Privacy policy website
Table of contents
1 Person responsible
2 Data Protection Officer
3 Provision of the website
4 Cookies
5 Contact options
6 Use of third-party services
7 Social networks
8 Your rights
9 Timeliness and changes to the privacy policy
1 Person responsible
Responsible person within the meaning of the GDPR is:
anybill GmbH
Franz-Mayer-Strasse 1
93053 Regensburg
Email: datenschutz@anybill.de
Website: https://anybill.de/de/legal/imprint
2 Data Protection Officer
You can contact our data protection officer as follows:
Kertos GmbH
DPO: Dr. Kilian Schmidt
Address: Klosterhofstraße 6, 80331 München
Email: dsb@kertos.io
You can contact our data protection officer directly at any time if you have any questions or suggestions regarding data protection and to exercise your rights.
3 Provision of the website
3.1 General information
When using our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (in so-called “server log files”). Each time you visit a page, our server collects a range of general data and information. This general data and information is stored in the server's log files. It is possible to record the
• Browser type and browser version
• operating system used
• Referrer URL
• Host name of the accessing computer
• Time of server request
• IP address
3.2 Hosting and Content Delivery Networks (CDN)
Our website is hosted by an external service provider (hereinafter referred to as “host”). Personal data collected via this website is stored on the host's servers. This data may include IP addresses, contact requests, metadata, communication data, contract information, contact details, names, website accesses and other data generated through website usage.
The host is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b DSGVO) and in the interest of a secure, fast and efficient provision of our online offering by a professional provider (Art. 6 para. 1 lit. f GDPR).
Our host will only process your data to the extent necessary to fulfill its performance obligations and will follow our instructions with regard to this data.
We use the following host:
Webflow, Inc.
398 11th Street, 2nd Floor
San Francisco, CA 94103, United States of America
In order to ensure data protection-compliant processing, we have concluded an order processing contract with our host.
3.3 Purpose of processing
When using this general data and information, we do not draw any conclusions about you personally. The purposes we pursue include in particular:
• ensuring a smooth connection to the website,
• ensuring convenient use of our website,
• clarifying acts of abuse or fraud,
• network problem analyses,
• evaluation of system security and stability, and
• other administrative purposes.
3.4 Legal basis
The legal basis for data processing is our legitimate interest within the meaning of Article 6 (1) (f) GDPR. We have a legitimate interest in being able to offer our offer in a technically flawless manner.
3.5 Storage period
For security reasons (e.g. to investigate abusive or fraudulent acts), the log files are stored for a maximum of 7 days and then deleted. Data whose further storage is necessary for evidentiary purposes will be kept until the matter is finally resolved.
4 Cookies
4.1 General information
We use cookies on our website. These are text files that your browser automatically creates and that are stored on your IT system when you visit our site. Information relating to the specific device used is stored in the cookie.
4.2 Technically necessary cookies
We use technically necessary cookies. These are cookies that are technically necessary to provide all functions of our website.
4.2.1 Purpose of processing
We use technically necessary cookies for the following purposes in order to:
• to provide services,
• to enable the use of our website features,
• as well as to offer different languages.
4.2.2 Legal basis
The legal basis for data processing is our legitimate interest within the meaning of Article 6 (1) (f) GDPR. We have a legitimate interest in being able to offer our offer in a technically flawless manner.
4.2.3 Storage period
We delete your personal data as soon as it is no longer required to achieve the purpose for which it was collected. Technically necessary cookies are only stored for each session. When you leave our website and close your browser, the cookies are deleted.
4.3 Analytical and marketing cookies
We also use analysis and marketing cookies. These are cookies that are not technically necessary. We use them to understand your behavior on our website and to improve our offerings.
4.3.1 Purpose of processing
We use technically necessary cookies for the following purposes:
• range measurement and tracking,
• evaluation of visitor behavior,
• optimization of our offering,
• as well as targeted advertising.
4.3.2 Legal basis
The legal basis for data processing is your consent in accordance with Article 6 (1) (a) GDPR. The cookies are only set after you have given your consent via our cookie banner.
4.3.3 Storage period
We delete your personal data as soon as it is no longer required to achieve the purpose for which it was collected. The storage period of personal data depends on the providers used. For information, see the “Using Third Party Providers” section.
5 Contact options
5.1 General information
You can contact us via our website by e-mail or via our form. As part of contacting you and responding to your request, we process the following personal data from you:
• Name
• Email
• Telephone number
• Date and time of request
• IP address
• Other personal data that you provide to us when you contact us.
5.2 Purpose of processing
We process your data to answer your request and other resulting issues.
5.3 Legal basis
If your request is based on pre-contractual measures or with an existing contract with us, the legal basis is the performance of the contract and implementation of pre-contractual measures in accordance with Article 6 (1) (b) GDPR.
If your request is made independently of contractual or pre-contractual measures, and not via our contact form, our legitimate interests are the legal basis in accordance with Art. 6 (1) (f) GDPR. The legitimate interest corresponds to the purposes set out above.
5.4 Storage period
We delete your personal data as soon as it is no longer required to achieve the purpose for which it was collected. In the context of contact requests, this is generally the case if the circumstances show that the specific issue has been finally dealt with.
6 Use of third-party services
We use the following third-party services on our website:
6.1 Marketing
Service: Google Analytics 4
Provider: Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland
Purpose: Preparation of evaluations and reports of user website activities, remarketing
Legal basis: Your consent in accordance with Article 6 (1) (a) GDPR
Storage period: Users' personal data will be deleted or anonymized after 14 months, unless there are legal obligations to store them.
Service: Google Ads
Provider: Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland
Purpose: Optimizing our advertising on Google
Legal basis: Your consent in accordance with Article 6 (1) (a) GDPR
Storage period: We delete your personal data as soon as it is no longer required to achieve the purpose of collection.
Service: Google Tag Manager
Provider: Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland
Purpose: Management and integration of tags on our website
Legal basis: Your consent in accordance with Article 6 (1) (a) GDPR
Storage period: We delete your personal data as soon as it is no longer required to achieve the purpose of collection.
Service: LinkedIn Insight Tag
Provider: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland
Purpose: Collection and analysis of LinkedIn members on our website
Legal basis: Your consent in accordance with Article 6 (1) (a) GDPR
Storage period: We delete your personal data as soon as it is no longer required to achieve the purpose of collection.
Service: YouTube video
Provider: Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland
Purpose: Inclusion of a YouTube video on our website
Legal basis: Your consent in accordance with Article 6 (1) (a) GDPR
Storage period: We delete your personal data as soon as it is no longer required to achieve the purpose of collection.
6.2 Presentation of the website and fonts
Service: Google Fonts
Provider: Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland
Purpose: Provision of various fonts for our online offering
Legal basis: Legitimate interests in accordance with Article 6 (1) (f) GDPR. The legitimate interest corresponds to our purpose of processing.
Storage period: We delete your personal data as soon as it is no longer required to achieve the purpose of collection.
6.3 Cloud services and email delivery
Service: Microsoft Azure
Provider: Microsoft Ireland Operations Limited, 70 Sir John Rogerson's Quay, Dublin 2, Ireland
Purpose: Provision of the technical infrastructure to host the website
Legal basis: Legitimate interests in accordance with Article 6 (1) (f) GDPR. The legitimate interest corresponds to our purpose of processing.
Storage period: We delete your personal data as soon as it is no longer required to achieve the purpose of collection.
Service: Mailjet
Provider: Mailjet GmbH Alt-Moabit 2, 10557 Berlin; Mailgun Technologies Inc., 112 E Pecan St #1135, San Antonio, TX 78205, USA
Purpose: Sending emails
Legal basis: Your consent in accordance with Article 6 (1) (a) GDPR
Storage period: We delete your personal data as soon as it is no longer required to achieve the purpose of collection.
6.4 Transfer of personal data to third countries
Insofar as we transfer personal data to a third country for processing, we ensure compliance with Art. 44 ff. GDPR, i.e. that we check whether an adequate level of protection is ensured before any transfer of personal data to third parties in a country outside the European Union (“EU”) or the European Economic Area (“EEA”). An adequate level of protection can be ensured, among other things, by the fact that the EU Commission has taken an adequacy decision, concluded standard data protection clauses with the recipient and has taken further additional measures, or that the transfer to third countries is permitted under other guarantees regulated in Art 46 et seq. GDPR. Insofar as the data transfer is based on Art. 46, 47 or 49 (1) GDPR, you may obtain from us a copy of the guarantees of an adequate level of data protection with regard to the data transfer or an indication of the availability of a copy of the guarantees. Copies of these guarantees can be obtained from us. The following providers have the option of transmitting data to third countries:
Service: Google
Third country: USA
Appropriate guarantee in accordance with Art. 44 et seq. GDPR: standard data protection clauses, Google Ads standard data protection clauses, Google Analytics 4 activates the anonymization of IP addresses by default.
Service: LinkedIn
Third country: USA
Appropriate guarantee in accordance with Art. 44 et seq. GDPR: standard data protection clauses
Service: Mailjet
Third country: USA
Appropriate guarantee in accordance with Art. 44 et seq. GDPR: standard data protection clauses
Service: Microsoft
Third country: USA
Appropriate guarantee in accordance with Art. 44 et seq. GDPR: standard data protection clauses
Service: Webflow
Third country: USA
Appropriate guarantee in accordance with Art. 44 et seq. GDPR: standard data protection clauses
7 Social networks
7.1 General information
We maintain a presence on social networks so that we can communicate with you and inform you about our services.
If you visit one of our pages maintained there, we may be jointly responsible with the provider of the respective platform within the meaning of Article 26 GDPR with regard to the processing operations that involve personal data.
As part of the processing operations, the following data, among others, are processed:
• Inventory data (e.g. first and last name, address, age, gender)
• Content data (e.g. texts, photographs, videos)
• Usage data (e.g. visits to websites, interests)
• Metadata (e.g. device information, IP address)
This usage data is often processed in social and professional networks for advertising purposes or to analyze user behavior by providers, without us being able to influence this. In addition, providers often create user profiles, on the basis of which user-based advertising can then be placed within and outside the network. Cookies are often used for this purpose or the usage behavior is assigned directly to your own network member profile (if you are logged in here). We also use user data to communicate with you via the respective network and to provide you with information. If you interact with our company profile in the respective network (e.g. visit our company profile, comment on or “like” something), it is possible that your user profile and personal data will be made public as a result.
Information on the processing of your data in social and professional networks and the option to exercise your right of objection or withdrawal (opt-out) is provided below.
7.2 Purpose of processing
We process your personal data for the following purposes:
• Public relations and marketing purposes, i.e. we provide information about our services and offers and communicate with you, among other things
• Staff recruitment
7.3 Legal basis
The legal basis for processing personal data is our overriding legitimate interest in accordance with Article 6 (1) (f) GDPR. The overriding legitimate interest corresponds to the purposes set out above.
7.4 Storage period
In principle, your data is stored by the respective network provider and not directly by us. We store your activities and personal data published on our website until the purpose of processing has ceased or your consent has been withdrawn, unless there are any storage obligations to the contrary.
7.5 Recipients of personal data
Social network: LinkedIn
Provider: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland
Third country: USA
Appropriate guarantees: standard data protection clauses
More information: Privacy Policy, Opt-out and Advertising Preferences, Joint Responsibility Agreement
Social network: Facebook
Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland | United States
Third country: USA
Appropriate guarantees: standard data protection clauses
More information: Privacy Policy, Objection Settings, Joint Responsibility Agreement
Social network: Instagram
Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland | United States
Third country: USA
Appropriate guarantees: standard data protection clauses
More information: Privacy Policy, Objection Settings, Joint Responsibility Agreement
Social network: Youtube
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Third country: USA
Appropriate guarantees: standard data protection clauses
More information: privacy policy, objection settings
8 Your rights
8.1 Right to confirmation
You have the right to request confirmation from us as to whether personal data concerning you is being processed.
8.2 Information (Art. 15 GDPR)
You have the right to receive free information from us about the personal data stored about you and a copy of this data in accordance with legal provisions at any time.
8.3 Correction (Art. 16 GDPR)
You have the right to request that incorrect personal data concerning you be corrected. You also have the right to request the completion of incomplete personal data, taking into account the purposes of processing.
8.4 Deletion (Article 17 GDPR)
You have the right to request that we delete personal data relating to you immediately if one of the reasons provided for by law applies and insofar as processing or storage is not necessary.
8.5 Restriction of processing (Art. 18 GDPR)
You have the right to ask us to restrict processing if one of the legal requirements is met.
8.6 Data portability (Article 20 GDPR)
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transfer this data to another person responsible without hindrance from us to whom the personal data has been provided, provided that the processing is based on consent in accordance with Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR or on a contract in accordance with Article 6 (1) (b) GDPR and the processing is carried out using automated procedures, provided that the processing is not necessary for the performance of a task that is in the public interest or in the exercise of public interest Violence takes place that has been given to us.
In addition, when exercising your right to data portability in accordance with Article 20 (1) GDPR, you have the right to have the personal data transmitted directly from one person responsible to another person responsible, insofar as this is technically feasible and provided that this does not affect the rights and freedoms of other persons.
8.7 Objection (Article 21 GDPR)
For reasons arising from your particular situation, you have the right to object at any time to the processing of personal data concerning you based on data processing in the public interest in accordance with Article 6 (1) (e) GDPR or on the basis of our legitimate interest in accordance with Article 6 (1) (f) GDPR.
This also applies to profiling based on these provisions within the meaning of Art. 4 No. 4 GDPR.
If you file an objection, we will no longer process your personal data unless we can prove compelling legitimate reasons for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
In individual cases, we process personal data for direct marketing purposes. You can object to the processing of personal data for the purpose of such advertising at any time. This also applies to profiling insofar as it is associated with such direct advertising. If you object to us processing for direct marketing purposes, we will no longer process the personal data for these purposes.
In addition, you have the right, for reasons arising from your particular situation, to object to the processing of personal data concerning you carried out by us for scientific or historical research purposes or for statistical purposes in accordance with Article 89 (1) GDPR, unless such processing is necessary to perform a task in the public interest.
8.8 Withdrawal of consent under data protection law
You have the right to withdraw your consent to the processing of personal data at any time with effect for the future.
8.9 Complaint to a supervisory authority
You have the right to complain to a supervisory authority responsible for data protection about our processing of personal data.
9 Timeliness and changes to the privacy policy
This privacy policy is currently valid and is as of June 2024.
If we continue to develop our website and offers or legal or regulatory requirements change, it may be necessary to change this privacy policy. You can access the latest privacy policy here at any time.
