Privacy Policy
Responsible party pursuant to data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
Inceptua S.A.
2, Place de Paris
2314 Luxembourg
E-mail: info@inceptua.com
1. Your Rights as Data Subject
• Information on your data stored by us and the processing thereof (Art. 15 GDPR),
• Rectification of inaccurate personal data (Art. 16 GDPR),
• Deletion of your data stored by us (Art. 17 GDPR),
• Restriction of the data processing, provided that we may not delete your data due to legal obligations (Art. 18 GDPR),
• Objection to the processing of your data with us (Art. 21 GDPR) and
• Data portability, provide that you have consented to the data processing or have entered into a contract with us (Art. 20 GDPR).
If you have given us consent, you may withdraw it at any time with future effect. You can contact a supervisory authority with a complaint at any time, e.g. the supervisory authority of the state of your residence or the authority that oversees us as the responsible party. You’ll find a list of supervisory authorities (for the non-public area) with their respective addresses at: https://edpb.europa.eu/about-edpb/about-edpb/members_en
Objection to Processing
You have the right, for reasons arising from your particular situation to object at any time to the processing of personal data concerning you on the basis of Art. 6(1)(f) GDPR (data processing based on legitimate interests); this also applies to profiling based on this provision within the meaning of Art. 4(4) GDPR. If you file an objection, we will no longer process your personal data unless we can prove compelling reasons for the processing worthy of protection which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.
2. Collecting General Information about Visitors to our Website
Type and Purpose of the Processing
When you access our website – i.e. if you do not register or submit information – information of a general nature will be collected automatically. This information (server log files) contains the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and the like. This data is processed in particular for the following purposes:
• Ensuring an unproblematic website connection;
• Ensuring seamless use of our website;
• Analysis of system security and stability; as well as
• Additional administrative purposes.
We will not use your data to draw conclusions about your person. This type of information will be statistically analysed by us if necessary to optimise our website and its underlying technology.
Legal Basis
The processing occurs according to Art. 6 Para. 1 (f) GDPR, based on our legitimate interest in improving the stability and functionality of our website.
Recipients
Recipients of the data may be technical service providers, who work on the operation and maintenance of our website as the processor.
Retention Period
The data will be deleted as soon as they are no longer required for the reason they were collected. This is generally the case, after the respective session has ended, for data that are used to make the website available.
Mandatory or Required Provision of Data
The provision of the aforementioned personal data is neither legally nor contractually mandatory. Without the IP address however, the service and functionality of our website are not guaranteed. Furthermore, individual services can be unavailable or limited. For this reason, an objection is excluded. 122023 v2; ©Inceptua 2023
3. Contact
Purpose, Legal Basis and Legitimate Interest
On our website, there are several contact forms which can be used for electronic contact with us. If you take advantage of this option, the data entered in the input mask will be transmitted to us and stored by us.
Besides the data that you enter in the input mask (content of the inquiry), certain other metadata will also be processed (for example, date and time of the message, URL from which the message was sent and IP address from which the message was sent.
Alternatively, you may also contact us via the e-mail addresses provided, or per phone. Also in these cases, we will collect and process certain data about you.
Your data is stored for the purpose of individual communication with you.
The processing of the data entered in the contact form is based on a legitimate interest (Art. 6 (1) (f) GDPR) in the facilitation of uncomplicated contact with us. If you contact us to request a quote, the data entered in the contact form is processed to carry out pre-contractual measures (Art. 6. (1) (b) GDPR).
Recipients
Recipients of the data may be our service providers who act as our data processors. All service providers are contractually obliged to treat your data confidentially.
Retention Period
Data will be deleted no later than 6 months after processing the request. If a contractual relationship is established, we are subject to the statutory retention periods and delete your data after six to ten years.
Mandatory or Required Provision of Data
The provision of your personal data is voluntary. However, we can only process your request if you provide us with the required data and the reason for the request.
Objection
Please read the information about your right to object according to Art. 21 GDPR above,
4. Job applications
Purpose and Legal Basis
You can submit your job application to us via e-mail. We process the data you provide to review your application and your suitability for the advertised position, and to carry out the application process and contact you.
The processing occurs in order to establish an employment relationship and is based on Art. 6(1)(b) GDPR.
If you agree to your application being considered for future job openings, your application will be stored in our talent pool based on your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time with effect for the future.
Recipients
Within our company, only the departments which need your data to fulfil their contractual, legal and supervisory obligations, and to safeguard our legitimate interests will obtain access to your data. Furthermore, our service providers may also obtain access to your data. The service providers are obliged to keep your data confidential.
Retention Period
Should your application be rejected, it will be deleted six months after the notification of the decision.
If you give us your consent for storing your application in our talent pool, your application will be retained for a maximum of 2 years.
If your application is successful, the application documents will be saved at least for the duration of your employment.
Mandatory or Required Provision of Data
The provision of your personal data is neither legally nor contractually required. However, without the provision of the data, we unfortunately cannot process your application
5. Cookies
Type and Purpose of the Processing
Like many other websites, we use so-called ‘cookies’. Cookies are small text files that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website.
With cookies, we receive certain information such as IP address, type of browser and operating system used.
Cookies cannot be used to start programs or to transmit viruses to a computer. Based on the information contained in cookies, we can facilitate your navigation of our site and properly display our webpages for you.
The data collected by us will not be shared with third parties under any circumstances nor will a link to personal data be created without your consent.
Of course, you can view our website without cookies. Internet browsers are regularly configured to accept cookies. In general, you can disable the use of cookies via your browser settings at any time. Please use your Internet browser’s help function to learn how to change these settings, and keep in mind that individual features of our website may not work if you have disabled the use of cookies.
Retention Period and Cookies Used
You can find a list of all cookies used in our Cookie Policy.
In the following sections, we provide you with information concerning how these cookies can (also) pertain to personal data.
In your browser settings, you can delete individual cookies or the entire set of cookies. You will also find information and instructions on how to delete these cookies or prevent them from being saved in advance. The following links provide the information you’ll need for the respective browser providers:
• Mozilla Firefox: https://support.mozilla.org/en-US/kb/delete-cookies-remove-infowebsites-stored
• Internet Explorer: https://support.microsoft.com/en-gb/help/17442/windowsinternet-explorer-delete-manage-cookies
• Google Chrome: https://support.google.com/accounts/answer/61416?hl=en
• Opera: https://www.opera.com/o/ie-simple
• Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=en_US
6. Technically Required Cookies
Purpose, Legal Basis and Legitimate Interest
We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.
Technically required cookies are used for the following purposes: • Consent management
• Content delivery and presentation
• Implementation of changes to the website’s content in real-time.
Technically required cookies help to make a website usable by enabling basic functions such as page navigation and access to secure areas of the website. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.
The processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in a user-friendly design of our website and in the documentation of consent.
Recipients
We use technical service providers for the operation and maintenance of our website, who act as our data processors.
All service providers are contractually obligated to treat your data confidentially. Retention Period Details on the storage duration of cookies can be found in our Cookie Policy.
Mandatory or Required Provision of Data
The provision of the aforementioned personal data is neither legally nor contractually required.
However, without this data, the service and functionality of our website cannot be guaranteed. In addition, individual services and services may not be available or may be limited.
Objection
Please read the information about your right to object according to Art. 21 GDPR above.
7. Technically Not Required Cookies
The legal basis for these processing operations is in each case your consent, Art. 6 (1) (a) GDPR.
Recipients
We use technical service providers for the operation and maintenance of our website, who act as our data processors. All service providers are contractually obligated to treat your data confidentially.
Retention Period
For details on the storage duration of the cookies, please refer to our Cookie Policy.
Mandatory or Required Provision of Data
The provision of your data is voluntary, based solely on your consent. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
Withdrawal of Consent
You can withdraw your consent at any time in our Cookie Policy.
Profiling
With the help of web analytics tools, the behaviour of visitors to the website can be evaluated and interests can be analysed. For this purpose, we may create a pseudonymous user profile.
8. Using Google Analytics
Type and Purpose of the Processing
This website uses Google Analytics, a web analytics service of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA (hereinafter: ‘Google’). Google Analytics uses so-called ‘cookies’, i.e. text files that are stored on your computer and allow an analysis of your use of the website. The information generated by the cookie about your use of this website is typically transmitted to a Google server 122023 v2; ©Inceptua 2023 in the U.S. and stored there. However, due to the activation of IP anonymisation on these websites, your IP address will be truncated beforehand by Google within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the U.S. and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, summarise reports on website activities and provide other services related to website and Internet usage to the website operator. The IP address transferred from your browser as part of Google Analytics will not be combined with other data from Google.
The data processing purposes are the website-use analysis and the summary of reports on activities on the website. Based on the use of the website and the Internet, other related services will be provided.
Legal Basis
The processing of the data occurs on the basis of the user’s consent (Art. 6 Para. 1 (a) GDPR).
Recipients
The recipient of the data is Google as the processor. For this, we have entered into the corresponding data processing contract with Google.
Retention Period
The deletion of the data occurs as soon as they are no longer necessary for our recording-keeping purposes and will be deleted after 26 months.
Third Country Transfers
Google processes your data in the United States of America and is subject to the EUU.S. Data Privacy Framework: https://www.dataprivacyframework.gov/
Mandatory or Required Provision of Data
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this can lead to functional limitations on the website.
Withdrawal of Consent
You can prevent the storage of cookies by a corresponding setting in your browser software; however, please note that in this case you may not be able to use all the functions of this website in their entirety. Furthermore, you can prevent the collected data generated by the cookie and the data related to your use of the website (including your IP address) being transmitted to Google, as well as the processing of this data 122023 v2; ©Inceptua 2023 by Google, by downloading and installing the browser plug-in available at the following link: browser add-on to deactivate Google Analytics.
In addition, or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our web pages by clicking this link, which will install an opt-out cookie on your device. This will prevent data collection by Google Analytics for this website and for this browser in the future, as long as the cookie remains installed in your browser.
Profiling
With the assistance of the tracking tool Google Analytics, the browsing behaviour of the website visitors can be evaluated and their respective interests can be analysed. For this analysis, we create a pseudonymous user profile.
9. Using Script Libraries (Google Fonts)
Type and Purpose of the Processing
In order to present our content correctly and graphically appealing across all browsers, we use ‘Google Webfonts’ from Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA, hereinafter ‘Google’) to display fonts on this website. You’ll find the data protection guidelines of the library operator Google here: https://www.google.com/policies/privacy/.
Legal Basis
Your consent is the legal basis for the integration of Google Fonts and the associated data transfer to Google (Art. 6 Para. 1 (a) GDPR).
Recipients
The use of script libraries or font libraries automatically triggers a connection to the operator of the library. It is theoretically possible – but currently also unclear whether and to what end – that the operator, in this case Google, will collect data.
Retention Period
We do not collect any personal data via the integration of Google Fonts. You’ll find additional information on Google Fonts at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/. 122023 v2; ©Inceptua 2023
Third Country Transfers
Google processes your data in the United States of America and is subject to the EUU.S. Data Privacy Framework: https://www.dataprivacyframework.gov/.
Mandatory or Required Provision of Data
The provision of your personal data is neither legally nor contractually required.
However, the correct presentation of standard-fonts content is not possible without this provision.
Withdrawal of Consent
The programming language JavaScript is regularly used to display content. Thus, you can opt out of the data processing by disabling JavaScript execution in your browser or by installing a JavaScript blocker. Please note that this may result in functional limitations on the website.
10. YouTube videos
Type and Purpose of the Processing
We embed YouTube videos on our website. The operator of the respective plug-ins is Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. When you visit a page with the YouTube plug-in, a connection to the provider’s servers will be established. In case you are logged into your YouTube account, YouTube will be in a position to associate your browsing behaviour with you personally. You can prevent this by logging out of your YouTube account beforehand.
Once a YouTube video is started, the provider sets cookies that collect information about user behaviour.
You will find additional information on data protection in the provider’s privacy policy at: https://policies.google.com/privacy.
Legal Basis
Your consent is the legal basis for the integration of YouTube videos and the associated data transfer to Google (Art. 6 Para. 1 (a) GDPR).
Recipients and Third Country Transfer
Starting a YouTube video automatically triggers a connection to Google, which processes your data in the USA. Google is subject to the EU-U.S. Data Privacy Framework: https://www.dataprivacyframework.gov/
Retention Period and Withdrawal of Consent
Your data will be deleted in line with our Cookie Policy.
If you do not wish cookies to be placed on your device when watching embedded YouTube videos, you can disable the storage of cookies for the Google Ads Programme or block the storage of cookies in the browser altogether.
11. Vimeo
Type and Purpose of the Processing
We use the provider Vimeo for the integration of videos. Vimeo is operated by Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA.
We use plugins from the provider Vimeo on our website. If you have given your consent and access a sub-page of our website with such a plugin, a connection to the Vimeo servers is established and the respective video is loaded. Thereby, Vimeo obtains information on the pages you have visited. If you are logged into your Vimeo account, Vimeo assigns this information to your personal user account. You can prevent this by logging out of your Vimeo user account before using our website and deleting the corresponding cookies from Vimeo.
The purpose of the processing is to provide you with videos about our activities. You can find more information on the handling of user data in Vimeo’s privacy policy: https://vimeo.com/privacy.
Legal Basis
The legal basis for this processing is your consent pursuant to Art. 6 Para. 1 (a) GDPR.
Recipients and Third Country Transfer
When using Vimeo, your data will be transferred to Vimeo which is located in the USA. We have concluded Standard Contractual Clauses with Vimeo in order to protect your data adequately even after the transfer. We will provide you with a copy of the Standard Contractual Clauses on request.
Retention Period
Your personal data will only be processed in this context until the purpose of the processing no longer applies or until you have withdrawn your consent.
Withdrawal of Consent
In our Cookie Policy, you can withdraw your consent at any time with effect for the future.
Mandatory or Required Provision of Data
The provision of your data is voluntary, based on your consent.
12. Google reCAPTCHA
Nature and Purpose of Processing
To ensure the security and accessibility of the website for you, we use Google reCAPTCHA, a service of Google Ireland Ltd, Gordon House, Barrow Street Dublin 4, Ireland.
Google reCAPTCHA can be used to distinguish human access from unwanted software-generated access and thus prevent it.
In addition to your IP address, Google reCAPTCHA also processes browser data, the operating system used, as well as location and usage data.
Google reCAPTCHA sets a cookie in your browser to generate the necessary information and to allow the differentiation of accesses.
Legal Basis
We use Google reCAPTCHA on the basis of our legitimate interest in maintaining the accessibility of our website and the defence against cyber-attacks (Art. 6 para. 1 lit. f GDPR).
Recipient
The recipient of the data is Google as our data processor.
Storage Period
You can find the storage duration for the cookies used in this context in our Cookie Policy.
Mandatory or Required Provision of Data
The provision of your personal data is voluntary. However, we cannot offer you the service of our website without providing the data. 122023 v2; ©Inceptua 2023.
Objection
Please read the information about your right to object according to Art. 21 GDPR above.
13. SSL Encryption
To protect the security of your data during transmission, we use state-of-the-art encryption methods (such as SSL) via HTTPS.
14. Appointed Processors
The following organisations, companies or people were commissioned with data processing by the operator of this website:
- Google Analytics
- Flowerhaus ApS
15. Revision of this Privacy Policy
We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. Your next visit will be subject to the new privacy policy.
16. Questions for the Data Protection Officer
If you have any questions pertaining to data protection, please send us an e-mail or contact the person responsible for data protection in our organization:
Data Protection Officer of Inceptua
c/o activeMind AG Management- und Technologieberatung
Potsdamer Straße 3
80802 Munich
Germany
E-mail: privacy@inceptua.com Tel: +49 (0)89 91 92 94 – 900