Privacy Policy

In this Privacy Policy, we, Testfabrik Consulting + Solutions AG, inform you about the collection of personal data when using our website (webmate.io). This privacy policy is based on the terms used by the European Directive and Regulatory Authority when issuing the General Data Protection Regulation (GDPR); you can find more information about this under Art. 4 GDPR.

Person Responsible

Person Responsible according to Art. 4 Par. 7 EU-General Data Protection Regulation (GDPR) is:
Testfabrik Consulting + Solutions AG
Fasanerieweg 15
66121 Saarbrücken
Tel. +49 681 410 978-0
Email: sales@testfabrik.com

We have appointed a Data Protection Officer; you can reach them at datenschutz@testfabrik.com or our address with the addition „Data Protection Officer".

Processing Activities

Calling up websites

When using our website for information purposes only, i.e. even if you do not actively transmit any further information, data such as your IP address, web browsers used by you, operating system, domain name of your internet provider, etc. will be automatically collected in the server log files. This serves the purpose of a smooth connection setup, the usability, and the stability and security of the websites and is based on our legitimate interest in improving the stability and functionality of our websites according to Art. 6 Par. 1 S. 1 lit. f GDPR. The recipients of the data may be technical service providers for the operation and maintenance of our websites who are acting on our behalf according to Art. 28 GDPR. Generally, the data is deleted after quitting the current session as it is no longer required for the aforementioned purposes.

Collection of Data through Forms

On our websites, you will find forms for individual communication (e.g., for making contact, requesting a demo appointment, etc). If you use these, the data entered in the input mask will be transmitted to us and stored. This data is typically names, company names, email addresses, telephone numbers, and possibly other information that you provide us. The legal bases for the processing of data that is transmitted to us via the contact form are Art. 6 para. 1 lit. f GDPR, as the purpose pursued and our legitimate interest lies in easy contact and processing of your enquiry. Insofar as the contact is aimed at the conclusion of a contract, the legal basis for processing is Art. 6 para. 1 lit. b GDPR ("pre-contractual measures"). The recipients of your data may be the service providers we integrate in compliance with data protection regulations. The data will be deleted at the latest 6 months after the matter concerned by the enquiry has been finally clarified. If a contractual relationship arises, the statutory retention periods apply, after which your data will be deleted after 6 or 10 years.

Cookies

We use so-called cookies when using our websites. These are small text files that are stored on your device. Cookies cannot run programs or transmit viruses to your device. Certain, so-called transient cookies are automatically deleted when you log out or close the browser. Other, so-called persistent cookies are automatically deleted after a specified duration, which can vary depending on the cookie.

Technically necessary cookies

For the purpose of making websites more user-friendly, efficient, and simple, certain cookies are necessary. We set the technically necessary cookie webmate_consent to remember your cookie settings. The processing of cookies in this respect is carried out according to Art. 6 para. 1 lit. f GDPR, based on our legitimate interest in a user-friendly design of our website.

Not technically necessary cookies

The Pipedrive contact form is not loaded until you give consent in the cookie settings. If you allow it, your browser connects to Pipedrive and the embedded form may use storage or cookies controlled by Pipedrive. You can revoke this consent at any time via the cookie settings link in the footer.

Note on data transfer to the USA

On some applications on our website, personal data may also be transferred to the USA and processed there. We base this transfer legally on standard contractual clauses concluded with the respective provider or on the appropriateness decision of the EU Commission based on the EU-US-Data Privacy Framework, or both.

Additional Features and Offers

If you have subscribed to our newsletter on our website, we use your email address to regularly send you the newsletter and inform you about news of our products. This is done according to legal basis Art. 6 para. 1 lit. a GDPR. The distribution of the newsletter takes place with your consent. You can revoke your consent at any time to stop receiving the newsletter. For this, you can click on "unsubscribe" at the bottom of the newsletter email or the registration email, or contact us directly.

Brevo

We use the newsletter provider Brevo (Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, Germany) for registration and distribution of newsletters. The data you provide to us for the newsletter are stored on Brevo's servers within the EU. Using Brevo, we can analyze our newsletters to see whether they have been opened and which links have been clicked. If you don't want your data to be analyzed by Brevo, you can unsubscribe from the newsletter at any time. After your opt-out, your data will be erased unless they need to be retained for other reasons. We have concluded a contract processing agreement with the service provider. More details can be found in the privacy policy of Brevo: brevo.com/de/legal/privacypolicy .

Online Calendar Pipedrive

For scheduling appointments, we use Pipedrive Calendar (Pipedrive Inc, 490 1st Ave South, Suite 800 St. Petersburg, FL 33701, USA) after you consent to loading the embedded Pipedrive webform. For scheduling the appointment, we request the data asked for in the Pipedrive form and record your IP address at the time of entry. This data is used for processing and organizing appointments. For more information, please refer to Pipedrive's privacy policy at pipedrive.com/en/privacy .

Pipedrive Web Forms (Contact Form)

Our contact form is provided by Pipedrive Web Forms, a service of Pipedrive Inc., 490 1st Ave South, Suite 800, St. Petersburg, FL 33701, USA. The form is embedded on our website and is only loaded after you have given your consent in the cookie settings. You can revoke this consent at any time via the cookie settings link in the footer.

The contact form includes a CAPTCHA function used to distinguish automated requests from human users and to prevent spam. When you interact with the CAPTCHA, data such as your IP address, browser type, and usage behaviour may be transmitted to and processed by Pipedrive, including on servers in the USA.

When you submit the form, the data you enter (such as your name, company, email address, and your message) is transmitted to Pipedrive and stored in our Pipedrive CRM for the purpose of processing your enquiry. Your IP address is recorded at the time of submission. The legal bases for processing are Art. 6 para. 1 lit. f GDPR (our legitimate interest in being reachable and handling enquiries efficiently) and, where your contact is aimed at concluding a contract, Art. 6 para. 1 lit. b GDPR. The data will be deleted no later than 6 months after the matter concerned has been finally resolved. For more information, please refer to Pipedrive's privacy policy at pipedrive.com/en/privacy .

Matomo Analytics

We use Matomo, an open-source web analytics platform, to analyse how visitors interact with our website. Matomo is operated on our own server infrastructure (matomo.testfabrik.com), and all data remains within the EU.

Matomo is configured in cookieless mode, with no cookies or similar tracking technologies are stored on your device by Matomo. Your IP address is not stored in full; it is truncated before any record is saved. We also honour the Do Not Track (DNT) browser header, and no data is shared with third parties.

When analytics are enabled, Matomo collects information such as pages visited, time spent on pages, links clicked, and general browser and device information, solely for the purpose of understanding how our website is used and improving it. The legal basis for this processing is Art. 6 para. 1 lit. f GDPR (our legitimate interest in maintaining and improving a functional, user-friendly website).

Analytics tracking is enabled by default but you can opt out at any time via the cookie settings link in the footer. For more information about Matomo's data handling, please refer to matomo.org/privacy-policy .

Social Links

Links to the following named social media services are included on our website. After clicking the link, you will be redirected to our respective page; only then data will be transferred to the respective service. Please refer to the respective privacy policies for information on how your data is handled:

Social Media

We use social media platforms provided by providers such as LinkedIn, Instagram and others to represent our company and for direct communication with you, through which we maintain our presence and process your data.

Joint Responsibility

If data is collected on our presence that both the provider and we process and use for common purposes, there is joint responsibility for the operator and us. We currently use the following providers:

LinkedIn (including LinkedIn Sales Navigator) of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland
Facebook (including Facebook Business Manager) of Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Instagram of Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Twitter: X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103
Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA
Xing from New Work SE, Dammtorstraße 30, 20354 Hamburg

Privacy statements of the respective providers:

Applications

When you apply for a job with us, we will process your personal data as follows: We collect information from applicants provided by them, especially: Names, addresses, date of birth, phone numbers, nationality, email address, image data, data on school education and professional qualification, assessments and work references, information on reliability, and health data (if relevant).

We process your personal data in accordance with the provisions of the GDPR as far as necessary for the establishment, execution, design and termination of employment relationships. The legal basis for this is Art. 6 paragraph 1 lit. b GDPR. In case of unsuccessful applications, data is generally deleted after 3 months, unless there is consent for further storage.

Rights of the Data Subject

With regard to personal data concerning you, you have the following rights which can generally be asserted informally (e.g. via datenschutz@testfabrik.com or our postal address, preferably with the subject line "Rights of the Data Subject").

Rights to information, correction, deletion, restriction and data portability

Every affected person has the right to information under Art. 15 GDPR, the right to correction under Art. 16 GDPR, the right to deletion under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, and the right to data portability under Art. 20 GDPR. Restrictions apply to the right of information and the right of deletion according to §§ 34 and 35 BDSG.

Right to object from Art. 21 GDPR

Insofar as we base the processing of your personal data on a balance of interests, you can object to the processing. When exercising an objection, we ask you to explain your interests that, in your opinion, outweigh ours. In the case of your justified objection, we will either stop or adjust the data processing or show our compelling legitimate grounds on the basis of which we will continue the processing.

If you object to our processing of our (legitimate interest-based) direct advertising, no further reasons need to be given from your side; further processing will then cease without further ado.

Revocation of Consents

You can revoke your consent to the processing of personal data at any time. Please note that the revocation only applies to the future. Processing that occurred before the revocation is not affected by this.

Right to lodge a complaint

Finally, you have the right to complain to a data protection supervisory authority about the processing of your personal data by us. The supervisory authority responsible for us is the Independent Data Protection Centre Saarland, Fritz-Dobisch-Straße 12, 66111 Saarbrücken.

Data Security

We take measures in accordance with Art. 32 GDPR, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, to ensure a level of security appropriate to the risk.

The measures include in particular the safeguarding of the confidentiality, integrity and availability of data by controlling physical access to the data, as well as access, input, transmission, ensuring availability and separation of data. Furthermore, we consider the protection of personal data already in the development or selection of hardware, software and procedures, according to the principle of data protection through technology design and privacy-friendly default settings (Art. 25 GDPR).

We would like to point out that data transmission over the Internet (especially when communicating by email) can have security gaps.

Changes to this Privacy Policy

This privacy policy is current as of July 2023; however, it is subject to continuous adaptation and further development. The latest privacy policy can always be accessed at www.testfabrik.com/datenschutzerklärung .