General Data Protection Regulation Article 13
The information for applicants pursuant to General Data Protection Regulation Article 13 can be found here: https://signum-secure.de/download/formulare/signum_ art_13_information_für_bewerbende.pdf
Privacy Policy
The following information provides an overview of how we handle your personal data when you visit our website www.signum-warenwirtschaftssysteme.de and/or contact us as a prospective customer. Personal data refers to any information that can be used to identify you directly or indirectly.
1. Data Controller
The controller responsible for data processing is:
Signum Warenwirtschaftssysteme GmbH
Kasinostraße 2
64293 Darmstadt
Germany
Tel: +49 (0) 6151 15 18 - 0
Email: team@signum.info
1.1 Data Protection Officer Contact Details
We have appointed an external Data Protection Officer for our company. You can reach them on all matters relating to data protection using the following contact details:
datenschutz süd GmbH
Wörthstraße 15
97082 Würzburg
Web: https://www.dsn-group.de/
Email: office@datenschutz-sued.de
When contacting our Data Protection Officer, please also indicate the responsible entity as listed in our Legal Notice (Impressum).
2. Usage Data
When you visit our website, our web server temporarily records so-called usage data in log files for statistical purposes in order to improve the quality of our website. This dataset consists of:
- the name and address of the requested content,
- the date and time of the request,
- the volume of data transferred,
- the access status (content delivered, content not found),
- a description of the web browser and operating system used,
- the referral link indicating which page you visited us from.
The legal basis for processing usage data is Art. 6(1)(1)(f) GDPR. Processing is carried out in our legitimate interest of providing website content and ensuring a device- and browser-optimized display.
If you contact us as a prospective customer, we will process the personal data required to handle your inquiry, carry out pre-contractual measures, or provide you with the information you have requested. The specific data collected depends on the nature and scope of your inquiry and the contact or inquiry form used.
As a rule, we typically process the following data:
- First and last name
- Business email address
- Phone number (if provided)
- Company name and job title
- Content of the inquiry or information submitted
Depending on the nature of your inquiry, additional voluntary information may also be processed if you choose to provide it. This data is processed exclusively for the purposes described in this Privacy Policy.
3. Purpose and Legal Basis for Data Processing
3.1 Storage of IP Addresses for Security Purposes
We also store the full IP address transmitted by your web browser for a strictly limited period of seven days, in our legitimate interest of detecting, limiting, and resolving attacks on our website. After this period, we delete or anonymize the IP address. The legal basis for this processing is Art. 6(1)(1)(f) GDPR.
3.2 Newsletter Subscription and Tracking
You can subscribe to our newsletter on our website. Please note that we require certain data (at minimum your email address) in order to process your subscription.
The newsletter will only be sent if you have provided us with your explicit consent. Upon registration, you will receive a confirmation email to the address you provided (double opt-in procedure). You may withdraw your consent at any time — for example, by using the unsubscribe link included in every newsletter.
As part of the newsletter subscription process, we may store additional data beyond what is mentioned above where necessary to demonstrate that you subscribed to our newsletter. This may include storing the full IP address at the time of subscription or confirmation, as well as a copy of the confirmation email we sent. This data processing is carried out on the basis of Art. 6(1)(1)(f) GDPR and in our legitimate interest of being able to demonstrate the lawfulness of newsletter distribution.
We also embed individual tracking pixels in our newsletters, which allow us to detect when a newsletter has been accessed or opened, and we personalize the links within each newsletter to track which links were clicked and when. This tracking data is stored for the duration of the existing contact relationship and for the purpose of evaluating and optimizing our marketing activities, but only for as long as necessary for these purposes. Inactive contacts are reviewed regularly and deleted or anonymized in accordance with our internal retention and deletion policies.
If you wish to withdraw your consent, please use the unsubscribe or preference management link included in every newsletter.
We use HubSpot to store your contact details and to send and track our newsletters. HubSpot is technically administered by our parent company, YUVENDA GmbH. We have entered into a data processing agreement in accordance with Art. 28 GDPR with YUVENDA GmbH. A data processing agreement pursuant to Art. 28 GDPR also exists between YUVENDA GmbH and HubSpot Inc. with respect to the hosting and support of the HubSpot system. Within this context, the transfer of your data to the United States cannot be excluded. HubSpot is certified under the EU-U.S. Data Privacy Framework, which ensures an adequate level of data protection.
3.3 Contact Forms / Online Demo
Our website contains forms through which you can get in touch with us. To use our contact form or online demo request form, we require the information marked as mandatory fields, such as your name and email address. We use this data on the basis of Art. 6(1)(1)(f) GDPR to respond to your inquiry.
You may also choose to provide additional information at your discretion. This information is voluntary and is not required to make contact. We process any voluntary information you provide on the basis of your consent. You may withdraw your consent to the processing of voluntary information at any time by contacting the email address listed in our Legal Notice or centrally at datenschutz@yuvenda.com.
Your contact details are stored in our CRM system, HubSpot. HubSpot is technically administered by our parent company, YUVENDA GmbH. We have entered into a data processing agreement in accordance with Art. 28 GDPR with YUVENDA GmbH. A data processing agreement pursuant to Art. 28 GDPR also exists between YUVENDA GmbH and HubSpot Inc. with respect to the hosting and support of the HubSpot system. Within this context, the transfer of your data to the United States cannot be excluded. HubSpot is certified under the EU-U.S. Data Privacy Framework, which ensures an adequate level of data protection.
3.4 Consultation Calls
Prospective customers can book a no-obligation consultation with our Head of Sales directly through our website. To schedule an appointment, the following mandatory details are required: name, email address, and company name.
We process this data on the basis of Art. 6(1)(1)(b) GDPR, as the processing is necessary for the preparation and conduct of the consultation and for addressing any follow-up questions.
You may also choose to provide additional information at your discretion. This information is voluntary and is not required for the appointment to take place. We process any voluntary information on the basis of your consent pursuant to Art. 6(1)(a) GDPR.
You may withdraw your consent at any time, for example by notifying us at datenschutz@yuvenda.com. Withdrawal does not affect the lawfulness of any processing carried out prior to that point.
Consultation calls are conducted via Zoom or Microsoft Teams. We have entered into a data processing agreement pursuant to Art. 28 GDPR with the respective video conferencing provider.
Your contact details are stored in our CRM system, HubSpot. HubSpot is technically administered by our parent company, YUVENDA GmbH. We have entered into a data processing agreement in accordance with Art. 28 GDPR with YUVENDA GmbH. A data processing agreement pursuant to Art. 28 GDPR also exists between YUVENDA GmbH and HubSpot Inc. with respect to the hosting and support of the HubSpot system. Within this context, the transfer of your data to the United States cannot be excluded. HubSpot is certified under the EU-U.S. Data Privacy Framework, which ensures an adequate level of data protection.
3.5 Whitepapers / Case Studies
As part of our marketing activities, we produce and publish whitepapers — documents containing practical examples and ROI frameworks. To receive the PDF document, you are required to provide contact details including your name and email address, with company name being optional. This data is collected for the purpose of delivering the whitepaper and is processed on the basis of Art. 6(1)(b) GDPR.
Your contact details are stored in our CRM system, HubSpot. HubSpot is technically administered by our parent company, YUVENDA GmbH. We have entered into a data processing agreement in accordance with Art. 28 GDPR with YUVENDA GmbH. A data processing agreement pursuant to Art. 28 GDPR also exists between YUVENDA GmbH and HubSpot Inc. with respect to the hosting and support of the HubSpot system. Within this context, the transfer of your data to the United States cannot be excluded. HubSpot is certified under the EU-U.S. Data Privacy Framework, which ensures an adequate level of data protection.
3.6 Direct Marketing
In the course of our business activities, we also process personal data of prospective customers for direct marketing purposes. This includes in particular communications about our own products, services, events, webinars, industry insights, and similar content. Direct marketing may be carried out through various communication channels, including email, telephone, and post.
Consent-Based Direct Marketing
Where you have provided us with your explicit consent, we process your personal data for direct marketing purposes on the basis of Art. 6(1)(1)(a) GDPR. You may withdraw any consent given at any time with effect for the future — for example, by using the unsubscribe link included in every marketing email or by sending us a corresponding notification. Withdrawal does not affect the lawfulness of any processing carried out prior to that point.
Direct Marketing to Prospective Customers
Where no consent has been given and no objection is apparent, we may also contact prospective customers for direct marketing purposes on the basis of our legitimate interests pursuant to Art. 6(1)(1)(f) GDPR. Our legitimate interest lies in particular in the initiation of business relationships and the communication of relevant products and services.
You may object to the processing of your personal data for direct marketing purposes at any time in accordance with Art. 21 GDPR.
4. Data Security
To protect your data from unauthorized access as comprehensively as possible, we implement appropriate technical and organizational security measures. Our website uses encryption technology: data transmitted between your device and our server is encrypted using TLS (Transport Layer Security). You can typically recognize this by the closed padlock icon in your browser's status bar and the "https://" prefix in the address bar.
5. Analytics Tools
5.1 Google Tag Manager
This website uses Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google").
Google Tag Manager provides a technical foundation for consolidating various web applications — including tracking and analytics services — and managing, configuring, and applying conditions to them through a unified interface. Google Tag Manager itself does not store or read information on user devices, nor does it conduct independent data analysis. However, when a page is loaded, your IP address is transmitted to Google and may be stored there. Transfer to servers of Google LLC in the United States is also possible.
This processing only takes place if you have given us your explicit consent in accordance with Section 25 TDDDG in conjunction with Art. 6(1)(a) GDPR. Without such consent, Google Tag Manager will not be used during your visit. You may withdraw your consent at any time with effect for the future by disabling this service in the Cookie Consent Tool provided on our website.
We have entered into a data processing agreement with the provider to ensure the protection of our website visitors' data and to prohibit unauthorized disclosure to third parties.
Where data is processed outside the EU or EEA (in particular in the United States) in this context, an adequate level of data protection is ensured through Google's certification under the EU-U.S. Data Privacy Framework.
5.2 Website Analytics with Google Analytics
We use Google Analytics 4 to analyze how our website is used and to continuously improve and optimize our online offering. Google Analytics creates pseudonymous usage profiles by storing and reading persistent cookies on your device, enabling returning visitors to be recognized and counted as such.
Google Ireland Limited acts as our data processor for Google Analytics in accordance with Art. 28 GDPR. Data processing may also take place outside the EU or EEA (in particular in the United States). An adequate level of data protection with respect to Google is ensured through the EU-U.S. Data Privacy Framework adequacy decision. Google also commits to entering into standard contractual clauses with any sub-processors engaged.
This processing only takes place if you have given us your explicit consent in accordance with Section 25 TDDDG in conjunction with Art. 6(1)(a) GDPR. Without such consent, Google Analytics will not be used during your visit. You may withdraw your consent at any time with effect for the future by disabling this service in the Cookie Consent Tool provided on our website.
5.3 Google Ads Remarketing
We use Google Ads, an online advertising program provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads Remarketing allows us to re-engage visitors to our website with targeted advertisements after they leave — whether in Google Search, on YouTube, or across other websites. User behavior on our website is captured using cookies or similar technologies to enable later recognition and delivery of relevant ads. In addition, audience targeting allows us to serve ads based on user data available to Google, such as location, interests, or demographic characteristics. This data originates from users' Google accounts or their browsing behavior and is made available by Google in aggregated form.
As the website operator, we receive quantitative reports through Google Ads — for example, which search terms triggered our ads, how many users clicked on them, and whether conversions resulted. This information helps us analyze and optimize the performance of our campaigns.
This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.
Data transfers to the United States are based on the European Commission's standard contractual clauses. Details can be found here:
https://policies.google.com/privacy/frameworks and
https://business.safety.google/controllerterms/.
The company is certified under the EU-U.S. Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States designed to ensure that European data protection standards are upheld when personal data is processed in the US. Every company certified under the DPF commits to complying with these standards. For further information, please visit the provider's entry at: https://www.dataprivacyframework.gov/participant/5780.
5.4 Google Ads Conversion Tracking
This website uses Google Conversion Tracking, a service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin
Privacy Policy for Our Social Media Pages
When you visit our social media pages, certain data about you is processed. In accordance with Art. 13 of the General Data Protection Regulation (GDPR), we would like to inform you below about how we handle your data and the rights available to you as a result.
Data Controller
We, Signum Warenwirtschaftssysteme GmbH, operate the following social media pages:
Our contact details can be found in the Legal Notice.
Data Processing by Us
We operate these pages to promote our services and products and to engage with you as a visitor and user of our social media presence.
Any data you provide on our social media pages — such as usernames, comments, videos, images, likes, and public messages — is published by the respective social media platform and is not processed by us for any other purpose. We reserve the right to remove content where necessary. Where the platform's functionality permits, we may share your content on our page and communicate with you via the social media platform.
If you submit an enquiry through a social media platform, we may — depending on the nature of your request — direct you to alternative, more secure communication channels that ensure confidentiality. You are always welcome to contact us directly using the postal address or email address listed in our Legal Notice. The choice of communication channel remains at your discretion.
The legal basis for the data processing described above is Art. 6(1)(1)(f) GDPR. The processing is carried out on the basis of our legitimate interest in conducting public relations activities and maintaining communication with you.
Joint Data Processing
For processing activities carried out on our social media pages, we act as joint controllers together with the respective operator of the social media platform.
Where the platform operator makes this possible, we have entered into the required joint controller agreement in accordance with Art. 26 GDPR.
The key elements of our joint controllership arrangements are outlined in the section below.
Analytics (Insights)
The social media platforms we use regularly generate analytics reports (Insights) based on usage data, which contain information about how users interact with our social media pages. We have no ability to influence or prevent the creation and provision of these reports.
We do not make use of any optional analytics features offered by the social media platforms.
We process the analytics information described above on the basis of Art. 6(1)(1)(f) GDPR, in pursuit of our legitimate interest in evaluating engagement with our social media pages and continuously improving our content for our target audience.
Targeted Advertising
We also use the social media platforms described above to deliver targeted advertising.
To do so, we use audience definitions provided by the respective platform operators. We rely exclusively on anonymous audience definitions — meaning we define target groups based on general characteristics such as demographics, behaviour, interests, and connections. The platform operator then uses these definitions to serve advertisements to its users. The legal basis for this processing is the consent that the platform operator has obtained from its users.
If you wish to withdraw your consent, please use the opt-out mechanisms provided by the platform operator, as that operator is responsible for this aspect of processing.
We and the platform operator may also use publicly available data for audience targeting purposes. In such cases, the legal basis is Art. 6(1)(1)(f) GDPR, with our legitimate interest being the ability to define the most relevant target audience possible. We never use sensitive categories of personal data as defined in Art. 9 and 10 GDPR (such as political opinions or sexual orientation) for audience targeting.
We do not use location data for audience targeting, nor do we share any personal data with the platform operator as part of this process.
Data Processing by the Platform Operator
The social media platform operator uses web tracking technologies. This tracking may occur regardless of whether you are logged in to or registered with the platform.
We therefore wish to draw your attention to the fact that it cannot be ruled out that the platform operator may use and analyse your profile and behavioural data for its own purposes. We have no influence over how the platform operator processes your data. Please bear this in mind when using the platform.
For more information about data processing by the platform operator, available privacy settings, and further opt-out options, please refer to the platform operator's privacy policy.
Retention Period
We delete your personal data once it is no longer required for the processing purposes described above and where no statutory retention obligations prevent deletion.
Your Rights as a User
As a user, you have the right — subject to the applicable conditions being met — to exercise the following rights both against us and against the respective social media platform operator:
Right of Access (Art. 15 GDPR)
You have the right to request confirmation as to whether personal data relating to you is being processed. If this is the case, you have the right to access that personal data and to receive the information specified in Art. 15 GDPR.
Right to Rectification and Erasure (Art. 16 and 17 GDPR)
You have the right to request the immediate correction of any inaccurate personal data relating to you and, where applicable, the completion of incomplete personal data. You also have the right to request the erasure of your personal data without undue delay, where one of the grounds set out in Art. 17 GDPR applies — for example, where the data is no longer necessary for the purposes for which it was collected.
Right to Restriction of Processing (Art. 18 GDPR)
You have the right to request the restriction of processing where one of the conditions set out in Art. 18 GDPR is met — for example, where you have objected to processing, for the duration of any related review.
Right to Data Portability (Art. 20 GDPR)
In certain cases as specified in Art. 20 GDPR, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, or to request that it be transmitted directly to a third party.
Right to Object (Art. 21 GDPR)
Where data is processed on the basis of our legitimate interests pursuant to Art. 6(1)(1)(f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation. We will then cease processing your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or where the processing is necessary for the establishment, exercise, or defence of legal claims.
Where personal data is processed on the basis of legitimate interests for direct marketing purposes, you have a separate right to object at any time without providing any reason. Exercising this right will result in the immediate cessation of processing for direct marketing purposes.
Right to Withdraw Consent (Art. 7 GDPR)
Where data processing is based on your consent, you have the right under Art. 7(3) GDPR to withdraw that consent at any time. Please note that withdrawal of consent applies only to future processing. Any processing carried out prior to your withdrawal will not be affected.
Right to Lodge a Complaint with a Supervisory Authority
Under Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates data protection law. This right may be exercised in particular before the supervisory authority of the EU member state in which you reside, work, or where the alleged infringement took place.
Contact Details of Our Data Protection Officer
Our external Data Protection Officer is available to answer any questions you may have regarding data protection and can be reached using the following contact details:
datenschutz süd GmbH
Wörthstraße 15
97082 Würzburg
Email: office@datenschutz-sued.de
Phone: +49 931 30 49 76-0