Privacy policy

Status: December 2023

Thank you for your interest in our website. Below we inform you about which data we collect and process for which purposes when you use our website.

1. contact details of the controller and the data protection officer

The controller within the meaning of the EU General Data Protection Regulation (GDPR) for the collection, processing and use of personal data of website visitors (hereinafter referred to as “you”) is

aconium GmbH
Invalidenstraße 91
10115 Berlin
Phone: +49 (0)30 22183-0

The contact details of our data protection officer are: datenschutz@aconium.eu. You are welcome to send us your data protection concerns to this address.

2. data processing when using our website

2.1 Visiting the website and analyzing usage to improve the website

Every time you use our website, data is automatically collected:

• Date and time of access
• Name of the requested file
• Website from which the file was requested
• Access status (e.g. file transferred, file not found)
• the web browser you are using and the operating system of your device
• the IP address of the requesting device

The processing of this data is necessary to enable you to visit the website and to ensure the long-term functionality, availability and security of our systems. This represents our legitimate interest. The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. f GDPR.

The access data is also temporarily stored in internal log files in order to compile statistical data on the use of our website, to further develop our website with regard to the usage habits of our visitors (e.g. if the proportion of mobile devices with which the pages are accessed increases) and for general administrative maintenance of our website. The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. f GDPR, based on our legitimate interest in the appropriate optimization of our website. The information stored in the log files does not allow any direct conclusions to be drawn about your person – in particular, we only store the IP addresses in abbreviated, anonymized form. The log files are stored for 6 months and then deleted.

We also use the Matomo tool to analyze website user movements. The following data is collected for this purpose:

• IP address of the website visitor(s) (here we anonymize 2 bytes of the IP address)
• accessed website
• Website from which the website visitor reached the website accessed
• Subpages that are accessed from the accessed website
• Time spent on the website
• Frequency of visits to the website within 24 hours
• Device type, operating system, browser, browser plugins, localization, timestamp and browser language.

We host Matomo on our own server and use analysis methods that do not involve the use of cookies. The legal basis for the associated data processing is Art. 6 para. 1 sentence 1 lit. f GDPR, based on our legitimate interest in the appropriate optimization of our website and the improvement of the user experience of website visitors. The data collected for this purpose will be deleted after 180 days.

2.2 aconium newsletter

You have the option of subscribing to our aconium newsletter, which regularly informs you about new projects, events, dates and current information on the topics of regional development, broadband, digitization and publications by aconium GmbH, including opportunities in the field of geoinformation systems.

When registering for our newsletter, for which we use a double opt-in procedure, we ask you to provide your e-mail address so that we can send you the newsletter. You also have the option of providing further voluntary information (first name, surname, organization, position). We use your voluntary information to analyze the subscriber base. The legal basis for processing is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. You can unsubscribe from the newsletter at any time using the unsubscribe link included in every newsletter.

We store your consent for verification and documentation purposes for up to three years at the end of the year after the last newsletter was sent to you or your declaration of revocation. The individual newsletter e-mails are only stored temporarily for a short period during dispatch. They are not stored for longer.

2.3 Customer Portal

If you click on the “Customer Portal” link, you will be redirected to https://portal.aconium.eu/share/page. For more information on data protection, please refer to the privacy policy linked there.

2.4 Loose-leaf collection

You have the option of purchasing the loose-leaf collection via our online store. The order data (first name, surname, e-mail address, delivery address, invoice address, company) will be stored for the purpose of processing the purchase contract. The processing of the purchase contract makes it necessary to pass on the delivery data (name, delivery address, company) to the shipping company. The data will not be passed on to other third parties. The legal basis for the processing of your order data is Art. 6 para. 1 sentence 1 lit. b GDPR. If you act as a representative for your organization, we base the processing of personal data associated with the ordering process on our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR in the execution of the contract.

You can cancel the update service as a subscription via our online store. The data required for the cancellation process (name, e-mail address, company) will be stored for this purpose. Your data will not be passed on to third parties. The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. b GDPR. If you act as a representative for your organization, we process your personal data for the purpose of executing the termination and providing evidence and base the processing of personal data associated with the termination process on our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR in processing the termination process.

The data provided by you will be deleted after expiry of the two-year warranty period, unless statutory retention obligations provide for longer storage.

2.5 aconium Quickcheck

We offer you the aconium Quickcheck on our website. This enables you to obtain an initial assessment of your project’s eligibility for funding from our funding consultants. In order to carry out the Quickcheck, you must provide the following personal details in addition to information about your project:

• Experience with funding advice
• Maximum possible deductible
• Salutation
• Title
• First name
• Surname
• E-mail address*
• Telephone
• Website
• Type of organization*
• Preference Contact channel*

The mandatory information is marked with an asterisk (*).

The purpose of processing your data is to prepare an initial assessment of your project with regard to its eligibility for funding, to communicate the results to you and to exchange further information with you on the reviewed project.

The legal basis for the processing of your personal data is Art. 6 Para. 1 S. lit. b 2nd Alt. GDPR. The processing is necessary to carry out pre-contractual measures and only takes place at your request. The information you provide is required either to determine eligibility for funding or to communicate the results to you or to further discuss the eligibility of the project with you. If you decide to conclude a consultancy agreement with us, we base the subsequent processing of your personal data on Art. 6 para. 1 sentence b 1st alt. GDPR, as this is necessary for the performance of the contract.

If you act as a representative for a company or other institution, we process your personal data on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR. It is our legitimate interest to carry out the funding check you have submitted to us on the basis of the information you have provided and to transmit the results to you.

2.6 Digital basic check

If you click on the link “Digitaler Basischeck ” https://poll.aconium.eu/index.php/353541?lang=en, you will be redirected to https://ruraldigital.eu/check-your-digital-maturity-2/. For more information on data protection, please refer to the privacy policy linked there.

3. cookies and usage analysis

We have integrated YouTube videos on our website to offer you the best user experience. In order for you to watch the videos on our website, it is necessary that you consent to the setting of cookies by Google (YouTube). If you do not give your consent, you will not be able to watch the videos embedded on our website. However, the other functions of our website are available to you.

Detailed information on cookies and the processing of your personal data associated with the setting of cookies can be found in the following sections 3.1-3.3. In section 3.4. we provide information on the data processing triggered by the use of the Cookie Consent Manager.

3.1 What are cookies?

Cookies are data that are stored on your computer by a website that you visit and enable your browser to be reassigned. Cookies are used to transmit information to the site that sets the cookie. Cookies can store various information, such as your language setting, the duration of your visit to our website or the entries you make there. This prevents you from having to re-enter required form data each time you use the website, for example. The information stored in cookies can also be used to recognize preferences and target content according to areas of interest.

There are different types of cookies: Session cookies are data sets that are only temporarily stored in the working memory and are deleted when you close your browser. Permanent or persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. With this type of cookie, the information can also be stored in text files on your computer. However, you can also delete these cookies at any time via your browser settings.

First-party cookies are set by the website you are currently visiting. Only this website may read information from these cookies. Third-party cookies are set by organizations that do not operate the website you are visiting. These cookies are used by marketing companies, for example.

Cookies cannot run programs or transfer viruses to your computer.

3.2 Management of cookies on our website

By means of a cookie consent manager that appears when you visit our website for the first time, you can indicate your preferences for the setting of cookies, unless they are cookies that are necessary for the operation of the website within the meaning of § 25 TDDDG.

The info banner displayed to you contains information about the use of cookies. These are divided into different categories (required, settings, statistics, marketing).

“Required cookies” cannot be deselected. They help to make a website usable by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

“Preference cookies” allow a website to store information that changes the behavior or appearance of the website, such as your preferred language or the region you are in. However, we do not currently use cookies that fall into this category.

“Statistics cookies” can help website owners understand how visitors interact with websites by collecting and reporting information anonymously. However, we do not currently use cookies that fall into this category.

Marketing cookies are used to track visitors across websites. The aim is to place ads that are relevant and appealing to the individual user and therefore have a higher value for publishers and third-party providers. This also includes cookies that are set by social media providers.

Within the various categories, you can view the individual cookies with their functions and the associated providers as well as the storage period. If you click on the provider, you will also receive the provider’s information on the processing of your personal data by the respective provider.

As a website visitor, you can consent to the use of cookies, e.g. for the personalization of services and for marketing measures. Once you have given your consent, you can revoke it at any time with effect for the future or grant consent that has not been given by clicking on “Edit cookies” in the footer of the website.

Our cookie consent manager remembers your consent for twelve months. After that, the banner will automatically reappear the first time you visit our website. Changes to the use of cookies on our website may also make it necessary for us to ask for your consent again.

You can also generally prevent the storage of cookies by preventing the acceptance of cookies via this website in your browser settings. However, if you do not accept cookies, this can lead to considerable functional restrictions on our website in individual cases.

The details of the processing of your personal data associated with the use of the Cookie Consent Manager can be found in section 3.4.

3.3 Use of cookies on our website and the associated data processing

Cookies required for the operation of the website

Cookies are set on our website based on the settings you have made in the Cookie Consent Manager. So-called opt-in cookies, which store a cookie consent, are required for the operation of the website so that the “cookie banner” does not reappear each time the website is accessed. The legal basis is § 25 para. 1 i.V.m. Para. 2 TDDDG.

Cookies that are only set with consent

You can watch YouTube videos on our website if you have consented to the setting of cookies. This allows us to expand our range of information for you. The individual cookies and their functions are listed in the table on cookies requiring consent. Basically, these are marketing cookies from the YouTube video platform, which are used, among other things, to enable advertising tailored to the website visitor(s). The legal basis for the storage of cookies on your end device (PC, cell phone, etc.) is your consent in accordance with Section 25 (1) TDDDG. The following table gives you an overview of the individual purposes of the cookies set. In the section following the table with the heading “Further information on data processing based on the cookies set”, you will find information compiled by us regarding the processing of your personal data that Google Ireland Limited (“Google”) carries out with the data collected by means of the cookies.

Further information on data processing in connection with the cookies set

The data processing associated with the setting of cookies required for the operation of the website is carried out on the basis of our overriding legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, as website visitors must be given the opportunity to consent to or reject the use of cookies that are not required for the operation of the website in accordance with the legal regulations. Details on data processing via our cookie consent management system can be found in section 3.4.

The data processing associated with the setting of cookies by the provider of YouTube is based on your informed consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

The provider of the YouTube platform is YouTube, LLC, 901 Cherry Ave, 94066 San Bruno, CA, USA, a subsidiary of Google LLC, headquartered at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For users who have their habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (hereinafter referred to as “Google”), Gordon House, Barrow Street, Dublin 4, Ireland, is responsible for the processing of your personal data. Further information can be found in Google’s privacy policy under the heading “Data controller”.

Google collects various personal data about you (e.g. IP address, user settings and video history) and uses this data to improve its services, develop new services and to personalize its services. This includes, for example, personalized content and search results or recommendations (e.g. for videos or apps) and personalized advertising. You can find an overview of this in Google’s privacy policy in the section “Reasons for data collection by Google”. Details on the purposes can be found under “Requirements in Europe”.

If you are logged in to Google at the time of data collection, the information about the videos you have viewed will be assigned to your Google member account. You can prevent this by logging out of your member account before visiting our website. However, even if you are not logged into a Google account, Google stores the data collected from you with unique identifiers that are linked to the browser, app or device you are using. This makes it possible for Google to retain your settings across browser sessions and to display more relevant search results or advertising based on your activities.

Google also makes the data collected from you available to its affiliated companies (legal entities belonging to the Google group of companies) and other companies or persons who process this data on behalf of Google. You can find more information on this in Google’s privacy policy in the section “Data transfer”.

Google also shares the information with affiliated companies in the USA, such as Google LLC. For the USA, the European Commission published on 10.07.2023 its Appropriateness decision accepted. Google LLC is certified in accordance with the EU-US Privacy Framework.

Since Google operates servers all over the world, your data may also be processed outside the EU or the European Economic Area. Where data is processed in countries outside the EU/European Economic Area for which the European Commission has not issued an adequacy decision, Google states that it uses standard contractual clauses. Standard contractual clauses are model contracts adopted by the European Commission. With the standard contractual clauses, European data protection standards are contractually agreed between data exporters in the EU/European Economic Area and data importers in third countries. Google provides further information on the framework conditions for data transfers at the following link: https://policies.google.com/privacy/frameworks.

The promotional use of your personal data is the main focus for Google. We, aconium GmbH, use the statistics function provided to YouTube channel owners to evaluate the sources (e.g. this website) through which users access our videos or to find out more about the people who watch our videos. In this context, however, we only receive anonymized data. It is not possible for us to draw conclusions about individual persons.

Reloading YouTube content also causes Google Fonts to be loaded. Google emphasizes in a statement that the data collected in this way is limited to what is necessary for the smooth provision of the fonts and the creation of user statistics and that the data is not used to create end user profiles or for advertising.

Google provides further information on the processing of your personal data in its privacy policy.

3.4 Cookie consent manager and associated data processing procedures

We use the consent management service Cookiebot, Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, as a cookie consent manager. Website visitors can thus give their consent to the setting of cookies that are useful for the operation of the website, but not required within the meaning of § 25 TDDDG. The following data is processed with the help of cookies:

• Consent data:
  • • Consent ID (a unique identifier is required so that the website visitor can use it to request proof of consent from aconium GmbH)
    • Consent status:
      1. Confirmed consent categories (required to block scripts or unblock tracking elements on the website according to the website visitor’s selection);
      2. Version (required to keep track of which version of the consent the website visitor has agreed to, so that aconium GmbH can ask website visitors to renew their consent if it has been updated)
• URL visited (required to document what the website visitor has consented to)
• User language (required to select the language in which the consent banner is displayed)
• User agent (browser manufacturer and version, operating system; required to distinguish real website visitors from bots etc.)
• Your IP address (required to enable the routing of messages over the Internet, to perform geolocalization and to distinguish real website visitors from bots etc.)
• Geographical location (required to display the consent banner matching the geographical location and jurisdiction).

The consent data is stored in the browser for 12 months using the “CookieConsent” cookie. This means that your cookie preference is retained for subsequent page requests.

Usercentrics is the recipient of your personal data and acts as a processor for us.

Your personal data will be deleted on an ongoing basis after 12 months or immediately after termination of the contract between us and Usercentrics.

Please refer to our general explanations about cookies and their use on our website and how you can manage them under 3.1-3.3.

4. links to other websites and online offers

This website may contain links to the websites and online offers of other providers not affiliated with us. If you click on these links, we naturally no longer have any influence on what data is collected by the respective providers and what data is collected by them. Detailed information on data collection and use can be found in the privacy policy of the respective provider. As the collection and processing of data by third parties is beyond our control, we cannot accept any responsibility for this.

5. functions of social networks

Social plugins are integrated using the Shariff solution, which means that when you access an article or subpage on our website that contains these social plugins, information is not automatically forwarded to the relevant social media services. Only when the desired plugin is clicked will a new window of the plugin provider open. Only then will your personal data (e.g. IP address and website visited) be transmitted to the social media service. If the processing of your personal data is associated with the use of corresponding social media websites, the data protection notices of the respective providers must be observed. Further information on the Shariff solution can be found here.

Social plugins from the following social networks are integrated on our website:

• Facebook (Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland), Privacy Policy: https://www.facebook.com/about/privacy and Opt-Out: Settings for advertisements: https://www.facebook.com/settings?tab=ads; Additional information on data protection: Agreement on joint processing of personal data on Facebook pages: https://www.facebook.com/legal/terms/page_controller_addendum;
• LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland), Privacy Policy: https://www.linkedin.com/legal/privacy-policy; Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out;
• X (Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2
  D02 AX07 Ireland), privacy policy: https://twitter.com/de/privacy,(settings) https://twitter.com/i/flow/login?redirect_after_login=%2Fsettings%2Fprivacy_and_safety;
• Instagram (Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland), https://www.facebook.com/about/privacy and opt-out: Settings for advertisements: https://www.facebook.com/settings?tab=ads;
• YouTube (Google LLC, with registered office at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). For users who have their habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland is the controller responsible for the processing of your personal data, privacy policy: https://www.google.de/intl/de/policies/privacy, opt-out: https://safety.google/privacy/privacy-controls/;
• Flickr: SmugMug Inc, 67 E Evelyn Ave, Ste 200, Mountain View, CA 94041, USA, Privacy Policy: https://www.smugmug.com/about/privacy/;
• XING: New Work SE, Am Strandkai 1, 20457 Hamburg, Germany, privacy policy: https://privacy.xing.com/de/datenschutzerklaerung, opt-out: https://privacy.xing.com/de/datenschutzerklaerung/welche-rechte-koennen-sie-geltend-machen/widerspruchsrecht

6. use of service providers

Some of the data processing described in this privacy policy may be carried out by our service providers. In addition to the service providers mentioned in this privacy policy, this may include, in particular, data centers that store our website and databases, IT service providers that maintain our systems, and consulting companies. If we pass on data to our service providers, they may only use the data to fulfill their tasks. The service providers have been carefully selected and commissioned by us. They are contractually bound by our instructions, have suitable technical and organizational measures in place to protect the rights of the data subjects, guarantee an appropriate level of data protection and are carefully monitored by us.

7. contact form or inquiries by e-mail

We offer you the opportunity to send us messages directly via a contact form. This requires you to enter an e-mail address where we can reach you. We also ask for your name so that we can address you and your company/organization. The mandatory fields are marked as such. We process the data you provide in the contact form in order to answer your request. We use a captcha (solving a math problem) to protect us from spam. Alternatively, you can also contact us by e-mail. For this purpose, we process your e-mail address and any other personal data you provide in the e-mail.

The legal basis for the described data processing is Art. 6 para. 1 sentence 1 lit. f GDPR, as it is our legitimate interest to answer your inquiry. In the event that you send us a question about the federal funding program Gigabit, we base the associated processing of personal data on Art. 6 para. 1 sentence 1 lit. e, para. 2 and 3 GDPR in conjunction with § 3 BDSG in conjunction with §§ 44, 23 BHO in conjunction with the Gigabit Directive. §§ Sections 44, 23 BHO in conjunction with the Gigabit Framework Regulation and Gigabit Directive of the Federal Government.

8. processing of personal data in the application procedure

We process the following personal data from you for the purpose of carrying out the application process:

• First name and surname,
• Date of birth,
• Address,
• Telephone number,
• E-mail address,
• Salary expectations,
• Employee recommendation,
• XING and Linkedin profiles,
• Data on your qualifications, professional experience and training and
• further information contained in the application documents you send us.

The legal basis for this data processing results from § 26 BDSG, Art. 88 GDPR.

You have the option of visiting the aconium careers website at https://aconium.eu/das-unternehmen/karriere/ by clicking on the “Apply here now!” button next to the job advertisements. If you click on the button, you will be redirected to the recruiting page of the service provider Personio SE & Co KG, a company based in Germany, which we use. You can find the data protection information for the recruiting page here.

You are not obliged to provide us with your data. However, your application may not be successful if you do not provide us with the data required for the application process. When using the application form, you must provide certain information (fields marked with *), otherwise you will not be able to submit your application.

We store your personal data upon receipt of your application. If we accept your application and an employment relationship is established, we will store your applicant data for as long as it is required for the employment relationship and to the extent that statutory regulations justify an obligation to retain it. If we reject your application, we will store your applicant data for a maximum of six months after rejecting your application, unless you give us your consent to store it for longer.

Please direct general questions about the application process to karriere@aconium.eu. Questions about data protection can be directed to the contact details listed under point 1.

9. duration of storage

Unless an explicit storage period is specified, we will only process your personal data until the purpose or legal basis for storage no longer applies.

10. your rights

You can assert your rights as a data subject with regard to your processed personal data at any time by contacting us using the contact details provided in section 1. As the data subject, you have the right to

• to request information about your data processed by us in accordance with Art. 15 GDPR. We will explain the data processing to you as part of the information request and provide you with an overview of the data stored about you;
• in accordance with Art. 16 GDPR, to immediately request the correction of incorrect data or the completion of your data stored by us;
• in accordance with Art. 17 GDPR, to demand the deletion of your data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
• in accordance with Art. 18 GDPR, to demand the restriction of the processing of your data if the accuracy of the data is disputed by you or the processing is unlawful;
• in accordance with Art. 20 GDPR, to receive your data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller (“data portability”)

Right of withdrawal

In accordance with Article 7 (3) GDPR, you have the right to withdraw your consent at any time. As a result, we will no longer continue the data processing that was based on this consent in the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. If you wish to make use of your right of revocation, it is sufficient to send an informal message to the contact details given in section 1 above.

Finally, pursuant to Art. 77 GDPR, you have the right to lodge a complaint with the data protection supervisory authority responsible for us. You can assert this right, for example, with a supervisory authority in the member state of your place of residence or the place of the alleged infringement. The competent supervisory authority in Berlin is Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59-61, 10555 Berlin, entrance: Alt-Moabit 60.