinafter "Google"). This service enables an analysis of the use of our internet pages and uses cookies for this purpose. For this purpose, the information generated by the cookie, such as your anonymized IP address, is transmitted on our behalf to a Google server, where it is stored and analyzed. Because on this website Google Analytics has been extended by the code "gat._anonymizeIp();". This ensures an anonymized collection of IP addresses. The anonymization of your IP address is usually done by shortening your IP address by Google.

As part of the Google Analytics advertising function, remarketing and reports on performance by demographic characteristics and interests are used. The purpose of these methods is to use the information about user behavior to better tailor advertising measures to the interests of the respective users. As part of remarketing, personalized advertising may be placed on the other websites based on the user’s surfing behavior on this website. In this context, advertising materials may contain products that the user has previously viewed on the website. If you have consented to your web and app browsing history being linked to your Google Account and to your Google Account information being used to personalize ads, Google will use this data for cross-device remarketing.

Most browsers accept cookies automatically. However, you can prevent the use of cookies by the settings in your browser; in this case, however, not all functions of the website can be used. You must make the settings separately for each browser that you use. In addition, you can prevent the collection as well as the processing of this data by Google by downloading and installing the browser add-on available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en

Alternatively, or within browsers on mobile devices, please click on the following link: https://tools.google.com/dlpage/gaoptout?hl=de. This will place an opt-out cookie on your device for our websites with effect for your currently used browser. If you delete your cookies in this browser, you must click on this link again.

The data processing, in particular the setting of cookies, is carried out with your consent on the basis of Art. 6 (1) lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.

In this regard, we are jointly responsible with Google for the collection and processing of data of visitors to our website. We have therefore concluded an agreement with Google on joint responsibility regarding the processing of your data in accordance with Art. 26 GDPR. The agreement with Google also regulates in particular which security measures Google must observe. You can view the terms of the contract concluded with Google here.

For more information on the terms of use and the data privacy, please visit http://www.google.com/analytics/terms/de.html or https://policies.google.com/?hl=de.

Google Tag Manager
On our website we use the Google Tag Manager of Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. Google Tag Manager is a solution that allows marketers to manage website tags through one interface. The Tag Manager tool itself (which implements the tags) is a cookie-free domain and does not collect any personal data. The tool is responsible for activating other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, it remains in place for all tracking tags implemented with Google Tag Manager.

Google's privacy policy:https://policies.google.com/privacy?hl=de

MailChimp
For our newsletter distribution, we use the MailChimp service of The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE Suite 5000, Atlanta, GA 30308, USA. This allows us to analyze newsletter usage, e.g. the number of newsletters actually opened or whether and how often a link in the newsletter was clicked. The data you enter to receive the newsletter is transmitted to MailChimp.

Privacy policy of MailChimp: https://mailchimp.com/legal/privacy/

To object to the data collection, you must unsubscribe from the newsletter via the link in the mail.

Personio
For our application management, we use the service Personio of Personio GmbH & Co. KG, Rundfunkplatz 4, 80335 Munich, Germany. In the course of the application process, your personal data is stored on ISO27001-certified servers of Personio in Germany for the purpose of reviewing your application. You can revoke your consent to the storage of your data at any time at datenschutz@sp.design.

General information on data protection at Personio: https://www.personio.de/datenschutz/

Transfer to Third Countries
Data is being transferred to countries outside the European Economic Area. We only transfer personal data to third countries where the EU Commission has confirmed an adequate level of protection or where we can ensure the careful handling of personal data by means of contractual agreements or other suitable guarantees, such as certifications or proven compliance with international security standards.

  • United States of America (Standard contract terms)

Your Rights
As a data subject, you have the following rights:

  • To request information about the processing of your data, as well as to receive a copy of your personal data. Among other things you may request information on the purposes of the processing, the categories of personal data processed, the recipients of the data (if a transfer is made), the duration of the storage or the criteria for determining the duration;
  • To receive personal data relating to you in a structured, common and machine-readable format or to transfer it to another person in charge;
  • To correct your data. If your personal data is incomplete, you have the right to complete the data, taking into account the purposes of the processing;
  • To have your data deleted or blocked;
  • To have the processing restricted;
  • To object to the processing of your data;
  • To revoke your consent to the processing of your data for the future and
  • To complain to the responsible supervisory authority about unauthorised data processing.

Version of the Privacy Policy
If our processes change, we adjust the information in this privacy policy.

Status of this privacy policy: January 24, 202