Privacy Policy

We appreciate your interest in our website. The protection of your privacy is very important to us. portagon GmbH attaches great importance to the protection and confidentiality of your data. The collection and processing of your personal data is carried out exclusively within the framework of the legal provisions, in particular the EU General Data Protection Regulation (DS-GVO), Federal Data Protection Act (BDSG) and other national data protection laws of the member states as well as other data protection regulations.

portagon GmbH
Baseler Str. 10
60329 Frankfurt am Main

www.portagon.com
kontakt@portagon.com

Tel: +49 (0) 69 / 2547 413 0
Fax: +49 (0) 69 / 2547 413 90

Managing Directors: Jamal El Mallouki, Johannes Laub

Contact details of the data protection officer

Dr. Jörg Buschbaum
datenschutz@portagon.com

Personal data

Personal data is individual information about personal or factual circumstances of a specific or identifiable natural person. This includes, for example, your name, address, date of birth, user name, password, e-mail address and payment data. We describe below how we process your personal data.

Provision of the website and creation of log files

You can visit our website at any time without having to register or provide any personal information. However, each time you call up our website, our system automatically collects data and information from the computer system of the calling computer.

Description and scope of data processing: The following data is automatically collected when a page is called up:

  • Browser type and version,
  • operating system used,
  • Website from which you visit us (referrer URL),
  • Website you are visiting,
  • date and time of your access,
  • your Internet Protocol (IP) address.

The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website.

Legal basis for data processing: The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. f DS-GVO.

Purpose of data processing: The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session. The purpose of the storage in log files is to ensure the functionality and stability of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. These purposes are also our legitimate interest in data processing according to Art. 6 Para. 1 lit. f DS-GVO.

Duration of storage: The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. The data stored in log files are deleted after a period of three days at the latest.

Contact form and e-mail contact

Description and scope of data processing: When a contact request is sent via our contact form, the data entered in the input mask is transmitted to us and stored. For the processing of the data, your consent is obtained during the sending process and reference is made to this privacy policy.

The provision of personal data by you is neither required by law nor by contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide us with personal data. Failure to provide personal data, insofar as this is mandatory, means that it is not possible to contact you via the contact form.

Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user’s personal data transmitted with the e-mail will be stored.

Your data will not be passed on to third parties.

Legal basis for data processing: The legal basis for the processing of data transmitted via the contact form is your consent (Art. 6 para. 1 lit. a DS-GVO). The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 (1) lit. f DS-GVO. Our legitimate interest is to respond to the contact request of the sender. If the e-mail contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) lit. b DS-GVO.

Purpose of data processing: The processing of personal data from the input mask or an e-mail serves us solely to process the contact request.

Duration of storage: The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with you has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified. This does not apply if the deletion conflicts with legal or contractual obligations, in particular retention periods.

Participation in the partner program

Description and scope of data processing: We offer the possibility to register for our partner program via our website. The data requested via the registration mask is transmitted to us and processed by us. At the time of registration, the system automatically collects and stores the date and time of your registration in order to document the confirmation of the inclusion of the portagon terms and conditions in the partner agreement.

In the context and further course of the partner program, the following data of you will also be processed:

  • Bank details
  • Partner status
  • Date of completed trainings of portagon
  • Number of mediated contacts, details of mediated contacts (names, contact details of potential customers, additional information material provided)
  • Commissions paid out, outstanding commission claims.

Legal basis for data processing: The processing of data within the scope of registration and within the scope of an existing partner contract is necessary for the establishment and implementation of the partner contract between you and portagon. The legal basis for data processing is thus Art. 6 para. 1 p. 2 lit. b DS-GVO. We also process the system-side data relating to your registration on the basis of Art. 6 para. 1 p. 1 lit. f DS-GVO. Our legitimate interest lies in maintaining the functionality and security of the website and our IT systems.

Purpose of data processing: Data processing serves to establish and implement the partner contract between you and us as well as – in relation to the data automatically collected by the system – the security and functionality of the website and our IT systems.

Duration of storage: If a partner contract is not concluded after registration, we delete the data collected from you via the registration mask within six months after the rejection of the conclusion of the partner contract. If a partner contract exists, the data will be stored for as long as is necessary for the establishment, implementation and processing of the partner contract, i.e. in any case for the duration of the existence of the partner contract. After termination of the partner agreement, the data will be deleted, unless the deletion conflicts with statutory retention obligations, for example from the German Commercial Code and the German Fiscal Code. These legal obligations provide for a retention period of six or ten years.

To portagon after referral by a partner

Description and scope of data processing: We receive contact data from interested parties and potential customers from partners. Depending on what data you have provided to a partner as an interested party/potential customer, this includes:

  • Name of your company
  • Contact details (name, e-mail address, telephone number, company address)
  • Amount of capital required
  • Planned use of the capital
  • Partner’s assessment of the prospect’s/potential customer’s understanding of crowdinvesting
  • Confirmation of the execution of a demo/on-site appointment
  • Name of the referring partner
  • Signed consent form for data processing.

Legal basis for data processing: You have consented to the described data processing and contacting of the mediating partner by signing a corresponding declaration from us. The legal basis is therefore Art. 6 para. 1 p. 1 lit. a DS-GVO. If the contact also serves to establish a contract between you and us and the corresponding pre-contractual measures, Art. 6 para. 1 p. 1 lit. b DS-GVO is the additional legal basis for data processing.

Purpose of data processing: The purpose of data processing is to fulfill your request for information about portagon’s offers and services and for a possible use of our services.

Duration of storage: We store your data until you revoke your consent to be contacted by portagon. In case of revocation, we will provide your contact data with a block in case you no longer wish to be contacted by us. If a contract between you and portagon is not concluded and we have not contacted you for more than one and a half years, we will delete your data.

Application procedure

Description and scope of data processing: You have the option of applying online via our website. When you submit the application form, the data entered in the input mask as well as attachments thereto (e.g. CV) are transmitted to us, stored and processed. Depending on the information you provide, this may also include special categories of personal data within the meaning of Art. 9 (1) DS-GVO (e.g. information on any existing severe disability). For the organization and processing of the application process, we use the applicant management system Recruitee, a service of Recruitee B.V., Keizersgracht 313, 1016 EE Amsterdam, the Netherlands (“Recruitee”). For this purpose, your personal data is stored and processed on servers in the Netherlands. Recruitee has been carefully selected and attaches great importance to compliance with applicable data protection laws. The processing of your personal data by Recruitee is based on an order processing agreement with us. Recruitee may only process the data according to our instructions and not for its own purposes. You can find more information about Recruitee’s privacy policy here: https://recruitee.com/privacy.

Legal basis for data processing: the legal basis for the processing of personal data is the implementation of pre-contractual measures for the purpose of establishing an employment relationship and, insofar as an employment relationship is established between you and us, the establishment and implementation of the same in accordance with Article 6 (1) lit. b DS-GVO. In the case of a notification of the special categories of data based on voluntary consent, their processing is carried out on the basis of Art. 9 (2) lit. a DS-GVO.

Purpose of data processing: The processing of personal data serves to carry out the application process as well as personnel selection and, if an employment relationship is established between you and us, the establishment and implementation of the employment relationship.

Duration of storage: If we unfortunately have to reject your application, we will delete the data no later than six months after the rejection. If an employment relationship is established, we store personal data at least for the duration of the existence of this employment relationship and, if applicable, any statutory retention periods that go beyond this (e.g. from the Working Hours Act) or contractual retention provisions (e.g. in the case of use of a company pension scheme by way of deferred compensation for the duration of the benefits being drawn). Data no longer required for the fulfillment of the respective purpose will be deleted immediately.

Inclusion in the Talent Pool: If no suitable position can be offered to you at the time of your application, it is possible that the data you provided and transmitted during the application process may be collected, processed and used in the Talent Pool even after its completion. This is done in order to contact you for professional purposes and for possible consideration in a subsequent job assignment. This use requires your express declaration of consent.

Duration of data storage in the Talent Pool: If you expressly wish to be included in our Talent Pool, we will store your data until you revoke your consent, but for no longer than 12 months. After expiration of the term, your data will be deleted automatically and without separate notification.

Indeed

You also have the option to apply for a job with us via Indeed. In order to enable the “Apply via Indeed” feature, your personal usage data must be processed by Indeed Ireland Operations Limited, 124 St. Stephen’s Green, Dublin 2, Ireland (herein “Indeed”). When you apply for one of our job openings through the Indeed portal, Indeed collects from you your resume and other application materials and information that you provide on a voluntary basis. This data is made available to us for review. Thus, you can share your data stored with Indeed with us and thus, for example, provide us with your resume stored with Indeed. To enable you to use this feature, we have included the “Apply via Indeed button” on our careers website. Even if you do not use this function, Indeed processes personal data, as your IP address is already transmitted to Indeed for displaying the button. Indeed may also use cookies. You can find more information about Indeed’s terms of use here: https://de.indeed.com/legal and Indeed’s privacy policy here: https://hrtechprivacy.com/de/brands/about-indeed#privacypolicy.

Cookies

Use of technically necessary cookies

Description and scope of data processing: In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your terminal device.

You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. If you do not accept cookies, the functionality of our website may be limited. The following links show you how to adjust the settings in the following popular browsers:

Chrome: https://support.google.com/chrome/answer/95647?hl=de
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Safari: https://support.apple.com/en-us/HT201265

Legal basis for data processing: If personal data is processed using cookies, the legal basis is Art. 6 (1) lit. f DS-GVO.

Purpose of data processing: The purpose of processing is to make visiting our website attractive and to enable the use of certain functions. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.

The user data collected by cookies are not used to create user profiles.

Duration of storage: So-called. Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies. These store a so-called session ID, with which various requests of your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close the browser. Persistent cookies are deleted automatically after a specified duration, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.

Consent to the use of technically unnecessary cookies.

Our website uses ConsentManager technology to obtain your consent to the storage of certain cookies on your terminal device or to the use of certain technologies and to document this in accordance with data protection law. The provider of this technology is Jaohawi AB, Håltegelvägen 1b, 72348 Västerås, Sweden, website: https://www.consentmanager.de (hereinafter “ConsentManager”).

When you enter our website, a connection is made to ConsentManager’s servers to obtain your consents and other statements regarding cookie use. Subsequently, ConsentManager stores a cookie in your browser in order to be able to assign the consents granted to you or their revocation. The data collected in this way is stored until you request us to delete it, delete the ConsentManager provider cookie yourself or the purpose for storing the data no longer applies. Mandatory legal storage obligations remain unaffected.

ConsentManager is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 lit. c DSGVO.

Use of Google Analytics

Description and scope of data processing: If you have given us your consent, we use Google Analytics, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter “Google”), on our website. This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus analyze the activities of a user across devices. Google Analytics uses so-called cookies, text files that are stored on your computer and enable an analysis of your use of the website. This includes the following cookies in detail:

name provider purpose duration of function
_ga Google Contains a randomly generated user ID to associate website usage data with returning visitors and to merge data from previous visits 2 years
_gat Google Preventing data transmissions during the functional period 1 day
_gid Google Contains a randomly generated user ID to associate website usage data with returning visitors and to merge data from previous visits 1 day

The information generated by the cookies, for example time, place and frequency of your website visit including your IP address, will be transmitted to and stored by Google. Since this website uses Google Analytics with the extension “_gat._anonymizeIp”, your IP address will be truncated by Google within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser within the scope of Google Analytics will, according to its own information, not be merged with other data from Google. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

Furthermore, Google offers a deactivation add-on for the most common browsers, which gives you more control over what data is collected by Google about the websites you visit. The add-on tells the JavaScript (ga.js) of Google Analytics that no information about the website visit should be transmitted to Google Analytics. However, the Google Analytics browser deactivation add-on does not prevent information from being transmitted to us or to other web analytics services we may use. For more information on installing the browser add-on, please click on the following link: https://tools.google.com/dlpage/gaoptout?hl=de. Opt-out cookies prevent future collection of your data when visiting this website. To prevent collection by Universal Analytics across different devices, you must perform the opt-out on all systems used.

Legal basis for data processing: The legal basis for the use of Google Analytics is your consent (Art. 6 para. 1 lit. a DS-GVO).

Purpose of data processing: The purpose of data processing is to analyze the behavior of our users anonymously and to improve our website on the basis of these findings.

Duration of storage: The data sent by us and linked to cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month. For more information on terms of use and data protection, please visit https://www.google.com/analytics/terms/de.html and https://policies.google.com/privacy?hl=de&gl=de.

Use of Google Dynamic Remarketing

Description and scope of data processing: assuming your consent, we use Google’s remarketing function on our website. The application is used to analyze the behavior and interests of our website visitors in order to display targeted interest-based advertisements. Google places cookies for this purpose, which make it possible to recognize visitors to a website when they visit websites that belong to Google’s advertising network. On these websites, users can then be shown advertisements that relate to content that users have previously accessed on websites that use Google’s remarketing function.

Google uses the following cookies for this purpose:

name provider purpose duration of function
IDE Google (DoubleClick) Contains a randomly generated user ID to recognize visitors across different websites and play individualized ads 1 year
test_cookie Google (DoubleClick) Test whether the user’s browser allows cookies to be set.t 15 minutes
ads/ga-audiences Google (AdWords) Used to re-engage visitors who might switch to the client website based on their online behavior Session

You have the option of deactivating the display of individualized ads from Google via the settings of your device. Instructions on how to do this can be found at https://support.google.com/ads/answer/1660762#mob. Further information on data protection in connection with individualized ads can be found at https://support.google.com/adspolicy/answer/143465.

Legal basis for data processing: The legal basis for the use of Google Analytics is your consent (Art. 6 (1) lit. a DS-GVO).

Purpose of data processing: The purpose of data processing is to play out advertisements to visitors to our website in an interest-related and targeted manner.

Duration of storage: 14 months

Use of HubSpot

Description and scope of data processing: We use a customer relationship management system from HubSpot Germany GmbH (c/o Design Offices, Koppenstraße 93, 10243 Berlin, Germany, hereinafter “HubSpot”) on our website.

Insofar as you have given us your consent, HubSpot uses cookies and so-called “web beacons”, which are stored on your computer and thereby enable an analysis of your use of the website. This includes the following tools in detail:

name provider purpose duration of function
_hstc HubSpot Contains the domain, the user token, the timestamps of the first, last and current visit, the current session count 13 months
hupspotutk HubSpot Capture of user identity when using web forms for de-duplication of contacts 13 months
_hssc HubSpot Tracks sessions and contains the domain, number of page views in a session, and session start timestamps; thus used to determine if the session number and timestamps in the _hstc cookie need to be increased 30 minutes
_hssrc HubSpot Determination of the restart of browser sessions Session
_ptq.gif HubSpot Capture the devices and marketing channels used by users Session

The information generated by these cookies and web beacons, for example time, place and frequency of your website visit including your IP address and the pages viewed, is transmitted to HubSpot Inc. (25 First Street, 2nd Floor, Cambridge, MA 02141, USA) and stored there. HubSpot also reserves the right to transfer data to other HubSpot group companies.

Furthermore, HubSpot collects the data you enter when you fill out forms to request information and coordinate appointments (except when you use the contact form and e-mail contact mentioned above) or when you agree to e-mail marketing communications (newsletters as well as automated mailings, e.g. to provide downloads).

HubSpot will use this information for the purpose of evaluating your use of our website, compiling reports on website activity for us and providing other services relating to website activity and internet usage. HubSpot may also transfer this information to third parties where required to do so by law, or where such third parties process the information on HubSpot’s behalf.

The companies of the HubSpot Group have submitted to the standard contractual clauses.

If you generally do not want HubSpot to collect your data, you can prevent the storage of cookies at any time by changing your browser settings accordingly.

Legal basis for data processing: The legal basis for the use of cookies and web beacons by HubSpot is your consent (Art. 6 para. 1 lit. a DS-GVO).

Purpose of data processing: The purpose of data processing is to improve our web offering and to provide users with targeted information via email marketing communications.

Duration of storage: The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data from forms and those sent by e-mail as part of e-mail marketing communications, this is the case when the respective conversation with you has ended. The conversation is terminated when it can be inferred from the circumstances that the matter in question has been conclusively clarified or the user’s subscription is deactivated. This does not apply if the deletion conflicts with legal or contractual obligations, in particular retention periods.

More information on terms of use and data protection can be found at https://legal.hubspot.com/de/privacy-policy.

Use of Demodesk

Scope of the processing of personal data

A video conferencing tool as well as a tool for automated appointment finding from Demodesk is used on this website. The provider is Demodesk GmbH, Franz-Joseph Straße 9, 80801, Munich (hereinafter referred to as: Demodesk). We use Demodesk to enable prospective and existing customers to automatically book appointments for product demos or welcome talks and to subsequently conduct these appointments via video conference. Demodesk uses cookies for this purpose.

The following personal data will be processed by Demodesk:

  • Desired date
  • Salutation
  • Name
  • E-mail address
  • Telephone number
  • Contract billing and payment data
  • Technical data (session URL, screen resolution, etc.)
  • Sound and video transmissions
  • Personal calendar data (e.g. data on the respective host and guest)

Further information on the processing of data by Demodesk can be found here: https://demodesk.com/legal/privacy-policy.

The provision of your personal data is voluntary. If you do not provide us with the data marked as mandatory, we will not be able to offer you the above-mentioned services and, in particular, we will not be able to conduct video conferences via the tool. If you prefer not to make appointments with us via Demodesk, you can alternatively contact us by e-mail or telephone.

Purposes of the data processing

The use of Demodesk serves us to let prospective and existing customers book an appointment online for a presentation of our product and to subsequently conduct such a product demo via video conference.

Legal basis for the processing of personal data

The legal basis for the data processing is Art. 6 para.1 p.1 lit. f DSGVO. Our legitimate interest here lies in the purposes of data processing mentioned under 2. If a contract is concluded with you, the legal basis for processing your data is Art. 6 para. 1 p. 1 lit. b DSGVO.

Duration of storage

Your personal data will be stored for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law, e.g. for tax and accounting purposes.

If you do not conclude a contract with us, we will store your data for a maximum of 6 months after the agreed date. If a contract is concluded with you, we store your data for the duration of the contractual relationship.

Use of the Meta Pixel (formerly Facebook Pixel)

We use the service Meta Pixel (Facebook Pixel) on our website.

The service makes it possible to display our ads on Facebook, so-called “Facebook Ads”, only to those Facebook users who have been visitors to our website, especially those who have shown interest in our online offer or in certain topics or products. The service makes it possible to check whether a user was redirected to our website after clicking on our Facebook Ads. Among other things, the service uses cookies, i.e. small text files that are stored locally in the cache of your web browser on your end device. If you are logged in to Facebook with your user account, the visit to our online offer is noted in your user account and matched with the data of your user account. The data collected about you is anonymous for us, so it does not offer us any conclusions about the identity of the user. However, this data can be linked by Facebook to your user account there. We have no influence on the scope and further use of data collected by Facebook through the use of the service. To the best of our knowledge, Facebook receives the information that you have called up the relevant part of our website or clicked on one of our ads. To our knowledge, your personal data is transmitted to the USA, there is at least a risk of such data transmission to the USA despite any server locations of Facebook within the EU. We would like to explicitly point out that the USA does not offer a level of data protection comparable to European data protection law. If you have a user account with Facebook and are registered, Facebook can assign the visit to your user account. Even if you are not registered with Facebook or have not logged in, it is possible that Facebook will learn and store your IP address and possibly other identifiers. We use the service for marketing and optimization purposes, in particular to place relevant and interesting ads for you and thus improve our offer.

 

The legal basis is Art. 6 para. 1 p. 1 lit. a DSGVO (consent).

If you are logged in to Facebook, you can change your settings for advertisements yourself at https://de-de.facebook.com/ads/settings.

If you are not a Facebook user, you can basically manage your usage-based online advertising at http://www.youronlinechoices.com/de/praferenzmanagement/. There you have the option to deactivate or activate providers.

Joint responsibility: We are jointly responsible with Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (Facebook) for the collection and transfer of data as part of this process.

The contact details of the company, as well as Facebook’s data protection officer, are available here: https://www.facebook.com/about/privacy. Our contact details can be found at the following link: https://www.portagon.com/impressum/

You may exercise your data subject rights with respect to both Facebook and us.

More information, in particular how Facebook processes personal data, including its legal basis and further information on data subject rights can be found here: https://www.facebook.com/about/privacy. We transfer the data within the scope of shared responsibility on the basis of legitimate interest pursuant to Art. 6 (1) f DSGVO.

 

Information on data security conditions is located here: https://www.facebook.com/legal/terms/data_security_terms and on processing operations based on standard contractual clauses is located here: https://www.facebook.com/legal/EU_data_transfer_addendum.

 

Other recipients:

We disclose the collected data for processing to the respective internal bodies as well as to other affiliated companies or to external service providers according to the necessary purposes (to perform ad playout and analysis). Platform/hosting service providers receive access to personal data from a third country (countries outside the European Economic Area). So-called standard contractual clauses pursuant to Art. 46 DSGVO have been concluded with these service providers as suitable guarantees. Further information can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_de.

 

Deletion/Revocation:

Deactivation of the meta pixel function is possible at https://www.portagon.com/#cmpscreen and for logged-in users at https://www.facebook.com/settings/?tab=ads#. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

 

Lifetime of cookies: up to 180 days after the last interaction (this only applies to cookies set via this website).

Use of the Google Tag Manager

The Google Tag Manager is used on this website. The Google Tag Manager is a system from Google that manages Java Script tags and HTML tags used to implement the above-mentioned services. In particular, the system controls which tags are to be executed and when, based on the consent you have given. The Tag Manager does not set any cookies itself and does not collect any data or other information from you and your terminal device. The services it controls set the cookies listed above.

Use of the tracking tool Smartlook

This site uses the tracking tool Smartlook of Smartsupp.com, s.r.o. Lidicka 20, Brno, 602 00, Czech Republic (“Smartlook”) to record randomly selected individual visits with anonymized IP address only. This tracking tool allows using cookies to evaluate in which way you use the website (e.g. which content is clicked on). For this purpose, a usage profile is displayed visually. Only usage profiles are created when using pseudonyms. The legal basis for the processing of your data is your declared consent (Art. 6 para. 1 p. 1 lit. a DSGVO).

You can revoke your consent at any time with effect for the future via the cookie settings. Further information on data protection at Smartlook can be found at https://www.smartlook.com/help/privacy-statement/.

You can deactivate the collection by Smartlook under the following link: https://www.smartlook.com/de/opt-out

Use of the newsletter dispatch tool SendinBlue

This website uses SendinBlue to send newsletters. The provider is SendinBlue SAS, 55 rue d’Amsterdam, 75008 Paris, France. SendinBlue is a service that organizes and analyzes the sending of newsletters. The data you enter for the purpose of receiving newsletters (e.g. e-mail address) is stored on SendinBlue’s servers.

Our newsletters sent with SendinBlue allow us to analyze the behavior of newsletter recipients. Among other things, we can analyze how many recipients have opened the newsletter message and how often which link in the newsletter was clicked. All links in the email are so-called tracking links, with which your clicks can be counted.

If you do not want any analysis by SendinBlue, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message. Furthermore, you can also revoke your consent at any time with effect for the future by sending an e-mail to the address given in our imprint.

The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of SendinBlue after you unsubscribe from the newsletter. Data that has been stored by us for other purposes (e.g. e-mail addresses for the member area) remains unaffected by this.

For more details, please refer to the privacy policy of SendinBlue at: https://de.sendinblue.com/legal/privacypolicy/.

Our Facebook pages

If you use our Facebook page, Facebook Inc., Menlo Park, USA (“Facebook”), collects, processes and uses personal data regardless of whether you are a member of Facebook or not for profiling purposes. Furthermore, Facebook provides us with evaluations of the use of our Facebook page in anonymized form. This includes in particular the following evaluations:

Overview: “Likes” for the page: the total number and new “Likes” for the Facebook page; post reach: the total number of individual people who have seen the Facebook page and the posts contained on it; interaction: the total number of individual people who have interacted with the Facebook page, broken down by interaction type.

“Likes”: “Likes” for the page: The total number of “likes” for each individual day, for a period of 28 days; “”Likes (net)”: The number of new “likes” after subtracting the removed “likes”; the location where the “likes” for the Facebook page were made: This shows how many times the Facebook page was “Liked”, broken down by the origin of the “Like”.

Reach: Post reach: The number of people for whom a post was provided, broken down by paid and organic reach; “Like” mentions, comments, and shared content; Hidden posts, reported as spam, “Disliked”: The negative interactions that reduce the number of people reached; Total reach: The number of people who were shown an action from the Facebook page.

Visits: page and tab views: Indicates how often each tab of a Facebook page was viewed; External referrals: Indicates how often people arrived at the Facebook page from a website outside of Facebook.

Posts: When Facebook page fans are online: Shows when people who like the Facebook page are on Facebook; Post Types: Shows the success of each post type based on average reach and interaction; Most Popular Posts from Pages We Keep Track Of: Displays interactions to posts from the pages we keep an eye on.

Video: Video views: How many times the videos on the Facebook page were viewed for more than 3 seconds; 30-second views: How many times the videos on the Facebook page were viewed more than 30 seconds. If the video is shorter than 30 seconds, the people who viewed the video 97% of the time are counted; Top videos: The most viewed videos on the Facebook page for at least 3 seconds.

People: Fans of the Facebook page: displays information about the people who like the Facebook page: gender, age, location and language; Reached people: Displays the people for whom a post was made in the last 28 days; Interacting people: Shows the people (anonymized) in the last 28 days who have “liked,” commented, or shared posts, or interacted on the Facebook page.

When you visit our Facebook page, we are jointly responsible with Facebook for the data processing operations triggered during that visit. In principle, you can assert your rights (information, correction, deletion, restriction of processing, data portability and complaint) both against us and against Facebook. We have concluded an agreement with Facebook on joint responsibility for the processing of data (Controller Addendum). This agreement specifies the data processing operations for which we or Facebook are responsible when you visit our Facebook page. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.

You can adjust your advertising settings independently in your user account. To do so, click on the following link and log in: https://www.facebook.com/settings?tab=ads.

For information about what information Facebook collects from you, please see Facebook’s Data Policy, specifically the section titled “What Types of Information Do We Collect?” https://www.facebook.com/privacy/explanation.

When you use the Facebook site, Facebook stores cookies on your computer or smartphone. For information on this, see Facebook’s Cookie Policy https://www.facebook.com/policies/cookies/.

For more information, please visit https://www.facebook.com/business/a/page/page-insights.

Transmission of personal data

portagon GmbH will not disclose your data to third parties unless you have previously given your express consent to such disclosure or the disclosure is required or permitted by law. Exceptions to this are the service partners of portagon GmbH who are required to process the contractual relationship and who have been commissioned by us to process personal data in accordance with our instructions within the framework of a contract processing agreement. portagon GmbH will neither sell your data to third parties nor otherwise pass it on to third parties for advertising purposes. The employees of portagon GmbH are bound to secrecy and to compliance with data protection regulations.

Automated decision making including profiling

No automated decision-making including profiling takes place.

Rights of the data subject

If personal data is processed by you, you are a data subject within the meaning of the DS-GVO and you are entitled to the following rights vis-à-vis the controller:

Right to information: in accordance with Art. 15 DS-GVO, you have the right to request information about your personal data processed by us; in particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its use. Request meaningful information about its details.

Right to rectification: Pursuant to Art. 16 DS-GVO, you have the right to request the correction of incorrect or completion of your personal data stored by us without undue delay.

Right to erasure: Pursuant to Art. 17 DS-GVO, you have the right to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims.

Right to restriction: Pursuant to Art. 18 DS-GVO, you have the right to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer need the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 DS-GVO.

Right to data portability: Pursuant to Art. 20 DS-GVO, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller.

Right to complain: Pursuant to Art. 77 DS-GVO, you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office for this purpose. In the present case, the competent supervisory authority is: The Hessian Data Protection Commissioner.

Right of objection: you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Article 6(1)(f) of the DS-GVO.
If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing.

Right of revocation: you have the right to revoke any consent you have given for the processing of your personal data at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. You can send a revocation to the e-mail address provided during registration/ordering or also in any case to datenschutz@portagon.com or by post using the address given above.

Security during data transmission

Within the website visit, we use the widespread SSL procedure (Secure Socket Layer) in connection with the highest encryption level supported by your browser. As a rule, this is a 256-bit encryption. As soon as the encryption is activated, the address bar of the browser turns green.

We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments. All our employees who may come into contact with personal data are obligated in writing to comply with data protection regulations and have been instructed about the legal requirements.

Changes to our data protection declaration

We reserve the right to amend this data protection declaration from time to time so that it always complies with current legal requirements or in order to implement changes to our services in the data protection declaration, e.g. when introducing new services. When you visit our website again, the current data protection declaration will apply in each case.

Status: August 2021