3C Automation AG – Sub Processors

Hosting and content delivery networks (CDN)

This website and our offered services are hosted by external service providers (hosters). The personal data collected on this website or through our services are stored on the host’s servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, contract data, contact data, names, website or app accesses and other data generated via our website or one of our services.

The host is used for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 para. 1 lit. b. GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f. GDPR).

Our hosts will only process your data to the extent necessary to fulfill their service obligations and follow our instructions regarding this data.

We use the following hosting service:
Amazon Web Services, Inc. 410 Terry Avenue North, Seattle, WA 98109-5210, U.S.A. (Server location: Frankfurt a. Main, Germany)

Contact by e-mail, video conference and chat function

If you contact us by e-mail or chat function your request including all resulting personal data (name, request) will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent. The data may be stored in a customer relationship management system (“CRM system”) or an comparable inquiry organization.

The processing of this data is based on Art. 6 (1) lit. b. GDPR, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR), if that has been requested.

The data you send to us via contact requests will remain with us until you request its deletion, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g., after we have completed processing your request). Mandatory legal provisions – in particular legal retention periods – remain unaffected.

Audio and video conferencing, automated chatbot

To communicate with our customers, we use online conferencing tools and an automated chatbot, among other tools. The tools we use in detail are listed below. If you communicate with us via video or audio conference or chatbot via the Internet, your personal data will be collected and processed by us and the provider of the respective conference tool.

The conference tools thereby collect all data that you provide/enter to use the tools (e-mail address and/or your telephone number). Furthermore, the conference tools process the duration of the conference, start and end (time) of participation in the conference, number of participants and other “context information” related to the communication process (metadata).

Furthermore, the provider of the tool processes all technical data required to handle online communication. This particularly includes IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speaker, and the type of connection.

If content is exchanged, uploaded or otherwise made available within the tool, it is also stored on the servers of the tool providers. Such content particularly includes cloud recordings, chat/ instant messages, voicemails, uploaded photos and videos, files, whiteboards and other information shared during the use of the service.

Please note that we do not have full influence on the data processing operations of the tools used. Our options are largely determined by the corporate policy of the respective provider. For further information on data processing by the conference tools, please refer to the data protection statements of the respective tools used, which we have listed below this text.

The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6 para. 1 p. 1 lit. b. GDPR). Furthermore, the use of the tools serves the general simplification and acceleration of communication with us or our company (legitimate interest within the meaning of Art. 6 para. 1 lit. f. GDPR). As far as consent has been requested, the tools in question are used on the basis of this consent; consent can be revoked at any time with effect for the future.

The data collected directly by us via the video and conference tools is deleted from our systems as soon as you request its deletion, revoke your consent to store it, or the purpose for storing the data no longer applies. Stored cookies remain on your terminal device until you delete them. Mandatory legal retention periods remain unaffected.

We have no influence on the storage period of your data, stored by the conference tool operators, for their own purposes. For details, please contact the operators of the conference tools directly.

Conference tools used:

We use the following tools:

Google Meet

We use Google Meet, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For details on data processing, please refer to Google’s privacy policy: https://policies.google.com/privacy?hl=de.

We have concluded an order processing agreement with the Google Meet provider and fully implement the strict requirements of the German data protection authorities when using Google Meet.

The legal basis for the data processing is Art. 6 para. 1 lit. f. GDPR. The website operator has a legitimate interest in making it as uncomplicated as possible to arrange appointments with interested parties and customers. If consent has been requested, Art. 6 para. 1 lit. a. GDPR is the legal basis for data processing; consent can be revoked at any time.

Calendly

You can schedule appointments with us on our website. We use the tool “Calendly” for booking appointments. The provider is Calendly LLC, 271 17th St NW, 10th Floor, Atlanta, Georgia 30363, USA (hereinafter “Calendly”).

For the purpose of booking an appointment, enter the requested data and the desired date in the mask provided. The data entered will be used for the planning, execution and, if necessary, follow-up of the appointment.

The legal basis for the data processing is Art. 6 para. 1 lit. f. GDPR. The website operator has a legitimate interest in making it as uncomplicated as possible to arrange appointments with interested parties and customers. If consent has been requested, Art. 6 para. 1 lit. a. GDPR is the legal basis for data processing; consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://calendly.com/pages/dpa.  

We have concluded an order processing contract with Calendly. This is a contract required by data protection law, which ensures that Calendly only processes the personal data of our website visitors according to our instructions and in compliance with the GDPR.

Pipedrive CRM

We use Pipedrive CRM on this website. The provider is Pipedrive Inc., 530 Fifth Avenue, 8th floor, Suite 802, New York, NY 10036, United States (hereinafter referred to as Pipedrive CRM).

Among other things, Pipedrive CRM enables us to manage existing and potential customers as well as customer contacts. With the help of Pipedrive CRM, we are able to record, sort, and analyze customer interactions via email, social media, or telephone across different channels. The personal data collected in this way can be evaluated and used for communication with the potential customer or for marketing measures (e.g. newsletter mailings).

The use of Pipedrive CRM is based on Art. 6 (1) lit. f. GDPR. The website operator has a legitimate interest in the most efficient customer management and customer communication possible. If a corresponding consent has been requested, the processing is based exclusively on Art. 6 para. 1 lit. a. GDPR; the consent can be revoked at any time.

For details, see Pipedrive’s privacy policy: https://www.pipedrive.com/en/privacy.  

Analysis tools and advertising

Mixpanel

This website uses the software of Mixpanel, provider is Mixpanel Inc, One Front Street, 28th Floor, San Francisco, CA 94111, USA.  

Mixpanel is a company for business analytic services. We use Mixpanel’s software to track user interactions on our web and mobile applications.

The legal basis for the use of Segment is Art. 6 para. 1 lit. f. GDPR. Our legitimate interest lies in the evaluation of the use of our website.

For more information on data collection and processing by Mixpanel, please see the Privacy Policy: https://mixpanel.com/legal/privacy-policy/

Google Tag Manager

We use the Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The Google Tag Manager is a tool that allows us to embed tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, store cookies or perform any independent analyses. It only serves to manage and play out the tools integrated through it. However, the Google Tag Manager collects your IP address, which may also be transferred to Google’s parent company in the United States.

The use of Google Tag Manager is based on Art. 6 (1) lit. f. GDPR. The website operator has a legitimate interest in a fast and uncomplicated integration and management of various tools on his website. If a corresponding consent has been requested, the processing is based exclusively on Art. 6 para. 1 lit. a. GDPR; the consent can be revoked at any time.

Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior of website visitors. In doing so, the website operator receives various usage data, such as page views, duration of visits, operating systems used and origin of the user. This data may be summarized by Google in a profile that is assigned to the respective user or their end device.

Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there.

The use of this analysis tool is based on Art. 6 para. 1 lit. f. GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. If a corresponding consent has been requested (e.g. consent to store cookies), the processing is based exclusively on Art. 6 (1) a. GDPR; the consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.  

We have activated the IP anonymization function on this website. That means that your IP address is shortened by Google within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area, before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.  

For more information on how Google Analytics handles user data, please see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.  

We have concluded an order processing agreement with Google and we fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Google Analytics E-commerce Tracking

This website uses the “e-commerce tracking” function of Google Analytics. With the help of e-commerce tracking, the website operator can analyze the purchasing behavior of website visitors to improve its online marketing campaigns. This involves recording information such as orders placed, average order values, shipping costs and the time from viewing to purchasing a product. This data can be summarized by Google under a transaction ID, which is assigned to the respective user or his device.

Data stored by Google at user and event level that is linked to cookies, user identifiers (e.g. User ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) is anonymized or deleted after 14 months. For details, please see the following link: https://support.google.com/analytics/answer/7667196?hl=de

Google Ads

The website operator uses Google Ads, which is an online advertising program of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms on Google (keyword targeting). Furthermore, targeted advertisements can be played on the basis of user data available at Google (e.g. location data and interests) (target group targeting). As the website operator, we can evaluate this data quantitatively by analyzing, for example, which search terms have led to the display of our advertisements and how many ads have resulted in corresponding clicks.

The use of Google Ads is based on Art. 6 para. 1 lit. f. GDPR. The website operator has a legitimate interest in marketing its service products as effectively as possible.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://policies.google.com/privacy/frameworks and here https://privacy.google.com/businesses/controllerterms/mccs/.  

Facebook Pixel

This website uses the visitor action pixel from Facebook for conversion measurement. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, the collected data is also transferred to the USA and other third countries, acccording to Facebook.

This allows the behavior of page visitors to be tracked after they have been redirected to the provider’s website by clicking on a Facebook ad. This allows the effectiveness of the Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimized.

For us as the operator of this website the collected data is anonymous and we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, so a connection to the respective user profile is possible. Facebook can use the data for its own advertising purposes, according to the Facebook data usage policy. This allows Facebook to enable the placement of advertisements on Facebook pages as well as outside of Facebook. This use of the data cannot be influenced by us as the site operator.

The use of Facebook Pixel is based on Art. 6 (1) lit. f. GDPR. The website operator has a legitimate interest in effective advertising measures including social media. If a corresponding consent has been requested (e.g. consent to store cookies), the processing is based exclusively on Art. 6 (1) lit. a. GDPR; the consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and here https://de-de.facebook.com/help/566994660333381.  

You can find more information about protecting your privacy in Facebook’s privacy policy: https://de-de.facebook.com/about/privacy/.  

You can also disable the remarketing feature ”Custom Audiences” in the Ad Settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must be logged in to Facebook.

If you do not have a Facebook account, you can disable usage-based advertising from Facebook on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.  

LinkedIn Insight Tag

This website uses the Insight Tag from LinkedIn. The provider of this service is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

With the help of the LinkedIn Insight Tag, we obtain information about the visitors to our website. If a website visitor is registered with LinkedIn, we can, among other things, analyze the key professional data (e.g., career level, company size, country, location, industry, and job title) and thus better tailor our site to the respective target groups. Furthermore, we can use LinkedIn Insight Tags to measure whether visitors to our websites make a purchase or take another action (conversion measurement). Conversion measurement can also be done across devices (e.g., PC to tablet). LinkedIn Insight Tag also offers a retargeting function that allows us to display targeted off-site advertising to visitors to our website, whereby no identification of the advertising addressee takes place, according to LinkedIn.

LinkedIn itself also collects so-called log files (URL, referrer URL, IP address, device and browser properties and time of access). The IP addresses are shortened or (if they are used to reach LinkedIn members across devices) hashed (pseudonymized). The direct identifiers of LinkedIn members are deleted by LinkedIn after seven days. The remaining pseudonymized data is then deleted within 180 days.

The data collected by LinkedIn cannot be assigned to specific individuals by us as the website operator. LinkedIn will store the collected personal data of the website visitors on its servers in the USA and use them in the context of its own advertising measures. For details, please refer to LinkedIn’s privacy policy at https://www.linkedin.com/legal/privacy-policy#choices-oblig.  

The use of LinkedIn Insight is based on Art. 6 para. 1 lit. f. GDPR. The website operator has a legitimate interest in effective advertising measures including social media. If a corresponding consent has been requested (e.g. consent to store cookies), the processing is based exclusively on Art. 6 (1) lit. a. GDPR; the consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa and here https://www.linkedin.com/legal/l/eu-sccs.  

You can object to the analysis of the usage behavior and targeted advertising by LinkedIn at the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.  

LinkedIn members can control the use of their personal data for advertising purposes in the account settings. To avoid a link between data collected on our website by LinkedIn and your LinkedIn account, you must log out of your LinkedIn account before visiting our website.

We have concluded an order processing agreement with LinkedIn.

Analysis and optimization service Hotjar

We use Hotjar, an analysis software of Hotjar Ltd, 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta (“Hotjar”). With the help of the information obtained thanks to Hotjar, we can analyze and improve the use of our online offer.

For this purpose alone, data of the users of our online offer are stored and evaluated. We use Hotjar to analyze our online offer, not the individual users. Therefore the users’ data is pseudonymized and processed within the European Union on the basis of the order processing agreement offered by Hotjar. User input, e.g. in forms or button presses, is not processed, i.e. neither stored by Hotjar nor transmitted to Hotjar (unless this input is recognizably intended for users for evaluation purposes, such as in feedback forms).

For the before purposes, Hotjar stores cookies with a pseudonymous identification number on users’ devices and evaluates them. The cookies that Hotjar uses have different “lifetimes”; some remain valid for up to 365 days, and some only remain valid for the current visit.

The processed data of the users in particular include:

  • Devices and metadata: IP address of the terminal device (it is collected and stored in anonymized format form), resolution of the screen/displays of the terminal device screen, type of terminal device (individual terminal device identifiers), operating system, and browser type, referring URL and domain;
  • geographic location (country only);
  • Usage data and log data: Date and time when the online offer was accessed, preferred language, user interactions such as mouse events (movements, position and clicks), keystrokes, web pages accessed and interactions with their content and functions.
  • Content data: Input in the context of surveys and feedback forms. If we ask users for consent (e.g. in the context of a cookie consent), the legal basis is Art. 6 para. 1 lit. a. GDPR. Otherwise, the users’ personal data is processed on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR).

Users can prevent the collection of data by Hotjar by using their browser’s Do-Not-Track settings or by clicking this link and following the instructions there: https://www.hotjar.com/legal/compliance/opt-out.

Hotjar Privacy Policy: https://www.hotjar.com/legal/policies/privacy.

Cookie Policy: https://www.hotjar.com/legal/policies/cookie-information.

Intercom Services

We use the customer service platform Intercom provided by Intercom, Inc., a Delaware corporation with offices at 55 2nd Street, 4th Fl., San Francisco, CA 94105, USA. 

We use third-party analytics services to help understand your usage of our services. In particular, we provide a limited amount of your information (such as sign-up date and some personal information like your email address) to Intercom, Inc. (“Intercom”) and utilize Intercom to collect data for analytics purposes when you visit our website or use our product. As a data processor acting on our behalf, Intercom analyzes your use of our website and/or product and tracks our relationship by way of cookies and similar technologies so that we can improve our service to you. For more information on Intercom’s use of cookies, please visit https://www.intercom.com/terms-and-policies#cookie-policy. We may also use Intercom as a medium for communications, either through email, or through messages within our product(s). As part of our service agreements, Intercom collects publicly available contact and social information related to you, such as your email address, gender, company, job title, photos, website URLs, social network handles and physical addresses, to enhance your user experience. For more information on the privacy practices of Intercom, please visit https://www.intercom.com/terms-and-policies#privacy

Intercom’s services are governed by Intercom’s terms of use which can be found at https://www.intercom.com/terms-and-policies#terms

If you would like to opt out of having this information collected by or submitted to Intercom, please contact us.