Datenschutz

1. Scope of Application

1.1

This privacy policy applies to the use of the website offered by Woodensims.

1.2

The controller within the meaning of the EU General Data Protection Regulation (GDPR):

Woodensims Interior

Pestalozzistr. 5

mail@woodensims.de

www.woodensims.de

2. Personal Data

Personal data is any information relating to an identified or identifiable natural person. Basic personal data is your name. Personal data also includes your gender, date of birth, address, occupation, email address, and IP address. Non-personal data, on the other hand, is data that makes it impossible or at least requires considerable effort to determine your actual identity. This includes, for example, the aforementioned information if we receive it in anonymized form and therefore cannot attribute it to a natural person.

3. This section is intentionally left blank

4. Provision of Personal Data

4.1

Providing personal data is neither legally nor contractually required to use the websites, nor is it necessary to enter into a contract. You are not obligated to provide personal data. However, you cannot visit the websites without transmitting the IP address you use.

4.2

In order to use interactive features of the websites (e.g., contacting us directly, receiving marketing communications), additional data must be provided or collected, as described in the relevant sections of this Privacy Policy. If you do not provide us with this information, you will not be able to use these interactive features of the websites.

5. Processing of personal data

5.1

Every time you visit our website, we automatically collect and store the following data:

- Country of origin

- Requesting domain

- Web browser used

- Operating system used

- Notification of successful and unsuccessful retrieval

- Entry and exit pages

- Data volume transferred

- Date and time of retrieval

- Name of the retrieved file

- IP address of the requesting computer

This data is stored in log files on our web server by default. The IP address is stored for one week, after which it is automatically deleted.

5.2

We only process personal data if you provide it to us voluntarily and if this is permitted by law or if you have given your consent. We will use the personal data you provide exclusively for the purposes stated in this Privacy Policy or expressly agreed with you.

5.3

We have commissioned various service providers to support us in the provision, operation, and maintenance of our IT systems, including the websites. These include, for example, hardware, web service, and software suppliers, hosting providers, or data centers. If such service providers work for us, they may receive access to your personal data as recipients. However, these service providers are then contractually obligated to comply with data protection regulations through a so-called data processing agreement; the statutory data protection provisions also apply to our service providers anyway.

5.4

Your personal data will not be shared, sold, or otherwise transmitted to third parties. This only applies if this is necessary to fulfill the communicated or agreed purposes and is permitted without consent under applicable data protection law, if you have expressly consented, or if we are legally obliged to do so. Section 5.3 remains unaffected and applies independently of this Section 5.4.

5.5

The personal data you provide on the websites or that we collect will not be used for automated decision-making.

6. Marketing Communications

6.1

In order to receive marketing communications such as our newsletter, white papers, and other information about our products, services, and promotions, we require your email address. If you register to receive marketing communications, your email address, IP address, and the dates and time of your registration will be saved to provide evidence in the event of misuse of the email address used.

After registering, you will receive an email from us with a link to confirm your registration. Your subscription to our marketing communications will only be activated once you have clicked the confirmation link in this email and we have received your confirmation (so-called double opt-in process). By confirming this, you also declare that you are the owner of the email address you provided and that you would like to receive marketing communications from us by email. If we do not receive your confirmation,

6.2

The legal basis for this is your consent and our legitimate interest in protecting ourselves from misuse and sending marketing communications to interested parties (Article 6 (1) (a) and (f) GDPR).

6.3

As long as we have received the email address and other personal data that you voluntarily provided to us as part of your registration for marketing communications, we will not use the personal data for any purpose other than your subscription to marketing communications. Except where we are legally obligated to do so, we will not share your registration data with third parties in such cases.

6.4

You can revoke your consent to receive marketing communications and to the processing of your personal data for this purpose at any time and unsubscribe from receiving marketing communications by email at any time using the unsubscribe link included in each such email. You can also unsubscribe in writing (see Section 20.1 for contact details) and by email to mail@woodensims.de. After you unsubscribe, your email address will be removed from our marketing email distribution list. Your email address will then be stored for as long and as long as we are legally obligated to do so, or as long as we still need your personal data to execute or process an existing contractual relationship or for evidentiary purposes. Please note that revoking your consent does not affect the legality of the processing carried out on the basis of your consent up to the time of revocation.

6.5

In some cases, we offer you the option of receiving marketing communications from a specific partner in addition to our marketing communications. If you register to receive marketing communications from us and the partner, we will share your email address and the additional personal data you voluntarily provided to us during your registration with the specified partner so that they can send you their marketing communications by email. The above provisions apply accordingly if the partner is the data controller.

7. Contact Form

7.1

If you contact us via our contact form, we will process your message with the contact details you provided for the purposes of the contact form you submitted and to contact you (e.g., to arrange an appointment for a product demo).

If you use our contact form, you can simultaneously register to receive marketing communications. If you register, Section 6 also applies.

7.2

Our legitimate interest in being able to contact website users electronically constitutes the legal basis for processing (Art. 6 (1) (f) GDPR).

7.3

We process the data you submit via the contact form only to be able to contact you. As long as we have received your contact details, which you provide to us via the contact form, for this purpose only, we will not use these personal data for any other purpose. Except in cases where we are legally obliged to do so, we will not share your contact details with third parties in this case.

7.4

Nine (9) months after you send your response, we will delete the data you submitted via the contact form, unless we are legally obligated to retain it for a longer period or we still need your personal data to execute or process an existing contractual relationship or for verification purposes. In this case, we will delete the relevant data after the expiration of the statutory retention period or as soon as we no longer need the data for the execution or processing of an existing contractual relationship or for verification purposes.

10. Right to information, rectification, erasure, restriction of processing, objection, and data portability

Within the scope of the statutory provisions, you have the right to receive information from us about your personal data processed by us, as well as the right to rectification, erasure, restriction of processing, objection to processing, and data portability. The precise conditions under which you are entitled to the aforementioned rights can be found in Articles 15 to 21 of the GDPR and in Sections 34, 35, and 37 of the Federal Data Protection Act (BDSG). If you would like to exercise one or more of the aforementioned rights, please also contact the contact persons listed in Section 20.

We would also like to draw your attention to your right of objection under Art. 21 GDPR. This right provides that you have the right to object at any time to the processing of personal data concerning you based on Art. 6 (1) (f) GDPR (data processing based on a balance of interests), for reasons arising from your particular situation. This also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR. If you object, we will no longer process your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

11. Right to Object

Within the scope of the statutory provisions, you have the right to lodge complaints regarding data protection with a supervisory authority. The State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia is responsible for us. You can contact him and the supervisory authority via the website https://www.ldi.nrw.de/.

12. Use of Cookies

12.1

We use so-called cookies on our websites. These are small text files that are stored on your device (PC, smartphone, tablet, etc.). Some of the cookies we use are deleted from your device (hard drive, solid-state drive, flash memory, etc.) after the end of the browser session (so-called session cookies). Other cookies remain on your device and enable us to recognize your device on your next visit (so-called persistent cookies). We also use cookies from third parties that enable them to process personal data about you and may combine the information received with other information that these third parties have already stored about you or have collected from you during your use of these third-party services.

12.2

As soon as you visit the website, you will be informed about the use of cookies. The following cookies are set by the websites:

Essential/Necessary Cookies

__hs_opt_out

- This cookie is used by the opt-in privacy policy to prevent you from being asked to accept cookies again.

- This cookie is set when we give you the option to decline cookies.

- It contains the string "yes" or "no".

- It expires in 13 months.

__hs_do_not_track

- This cookie can be set to prevent the tracking code from sending information to HubSpot.

- Setting this cookie is different from rejecting cookies because it still allows anonymized information to be sent to HubSpot.

- It contains the string "yes".

- It expires in 13 months.

__hs_initial_opt_in

- This cookie is used to prevent the banner from always appearing when browsing in strict mode.

- It contains the string "yes" or "no".

- It expires in seven days.

hs_ab_test

- This cookie is used to always show you the same version of an A/B test page that you have already seen.

- It contains the ID of the A/B test page and the ID of the variation selected for you.

- It expires at the end of the session.

<id>_key

- When you visit a password-protected page, this cookie is set so that you do not have to log in again on future visits to the page using the same browser.

- The cookie name is unique for each password-protected page.

- It contains an encrypted version of the password, so that the password does not need to be entered on future visits to the page.

- It expires after 14 days.

hs-messages-is-open

- This cookie is used to determine and store whether the chat widget is open for future visits.

- It is set in your browser when you start a new chat and is reset to close the widget after 30 minutes of inactivity.

- It contains a Boolean value of True if present.

- It expires after 30 minutes.

hs-messages-hide-welcome-message

- This cookie is used to prevent the chat widget's welcome message from remaining visible for one day after leaving the widget.

- It contains a Boolean value of True or False.

- It expires after one day.

__hsmem

- This cookie is set when you log in to a site hosted by HubSpot.

- It contains encrypted data that identifies the membership user if they are currently logged in.

- It expires after one year.

hs-membership-csrf

- This cookie is used to ensure that membership sign-ups for content cannot be forged.

- It contains a random string of letters and numbers used to verify the authenticity of a membership sign-up.

- It expires at the end of the session.

hs_langswitcher_choice

- This cookie is used to store your chosen language when viewing pages in multiple languages.

- It is set when an end user selects a language from the language switcher and is used as a language preference to redirect them to pages in the selected language in the future, if available.

- It contains a colon-separated string with the ISO639 language code on the left and the private top-level domain it applies to on the right. An example is "EN-US:hubspot.com".

- It expires in two years.

__cfduid

- This cookie is set by Cloudflare, HubSpot's CDN provider. It helps Cloudflare detect malicious visitors to our Cognigy websites and minimize blocking of legitimate users.

- It may be placed on your devices to identify individual clients behind a shared IP address and apply security settings on a per-client basis. It is required to support Cloudflare's security features.

- Learn more about this Cloudflare cookie.

- This is a session cookie that lasts for a maximum of 30 days.

__cfruid

This cookie is set by HubSpot's CDN provider due to its rate-limiting policy. Learn more about Cloudflare cookies. It expires at the end of the session.

Consent Banner Cookies

__hstc

- The main cookie for tracking your data.

- It contains the domain, utk, the initial timestamp (first visit), the last timestamp (most recent visit), the current timestamp (this visit), and the session number (incremented with each subsequent session).

- It expires in 13 months.

hubspotutk

- This cookie stores your identity. It is passed to HubSpot upon form submission and is used in contact deduplication.

- It contains an opaque GUID representing the current visitor.

- It expires in 13 months.

__hssc

- This cookie tracks sessions.

- It is used to determine whether HubSpot should increment the session number and timestamps in the __hstc cookie.

- It contains the domain, viewcount (incremented by each page view in a session), and the session start timestamp.

- It expires in 30 minutes.

__hssrc

- Whenever HubSpot changes the session cookie, this cookie is also set to determine if you have restarted your browser.

- If this cookie doesn't exist when HubSpot manages cookies, it is considered a new session.

- If it exists, it contains the value "1".

- It expires at the end of the session.

When you are logged in to HubSpot, HubSpot sets additional authentication cookies. Learn more about cookies set in the HubSpot product. You can also see if a contact has accepted these cookies in their timeline.

The cookies used by Google Analytics and their meaning are described at https://support.google.com/analytics/answer/6004245?hl=en and https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage.

12.3

If you click on one of the social media links or social media share buttons available on the websites, the linked social network website will open. From there, additional cookies may be stored on your device. These cookies are not under our control.

12.4

The content of the cookies is encrypted to prevent unauthorized access to the data they contain.

12.5

The legal basis for the use of cookies is our legitimate interest in the technical security and needs-based design of our website on the websites, as well as in conducting analyses and measurements of our visitors on the websites (Art. 6 (1) (f) GDPR). For all tracking cookies, the legal basis for the processing of your personal data is your consent, which you have given in the cookie box on the websites (Art. 6 (1) (a) GDPR). You can revoke your consent at any time with future effect by visiting https://www.cognigy.com/privacy-policy and clicking the "Remove cookies" button there, or by deleting the stored cookies in your browser settings. Please note that revoking your consent does not affect the legality of the processing carried out on the basis of your consent up to the time of revocation.

12.6

You can view and delete stored cookies at any time, as well as restrict or prohibit the acceptance of cookies, in your browser's security settings. Please note, however, that if you do this, you may not be able to use all of the websites' functions to their full extent.

12.7

When you use third-party services on the websites (e.g., YouTube videos) or when you click on a link, third-party cookies may be used without our express notice. You can also view and delete these stored cookies at any time, as well as restrict or prohibit the acceptance of cookies, in your browser's security settings.

13. Use of Google Analytics and Google Tag Manager

13.1

The websites use functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses so-called "cookies." These are text files stored on your computer that enable an analysis of your website usage (see also Section 12). The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

Google Analytics analyzes website traffic and collects various data about you and your user behavior on the websites (e.g., which web browser you use, where you come from, which language setting you use, which search engines you use, the date and time of your visit to the websites, and how long you stay on each page). Your IP address is only recorded in anonymized form; details can be found in Sections 13.4 and 13.7. We use Google Analytics to track and better understand user behavior on the websites so that we can optimize our website and provide users with a better experience.

13.2

The legal basis for the use of Google Analytics and the processing of your personal data is your consent, which you have given in the cookie box on the websites (Art. 6 (1) (a) GDPR). You can revoke your consent at any time with future effect by visiting https://www.cognigy.com/privacy-policy and clicking the "Remove cookies" button there or by deleting the stored cookies in your browser settings. We would like to point out that revoking your consent does not affect the legality of the processing carried out on the basis of your consent up to the time of revocation.

13.3

The user data collected with Google Analytics is stored by Google for a period of 14 months and then deleted.

13.4

If IP anonymization is activated, which we use on our websites (see also section 13.6), your IP address will be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of these websites, Google will use this information to evaluate your use of the websites, to compile reports on website activity, and to provide the website operator with other services related to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

13.5

You can prevent the installation of cookies by setting your browser software accordingly; however, we would like to point out that if you do this, you may not be able to use all of the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en

13.6

You can also prevent Google Analytics from collecting the data generated by the cookie and stored on the websites by activating the following link.

Google Analytics

An opt-out cookie will be stored on your computer, preventing the future collection of your data when you visit the websites (but this does not apply to other websites you visit or other browsers you use on the same computer): Disable Google Analytics. This alternative is particularly suitable for mobile devices. If you choose to do so, you must not delete the opt-out cookie. Otherwise, you will lose the protection provided by this opt-out cookie until you reinstall it.

13.7

Google Analytics has been extended to include the code "anonymizeIP" on its websites. The use of this code results in the anonymous recording of your IP address through so-called IP masking. The last octet of your IP address is set to zero. For IPv6 addresses, this applies to the last 80 of the 128 bits. This occurs in memory before the data is written to the hard disk (see also https://support.google.com/analytics/answer/2763052).

13.8

Further information on the purpose and scope of data collection and processing by Google Analytics can be found in Google's privacy policy on the Google website. We are aware of the following websites in this context:

- https://policies.google.com/privacy?hl=en.

- https://support.google.com/analytics/answer/6004245?hl=en

- http://www.google.com/analytics/terms/

13.9

The websites use Google Tag Manager. This application is used to manage JavaScript tags and HTML tags, which are used in particular to implement tracking and analysis tools. The processing serves the purpose of designing and optimizing the websites according to our needs. Google Tag Manager itself does not store cookies or process personal data. However, it allows the triggering of other tags that can collect and process personal data. Google Tag Manager does not access this data. If deactivation has been performed at the domain or cookie level, it remains effective for all tracking tags implemented with Google Tag Manager.

14. Use of Hubspot

14.1

As described in more detail in sections 14.2 et seq. below, we use the inbound marketing service Hubspot from the US company Hubspot, Inc. on our websites. The provider is Hubspot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA ("Hubspot").

14.2

Hubspot is an integrated system for marketing and sales activities with which we manage our content (e.g., landing pages, forms, and blogs), manage contact forms, and conduct email marketing, including sending and reporting. We also use Hubspot for publications on social networks and for the associated reporting. Hubspot offers various settings options to meet data protection requirements. We have made use of this option.

14.3

We use Hubspot to analyze website traffic and collect various data about you and your user behavior (e.g., which web browser you use, where you come from, which language setting you use, the date and time of your visit to the websites, and how long you stay on each page). We use Hubspot's analytics service to create detailed reports and gain valuable insights into visitor behavior on the websites. This enables us to learn more about the services you are interested in and to contact you more specifically.

14.4

Hubspot uses so-called "web beacons" and "cookies." These are tracking pixels or, in the case of cookies, text files that are stored on your computer and that enable an analysis of your use of the websites (see also section 12). The Hubspot browser cookie is stored in your device's browser until you delete the cookie or until it expires. As a user, you have full control over blocking or deleting cookies, as described in sections 12.6 et seq. above. You can prevent the installation of cookies by setting your browser software accordingly; however, please note that if you do this, you may not be able to use all of the website's functions to their full extent.

14.5

The legal basis for the use of Hubspot and the processing of your personal data is your consent, which you have given in the cookie box on the websites (Art. 6 (1) (a) GDPR). You can revoke your consent at any time with future effect by visiting https://www.cognigy.com/privacy-policy and clicking the "Remove cookies" button there or by deleting the stored cookies in your browser settings. We would like to point out that revoking your consent does not affect the legality of the processing carried out on the basis of your consent until the revocation.

14.6

The user data collected with Hubspot is stored in cookies for the period specified for each cookie in Section 12.2.

14.7

The information generated by the web beacons and cookies about your use of the websites is generally transferred to a Hubspot server in the USA and stored there. The same applies to other information and data that we process with Hubspot. Hubspot has submitted to the EU standard contractual clauses and is therefore committed to complying with EU data protection regulations.

14.8

Further information on the purpose and scope of data collection and processing by Hubspot can be found in Hubspot's Privacy and Cookie Policy on the Hubspot website. We are aware of the following websites in this regard:

- https://legal.hubspot.com/de/privacy-policy

- https://legal.hubspot.com/de/cookie-policy

- https://www.hubspot.de/data-privacy/gdpr

15. Facebook Pixel Retargeting

15.1

The websites use Facebook Website Custom Audiences for retargeting purposes and therefore have deployed "Facebook Pixel" from Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").

15.2

The purpose of the application is to target website visitors with interest-based advertising on the Facebook social network. This allows your behavior to be tracked after you have been redirected to the websites by clicking on a Facebook ad. This allows us to measure the effectiveness of Facebook ads for statistical and market research purposes. For this purpose, retargeting using the Facebook pixel has been implemented on the websites. The Facebook pixel establishes a direct connection to the Facebook servers when you visit the websites. This informs the Facebook server which of our pages you have visited. Facebook assigns this information to your personal Facebook user account. When you visit the Facebook social network, you will then see personalized, interest-based Facebook ads. Furthermore, Facebook may use your personal data for its own advertising purposes in accordance with Facebook's data usage policy (https://www.facebook.com/about/privacy/). Your data may be transferred to the USA.

15.3

The legal basis for the use of Facebook Pixel and the processing of your personal data is your consent, which you have given in the cookie box on the websites (Art. 6 (1) (a) GDPR). You can revoke your consent at any time with future effect by visiting https://www.cognigy.com/privacy-policy and clicking the "Remove cookies" button there, or by deleting the stored cookies in your browser settings. Furthermore, you can object to the collection of your data by Facebook Pixel or the use of your data for the purpose of displaying Facebook advertising at the following address: https://www.facebook.com/settings?tab=ads. Please note that revoking your consent does not affect the legality of the processing carried out on the basis of your consent up to the time of revocation.

15.4

The user data collected with Facebook Pixel will be stored by Facebook for a period of 180 days and then deleted if you do not visit the websites again during this period.

15.5

Further information on the purpose and scope of data collection and processing by Facebook can be found in Facebook's Privacy and Cookie Policy on the Facebook website. We are aware of the following website in this context:

- https://www.facebook.com/about/privacy/

18.1

We use iframes (inline frames) on our websites to display embedded YouTube content from Google Ireland Limited, registered under Irish law under company number 368047, with registered address at Gordon House, Barrow Street, Dublin 4, Ireland.

18.2

When you visit the websites with the aforementioned YouTube iframe, your browser establishes a direct connection to YouTube's servers to transmit embedded content from there to your browser. This content is integrated into the websites via the iframe, so that it is displayed as a kind of mini-website on the websites you visit. You cannot tell that you are browsing two websites at once. The YouTube internet address is not displayed. You can recognize the YouTube video by the typical red play button with a white triangle.

YouTube, as the provider of the embedded content displayed to you via the iframe, receives the information that you have visited the corresponding websites through the direct connection to your browser. If you are logged into your YouTube account, YouTube can associate your visit to the company's websites with your user account, even if you do not click on the embedded YouTube video content. If you decide to click on and use the offered content, YouTube will be notified. Your browser then sends additional usage data to YouTube, which can be stored and further used by this provider.

18.3

The legal basis for the use of YouTube and the processing of your personal data is your consent, which you have given in the cookie box on the websites (Art. 6 (1) (a) GDPR). You can revoke your consent at any time with future effect by visiting https://www.cognigy.com/privacy-policy and clicking the "Remove cookies" button there or by deleting the stored cookies in your browser settings. We would like to point out that revoking your consent does not affect the legality of the processing carried out on the basis of your consent until the revocation.

18.4

The user data collected with YouTube iframes is stored by Google for a period of time specified by Google and then deleted.

18.5

Further information on the purpose and scope of data collection and processing by YouTube can be found in Google's Privacy and Cookie Policy on the Google website. We are aware of the following website in this context:

- YouTube, https://policies.google.com/privacy?hl=en&gl=en

19 Use of social media links

We currently display social media links from the following social networks:

- Facebook, www.facebook.com

- LinkedIn, www.linkedin.com

- XING, www.xing.com

- Twitter, www.twitter.com

- YouTube, www.youtube.com

These links are links to our company's website on the respective social network; the link does not contain any additional functions (unlike, for example, the Facebook "Like" button). If you click on a social media link on websites, only the linked website opens.

20 Data Protection Contact Details

20.1

If you wish to exercise your data protection rights or have questions about this Privacy Policy or our data protection practices on the websites, please contact: mail@woodensims.de

20.2

You can reach our Data Protection Officer by email at mail@woodensims.de or by post at Woodensims/Rasche, c/o Data Protection Officer, Pestalozzistr. 5, 10625 Berlin, Germany