{"id":1429,"date":"2026-03-13T09:45:15","date_gmt":"2026-03-13T08:45:15","guid":{"rendered":"https:\/\/onnetwork.agency\/?page_id=1429"},"modified":"2026-10-13T13:36:15","modified_gmt":"2026-10-13T11:36:15","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/onnetwork.agency\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<div class=\"onlegal onlegal-datenschutz\" data-legal-version=\"1.2.2-ona\"><!--email_off--><h1 id=\"privacy-policy\">Privacy Policy<\/h1>\n<h2 id=\"introduction\"><strong>Introduction<\/strong><\/h2><p>We, <strong>on:NetworkAgency UG (haftungsbeschr\u00e4nkt)<\/strong> (hereinafter also referred to as &quot;<strong>the company<\/strong>&quot;, &quot;<strong>we<\/strong>&quot; or &quot;<strong>us<\/strong>&quot;), take the protection of your personal data seriously and would like to inform you about data protection at our company.<\/p><p>As part of our responsibility under data protection law, we are obligated to ensure the protection of personal data of the person affected by processing (hereinafter, we also refer to you as the affected person as <strong>&quot;customer&quot;, &quot;user&quot;<\/strong>, <strong>&quot;you&quot;<\/strong>, <strong>&quot;your&quot;<\/strong> or &quot;<strong>data subject<\/strong>&quot;).<\/p><p>Insofar as we determine the purposes and means of data processing, either alone or jointly with others, this includes, in particular, the obligation to inform you transparently about the nature, scope, purpose, duration, and legal basis of the processing (cf. Art. 13 and 14 GDPR). With this statement (hereinafter: &quot;<strong>Privacy Notice<\/strong>&quot;), we inform you about how we process your personal data. <\/p><p>Our privacy notice has a modular structure. It consists of a general section covering any processing of personal data and processing situations that apply whenever you access our website and whenever a business relationship exists (A. General), and a specific section, the content of which relates only to the processing situation indicated there, naming the respective offer or product, in particular the visit to websites detailed here (B. Visiting Websites), as well as for cases where a business relationship exists between you and us (C. Business Partners). <\/p><h2 id=\"a-general\"><strong>A. General<\/strong><\/h2><h3 id=\"1-definitions\"><strong>(1) Definitions<\/strong><\/h3><p>Based on Art. 4 GDPR, this privacy notice is founded on the following definitions:<\/p><ul><li>&quot;Personal data&quot; (Art. 4(1) GDPR) means any information relating to an identified or identifiable natural person (&quot;data subject&quot;). An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person. Identifiability may also result from linking such information with other supplementary knowledge. The origin, form, or embodiment of the information is irrelevant (photos, video, or audio recordings may also contain personal data).   <\/li><li>&quot;Processing&quot; (Art. 4(2) GDPR) means any operation involving personal data, whether or not carried out using automated (i.e., technology-assisted) means. This includes, in particular, collection (i.e., acquisition), recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction of personal data, as well as any change to the purpose for which the data was originally processed. <\/li><li>&quot;Controller&quot; (Art. 4(7) GDPR) means the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.<\/li><li>&quot;Third party&quot; (Art. 4(10) GDPR) means any natural or legal person, public authority, agency, or other body other than the data subject, the controller, the processor, and persons who, under the direct authority of the controller or processor, are authorized to process personal data; this also includes other legal entities belonging to the same group of companies.<\/li><li>&quot;Processor&quot; (Art. 4(8) GDPR) means a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller, in particular in accordance with its instructions (e.g., an IT service provider). In the legal sense of data protection law, a processor is specifically not a third party. <\/li><li>&quot;Consent&quot; (Art. 4(11) GDPR) of the data subject means any freely given, specific, informed, and unambiguous indication of the data subject&#039;s wishes in the form of a statement or a clear affirmative action, signifying agreement to the processing of personal data relating to them.<\/li><\/ul><h3 id=\"2-name-and-address-of-the-data-controller\"><strong>(2) Name and Address of the Data Controller<\/strong><\/h3><p>The body responsible for processing your personal data within the meaning of Art. 4(7) GDPR is:<\/p><p><strong>on:NetworkAgency UG<\/strong> (haftungsbeschr\u00e4nkt)\nHolstenhofweg 54\n22043 Hamburg\nGermany<\/p><p>Phone: +49 (40) 7929 97\nEmail:  <a href=\"mailto:hello@onnetwork.agency\" rel=\"noopener\">hello@onnetwork.agency<\/a><\/p><p>For further details about our company, please refer to the legal notice on our website [<a href=\"https:\/\/onnetwork.agency\/en\/legal-notice\/\" target=\"_blank\" rel=\"noopener\">https:\/\/onnetwork.agency\/en\/legal-notice\/<\/a>].<\/p><h3 id=\"3-legal-basis-for-data-processing\"><strong>(3) Legal Basis for Data Processing<\/strong><\/h3><p>In principle, any processing of personal data is prohibited by law and only permitted if the data processing falls under one of the following legal grounds:<\/p><ul><li>Art. 6(1)(1)(a) GDPR (&quot;consent&quot;): If the data subject has freely, in an informed manner, and unambiguously indicated their agreement, by way of a statement or other clear affirmative action, to the processing of their personal data for one or more specific purposes;  <\/li><li>Art. 6(1)(1)(b) GDPR: If the processing is necessary for the performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract;  <\/li><li>Art. 6(1)(1)(c) GDPR: If the processing is necessary for compliance with a legal obligation to which the controller is subject (e.g., a statutory retention obligation);  <\/li><li>Art. 6(1)(1)(d) GDPR: If the processing is necessary to protect the vital interests of the data subject or of another natural person;  <\/li><li>Art. 6(1)(1)(e) GDPR: If the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; or  <\/li><li>Art. 6(1)(1)(f) GDPR (&quot;legitimate interests&quot;): If the processing is necessary to safeguard the legitimate interests (in particular legal or economic interests) of the controller or a third party, unless such interests are overridden by the interests or fundamental rights of the data subject (particularly if the data subject is a minor).  <\/li><\/ul><p>The storage of information on the end user&#039;s device, or access to information already stored there, is only permitted if covered by one of the following legal grounds:<\/p><ul><li>Section 25(1) TTDSG: If the end user has consented on the basis of clear and comprehensive information. Consent must be given in accordance with Art. 6(1)(1)(a) GDPR;     <\/li><li>Section 25(2)(1) TTDSG: If the sole purpose is to carry out the transmission of a communication over a public telecommunications network; or <\/li><li>Section 25(2)(2) TTDSG: If the storage or access is strictly necessary for the provider of a telemedia service to provide a telemedia service expressly requested by the user. <\/li><\/ul><p>For each processing activity we carry out, we indicate the applicable legal basis below. Processing may also be based on more than one legal basis. <\/p><h3 id=\"4-data-deletion-and-retention-period\"><strong>(4) Data Deletion and Retention Period<\/strong><\/h3><p>For each processing activity we carry out, we state below how long the data is stored with us and when it will be deleted or restricted. Where no explicit retention period is specified below, your personal data will be deleted or restricted as soon as the purpose or legal basis for storage no longer applies. Your data is generally stored only on our servers in Germany, subject to any transfer made in accordance with the provisions in A. (6) and A. (7).  <\/p><p>However, data may be stored beyond the specified period in the event of (threatened) legal disputes with you or other legal proceedings, or where storage is required by statutory provisions to which we, as controller, are subject (e.g., Section 257 of the German Commercial Code (HGB), Section 147 of the German Fiscal Code (AO)). Once the retention period prescribed by statutory provisions expires, the personal data will be restricted or deleted, unless further storage by us is necessary and a legal basis exists for doing so. <\/p><h3 id=\"5-data-security\"><strong>(5) Data Security<\/strong><\/h3><p>We employ appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties (e.g., SSL or TLS encryption for our website), taking into account the state of the art, implementation costs, and the nature, scope, context, and purpose of the processing, as well as the risks of a data breach (including its likelihood and impact) for the data subject. Our security measures are continuously improved in line with technological developments. <\/p><p>We are happy to provide further information on request. Please contact our controller (see A. (2)). <\/p><h3 id=\"6-cooperation-with-processors\"><strong>(6) Cooperation with Processors<\/strong><\/h3><p>As with other companies, we also use external domestic and foreign service providers to handle our business operations (e.g., in the areas of IT, logistics, telecommunications, sales and marketing, billing, and invoicing). These providers act only on our instructions and have been contractually obligated, in accordance with Art. 28 GDPR, to comply with data protection regulations. <\/p><h3 id=\"7-requirements-for-transferring-personal-data-to-third-countries\"><strong>(7) Requirements for Transferring Personal Data to Third Countries<\/strong><\/h3><p>In the course of our business relationships, your personal data may be transferred to or disclosed to third-party companies. These may also be located outside the European Economic Area (EEA), i.e., in third countries. Such processing takes place exclusively to fulfill contractual and business obligations and to maintain your business relationship with us (legal basis is Art. 6(1)(b) or (f) GDPR, each in conjunction with Art. 44 et seq. GDPR). We will inform you of the details of any such transfer at the relevant points below.   <\/p><p>The European Commission has certified, through so-called adequacy decisions, that certain third countries offer a level of data protection comparable to the EEA standard (a list of these countries and a copy of the adequacy decisions are available here:<\/p><p><a href=\"https:\/\/ec.europa.eu\/info\/law\/law-topic\/data-protection\/international-dimension-data-protection\/adequacy-decisions_en\" target=\"_blank\" rel=\"noopener nofollow\">https:\/\/ec.europa.eu\/info\/law\/law-topic\/data-protection\/international-dimension-data-protection\/adequacy-decisions_en<\/a><\/p><p>In other third countries to which personal data may be transferred, there may, under certain circumstances, be no consistently high level of data protection due to a lack of statutory provisions. Where this is the case, we ensure that data protection is adequately guaranteed. This can be achieved through binding corporate rules, the European Commission&#039;s standard contractual clauses for the protection of personal data pursuant to Art. 46(1), (2)(c) GDPR (the 2021 standard contractual clauses are available at     <\/p><p><a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/?uri=CELEX%3A32021D0915&#038;locale-en\" target=\"_blank\" rel=\"noopener nofollow\">https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/?uri=CELEX%3A32021D0915&amp;locale-en<\/a>),<\/p><p>certifications, or recognized codes of conduct. Please contact our controller (see A.(2)) if you would like further information on this.<\/p><h3 id=\"8-no-automated-decision-making-including-profiling\"><strong>(8) No Automated Decision-Making (Including Profiling)<\/strong><\/h3><p>We do not intend to use personal data collected from you for a process of automated decision-making (including profiling).<\/p><h3 id=\"9-no-obligation-to-provide-personal-data\"><strong>(9) No Obligation to Provide Personal Data<\/strong><\/h3><p>We do not make the conclusion of contracts with us dependent on you first providing us with personal data. As a customer, you generally have no statutory or contractual obligation to provide us with your personal data; however, it may be the case that we can only offer certain services to a limited extent, or not at all, if you do not provide the necessary data. Should this exceptionally be the case for any of the products we offer as described below, you will be informed separately.  <\/p><h3 id=\"10-statutory-obligation-to-disclose-certain-data\"><strong>(10) Statutory Obligation to Disclose Certain Data<\/strong><\/h3><p>We may, under certain circumstances, be subject to a special statutory or legal obligation to provide lawfully processed personal data to third parties, in particular public authorities (Art. 6(1)(1)(c) GDPR).<\/p><h3 id=\"11-your-rights\"><strong>(11) Your Rights<\/strong><\/h3><p>You may assert your rights as a data subject regarding your processed personal data against us at any time using the contact details provided at the outset in A.(2). As a data subject, you have the right:<\/p><ul><li>to request information about your data processed by us in accordance with Art. 15 GDPR. In particular, you may request information about the purposes of processing, the category of data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing, or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected from you, as well as the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the details thereof; <\/li><li>to request, in accordance with Art. 16 GDPR, the immediate rectification of inaccurate data or the completion of your data stored with us;<\/li><li>to request the erasure of your data stored with us in accordance with Art. 17 GDPR, unless processing is necessary to exercise the right of freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;<\/li><li>to request the restriction of the processing of your data in accordance with Art. 18 GDPR, insofar as you dispute the accuracy of the data or the processing is unlawful;<\/li><li>to receive, in accordance with Art. 20 GDPR, the data you have provided to us in a structured, commonly used, and machine-readable format, or to request its transmission to another controller (&quot;data portability&quot;);<\/li><li>to object, in accordance with Art. 21 GDPR, to the processing of your data where the processing is based on Art. 6(1)(1)(e) or (f) GDPR. This is particularly the case where the processing is not necessary for the performance of a contract with you. Unless the objection concerns direct marketing, we ask that, when exercising such an objection, you explain the reasons why we should not process your data as we have been doing. If your objection is justified, we will review the situation and either stop or adjust the data processing, or demonstrate to you our compelling legitimate grounds for continuing the processing;      <\/li><li>to withdraw, at any time and with effect for the future, in accordance with Art. 7(3) GDPR, any consent you have given us\u2014even if given before the GDPR took effect, i.e., before May 25, 2018\u2014meaning your voluntary, informed, and unambiguous indication, by way of a statement or other clear affirmative action, that you agree to the processing of the personal data concerned for one or more specific purposes, if you have given such consent. This means that we may no longer continue, for the future, the data processing that was based on this consent; and  <\/li><li>to lodge a complaint, in accordance with Art. 77 GDPR, with a data protection supervisory authority regarding the processing of your personal data by our company, such as the supervisory authority responsible for us:<\/li><\/ul><p>The Hamburg Commissioner for Data Protection and Freedom of Information of the Free and Hanseatic City of Hamburg \u2013 a public-law corporation<\/p><p>Ludwig-Erhard-Str. 22, 7th floor\n20459 Hamburg<\/p><p>Phone: 040 \/ 428 54 \u2013 4040\nFax: 040 \/ 428 54 \u2013 4000\nEmail:  <a href=\"mailto:mailbox@datenschutz.hamburg.de\" rel=\"noopener\">mailbox@datenschutz.hamburg.de<\/a><\/p><h3 id=\"12-changes-to-the-privacy-notice\"><strong>(12) Changes to the Privacy Notice<\/strong><\/h3><p>As part of the ongoing development of data protection law as well as technological or organizational changes, our privacy notice is regularly reviewed to determine whether adjustments or additions are needed. We will inform you of any changes, in particular, on our website at <a href=\"https:\/\/onnetwork.agency\/en\/privacy-policy\/\" target=\"_blank\" rel=\"noopener\">https:\/\/onnetwork.agency\/en\/privacy-policy\/<\/a>. <\/p><p>This privacy notice is dated March 2025.<\/p><h2 id=\"b-visiting-our-website\"><strong>B. Visiting Our Website<\/strong><\/h2><h3 id=\"1-explanation-of-the-function\"><strong>(1) Explanation of the Function<\/strong><\/h3><p>Information about our company and the services we offer can be found, in particular, at <a href=\"https:\/\/onnetwork.agency\/en\/\" target=\"_blank\" rel=\"noopener\">https:\/\/onnetwork.agency\/en\/<\/a>, <a href=\"https:\/\/onhoster.de\/\" target=\"_blank\" rel=\"noopener nofollow\">https:\/\/onhoster.de<\/a>, and <a href=\"https:\/\/kevin-winter.de\" target=\"_blank\" rel=\"noopener nofollow\">https:\/\/kevin-winter.de<\/a>, along with the associated subpages (hereinafter collectively: &quot;Websites&quot;). When you visit our websites and\/or contact us through them, personal data about you may be processed. <\/p><h3 id=\"2-personal-data-processed\"><strong>(2) Personal Data Processed<\/strong><\/h3><p>When the websites are used for informational purposes, we collect, store, and further process the following categories of personal data:<\/p><h4 id=\"a-log-data\"><strong>a)<\/strong> <strong>Log Data<\/strong><\/h4><p>When you visit our websites, a so-called log data set (known as server log files) is temporarily stored on our web server in anonymized form. This consists of: <\/p><ul><li>the page from which the page was requested (so-called referrer URL)<\/li><li>the name and URL of the page requested<\/li><li>the date and time of access<\/li><li>a description of the type, language, and version of the web browser used<\/li><li>the IP address of the requesting computer, shortened so that it can no longer be associated with a specific person<\/li><li>the amount of data transferred<\/li><li>the operating system<\/li><li>the message indicating whether the request was successful (access status\/HTTP status code)<\/li><li>the GMT time zone difference<\/li><\/ul><h4 id=\"b-contact-form-data\"><strong>b) Contact Form Data<\/strong><\/h4><p>For any questions, we offer you the opportunity to contact us via a form provided on the website. A valid email address, salutation, and first and last name are required so that we know who the inquiry is from and can respond to it. Additional information (e.g., address, company, and time of submission) may be provided voluntarily.  <\/p><h4 id=\"c-customer-portal\"><strong>c) Customer Portal<\/strong><\/h4><p>You can contact our customer support at any time. We need your data to resolve your inquiries in the course of communicating with our customer support. <\/p><p>For this purpose, we process the following categories of your personal data:<\/p><ul><li>Contact details<\/li><li>Data for identification and authentication<\/li><li>Contract data<\/li><li>Content of your inquiries<\/li><li>Payment data<\/li><\/ul><h4 id=\"d-applicant-data\"><strong>d) Applicant Data<\/strong><\/h4><p>You can send us application documents via our websites. In order to be able to contact you, we store, where provided by you:<\/p><ul><li>Salutation,<\/li><li>First and last name<\/li><li>Address<\/li><li>Phone number<\/li><li>Email address<\/li><\/ul><p>your CV and data regarding your education and qualifications (Art. 6(1)(b) GDPR; Section 26 BDSG). However, as part of the employment relationship, you are only required to provide the personal data necessary for establishing, carrying out, and terminating the employment. Otherwise, proper personnel administration is not possible.  <\/p><h3 id=\"3-purpose-and-legal-basis-of-data-processing\"><strong>(3) Purpose and Legal Basis of Data Processing<\/strong><\/h3><p>We process the personal data specified above in accordance with the provisions of the GDPR, other applicable data protection regulations, and only to the extent necessary. Insofar as the processing of personal data is based on Art. 6(1)(1)(f) GDPR, the purposes stated also constitute our legitimate interests.   <\/p><p>The processing of log data serves statistical purposes and the improvement of the quality of our website, in particular the stability and security of the connection (legal basis is Art. 6(1)(1)(a) or (f) GDPR).<\/p><p>The processing of contact form data takes place in order to handle customer inquiries (legal basis is Art. 6(1)(1)(b) or (f) GDPR).<\/p><p>The processing of customer portal data takes place for the purpose of providing support services (legal basis is Art. 6(1)(1)(b) or (f) GDPR).<\/p><p>The processing of applicant data is carried out exclusively for the purpose of conducting the application and selection process and assessing your professional suitability.<\/p><p>By submitting or handing over your application to us, you consent to your information being stored, processed, and used to contact you during the application process for the duration of that process. This applies in particular if, in your cover letter or other documents you submit during the application process, you yourself disclose &quot;special categories of personal data&quot; under Art. 9 GDPR (e.g., a photo revealing ethnic origin, information about severe disability status, etc.). Your consent also extends to this data.  <\/p><p>(Legal basis is Art. 6(1)(1)(a) or (f) GDPR).<\/p><p>Insofar as the processing of data requires the storage of information on your device, or access to information already stored on your device, the legal basis for this is Section 25(1), (2) TTDSG. <\/p><h3 id=\"4-duration-of-data-processing\"><strong>(4) Duration of Data Processing<\/strong><\/h3><p>Your data is only processed for as long as is necessary to achieve the processing purposes stated above; the legal bases specified in connection with those purposes apply accordingly. Regarding the use and retention period of cookies, please refer to Point A. (4) as well as the cookie policy [<a href=\"https:\/\/onnetwork.agency\/en\/privacy-policy\/#cookie\" target=\"_blank\" rel=\"noopener\">https:\/\/onnetwork.agency\/en\/privacy-policy\/#cookie<\/a>]. <\/p><p>Third parties engaged by us will store your data on their systems for as long as is necessary in connection with providing services to us in accordance with the respective agreement.<\/p><p>For further details on the retention period, please see A. (4) and the cookie policy [<a href=\"https:\/\/onnetwork.agency\/en\/privacy-policy\/#cookie\" target=\"_blank\" rel=\"noopener\">https:\/\/onnetwork.agency\/en\/privacy-policy\/#cookie<\/a>].<\/p><h3 id=\"5-disclosure-of-personal-data-to-third-parties-legal-basis\"><strong>(5) Disclosure of Personal Data to Third Parties; Legal Basis<\/strong><\/h3><p>The following categories of recipients, which are generally processors (see A. (6)), may be given access to your personal data:<\/p><ul><li>Service providers for operating our website and processing the data stored or transmitted by our systems (e.g., for data center services, payment processing, IT security). The legal basis for the disclosure is then Art. 6(1)(1)(b) or (f) GDPR, insofar as these are not processors;    <\/li><li>Government bodies\/authorities, insofar as this is necessary to comply with a legal obligation. The legal basis for the disclosure is then Art. 6(1)(1)(c) GDPR;   <\/li><li>Persons engaged in carrying out our business operations (e.g., auditors, banks, insurers, legal advisors, supervisory authorities, parties involved in company acquisitions or the formation of joint ventures). The legal basis for the disclosure is then Art. 6(1)(1)(b) or (f) GDPR.    <\/li><\/ul><p>For guarantees of an adequate level of data protection when transferring data to third countries, see A. (7).<\/p><p>In addition, we only disclose your personal data to third parties if you have given explicit consent in accordance with Art. 6(1)(1)(a) GDPR.  <\/p><h3 id=\"6-use-of-cookies-plugins-and-other-services-tools-on-our-website\"><strong>(6) Use of Cookies, Plugins, and Other Services (Tools) on Our Website<\/strong><\/h3><h4 id=\"a-cookies\"><strong>a) Cookies<\/strong><\/h4><p>We use cookies on our websites. Cookies are small text files that are stored on your hard drive and assigned to the browser you use via a characteristic string of characters, and through which certain information flows to the party setting the cookie. Cookies cannot execute programs or transmit viruses to your computer and therefore cannot cause any damage. They serve to make the internet offering more user-friendly and effective overall, that is, more pleasant for you.   <\/p><p>Cookies may contain data that makes it possible to recognize the device used. In some cases, however, cookies only contain information about certain settings that are not personally identifiable. Cookies cannot directly identify a user.  <\/p><p>A distinction is made between session cookies, which are deleted once you close your browser, and persistent cookies, which are stored beyond the individual session. In terms of their function, cookies are further divided into: <\/p><ul><li>Technical cookies: These are strictly necessary to navigate the website, use basic functions, and ensure the website&#039;s security; they do not collect information about you for marketing purposes, nor do they store which websites you have visited;<\/li><li>Performance cookies: These collect information about how you use our website, which pages you visit, and, for example, whether errors occur while using the website; they do not collect information that could identify you\u2014all information collected is anonymous and is used only to improve our website and find out what interests our users;<\/li><li>Advertising cookies, targeting cookies: These are used to offer website users advertising or third-party offers tailored to their needs, and to measure the effectiveness of these offers.<\/li><li>Third-party cookies: This type of cookie provides services and functions of the website that were developed by &quot;third-party providers&quot;. Third-party cookies arise, for example, from the use of services such as Google Analytics or Google Maps. Third-party cookies are generated by embedded plugins or technologies of the respective organizations. We have no influence over the cookies and privacy settings of these services or organizations and expressly point out that the third-party services we use are subject solely to their respective cookie and privacy policies.   <\/li><\/ul><p>The legal basis for cookies that are strictly necessary to provide you with the service you have expressly requested is Section 25(2)(2) TTDSG. Any use of cookies that is not strictly technically necessary for this purpose constitutes data processing that is only permitted with your explicit and active consent in accordance with Section 25(1) TTDSG in conjunction with Art. 6(1)(1)(a) GDPR. This applies in particular to the use of performance, advertising, or targeting cookies. In addition, we only disclose your personal data processed through cookies to third parties if you have given explicit consent in accordance with Art. 6(1)(1)(a) GDPR.          <\/p><h4 id=\"b-cookie-policy-cookies-used-and-tools\"><strong>b) Cookie Policy, Cookies Used, and Tools<\/strong><\/h4><p>Further information about which cookies we use can be found below. We inform you about the options for managing your cookie settings and disabling certain types of tracking in our cookie policy [<a href=\"https:\/\/onnetwork.agency\/en\/privacy-policy\/#cookie\" target=\"_blank\" rel=\"noopener\">https:\/\/onnetwork.agency\/en\/privacy-policy\/#cookie<\/a>]. <\/p><h5 id=\"borlabs-cookie\"><strong>Borlabs Cookie<\/strong><\/h5><p>Our website uses the cookie consent technology of Borlabs Cookie to obtain your consent to the storage of certain cookies in your browser and to document this consent in compliance with data protection law. The provider of this technology is Borlabs \u2013 Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg (hereinafter <em>Borlabs<\/em>).  <\/p><p>When you visit our website, a <em>Borlabs<\/em> cookie is stored in your browser, in which the consents you have given, or the withdrawal of such consents, are stored. This data is not passed on to the provider of <em>Borlabs<\/em> Cookie. <\/p><p>The collected data will be stored until you request us to delete it, or you delete the <em>Borlabs<\/em> cookie yourself, or the purpose for data storage no longer applies. Mandatory legal retention periods remain unaffected. Details on data processing by <em>Borlabs<\/em> Cookie can be found at: <a href=\"https:\/\/de.borlabs.io\/kb\/welche-daten-speichert-borlabs-cookie\/\" target=\"_blank\" rel=\"noopener nofollow\">https:\/\/de.borlabs.io\/kb\/welche-daten-speichert-borlabs-cookie\/<\/a>  <\/p><p>The <em>Borlabs<\/em> Cookie Consent technology is used to obtain the legally required consents for the use of cookies. The legal basis for this is Art. 6 Para. 1 Sentence 1 lit. c GDPR.   <\/p><h5 id=\"google-analytics\"><strong>Google Analytics<\/strong><\/h5><p>This website uses Google Analytics, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter Google).<\/p><p>Google Analytics (https:\/\/analytics.google.com\/analytics\/web\/) collects and stores data for marketing and optimization purposes. Usage profiles can be created from this data under a pseudonym. Cookies may be used for this purpose. Cookies enable the recognition of the internet browser. During your website visit, the following data, among others, is recorded:    <\/p><ul><li>Pages viewed<\/li><li>Orders including revenue and products ordered <\/li><li>Achievement of &quot;website goals&quot; (e.g., contact inquiries and newsletter registrations)<\/li><li>Your behavior on the pages (e.g., dwell time, clicks, scrolling behavior)<\/li><li>Your approximate location (country and city)<\/li><li>Your IP address (in abbreviated form, so no unique assignment is possible)<\/li><li>Technical information such as browser, internet provider, end device, and screen resolution<\/li><li>Source of your visit (i.e., via which website or advertising material you came to us).<\/li><\/ul><p>The information generated by the cookie about your use of this website is transmitted to a Google server in the USA and stored there. However, the IP address of the visitor or registered user is first truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.  <\/p><p>On behalf of the operator of this website and based on a written data processing agreement, Google will use this information to evaluate the use of the website, to compile reports on website activities, and to provide other services related to website and internet usage to the website operator. The IP address transmitted by the browser as part of Google Analytics will not be merged with other Google data. <\/p><p>User-related data is automatically deleted after 14 months. Other data remains stored indefinitely in aggregated form. <\/p><p>Google will use this information to evaluate your use of the website, to compile reports on website activities for website operators, and to provide other services related to website and internet usage. Google may also transfer this information to third parties if required by law or if third parties process this data on behalf of Google. Google will under no circumstances associate your IP address with other Google data.  <\/p><p>The legal basis for processing personal data using Google Analytics is your consent in accordance with Art. 6 Para. 1 lit. a GDPR.  <\/p><p>You can revoke your consent at any time, delete cookies stored in your browser, or configure your browser to inform you about the setting of cookies and decide individually on their acceptance, or exclude the acceptance of cookies for certain cases or generally. You can prevent Google from collecting and further processing your data by downloading and installing the plug-in at the following link: <a href=\"https:\/\/tools.google.com\/dlpage\/gaoptout?hl=de\" target=\"_blank\" rel=\"noopener nofollow\">http:\/\/tools.google.com\/dlpage\/gaoptout?hl=de<\/a> <\/p><p>If cookies are not accepted, the functionality of our website may be limited. The revocation of consent does not affect the legality of processing carried out based on consent until revocation.  <\/p><p>Further information on terms of use and data protection can be found at <a href=\"https:\/\/www.google.com\/analytics\/terms\/de.html\" target=\"_blank\" rel=\"noopener nofollow\">http:\/\/www.google.com\/analytics\/terms\/de.html <\/a>or at <a href=\"https:\/\/www.google.de\/intl\/de\/policies\/\" target=\"_blank\" rel=\"noopener nofollow\">https:\/\/www.google.de\/intl\/de\/policies\/<\/a>.<\/p><p>Please note that on this website, Google Analytics has been extended with the code &quot;gat._anonymizeIp();&quot; to ensure anonymized collection of IP addresses (so-called IP masking).<\/p><h5 id=\"cloudflare-content-delivery-network-cdn\"><strong>Cloudflare \u2013 Content Delivery Network (CDN)<\/strong><\/h5><p>We use the Content Delivery Network (CDN) from Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, on our website. The CDN is integrated via the &quot;_cfduid&quot; cookie placed on our website.<\/p><p>The CDN serves to optimize loading and retrieval times and to improve the protection of our website against third-party attacks. A CDN is a network of regionally distributed servers connected via the internet, which provides improved storage and delivery capacities for websites. This ensures optimal retrieval within usual loading times, even with very high and simultaneous requests (peak loads) to our website. Your user requests to our website are routed via Cloudflare servers in the USA as part of the CDN.   <\/p><p>Therefore, a contract for the processing of personal data on behalf of Cloudflare, as well as the EU standard contractual clauses, has been concluded.<\/p><p>The standard contractual clauses can be found at: <a href=\"https:\/\/www.cloudflare.com\/cloudflare-customer-scc\/\" target=\"_blank\" rel=\"noopener nofollow\">https:\/\/www.cloudflare.com\/cloudflare-customer-scc\/<\/a>.<\/p><p>The legitimate interest lies in optimizing loading and retrieval times and improving the protection of our website against third-party attacks. The legal basis for data processing is Art. 6 Para. 1 Sentence 1 lit. f GDPR.   <\/p><p>Cloudflare&#039;s privacy policy can be found at: <a href=\"https:\/\/www.cloudflare.com\/cloudflare-customer-dpa\/\" target=\"_blank\" rel=\"noopener nofollow\">https:\/\/www.cloudflare.com\/cloudflare-customer-dpa\/<\/a><\/p><p>You can find out what data Cloudflare uses through the CDN in Cloudflare&#039;s privacy policy and additionally at: <a href=\"https:\/\/blog.cloudflare.com\/what-cloudflare-logs\/\" target=\"_blank\" rel=\"noopener nofollow\">https:\/\/blog.cloudflare.com\/what-cloudflare-logs\/<\/a><\/p><p>You can contact Cloudflare&#039;s data protection officer at <a href=\"mailto:dpo@cloudflare.com\" rel=\"noopener\">dpo@cloudflare.com<\/a>.<\/p><h5 id=\"cloudflare-turnstile\"><strong>Cloudflare Turnstile<\/strong><\/h5><p>We use Cloudflare Turnstile (Turnstile) from Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA, on our website. Turnstile is intended to verify whether data input on this website (e.g., in a contact form) is performed by a human or by an automated program. For this purpose, Turnstile analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters a website with Turnstile activated. For the analysis, Turnstile evaluates various information (e.g., IP address, duration of the website visitor&#039;s stay on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Cloudflare in the USA.<\/p><p>Therefore, a contract for the processing of personal data on behalf of Cloudflare, as well as the EU standard contractual clauses, has been concluded.<\/p><p>The standard contractual clauses can be found at: <a href=\"https:\/\/www.cloudflare.com\/cloudflare-customer-scc\/\" target=\"_blank\" rel=\"noopener nofollow\">https:\/\/www.cloudflare.com\/cloudflare-customer-scc\/<\/a><\/p><p>The legitimate interest lies in optimizing loading and retrieval times and improving the protection of our website against third-party attacks. The legal basis for data processing is Art. 6 Para. 1 Sentence 1 lit. f GDPR. We have a legitimate interest in protecting our web offerings from abusive automated espionage and SPAM. If corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a GDPR and \u00a7 25 Para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user&#039;s terminal device (e.g., device fingerprinting) within the meaning of the TTDSG.        <\/p><p>Further information on Cloudflare Turnstile can be found in the privacy policy at: <a href=\"https:\/\/www.cloudflare.com\/cloudflare-customer-dpa\/\" target=\"_blank\" rel=\"noopener nofollow\">https:\/\/www.cloudflare.com\/cloudflare-customer-dpa\/<\/a><\/p><h4 id=\"c-social-media-plugins\"><strong>c) Social Media Plugins<\/strong><\/h4><p>We do not use social media plugins on our websites. If our websites contain icons from social media providers, we only use them partially and merely for passive linking to the pages of the respective providers. There, we want to inform our interested parties about our services and communicate with you through these channels. You can find more details on this in the following explanations.   <\/p><h5 id=\"facebook-and-instagram\"><strong>Facebook and Instagram<\/strong><\/h5><p>We also use icons from Facebook and Instagram on our websites.<\/p><p>Facebook and Instagram are operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland.<\/p><p>To increase the protection of your data when visiting our website, the icons are used to embed an HTML link to the websites of Facebook and Instagram. This type of integration ensures that when you access a page of our website containing such icons, no connection is yet established with the servers of the provider of the respective social network. If you click on one of the buttons, a new window of your browser will open and call up the page of the respective service provider, where you can (possibly after entering your login data) e.g., activate the Like or Share button.  <\/p><p>For the purpose and scope of data collection and the further processing and use of data by the providers on their pages, as well as your related rights and setting options for protecting your privacy, please refer to the providers&#039; privacy notices.<\/p><p><a href=\"https:\/\/www.facebook.com\/privacy\/policy\/?entry_point=data_policy_redirect&#038;entry=0\" target=\"_blank\" rel=\"noopener nofollow\">https:\/\/www.facebook.com\/privacy\/policy\/?entry_point=data_policy_redirect&amp;entry=0<\/a> or <a href=\"https:\/\/help.instagram.com\/155833707900388\" target=\"_blank\" rel=\"noopener nofollow\">https:\/\/help.instagram.com\/155833707900388<\/a>.<\/p><h2 id=\"c-business-partners-and-customers\"><strong>C. Business Partners and Customers<\/strong><\/h2><h3 id=\"1-initiation-and-performance-of-contractual-relationships\"><strong>(1) Initiation and performance of contractual relationships<\/strong><\/h3><p>As part of the initiation and performance of contractual relationships, we process the following data:<\/p><h4 id=\"a-contract-data\"><strong>a) Contract data<\/strong><\/h4><p>When you order one of our products or services, we ask you to provide your personal data, which we need to conclude and carry out the contract.<\/p><p>You can make changes or corrections to this data at any time via your customer portal.<\/p><p>Type of data<\/p><ul><li>Salutation<\/li><li>First and last name<\/li><li>Email address<\/li><li>Phone number<\/li><li>Company name (for businesses)<\/li><li>Address<\/li><li>Product contracts and usage<\/li><li>Contract data<\/li><li>Payment data<\/li><li>VAT ID (for businesses)<\/li><\/ul><h4 id=\"b-customer-support\"><strong>b) Customer support<\/strong><\/h4><p>You can contact our customer support at any time. To resolve your request as part of your communication with our customer support, we need your data. <\/p><p>For this purpose, we process the following personal data of yours:<\/p><ul><li>Contact details<\/li><li>Data for identification and authentication<\/li><li>Contract data<\/li><li>Content of your inquiries<\/li><li>Payment data<\/li><\/ul><h4 id=\"c-purpose-and-legal-basis-of-data-processing\"><strong>c) Purpose and legal basis of data processing<\/strong><\/h4><p>We need the contract data and customer support data to enable the communication necessary for an orderly contract conclusion process and the provision of our services, information exchange through process communication, and billing for our services.<\/p><p>The legal basis for processing the contract data and customer support data is Art. 6(1)(b) GDPR.  <\/p><h4 id=\"d-duration-of-data-processing\"><strong>d) Duration of data processing<\/strong><\/h4><p>We process your data until your contract ends. Beyond that, we store your contract data if there are objections or claims that have not yet been resolved. We also store your data for longer if we are subject to statutory retention obligations. In this case, the processing of the data is restricted to compliance with the statutory retention periods, and the data is no longer processed for any other purposes. For contract data, processing is restricted after the end of the contract, and the data is deleted once the ten-year statutory retention period under Section 257 of the German Commercial Code (HGB) and Section 147 of the German Fiscal Code (AO) has expired.    <\/p><p>We store communications with you as part of customer support until the end of the contract term and beyond that only until open inquiries have been finally resolved or as required by statutory retention obligations.<\/p><h3 id=\"2-communication-with-customers-and-business-partners\"><strong>(2) Communication with customers and business partners<\/strong><\/h3><p>We use various means of communication with customers and business partners \u2013 including prospective ones \u2013 to present or provide our services, or to get in touch with them.<\/p><h4 id=\"a-zoom\">a) <strong>Zoom<\/strong><\/h4><p>We use the video conferencing system Zoom as a tool to support online meetings, conference calls, and the creation of webinars. Zoom is a service provided by Zoom Video Communications, Inc., headquartered in the USA.<\/p><p>When using Zoom, various types of data are processed. The scope of the data also depends on what information you provide before or while participating in an online meeting. <\/p><p>The following personal data is subject to processing:<\/p><ul><li>User information: first name, last name, phone number (optional), email address, password (if &quot;single sign-on&quot; is not used), profile picture (optional), department (optional)<\/li><li>Meeting metadata: topic, description (optional), participant IP addresses, device\/hardware information<\/li><li>For recordings (optional): MP4 file of all video, audio, and presentation recordings, M4A file of all audio recordings, text file of the online meeting chat.<\/li><li>For dial-in by phone: incoming and outgoing phone number, country name, start and end time. Additional connection data, such as the device&#039;s IP address, may also be stored. <\/li><li>Text, audio, and video data: You may have the option to use the chat, Q, or polling features in an &quot;online meeting.&quot; In this case, the text you enter is processed in order to display it in the &quot;online meeting&quot; and, where applicable, log it. To enable video display and audio playback, data from your device&#039;s microphone and, if applicable, its camera is processed for the duration of the meeting. You can turn off or mute your camera or microphone at any time via the Zoom applications.   <\/li><li>To participate in an online meeting or enter the &quot;meeting room,&quot; you must at least provide your name.<\/li><\/ul><p>Insofar as personal data of on:Network employees is processed, Section 26 of the German Federal Data Protection Act (BDSG) is the legal basis for the data processing. If, in connection with the use of Zoom, personal data is not required for establishing, performing, or terminating the employment relationship, but is nevertheless a fundamental part of using Zoom, then Art. 6(1)(f) GDPR is the legal basis for the data processing. In these cases, our interest lies in the effective conduct of online meetings.    <\/p><p>Otherwise, the legal basis for data processing in connection with online meetings is Art. 6(1)(b) GDPR, insofar as the meetings are conducted as part of contractual relationships.  <\/p><p>If no contractual relationship exists, the legal basis is Art. 6(1)(f) GDPR. Here too, our interest lies in the effective conduct of online meetings.   <\/p><p>Zoom is a service provided by a US-based provider. This means that personal data is also processed in a third country. We have concluded a data processing agreement with the provider of Zoom that meets the requirements of Art. 28 GDPR.  <\/p><p>An adequate level of data protection is guaranteed by the conclusion of the so-called EU Standard Contractual Clauses. For more information, please visit <a href=\"https:\/\/explore.zoom.us\/de\/gdpr\/\" target=\"_blank\" rel=\"noopener nofollow\">https:\/\/explore.zoom.us\/de\/gdpr\/<\/a>. <\/p><h4 id=\"b-microsoft-teams\">b) <strong>Microsoft Teams<\/strong><\/h4><p>We use the tool Microsoft Teams (Teams) to conduct conference calls, online meetings, video conferences, and\/or webinars. Teams is a service provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. <\/p><p>If you visit the Teams website, the provider of Teams is responsible for the data processing. However, visiting the website is only necessary to download the software for using Teams. <\/p><p>You can also use Teams by entering the relevant meeting ID and, if applicable, other meeting access details directly in the Teams app.<\/p><p>If you don&#039;t want to or can&#039;t use the Teams app, the basic features are also available through a browser version, which you can also find on the Teams website.<\/p><p>When using Teams, various types of data are processed. The scope of the data also depends on what information you provide before or while participating in an online meeting. <\/p><p>The following personal data is subject to processing:<\/p><ul><li>User information: first name, last name, phone number (optional), email address, password (if &quot;single sign-on&quot; is not used), profile picture (optional), department (optional)<\/li><li>Meeting metadata: topic, description (optional), participant IP addresses, device\/hardware information<\/li><li>For recordings (optional): video, audio, and presentation recordings, text file of the online meeting chat.<\/li><li>For dial-in by phone: incoming and outgoing phone number, country, start and end time. Additional connection data, such as the device&#039;s IP address, may also be stored. <\/li><li>Text, audio, and video data: You may have the option to use the chat, Q, or polling features in an online meeting. In this case, the text you enter is processed in order to display it in the online meeting and, where applicable, log it. To enable video display and audio playback, data from your device&#039;s microphone and, if applicable, its camera is processed for the duration of the meeting. You can turn off or mute your camera or microphone at any time via the &quot;MS Teams&quot; applications.   <\/li><\/ul><p>To participate in an online meeting or enter the meeting room, you must at least provide your name.<\/p><p>We use Teams to conduct online meetings. If we intend to record online meetings, we will inform you transparently in advance and, where necessary, ask for your consent. The fact that a recording is taking place will also be shown to you in the Teams app.  <\/p><p>If necessary for the purpose of documenting the outcome of an online meeting, we will log the chat content. However, this will generally not be the case. <\/p><p>In the case of webinars, we may also process questions submitted by webinar participants for the purposes of recording and following up on webinars.<\/p><p>If you are registered as a user with Teams, reports on online meetings (meeting metadata, phone dial-in data, questions and answers in webinars, polling features in webinars) may be stored by Teams for up to one month.<\/p><p>Automated decision-making within the meaning of Art. 22 GDPR is not used.<\/p><p>The legal basis for data processing in connection with online meetings is Art. 6(1)(b) GDPR, insofar as the meetings are conducted as part of contractual relationships. Otherwise, your consent under Art. 6(1)(a) GDPR is the legal basis for the processing.     <\/p><p>Personal data processed in connection with participation in online meetings is generally not shared with third parties unless it is specifically intended for disclosure. Please note that, as with in-person meetings, the content of online meetings is often specifically intended to communicate information to customers, prospects, or third parties, and is therefore intended for disclosure. The provider of Teams necessarily becomes aware of the above-mentioned data insofar as this is provided for under our data processing agreement with Teams.  <\/p><p>Teams is a service provided by a provider headquartered in the USA. This means that personal data is also processed in a third country, i.e. a country outside the European Union (EU) or the contracting states of the Agreement on the European Economic Area (EEA). We have concluded a data processing agreement with the provider of Teams that meets the requirements of Art. 28 GDPR.  <\/p><p>In addition, Teams is obligated, through the conclusion of so-called EU Standard Contractual Clauses, to maintain a level of data protection that essentially corresponds to the European standard. Please note, however, that an adequate level of data protection at providers outside the EU\/EEA \u2013 even if EU Standard Contractual Clauses have been concluded \u2013 cannot be guaranteed in every case. <\/p><h3 id=\"3-other-processors-as-recipients-of-data\"><strong>(3) Other processors as recipients of data<\/strong><\/h3><p>We generally do not share your data with third parties unless expressly stated in this privacy policy. Below you will find information on other processors within the meaning of Art. 28 GDPR (see Section A (6) above) to whom your data is transmitted.  <\/p><h4 id=\"a-payment-service-provider-stripe\"><strong>a) Payment service provider Stripe<\/strong><\/h4><p>We offer the option of processing payments through the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (&quot;Stripe&quot;).<\/p><p>In this context, we process and transfer the following data of yours to Stripe, insofar as it is necessary for the performance of the contract (Art. 6(1)(b) GDPR).<\/p><ul><li>Name of cardholder<\/li><li>Email address<\/li><li>Customer number<\/li><li>Order number<\/li><li>Bank details<\/li><li>Credit card data<\/li><li>Credit card expiration date<\/li><li>Credit card verification number (CVC)<\/li><li>Date and time of transaction<\/li><li>Transaction amount<\/li><li>Name of provider<\/li><li>Location<\/li><\/ul><p>Without the transmission of your personal data, we cannot process a payment via Stripe. Stripe assumes a dual role as both controller and processor in its data processing activities. As a controller, Stripe uses your transmitted data to fulfill regulatory obligations. This serves Stripe&#039;s legitimate interest (pursuant to Art. 6(1)(f) GDPR) and the performance of the contract (pursuant to Art. 6(1)(b) GDPR). We have no influence over this process.    <\/p><p>Stripe acts as a processor in order to complete transactions within the payment networks. As part of the processing relationship, Stripe acts exclusively on our instructions and has been contractually obligated, within the meaning of Art. 28 GDPR, to comply with data protection regulations. <\/p><p>Stripe has implemented compliance measures for international data transfers. These apply to all of Stripe&#039;s worldwide activities in which it processes personal data of individuals in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs).  <\/p><p>For more information on Stripe&#039;s data protection practices, please visit <a href=\"https:\/\/stripe.com\/de\/privacy#translation\" target=\"_blank\" rel=\"noopener nofollow\">https:\/\/stripe.com\/de\/privacy#translation<\/a>.<\/p><h4 id=\"b-project-management-tool-clickup\"><strong>b) Project management tool ClickUp<\/strong><\/h4><p>We use the project management tool ClickUp provided by Mango Technologies, Inc., 580 Howard St, Suite 101, San Francisco, California 94105, USA. Mango Technologies, Inc. has committed to the principles of the EU-U.S. Data Privacy Framework and has self-certified with the U.S. Department of Commerce: <a href=\"https:\/\/www.dataprivacyframework.gov\/s\/participantsearch\/participant-detail?id=a2zt00000004EgoAAE&#038;status=Active\" target=\"_blank\" rel=\"noopener nofollow\">https:\/\/www.dataprivacyframework.gov\/s\/participantsearch\/participant-detail?id=a2zt00000004EgoAAE&amp;status=Active<\/a>. The legal basis for the data processing is Art. 6(1)(f) GDPR. <\/p><p>We have concluded a data processing agreement (DPA) with ClickUp: <a href=\"https:\/\/clickup.com\/dpa\" target=\"_blank\" rel=\"noopener nofollow\">https:\/\/clickup.com\/dpa<\/a>. Appropriate safeguards for the rights of data subjects are also provided through the conclusion of EU Standard Contractual Clauses. <\/p><p>Details on data protection at ClickUp, as well as Mango Technologies, Inc.&#039;s privacy policy, can be found at: <a href=\"https:\/\/clickup.com\/privacy\" target=\"_blank\" rel=\"noopener nofollow\">https:\/\/clickup.com\/privacy<\/a>. <\/p><h4 id=\"c-lexoffice\"><strong>c) Lexoffice<\/strong><\/h4><p>We use the online accounting service Lexoffice provided by Haufe-Lexware GmbH &amp; Co. KG, Munzinger Stra\u00dfe 9, 79111 Freiburg (Haufe-Lexware).<\/p><p>Lexoffice is used for quotes, order processing, and as accounting software. In this context, we process and transfer the following data to Haufe-Lexware: <\/p><ul><li>Salutation<\/li><li>First and last name<\/li><li>Email address<\/li><li>Phone number<\/li><li>Company name (for businesses)<\/li><li>Address<\/li><li>Product contracts and usage<\/li><li>Contract data<\/li><li>Payment data<\/li><li>VAT ID (if available)<\/li><\/ul><p>The data is shared exclusively for the purpose of processing and completing the services you have commissioned, and thus serves the performance of the contract. The legal basis for this is Art. 6(1)(b) GDPR. As part of the processing relationship, Haufe-Lexware acts exclusively on our instructions and has been contractually obligated, within the meaning of Art. 28 GDPR, to comply with data protection regulations.   <\/p><p>Details on data protection at Lexoffice, as well as Haufe-Lexware&#039;s privacy policy, can be found at: <a href=\"https:\/\/www.lexoffice.de\/datenschutz\/\" target=\"_blank\" rel=\"noopener nofollow\">https:\/\/www.lexoffice.de\/datenschutz\/<\/a>.<\/p><h4 id=\"d-domain-registration\"><strong>d) Domain registration<\/strong><\/h4><p>For domain registration (e.g. with DENIC eG), we use the services of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (Cloudflare), united-domains Reselling GmbH, Gautinger Str. 10, 82319 Starnberg (domain reselling), and Netcup GmbH, Daimlerstra\u00dfe 25, 76185 Karlsruhe (Netcup).<\/p><p>To register a domain, the following data is processed and shared with Cloudflare, Domainreselling, and Netcup:<\/p><ul><li>Salutation<\/li><li>First and last name<\/li><li>Email address<\/li><li>Phone number<\/li><li>Company name (for businesses)<\/li><li>Address<\/li><\/ul><p>The data is shared exclusively for the purpose of processing and completing the services you have commissioned, and thus serves the performance of the contract. The legal basis for this is Art. 6(1)(b) GDPR.   <\/p><p>As part of the processing relationship, Cloudflare, Domainreselling, or Netcup act exclusively on our instructions and have been contractually obligated, within the meaning of Art. 28 GDPR, to comply with data protection regulations.<\/p><p>Details on data protection at Cloudflare, Domainreselling, and Netcup, as well as their privacy policies, can be found at: <a href=\"https:\/\/www.cloudflare.com\/cloudflare-customer-dpa\/\" target=\"_blank\" rel=\"noopener nofollow\">https:\/\/www.cloudflare.com\/cloudflare-customer-dpa\/<\/a>, <a href=\"https:\/\/www.ud-reselling.com\/datenschutz\/\" target=\"_blank\" rel=\"noopener nofollow\">https:\/\/www.ud-reselling.com\/datenschutz\/<\/a>, and <a href=\"https:\/\/www.netcup.de\/kontakt\/datenschutzerklaerung.php\" target=\"_blank\" rel=\"noopener nofollow\">https:\/\/www.netcup.de\/kontakt\/datenschutzerklaerung.php<\/a>. <\/p><h2 id=\"ai-supported-services-and-machine-translation\">AI-supported services and machine translation<\/h2><p>For certain services, we use AI-supported technologies, including machine translation and text generation. The following service providers act as processors in this regard: <\/p><p>DeepL SE, Maarweg 165, 50825 Cologne, Germany \u2014 Machine translation of texts \u2014 Art. 6(1)(f) GDPR (legitimate interest in efficient multilingual communication). No third-country transfer; processing takes place exclusively within the EU. Data processing agreement (DPA) concluded on 06\/05\/2026 via deepl.safebase.us.    <\/p><p>Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland \u2014 Google Cloud Translation API (fallback translation) \u2014 Art. 6(1)(f) GDPR. Processing within the EU\/EEA; for transfers to third countries: Standard Contractual Clauses (SCC) and the EU-US Data Privacy Framework (EU-US DPF). Google Cloud Customer Data Processing Addendum (CDPA) accepted on 06\/05\/2026.<\/p><p>OpenAI Ireland Ltd., 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, Ireland \u2014 AI-supported text generation for internal agency workflows \u2014 Art. 6(1)(f) GDPR. Standard Contractual Clauses (SCC) and the EU-US Data Privacy Framework (EU-US DPF). Data Processing Addendum (DPA) signed on 06\/05\/2026.<\/p><p>IONOS SE, Elgendorfer Stra\u00dfe 57, 56410 Montabaur, Germany \u2014 IONOS AI Model Hub (AI-supported text generation and analysis with open-source language models) \u2014 Art. 6(1)(f) GDPR. No third-country transfer; processing takes place in data centres in Germany. Data processing agreement under Art. 28 GDPR concluded on 01.10.2026.<\/p>\n<h2 id=\"error-monitoring-and-performance-monitoring-sentry\">Error monitoring and performance monitoring (Sentry)<\/h2>\n<p>To ensure the stable and error-free operation of our digital services, we use the service <strong>Sentry<\/strong>.<\/p><p><strong>Provider: <\/strong>Functional Software, Inc., 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA. European representative: Sentry Software Netherlands B.V., Keizersgracht 391A, 1016 EJ Amsterdam, Netherlands.<\/p><p><strong>Data processed: <\/strong>Anonymized IP address (last octet set to &quot;0&quot;), URL accessed, error message and stack trace, browser and operating system information, anonymized session information, and server-side performance data.<\/p><p><strong>Purpose: <\/strong>Detecting and fixing technical errors, ensuring the stability and performance of our services.<\/p><p><strong>Legal basis: <\/strong>Art. 6(1)(f) GDPR (legitimate interest). IP anonymization prior to transmission.   <\/p><p><strong>Data transfer: <\/strong>European Sentry endpoint; storage in Germany and the USA based on EU Standard Contractual Clauses. DPA concluded in accordance with Art. 28 GDPR. <\/p><p><strong>Storage period: <\/strong>90 days.<\/p><p><strong>Objection: <\/strong><a href=\"mailto:datenschutz@onnetwork.agency\" rel=\"noopener\">datenschutz@onnetwork.agency<\/a> | <a href=\"https:\/\/sentry.io\/privacy\/\" target=\"_blank\" rel=\"noopener nofollow\">sentry.io\/privacy<\/a><\/p>\n<h3 id=\"address-suggestions-in-address-forms-photon\">Address suggestions in address forms (Photon)<\/h3>\n<p>In the address forms on our portals dash.onnetwork.agency, customer.onnetwork.agency, and reseller.onnetwork.agency (for example, contacts, customer and supplier addresses, profile, and onboarding), we suggest matching addresses as you type and, once you make a selection, automatically fill in the street, postal code, city, and country.<\/p><p><strong>How it works: <\/strong>The characters you enter are sent to our servers or to a Cloudflare Worker operated by us. From there, we query the open-source geocoding software Photon (based on OpenStreetMap data). We run our own Photon instance for this purpose on on:NetworkAgency servers in Germany.  <\/p><p><strong>Data processed: <\/strong>the address fragments you enter and your language setting. Your IP address is not shared with the Photon instance, and no cookies are set. We do not store search queries; only the address you confirm is stored.  <\/p><p><strong>Purpose and legal basis: <\/strong>easier data entry and accurate, deliverable addresses; Art. 6(1)(b) GDPR, insofar as the entry serves the initiation or performance of a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in error-free data collection). Consent under Section 25 TDDDG is not required, since no information is stored on or read from your device.     <\/p><p><strong>Third-country transfer: <\/strong>none.<\/p><!--\/email_off--><p class=\"onlegal-last-updated\"><small>Zuletzt aktualisiert: 24. October 2026<\/small><\/p><\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":3,"featured_media":1773,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-1429","page","type-page","status-publish","has-post-thumbnail","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/onnetwork.agency\/en\/wp-json\/wp\/v2\/pages\/1429","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/onnetwork.agency\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/onnetwork.agency\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/onnetwork.agency\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/onnetwork.agency\/en\/wp-json\/wp\/v2\/comments?post=1429"}],"version-history":[{"count":3,"href":"https:\/\/onnetwork.agency\/en\/wp-json\/wp\/v2\/pages\/1429\/revisions"}],"predecessor-version":[{"id":1774,"href":"https:\/\/onnetwork.agency\/en\/wp-json\/wp\/v2\/pages\/1429\/revisions\/1774"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/onnetwork.agency\/en\/wp-json\/wp\/v2\/media\/1773"}],"wp:attachment":[{"href":"https:\/\/onnetwork.agency\/en\/wp-json\/wp\/v2\/media?parent=1429"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}