1. introduction

In the following we inform about the processing of personal data

• on our website netstream.ch
• in our social media profiles
• in the context of application procedures
• outside the website (e.g. when forwarding data to recipients).

Personal data is any information that relates to an identified or identifiable natural person, such as their name or email address.

1.1. contact details

The controller pursuant to Art. 5 lit. j of the Federal Act on Data Protection (FADP) is Netstream AG, Richtistrasse 2, 8304 Wallisellen, Switzerland, e-mail:netstream We are legally represented by Alexis Caceda.

Our data protection advisor can be contacted via heyData GmbH, Schützenstrasse 5, 10117 Berlin, www.heydata.eu, e-mail: datenschutz@heydata.eu.

1.2 Announcement abroad

Insofar as we transfer personal data to service providers or other third parties outside Switzerland, decisions of the Federal Council in accordance with Art. 16 para. 1 FADP usually guarantee the security of the data during transfer. According to these decisions, the legislation there guarantees adequate protection. The Federal Council has determined such adequacy for the states, territories, specific sectors in a state and international bodies listed in Art. 8 para. 1 of the Ordinance on Data Protection (DPO) in conjunction with Annex 1. These are available at https://www.bj.admin.ch/bj/de/home/staat/datenschutz/internationales/anerkennung-staaten.html .

This is the case for the following states:

• Germany
• Andorra
• Argentina
• Austria
• Belgium
• Bulgaria
• Canada (Adequate data protection is deemed to be ensured if the Canadian federal law "Loi sur la protection des renseignements personnels et les documents électroniques" of April 13, 2000 applies in the private sector or the law of a Canadian province that largely corresponds to this federal law. The federal law applies to personal information obtained, processed or disclosed in the course of commercial activities, whether by organizations such as associations, partnerships, individuals or unions, or federally regulated entities such as plants, works, enterprises or business activities that fall within the legislative jurisdiction of the Parliament of Canada. The provinces of Québec, British Columbia, and Alberta have enacted legislation that is broadly similar to the federal law; the provinces of Ontario, New Brunswick, Newfoundland and Labrador, and Nova Scotia have enacted legislation that is broadly similar to that law in the area of health information. In all Canadian provinces, the federal law applies to all personal data obtained, processed or disclosed by federally regulated entities, including data about employees of those entities. The federal law also applies to personal data transferred to another province or country in the course of commercial activities).
• Cyprus
• Croatia
• Denmark
• Spain
• Estonia
• Finland
• France
• Gibraltar
• Greece
• Guernsey
• Hungary
• Isle of Man
• Faroe Islands
• Ireland
• Iceland
• Israel
• Italy
• Jersey
• Latvia
• Liechtenstein
• Lithuania
• Luxembourg
• Malta
• Monaco
• Norway
• New Zealand
• Netherlands
• Poland
• Portugal
• Czech Republic
• Romania
• United Kingdom
• Slovakia
• Slovenia
• Sweden
• Uruguay

In other cases (e.g., if no decision on adequacy exists), standard data protection clauses are the legal basis for data transfer as a rule, i.e., unless we indicate otherwise. These are a set of rules adopted by the Federal Data Protection and Information Commissioner (FDPIC) and are part of the contract with the respective third party. According to Art. 16 Para. 2 lit. d FADP, they ensure security in the transfer of data. Many of the providers have given contractual guarantees that protect the data beyond the standard contractual clauses. These are, for example, guarantees regarding the encryption of the data or regarding an obligation on the part of the third party to notify data subjects if law enforcement agencies want to access data.

1.3 Rights of the persons concerned

Data subjects generally have the following rights vis-à-vis us with regard to the personal data concerning them:

• Right to be informed whether personal data about them are being processed.
• The right to obtain the release of personal data that he/she has disclosed to us,
• Right of rectification,
• Right to object to processing.

2. newsletter

We reserve the right to inform customers who have already used our services or purchased goods about our offers from time to time by e-mail or other means if they have not objected to this. The processing is carried out for the purpose of direct marketing. Recipients of the communication can object to the use of their e-mail address or other communication data for advertising purposes at any time at no additional cost, for example via the link at the end of each e-mail or by sending an e-mail to our e-mail address stated above.

Interested parties have the option to subscribe to a free newsletter. We process the data provided during registration for sending the newsletter. Subscription is done by selecting the appropriate field on our website, by ticking the appropriate field in a paper document or by another clear action, whereby interested parties give their consent to the processing of their data. We process the data for the purpose of direct marketing. The consent of the interested party can be revoked at any time, e.g. by clicking the appropriate link in the newsletter or notifying our e-mail address given above.

We also process the open and click-through rate of our newsletters by prospects to understand which content is relevant to our recipients. This serves to improve our direct marketing.

We use a service from the provider HubSpot, Inc, 25 1st Street Cambridge, MA 0214, USA for email marketing. The provider is the recipient of personal data in the context of the aforementioned processing. Further information can be found in the provider's privacy policy at https://legal.hubspot.com/de/privacy-policy.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16(2) can be found in the section "Disclosure abroad".

3. data processing on our website netstream.ch

3.1 Informational use of the website

During the informative use of the website, i.e. when site visitors do not separately transmit information to us, we collect the personal data that the browser transmits to our server in order to ensure the stability and security of our website. This serves to ensure the IT security of the website.

These data are e.g.:

• IP address
• Date and time of the request
• Time zone difference from Greenwich Mean Time (GMT)
• Content of the request (concrete page)
• Access status/HTTP status code
• Data volume transferred in each case
• Website from which the request comes
• Browser
• Operating system and its interface
• Language and version of the browser software.

This data is also stored in log files.

3.2 Data on third-party devices

Through our website, we process data on third-party devices by means of telecommunication transmission within the scope described in the preceding and following sections.

Visitors can refuse processing, e.g. by setting appropriate preferences in their browser to block or delete cookies.

3.3 Web hosting and provision of the website

We host our website ourselves and process the personal data accessed via the website. The purpose of this is to provide a website and thus present ourselves to the outside world.

3.4 Contact form

When you contact us via the contact form on our website, we process the data requested there and the content of the message in order to process the inquiry. To the extent permitted by law, we may also process the data for direct marketing purposes.

3.5 Booking appointments

Site visitors can book appointments with us on our website. We process the data collected in the process in order to plan and carry out the appointments and to offer interested parties a user-friendly option for making appointments via the website.

3.6 Offer of services

We offer services via our website. Personal data is processed in order to provide the contract concluded with the respective site visitor.

3.7. third party providers on the website

3.7.1 Google Web Fonts

We use a service of the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (privacy policy: https://policies.google.com/privacy?hl=de) for fonts on the website. The provider is a recipient of personal data in the context of the aforementioned processing.

The provider processes personal data in the USA. Information on guarantees pursuant to Article 16 (2) can be found in the section "Disclosure abroad".

3.7.2 Wordfence

We use a service from the provider DEFIANT INC, 1700 Westlake Ave N Ste 200, Seattle, WA 98109, USA (privacy policy: https://www.wordfence.com/privacy-policy/) for the security of our applications. The provider is the recipient of personal data in the context of the aforementioned processing.

The provider processes personal data in the USA. Information on guarantees pursuant to Article 16 (2) can be found in the section "Disclosure abroad".

3.7.3 HubSpot

We use a service from the provider HubSpot, Inc., 25 1st Street Cambridge, MA 0214, USA (privacy policy: https://legal.hubspot.com/privacy-policy) to generate leads, automate marketing and for analysis. The provider is the recipient of personal data in the context of the aforementioned processing.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16(2) can be found in the section "Disclosure abroad".

3.7.4 HubSpot LiveChat

We use a service of the provider HubSpot, Inc., 25 1st Street Cambridge, MA 0214, USA (privacy policy: https://legal.hubspot.com/privacy-policy) as live chat. The provider is a recipient of personal data in the context of the aforementioned processing.

The provider processes personal data in the USA. Information on guarantees pursuant to Article 16 (2) can be found in the section "Disclosure abroad".

3.7.5 Google Marketing Platform

We use a service of the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (privacy policy: https://policies.google.com/privacy?hl=de) for analysis and advertising. The provider is a recipient of personal data in the context of the aforementioned processing.

The provider processes personal data in the USA. Information on guarantees pursuant to Article 16 (2) can be found in the section "Disclosure abroad".

3.7.6 Elementor

We use a service of the provider Elementor LTD, Tuval St 40, Ramat Gan, Israel (privacy policy: https://elementor.com/terms/) to create websites. The provider is a recipient of personal data in the context of the aforementioned processing.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16(2) can be found in the section "Disclosure abroad".

3.7.7 Google Analytics

We use a service of the provider Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (privacy policy: https://policies.google.com/privacy?hl=de) for analysis. The provider is the recipient of personal data in the context of the aforementioned processing.

The provider processes personal data in the USA. Information on guarantees pursuant to Article 16 (2) can be found in the section "Disclosure abroad".

3.7.8 Google Conversion Tag

We use a service of the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (privacy policy: https://policies.google.com/privacy?hl=de https://support.google.com/tagmanager/answer/9323295?hl=de&ref_topic=3441532) for conversion tracking. The provider is a recipient of personal data in the context of the aforementioned processing.

The provider processes personal data in the USA. Information on guarantees pursuant to Article 16 (2) can be found in the section "Disclosure abroad".

3.7.9 YouTube videos

We use a service of the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (privacy policy: https://policies.google.com/privacy) for videos on the website. The provider is a recipient of personal data in the context of the aforementioned processing.

The provider processes personal data in the USA. Information on guarantees pursuant to Article 16 (2) can be found in the section "Disclosure abroad".

3.7.10. Google Tag Manager

We use a service of the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (privacy policy: https://policies.google.com/privacy?hl=de) for analysis and advertising. The provider is a recipient of personal data in the context of the aforementioned processing.

The provider processes personal data in the USA. Information on guarantees pursuant to Article 16 (2) can be found in the section "Disclosure abroad".

3.7.11. WP rocket

We use a service of the provider SAS WP MEDIA, 4 rue de la République, 69001 LYON, France (privacy policy: https://wp-rocket.me/de/impressum/) for website performance. The provider is a recipient of personal data in the context of the aforementioned processing.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16(2) can be found in the section "Disclosure abroad".

3.7.12. Google reCAPTCHA

We use a service of the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Dublin, Ireland (privacy policy: https://policies.google.com/privacy?hl=de) to manage authentications. The provider is a recipient of personal data in the context of the aforementioned processing.

The provider processes personal data in the USA. Information on guarantees pursuant to Article 16 (2) can be found in the section "Disclosure abroad".

3.7.13. Weglot

We use a service of the provider Weglot, 138, rue Pierre Joigneaux in BOIS-COLOMBES (92270), France (privacy policy: https://weglot.com/de/privacy/) for translations. The provider is a recipient of personal data in the context of the aforementioned processing.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16(2) can be found in the section "Disclosure abroad".

3.7.14. Redis Object Cache

We use a service from the provider Redis Ltd, Mountain View, California, USA (privacy policy: https://objectcache.pro/privacy) for website performance. The provider is the recipient of personal data in the context of the aforementioned processing.

The provider processes personal data in the USA. Information on guarantees pursuant to Article 16 (2) can be found in the section "Disclosure abroad".

3.7.15. Ascio

We use a service from the provider ASCIO TECHNOLOGIES, CORP. DANMARK, Strandvejen 125, DK-2900 Hellerup, Denmark (privacy policy: https://www.ascio.com/policies/privacy-policy/) to create websites. The provider is the recipient of personal data in the context of the aforementioned processing.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16(2) can be found in the section "Disclosure abroad".

3.7.16. Microsoft Clarity

On this website we use the web analysis service Microsoft Clarity from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Clarity enables us to better understand the behavior of visitors and to improve our offer. This involves recording anonymized information about mouse movements, clicks and scrolling behaviour. The data helps us to further develop the user-friendliness and functionality of the website in a targeted manner.

The processing takes place on the basis of our legitimate interest in a user-friendly and target group-oriented website design. No information is collected that enables visitors to be personally identified. IP addresses are processed anonymously.

Further information on data processing by Microsoft can be found in Microsoft's privacy policy. 

4. data processing on social media platforms

We are represented on social media networks in order to present our organization and our services. The operators of these networks regularly process their users' data for advertising purposes. Among other things, they create user profiles from their online behavior, which are used, for example, to display advertising on the pages of the networks and elsewhere on the Internet that corresponds to the interests of the users. For this purpose, the network operators store information on user behavior in cookies on the user's computer. Furthermore, it cannot be ruled out that the operators may combine this information with other data. Users can find further information and information on how users can object to processing by the site operators in the data protection declarations of the respective operators listed below. It is also possible that the operators or their servers are located abroad, meaning that they process data there. This may result in risks for users, e.g. because the enforcement of their rights is made more difficult or government agencies gain access to the data.

When users of the networks contact us through our profiles, we process the data provided to us in order to respond to the requests.

4.1 Facebook

We maintain a profile on Facebook. The operator is Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The privacy policy is available here: https://www.facebook.com/policy.php. A possibility to object to data processing arises via settings for advertisements: https://www.facebook.com/settings?tab=ads.
We are jointly responsible for processing the data of visitors to our profile on the basis of an agreement with Facebook. Facebook explains exactly what data is processed at https://www.facebook.com/legal/terms/information_about_page_insights_data. Data subjects can exercise their rights both against us and against Facebook. However, according to our agreement with Facebook, we are obliged to forward requests to Facebook. Data subjects will therefore receive a faster response if they contact Facebook directly.

4.2 Instagram

We maintain a profile on Instagram. The operator is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The privacy policy is available here: https://help.instagram.com/519522125107875.

4.3 YouTube

We maintain a profile on YouTube. The operator is Google Ireland Limited Gordon House, Barrow Street Dublin 4. Ireland. The privacy policy is available here: https://policies.google.com/privacy?hl=de.

4.4 Twitter

We maintain a profile on Twitter. The operator is Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. The privacy policy is available here: https://twitter.com/de/privacy. One way to object to data processing is via the settings for advertisements: https://twitter.com/personalization.

4.5 LinkedIn

We maintain a profile on LinkedIn. The operator is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. The privacy policy is available here: https://https://www.linkedin.com/legal/privacy-policy?_l=de_DE. One way to object to data processing is via the settings for advertisements: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

4.6 Xing

We maintain a profile on Xing. The operator is New Work SE, Dammtorstrasse 29-32, 20354 Hamburg. The privacy policy is available here: https://privacy.xing.com/de/datenschutzerklaerung.

5. data processing of applicants

When people apply to us for open positions (which we have advertised ourselves or which we advertise on third-party websites) or submit unsolicited applications, we process their data for the purposes of the application process.

It may also be that we write to interesting applicants directly for a position. In this case, we process their master data (e.g. name), contact data (e.g. e-mail address) and other data that may be of interest for the specific position.

Recipients of the data are service providers used as part of the application process (e.g. contract processors as part of the recruitment process) and providers of Cloud that we use. We have listed the recipients that we can currently identify in the "Recipients of data" section below.

We ask applicants to refrain from providing information on political opinions, religious beliefs and similarly sensitive data in their resumes and cover letters. They are not required for an application. If applicants nevertheless make such statements, we cannot prevent them from being processed.

6. data processing outside the website

6.1 Processing purposes

We process personal data for the purposes set out below or elsewhere in this document (e.g. under "Recipients of data"):

• Provision of contractual services and fulfillment of contractual obligations
• Contact us (e.g. by e-mail or telephone)
• Communication
• Answering inquiries
• IT security measures
• Direct marketing
• Request and consideration of feedback
• Conducting sweepstakes and contests. We reserve the right to use the data collected in the process also for direct marketing purposes.
• Security measures in our office

6.2 Recipients of data

Recipients of data are service providers used by us (e.g. contract processors), providers of Cloud that we use and other external bodies. We list the names of recipients that we can currently identify below. However, the list is not exhaustive.

6.2.1 OneDrive for Business

We use a service from the provider Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (privacy policy: https://privacy.microsoft.com/de-de/privacystatement?culture=de-de&country=DE) for storage in the Cloud and for collaboration at work. The provider is the recipient of personal data in the context of the aforementioned processing. Data subjects are employees, users, third parties and customers.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16(2) can be found in the section "Disclosure abroad".

6.2.2 Atlassian Cloud

We use a service of the provider Atlassian Pty Ltd, Level 6, 341 George Street, Sydney, NSW 2000, Australia (privacy policy: https://www.atlassian.com/de/legal/privacy-policy) for storage in the Cloud . The provider is the recipient of personal data in the context of the aforementioned processing. Data subjects are users.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16(2) can be found in the section "Disclosure abroad".

6.2.3 Microsoft 365

We use a service from the provider Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland (privacy policy: https://privacy.microsoft.com/de-de/privacystatement?culture=de-de&country=DE) to collaborate at work, create documents and store them in the Cloud . The provider is the recipient of personal data in the context of the aforementioned processing. Data subjects are employees, third parties, users and customers.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16(2) can be found in the section "Disclosure abroad".

6.2.4 Slack

We use a service of the provider Slack Technologies Limited, One Park Place, Upper Hatch Street, Dublin 2, Ireland (privacy policy: https://slack.com/intl/de-de/trust/privacy/privacy-policy) for video conferencing and communication. The provider is a recipient of personal data in the context of the aforementioned processing. Data subjects are employees and customers.

The provider processes personal data in the USA. Information on guarantees pursuant to Article 16 (2) can be found in the section "Disclosure abroad".

6.2.5 Microsoft Teams

We use a service of the provider Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland (privacy policy: https://privacy.microsoft.com/de-de/privacystatement?culture=de-de&country=DE) for video conferencing. The provider is the recipient of personal data in the context of the aforementioned processing. Data subjects are users.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16(2) can be found in the section "Disclosure abroad".

6.2.6 Slack

We use a service of the provider Slack Technologies Limited, One Park Place, Upper Hatch Street, Dublin 2, Ireland (privacy policy: https://slack.com/intl/de-de/trust/privacy/privacy-policy) for communication. The provider is a recipient of personal data in the context of the aforementioned processing. Data subjects are employees and customers.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16(2) can be found in the section "Disclosure abroad".

6.2.7 Microsoft Teams

We use a service of the provider Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland (privacy policy: https://privacy.microsoft.com/de-de/privacystatement?culture=de-de&country=DE) for communication. The provider is the recipient of personal data in the context of the aforementioned processing. Data subjects are employees and customers.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16(2) can be found in the section "Disclosure abroad".

6.2.8 Confluence

We use a service of the provider Atlassian B.V., c/o Atlassian, Inc., 350 Bush Street, Floor 13, San Francisco, CA 94104, USA (privacy policy: https://www.atlassian.com/de/legal/privacy-policy) for project management. The provider is a recipient of personal data in the context of the aforementioned processing. Data subjects are interested parties, employees, users, third parties and customers.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16(2) can be found in the section "Disclosure abroad".

6.2.9 Jira

We use a service of the provider Atlassian B.V., c/o Atlassian, Inc., 350 Bush Street, Floor 13, San Francisco, CA 94104, USA (privacy policy: https://www.atlassian.com/de/legal/privacy-policy) for project management. The provider is a recipient of personal data in the context of the aforementioned processing. Data subjects are interested parties, employees, users, third parties and customers.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16(2) can be found in the section "Disclosure abroad".

6.2.10. Skribble

We use a service of the provider Skribble AG, Förrlibuckstrasse 190, CH-8005 Zurich, Switzerland (privacy policy: https://www.skribble.com/de-de/datenschutz/) for electronic signatures. The provider is a recipient of personal data in the context of the aforementioned processing. Data subjects are interested parties and employees.

6.2.11. Google Ads

We use a service of the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (privacy policy: https://policies.google.com/privacy?hl=de) for advertising. The provider is a recipient of personal data in the context of the aforementioned processing. Data subjects are users.

The provider processes personal data in the USA. Information on guarantees pursuant to Article 16 (2) can be found in the section "Disclosure abroad".

6.2.12. LinkedIn Ads

We use a service of the provider LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (privacy policy: https://www.linkedin.com/legal/privacy-policy?) for advertising. The provider is a recipient of personal data in the context of the aforementioned processing. Data subjects are users.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16(2) can be found in the section "Disclosure abroad".

6.2.13. HubSpot

We use a service from the provider HubSpot, Inc., 25 1st Street Cambridge, MA 0214, USA (privacy policy: https://legal.hubspot.com/de/privacy-policy) to automate marketing, generate leads and for analysis. The provider is the recipient of personal data in the context of the aforementioned processing. Data subjects are interested parties.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16(2) can be found in the section "Disclosure abroad".

6.2.14. Jira

We use a service of the provider Atlassian B.V., c/o Atlassian, Inc., 350 Bush Street, Floor 13, San Francisco, CA 94104, USA (privacy policy: https://www.atlassian.com/de/legal/privacy-policy) for project management. The provider is a recipient of personal data in the context of the aforementioned processing. Data subjects are interested parties, employees, users, third parties and customers.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16(2) can be found in the section "Disclosure abroad".

6.2.15. HubSpot

We use a service of the provider HubSpot, Inc., 25 1st Street Cambridge, MA 0214, USA (privacy policy: https://legal.hubspot.com/de/privacy-policy) for the management of customer relationships. The provider is a recipient of personal data in the context of the aforementioned processing. Data subjects are customers.

The provider processes personal data in the USA. Information on guarantees pursuant to Article 16 (2) can be found in the section "Disclosure abroad".

6.2.16. Google Tag Manager

We use a service of the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (privacy policy: https://policies.google.com/privacy?hl=de) for analysis and advertising. The provider is the recipient of personal data in the context of the aforementioned processing. Data subjects are users.

The provider processes personal data in the USA. Information on guarantees pursuant to Article 16 (2) can be found in the section "Disclosure abroad".

6.2.17. DigitalOcean

We use a service from the provider Digitalocean LLC, 101 Avenue of the Americas 10th Floor New York, NY 10013, USA (privacy policy: https://www.digitalocean.com/legal/privacy-policy) for storage in the Cloud . The provider is the recipient of personal data in the context of the aforementioned processing. Data subjects are employees, users, third parties and customers.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16(2) can be found in the section "Disclosure abroad".

6.2.18. Google Analytics

We use a service of the provider Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (privacy policy: https://policies.google.com/privacy?hl=de) for analysis. The provider is the recipient of personal data in the context of the aforementioned processing. Data subjects are users.

The provider processes personal data in the USA. Information on guarantees pursuant to Article 16 (2) can be found in the section "Disclosure abroad".

6.2.19. Cloudian S3

We use a service of the provider Cloudian Inc., 63 Bovet Road, Suite 400 San Mateo, CA 94402 USA (privacy policy: https://cloudian.com/privacy-policy-2/) for storage in the Cloud, for artificial intelligence functions and for server management. The provider is the recipient of personal data in the context of the aforementioned processing. Data subjects are users.

The provider processes personal data in the USA. Information on guarantees pursuant to Article 16 (2) can be found in the section "Disclosure abroad".

6.2.20. bexio AG

We use a service from the provider bexio AG, Alte Jonastrasse 24, 8640 Rapperswil, Switzerland (privacy policy: https://www.bexio.com/de-CH/richtlinien/datenschutz) for accounting purposes. The provider is the recipient of personal data in the context of the aforementioned processing. Data subjects are interested parties, employees and customers.

The provider processes personal data in Switzerland. Information on guarantees in accordance with Article 16 paragraph 2 can be found in the section "Disclosure abroad".

6.2.21. Tresio

We use a service from the provider Tresio AG, Baslestrasse 60, 8048 Zurich, Switzerland (privacy policy: https://tresio.ch/de/landing/policy_gtc/data_policy.php) for liquidity management. The provider is the recipient of personal data in the context of the aforementioned processing. The data subjects are employees.

The provider processes personal data in Switzerland. Information on guarantees in accordance with Article 16 paragraph 2 can be found in the section "Disclosure abroad".

6.2.22. Stripe

We use a service of the provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (privacy policy: https://stripe.com/de/privacy#translation) for payments. The provider is a recipient of personal data in the context of the aforementioned processing. Data subjects are third parties and customers.

The provider processes personal data in the USA. Information on guarantees pursuant to Article 16 (2) can be found in the section "Disclosure abroad".

6.2.23. 1Password

We use a service of the provider AgileBits, Inc, Suite 303, 49 Spadina Ave, Toronto, Ontario, M5V 2J1, Canada (privacy policy: https://1password.com/de/legal/privacy/) to store passwords. The provider is a recipient of personal data in the context of the aforementioned processing. Data subjects are employees.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16(2) can be found in the section "Disclosure abroad".

6.2.24. BitBucket

We use a service of the provider Atlassian B.V., c/o Atlassian, Inc., 350 Bush Street, Floor 13, San Francisco, CA 94104, USA (privacy policy: https://www.atlassian.com/de/legal/privacy-policy) for collaboration at work, source code management and version management for software developments. The provider is the recipient of personal data in the context of the aforementioned processing. Data subjects are users.

The provider processes personal data in the USA. Information on guarantees pursuant to Article 16 (2) can be found in the section "Disclosure abroad".

6.2.25. VMWare

We use a service of the provider Broadcom Inc., 1320 Ridder Park Drive, San Jose, CA 95131, USA (privacy policy: https://www.broadcom.com/company/legal/privacy/policy) as infrastructure-as-a-service. The provider is the recipient of personal data in the context of the aforementioned processing. Data subjects are users.

The provider processes personal data in the USA. Information on guarantees pursuant to Article 16 (2) can be found in the section "Disclosure abroad".

6.2.26. Redis

We use a service from the provider Redis Inc, 303 2nd St, North Tower Ste 525, San Francisco, CA 94107, USA (privacy policy: https://redis.io/legal/privacy-policy/) as a database-as-a-service. The provider is the recipient of personal data in the context of the aforementioned processing. Data subjects are users.

The provider processes personal data in the USA. Information on guarantees pursuant to Article 16 (2) can be found in the section "Disclosure abroad".

6.2.27. Microsoft Authenticator

We use a service of the provider Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland (privacy policy: https://privacy.microsoft.com/de-de/privacystatement) to manage authentication. The provider is the recipient of personal data in the context of the aforementioned processing. Data subjects are users.

The provider processes personal data in the EU. Information on guarantees pursuant to Article 16(2) can be found in the section "Disclosure abroad".

7. changes to this privacy policy

We reserve the right to change this privacy policy with effect for the future. A current version is always available here.

8 Questions and comments

If you have any questions or comments regarding this privacy policy, please feel free to contact us using the contact information provided above.