Privacy policy of Bayern Innovativ GmbH

We welcome you to our website and appreciate your interest in our company. We take the protection of your personal data very seriously. We process your data in accordance with the applicable legal provisions for the protection of personal data, in particular the EU General Data Protection Regulation (EU GDPR) and the country-specific implementation laws applicable to us. This privacy policy provides you with comprehensive information about the processing of your personal data by Bayern Innovativ GmbH and the rights to which you are entitled.

>> Transparency and information obligations for applicants
>> Transparency and information obligations for customers / suppliers and other contractual partners

Personal data is information that makes it possible to identify a natural person. This includes, in particular, name, date of birth, address, telephone number, e-mail address, but also your IP address.

Anonymous data exists if no personal reference to the user can be established.

Responsible body and data protection officer

Address
Bayern Innovativ GmbH
Am Tullnaupark 8
90402 Nuremberg

Contact information
Contact by mail
Tel.: 0911-20671-0
www.bayern-innovativ.de

Contact of the data protection officer
Contact by mail

First of all, we would like to inform you here about your rights as a data subject. These rights are standardized in Art. 15 - 22 EU GDPR. This includes:

To assert these rights, please contact: Contact us by e-mail.

The same applies if you have any questions about data processing in our company. You also have the right to lodge a complaint with a data protection supervisory authority.

Please note the following in connection with rights of objection:

If we process your personal data for the purpose of direct marketing, you have the right to object to this data processing at any time without giving reasons. This also applies to profiling insofar as it is associated with direct advertising.

If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection is free of charge and can be made informally, if possible to: datenbank(at)bayern-innovativ.de.

In the event that we process your data to protect legitimate interests, you can object to this processing at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions.

We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defense of legal claims.

When processing your personal data, we comply with the provisions of the EU GDPR and all other applicable data protection regulations. The legal basis for data processing arises in particular from Art. 6 EU GDPR. We use your data to initiate business, to fulfill contractual and legal obligations, to execute the contractual relationship, to offer products and services and to strengthen the customer relationship, which may also include analyses for marketing purposes and direct advertising.

The range of services offered by Bayern Innovativ GmbH includes

Your consent also constitutes a data protection permission regulation. We will inform you about the purposes of data processing and your right of withdrawal. If the consent also relates to the processing of special categories of personal data, we will expressly point this out to you in the consent.

Special categories of personal data within the meaning of Art. 9 (1) EU GDPR will only be processed if this is required by law and there is no reason to assume that you have an overriding legitimate interest in the exclusion of processing.

We will only pass on your data to third parties within the framework of the statutory provisions or with the appropriate consent. Otherwise, your data will not be passed on to third parties unless we are obliged to do so due to mandatory legal provisions (disclosure to external bodies such as supervisory authorities or law enforcement agencies).

Within our company, we ensure that only those persons receive your data who need it to fulfill their contractual and legal obligations. In many cases, service providers support our specialist departments in fulfilling their tasks. The necessary data protection contracts have been concluded with all service providers. This includes shipping service providers for the dispatch of advertising materials, the paypal payment service, agencies for the creation of advertising and information materials, service providers for internet hosting and software providers.

We store your data for as long as it is required for the respective processing purpose. Please note that numerous retention periods require that data (must) continue to be stored. This applies in particular to retention obligations under commercial or tax law (e.g. German Commercial Code, German Fiscal Code, etc.). If there are no further retention obligations, the data is routinely deleted once the purpose has been achieved.

In addition, we may retain data if you have given us your permission to do so or if legal disputes arise and we use evidence within the scope of statutory limitation periods, which can be up to thirty years; the regular limitation period is three years.

We use appropriate technical and organizational security measures to protect the data stored by us against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. The security levels are continuously reviewed in cooperation with security experts and adapted to new security standards.

The exchange of data to and from our website is always encrypted. We offer HTTPS as the transmission protocol for our website, always using the latest encryption protocols. It is also possible to use alternative communication channels (e.g. by post).

Various personal data are necessary for the establishment, execution and termination of the contractual relationship and the fulfillment of the associated contractual and legal obligations. The same applies to the use of our website and the various functions it provides.

We have summarized the details for you in the point above. In certain cases, data must also be collected or made available due to legal provisions. Please note that it is not possible to process your request or perform the underlying contractual relationship without providing this data.

Which data we process is determined by the respective context. This depends on whether you use one of our forms or subscribe to our newsletter, for example. Please note that we may also provide information for special processing situations separately in a suitable place.

For reasons of technical security (in particular to defend against attempted attacks on our web server), this data is stored in accordance with Art. 6 para. 1 lit. f EU-GDPR. After 7 days at the latest, anonymization takes place by shortening the IP address so that no reference to the user is established.

We do not use purely automated processing to reach a decision.

There is a contact form on our website that can be used to contact us electronically. If you write to us via the contact form, we will process the data you provide in the contact form to contact you and answer your questions and requests.

The principle of data minimization and data avoidance is observed in that you only have to provide the data that we absolutely need to contact you. These are your e-mail address and the message field itself. In addition, your IP address is processed for technical reasons and for legal protection. All other data are voluntary fields and can be provided optionally (e.g. to answer your questions more individually).

If you contact us by e-mail, we will process the personal data provided in the e-mail solely for the purpose of processing your request. If you do not use the forms provided to contact us, no further data will be collected.

You can subscribe to a free newsletter on our website. The e-mail address provided when registering for the newsletter and your name, if provided, will be used to send you the personalized newsletter.

The principle of data minimization and data avoidance is observed here, as only the name, company and email address fields are marked as mandatory fields. For technical reasons and for legal protection, your IP address is also processed when you order the newsletter. In addition, our newsletter tracking records user behavior for statistical analysis. If you have given your consent, we evaluate your clicks in newsletters with the help of so-called tracking pixels, i.e. invisible image files. These are assigned to your e-mail address and are linked to a unique ID so that clicks in the newsletter can be clearly assigned to you. The usage profile is used to tailor the newsletter offer to your interests. We record when you read newsletters and which links you click on and use this information to create an interest profile.

You can of course unsubscribe at any time using the unsubscribe option provided in the newsletter and thus revoke your consent.

The personal data you provide when registering will be stored in the Salesforce Sales Cloud. In addition, your personal data will also be transferred to the Salesforce Marketing Cloud in order to carry out personalized advertising measures by e-mail. The data will be processed until you withdraw your consent. The data is used exclusively by us.

On our website, you have the option of contacting us via a chat form.

The principle of data minimization and data avoidance is observed here in that you only have to provide the data that we absolutely need for a conversation with you. This includes your name, company and e-mail address. In addition, your IP address and the Bayern Innovativ entry URL, Bayern Innovativ chat URL, chat history, browser information, the operating system used and the number of visits are processed for technical reasons and for legal protection.

In order to protect the security and confidentiality of your data in the best possible way, we implement appropriate security measures. Your request is transmitted to us in encrypted form.

As part of the chat function, we work with the Userlike tool from the provider Userlike UG Probsteigasse 44-46, 50670 Cologne.

We process the data you provide in the order form for our innovation magazine only to carry out or process the dispatch.

The principle of data economy and data avoidance is observed in that you only have to provide us with the data that we absolutely need to execute the contract or to fulfill our contractual obligations or that we are legally obliged to collect. Of course, you can also provide more data if you wish.

Bayern Innovativ GmbH is interested in maintaining the customer relationship with you and sending you information and offers about our products / services, e.g. upcoming congresses, cooperation forums, joint stands or other events. We therefore process your data in order to send you relevant information and offers by e-mail.

If you do not wish this, you can object to the use of your personal data for the purpose of direct advertising at any time; this also applies to profiling insofar as it is associated with direct advertising. If you object, we will no longer process your data for this purpose.

The objection can be made free of charge and informally without giving reasons and should be sent to 0911-20671-0, by e-mail to Per Mail kontaktieren or by post to Bayern Innovativ GmbH, Am Tullnaupark 8, 90402 Nuremberg.

Our website uses so-called cookies in several places. They serve to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser (locally on your hard disk). On the basis of our legitimate interest (Art. 6 para. 1 sentence 1 lit. f EU GDPR), we use technically necessary cookies that are required for the operation of the website and to ensure its functionality. Depending on the purpose, these are stored permanently - even after the end of the session (so-called persistent cookies, e.g. opt-out) or are deleted when the browser is closed (so-called session cookies - these are only valid for one browser session).

We also set other cookies with your consent. These cookies enable us to analyze how users use our websites. This enables us to tailor the website content to the needs of visitors. Cookies also enable us to measure the effectiveness of a particular advertisement and to place it according to the thematic interests of the user, for example. The legal basis for this is your consent (Art. 6 para. 1 sentence 1 lit. a EU GDPR).

If you have given your consent here, you can of course revoke it at any time without giving reasons via the cookie banner ("Cookie settings").

This website uses the Cloudfront Content Delivery Network (CDN). This is a service of Amazon Web Services Inc, 410 Terry Avenue North, Seattle, WA 98109-5210. The Cloudfront CDN provides duplicates of data from a website on various Amazon Web Services (AWS) servers distributed around the world. This results in faster website loading times, greater reliability and increased protection against data loss. Some of the images and videos embedded on this website are retrieved from the Cloudfront CDN when the page is accessed. Through this retrieval, information about your use of our website (such as your IP address) is transferred to Amazon servers in other EU countries and stored there. This happens as soon as you enter our website. The use of Amazon Web Services and the Amazon CDN Cloudfront is in the interest of greater reliability of the website, increased protection against data loss and better loading speed of this website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. You can find out more about the data protection measures of Amazon Web Services at: aws.amazon.com/de/data-protection/

You can find the current privacy policy of Amazon Web Services at: aws.amazon.com/de/privacy/

This service may transfer the data collected to another country. Please note that this service may transfer data outside the European Union and the European Economic Area and to a country that does not offer an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for monitoring and surveillance purposes without you having any legal recourse. However, we take the possible measures required under data protection law in accordance with Art. 44 et seq. EU GDPR to establish the level of data protection in the third country.

Matomo (Art. 6 para. 1 lit. a EU-GDPR)

If you have given your consent (Art. 6 para. 1 lit. a EU GDPR), we use the "Matomo" service (formerly "Piwik") on our website, an open source web analysis service provided by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand. Matomo stores cookies on your end device that enable us to analyze your use of our website. The use of Matomo enables us to analyze the use of our website as well as individual functions and offers and thus to continuously improve the user experience. For data protection reasons, all data collected in the process is stored locally only:

We use Matomo with the setting "Anonymize Visitors' IP addresses". This means that IP addresses are further processed in abbreviated form, thus excluding the possibility of direct personal references. The software is set so that the IP addresses are not stored in full, but 2 bytes of the IP address are masked. In this way, it is no longer possible to assign the shortened IP address to the accessing computer. The IP address transmitted by your browser via Matomo is not merged with other data collected by us.

You can revoke your consent to the use of Matomo at any time in our cookie settings.

The provider of this website uses services of etracker GmbH from Hamburg, Germany(www.etracker.com) to analyze usage data in the magazine section at https://emagazin.bayern-innovativ.de. We do not use cookies for web analysis by default. If we use analysis and optimization cookies, we will obtain your explicit consent separately in advance. If this is the case and you give your consent, cookies are used to enable a statistical analysis of the reach of this website, to measure the success of our online marketing measures and test procedures, e.g. to test and optimize different versions of our online offering or its components. Cookies are small text files that are stored by the Internet browser on the user's end device. etracker cookies do not contain any information that enables a user to be identified.

The data generated with etracker is processed and stored by etracker on behalf of the provider of this website exclusively in Germany and is therefore subject to the strict German and European data protection laws and standards. etracker has been independently audited and certified in this respect and has been awarded the ePrivacyseal data protection seal of approval.

Data processing is carried out on the basis of the legal provisions of Art. 6 para. 1 lit. f (legitimate interest) of the General Data Protection Regulation (GDPR). Our concern within the meaning of the GDPR (legitimate interest) is the optimization of our online offer and our website. Since the privacy of our visitors is important to us, the data that may allow a reference to an individual person, such as the IP address, login or device identifiers, are anonymized or pseudonymized as soon as possible. No other use, merging with other data or disclosure to third parties takes place.

You can object to the data processing described above at any time by clicking on the slider. The objection has no negative consequences. If no slider is displayed, data collection has already been prevented by other blocking measures.

Further information on data protection at etracker can be found here.

We use the podcast hosting service Podigee from the provider Podigee GmbH, Schlesische Straße 20, 10997 Berlin, Germany. The podcasts are loaded by Podigee or transmitted via Podigee.

The use is based on our legitimate interests, i.e. interest in the secure and efficient provision, analysis and optimization of our podcast offer in accordance with Art. 6 para. 1 lit. f. GDPR. GDPR.

Podigee processes IP addresses and device information to enable podcast downloads/playbacks and to determine statistical data, such as the number of downloads. This data is anonymized or pseudonymized before being stored in Podigee's database, unless it is necessary for the provision of the podcasts.

All Podigee content is deactivated by default. A direct connection to the Podigee servers is only established if you consent to the use of Podigee in the cookie settings or activate it yourself with a click.

Further information and objection options can be found in Podigee's privacy policy: https://www.podigee.com/de/about/privacy/.

We use Google Maps (API) from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") on our website. To ensure data protection, Google Maps is deactivated when you enter this website for the first time. A direct connection to Google's servers is only established when you activate Google Maps yourself (consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR). You can revoke your consent at any time in the cookie banner (fingerprint symbol). This prevents your data from being transmitted to Google the first time you visit the site. After activation, Google Maps will save your IP address. This is then usually transferred to a Google server in the USA and stored there.

In this case, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you having any legal recourse. However, we take the possible measures required under data protection law in accordance with Art. 44 et seq. EU-GDPR to ensure the level of data protection in the third country.

All Google Maps content is deactivated by default. A direct connection to the Google servers is only established if you consent to the use of Google Maps in the cookie settings or activate it yourself with a click.

Additional information on the handling of user data can be found in Google's privacy policy: https: //www.google.de/intl/de/policies/privacy/.

We use the YouTube video portal on our website, which is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "YouTube").

All YouTube content is deactivated by default. A direct connection to the YouTube servers is only established if you consent to the use of YouTube as part of the cookie settings or activate videos independently with a click.

The legal basis for the processing of your data is then your consent in accordance with Art. 6 para. 1 lit. a EU GDPR, which you can revoke at any time by changing the cookie settings with effect for the future. Please note, however, that you will then no longer be able to use the video portal and associated actions, such as participation in an event via livestream.

Please note that your IP address and browser data may be transmitted to YouTube and cookies may be set in your browser. These are then usually transferred to a server in the USA and stored there.

You have the option of revoking your consent to view individual videos at any time.

Please note that a transfer of data to a third country outside the EU/EEA cannot be ruled out, which may have a lower level of data protection than the EU. Further information on the processing of your data by YouTube as well as your rights and setting options to protect your privacy can be found at https://policies.google.com/privacy?hl=de.

In addition to YouTube, we have also integrated videos from the Vimeo platform in certain areas of our website. Here too, data is transferred to the Vimeo server. These processing operations are based on your consent (Art. 6 para. 1 lit. a EU GDPR). You can revoke this consent at any time in the cookie settings.

Please note that your IP address will be transmitted to Vimeo (Vimeo, LLC555 West 18th Street New York, NY 10011 United States) and that the provider will set cookies in your browser. This is a data transfer to an insecure third country, so that in this case there is a risk that your data may be processed by US authorities for control and monitoring purposes without you possibly having any legal recourse. However, we take the possible measures required under data protection law in accordance with Art. 44 et seq. EU-GDPR to ensure the level of data protection in the third country.

All Vimeo content is deactivated by default. A direct connection to the Vimeo servers is only established if you consent to the use of Vimeo in the cookie settings or activate it yourself with a click.

On our website you will find links to the social media services of Facebook, Twitter, Linked In, Xing. You can recognize links to the websites of social media services by the respective company logo. If you follow these links, you will reach Bayern Innovativ's corporate presence on the respective social media service. When you click on a link to a social media service, a connection to the servers of the social media service is established. This tells the social media service's servers that you have visited our website. In addition, further data is transmitted to the provider of the social media service. These are, for example

If you are already logged in to the corresponding social media service at the time you activate the link, the provider of the social media service may be able to determine your user name and possibly even your real name from the transmitted data and assign this information to your personal user account with the social media service. You can exclude this possibility of assignment to your personal user account if you log out of your user account beforehand.

The servers of the social media services are located in the USA and other countries outside the European Union. The data may therefore also be processed by the provider of the social media service in countries outside the European Union. Please note that companies in these countries are subject to data protection laws that do not generally protect personal data to the same extent as is the case in the member states of the European Union.

Please note that we have no influence on the scope, type and purpose of data processing by the provider of the social media service. For more information on the use of your data by the social media services integrated on our website, please refer to the privacy policy of the respective social media service.

Persons under the age of 16 may not transmit any personal data to us or submit a declaration of consent without the consent of their legal guardian. We would like to encourage parents and legal guardians to actively participate in the online activities and interests of their children.

Our website also contains - clearly recognizable - links to the websites of other companies. Where links to websites of other providers are available, we have no influence on their content. Therefore, no guarantee or liability can be assumed for this content. The respective provider or operator of the pages is always responsible for the content of these pages.

The linked pages were checked for possible legal violations and recognizable infringements at the time of linking. Illegal content was not recognizable at the time of linking. However, permanent monitoring of the content of the linked pages is not reasonable without concrete evidence of an infringement. If we become aware of any legal infringements, such links will be removed immediately.

We reserve the right to amend our privacy policy from time to time to ensure that it always complies with current legal requirements or to implement changes to our services in the privacy policy. We recommend that you read this privacy policy regularly to keep up to date with the protection of the personal data we collect. By continuing to use the service, you agree to these data protection provisions and their updating.

Privacy policy / Information on data protection in social media

Bayern Innovativ GmbH maintains appearances in the "social media". Insofar as we have control over the processing of your data, we ensure that the applicable data protection regulations are complied with.

Below you will find the most important information on data protection law in relation to our websites.

Name and address of the controller

In addition to Bayern Innovativ GmbH, those responsible for the company websites within the meaning of the EU General Data Protection Regulation (EU GDPR) and other data protection regulations are

• Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
• Instagram (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
• Twitter (Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA)
• YouTube (Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland)
• Xing (Xing SE, Dammtorstraße 30, 20354 Hamburg, Germany)
• Podigee (Podigee GmbH, Schlesische Straße 20, 10997 Berlin, Germany)
• LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland)

However, you use these platforms and their functions at your own risk. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating).

We would also like to point out that your data may be processed outside the European Union. The contract required under data protection law will be concluded.

Purpose and legal basis

We maintain the fan pages ourselves in order to communicate with visitors to these pages and to inform them about our offers in this way.

We also collect data for statistical purposes in order to further develop and optimize the content and to make our offer more attractive. The data required for this (e.g. total number of page views, page activities and data provided by visitors, interactions) are processed and made available by the social networks. We have no influence on the generation and presentation of this data.

In addition, your personal data is processed by the social media providers, but also by Bayern Innovativ GmbH, for market research and advertising purposes. For example, it is possible that user profiles are created based on your usage behavior and the resulting interests. This allows, among other things, advertisements to be placed within and outside the platforms that presumably correspond to your interests. Cookies are usually stored on your computer for this purpose. Irrespective of this, data that is not collected directly from your end devices may also be stored in your usage profiles. Data is also stored and analyzed across devices; this applies in particular, but not exclusively, if you are registered as a member and logged in to the respective platforms.

The processing of your personal data by Bayern Innovativ GmbH is based on our legitimate interests in effective information and communication in accordance with Art. 6 para. 1 sentence 1 lit. f. EU-GDPR.

If you are asked for consent to data processing, i.e. if you declare your consent by confirming a button or similar (opt-in), the legal basis for processing is Art. 6 para. 1 sentence 1 lit. a., Art. 7 EU-GDPR.

Your rights / option to object

If you are a member of a social network and do not want the network to collect data about you via our website and link it to your stored membership data with the respective network, you must

• log out of the respective network before visiting our fan page,
• delete the cookies on your device and
• close and restart your browser.

After logging in again, however, you will once again be recognizable to the network as a specific user.

For a detailed description of the respective processing and the opt-out options, please refer to the information linked below:

• Facebook
  Privacy Policy: https: //www.facebook.com/about/privacy/; Opt-Out: https: //www.facebook.com/settings?tab=ads and www.youronlinechoices.com
  
• Instagram
  Privacy Policy: https: //help.instagram.com/519522125107875; Opt-Out: http: //www.networkadvertising.org/managing/opt_out.asp and www.youronlinechoices.com
  
• Twitter
  Privacy Policy: http://twitter.com/privacy
  
• YouTube
  Privacy Policy: https: //policies.google.com/privacy; Opt-Out: https: //tools.google.com/dlpage/gaoptout?hl=de and www.youronlinechoices.com
  
• Podigee
  Privacy Policy: https://www.podigee.com/de/about/privacy
  
• Xing
  Privacy Policy: https: //privacy.xing.com/de/datenschutzerklaerung; Opt-Out: http://www.youronlinechoices.com
  
• LinkedIn
  Privacy Policy: https: //www.linkedin.com/legal/privacy-policy; Opt-Out: https: //www.linkedin.com/legal/cookie-policy and http://www.youronlinechoices.com

Overall, you have the following rights regarding the processing of your personal data Right of access; right to rectification; right to erasure; right to restriction of processing; right to object; right to data portability; right to lodge a complaint about unlawful processing of your personal data with the competent data protection authority.

However, since Bayern Innovativ GmbH does not have full access to your personal data, you should contact the social media providers directly when asserting your rights, as they have access to the personal data of their users and can take appropriate measures and provide information.

Notes on copyright and artistic copyright

If you wish to publish images, texts, plans, videos, music, etc. on our website, you should be aware that you may be assigning all rights of use to the network, which could ultimately have legal consequences for you if you are not the author or rights holder yourself.