Privacy Policy

I.General Information on Data Protection & Data Subject Rights
II.Website and App
III.Newsletter Subscribers
IV.Social Media

The English version of our privacy policy is for transparency purposes only. If the English version differs from the German version, the contents of the German version apply.

I.General Information on Data Protection & Data Subject Rights

General Information

Data protection is an important issue. Below, we inform you about the collection and processing of personal data. Personal data are all data that can be related to you personally.

Responsible Party as per Art. 4 Para. 7 GDPR

countX GmbH
Chausseestrasse 6
10115 Berlin

Phone: +49 30 6293155 0
Email: hello@countx.com

Data Protection Officer

You can reach our personally appointed Data Protection Officer at the following address:

Mr Patrick Grihn
grihn@dsb.ruhr
DSB Ruhr
℅ nextindex GmbH & Co. KG
Grabenstr. 12
44787 Bochum

If you have any questions about data processing or require information, you can contact him directly.

General Overview of Data and Processing Operations

We want to provide you with the required transparency as per Art. 12 GDPR. Therefore, here is an overview of the processing operations:

Types of Data Processed:

  • Usage data or communication data (e.g., IP address, device information, access time, etc., when accessing a webpage)
  • Contact data provided during registration or data entry
  • Inventory data (e.g., name, company, address)
  • Communication data (possibly metadata about calls, emails)
  • Content data (particularly in case of sending emails)

Additionally, internally for our customers, prospects, suppliers, and business partners, we process the following additional data for the provision of services in the areas of offer and contract management, service, and marketing, direct advertising, and customer care:

  • Contract data
  • Customer inventory data (CRM)
  • Payment data
  • Order and billing data

Affected Persons (Categories):

  • Users of this website (also called visitors)
  • Customers
  • Prospects
  • Users of our software

Purposes:

  • Operating the website and providing information
  • Ensuring the operation of the website and our systems (e.g., firewall)
  • Communication with our customers
  • Responding to inquiries
  • Optimization and analysis of the website
  • Providing information for our (potential) customers

Your Rights

You have the following rights regarding your personal data:

Briefly:

  • Right of access
  • Right to rectification or erasure
  • Right to restriction of processing
  • Right to object to processing
  • Right to data portability
  • Right to complain to a data protection supervisory authority about our processing of your personal data.

Detailed Rights:

  • According to Art. 15 GDPR, you have the right to request information about your personal data processed by us. In particular, you can request information on the processing purposes, the category of personal data, the categories of recipients to whom your data has been disclosed or will be disclosed, the planned retention period, the existence of a right to rectification, erasure, restriction of processing, or objection, the existence of a right to lodge a complaint, the origin of your data, if it was not collected by us, and the existence of automated decision-making, including profiling, and meaningful information on their details;
  • According to Art. 16 GDPR, you have the right to request without undue delay the rectification of inaccurate personal data or the completion of your personal data stored by us;
  • According to Art. 17 GDPR, you have the right to request the erasure of your personal data stored by us, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
  • According to Art. 18 GDPR, you have the right to request the restriction of processing of your personal data, where the accuracy of the data is contested by you, the processing is unlawful, but you oppose the erasure of the data and we no longer need the data, but you require it for the establishment, exercise, or defense of legal claims, or you have objected to processing pursuant to Art. 21 GDPR;
  • According to Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request its transfer to another controller;
  • According to Art. 7 Para. 3 GDPR, you have the right to withdraw your consent at any time. This means that we may no longer continue the data processing based on this consent for the future, and
  • According to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. Generally, you can contact the supervisory authority at your usual place of residence or workplace or our office location.

Exceptions:

The right to erasure does not exist insofar as the processing is necessary for:

  • Exercising the right of freedom of expression and information;
  • Compliance with a legal obligation requiring processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • Reasons of public interest in the area of public health in accordance with Art. 9 Para. 2 lit. h and i and Art. 9 Para. 3 GDPR;
  • Archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes in accordance with Art. 89 Para. 1 GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
  • The establishment, exercise, or defense of legal claims.

General Legal Bases

In the processing of personal data necessary for the performance of a contract to which the data subject is party, Article 6(1)(b) of the GDPR applies.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 Para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for carrying out pre-contractual measures. If processing is necessary for the purposes of the legitimate interests pursued by our company or a third party, and these interests are not overridden by the interests or fundamental rights and freedoms of the data subject, Art. 6 Para. 1 lit. f GDPR serves as the legal basis for processing. Insofar as processing personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 Para. 1 lit. c GDPR serves as the legal basis. In the event that vital interests of the data subject or another natural person necessitate the processing of personal data, Art. 6 Para. 1 lit. d GDPR serves as the legal basis. Where we obtain the consent of the data subject for processing operations involving personal data, Art. 6 Para. 1 lit. a GDPR serves as the legal basis.

II.Website and App

General Information

General Information about Cookies

Our website uses cookies. Cookies are small text files stored on your device that save specific settings and data for exchange with our system through your browser. This storage helps us design the website appropriately and makes it easier for you to use. Some cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies). These cookies allow us to greet you with your user name and save you the trouble of re-entering your password or filling out forms with your data for subsequent orders.

Lifetime of Cookies

Session cookies expire once you close your browser. Persistent cookies have a lifetime ranging from a few minutes to several years.

Configuration of Cookies

You can configure your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies for specific cases or in general (detailed description of cookie settings, see below). If cookies are not accepted, the functionality of our website may be limited.

Data Storage and Data Processing in the European Union

The data processing takes place within the European Union (EU).

Third-Party Services

We use third-party services to make our website more user-friendly, effective and secure.

This also includes the use of analysis tools. We use analysis tools for the purpose of analyzing user behavior in order to optimize our website.

Unless otherwise stated in this privacy policy, the use of analysis tools is based on the legal basis of legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. This is particularly the case if the service only collects data in pseudonymized form and the respective service does not use the data for its own purposes.

Google services

We use various services of the provider Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland on our website. A company incorporated and operated under Irish law (registration number: 368047).

Google services are only used with your informed consent on the basis of Art. 6 (1) (a) GDPR.

Google uses cookies in connection with the services and functions, which can be stored on your end device. The information generated by the cookies (e.g. about your use of the website) may be transferred to a server in the USA and stored there. This may also include your IP address. As a rule, your IP address is stored anonymously. Google has submitted to the "Data Privacy Framework". The transfer takes place under certification of the Data Privacy Framework on the basis of Art. 45 GDPR (adequacy decision). Further information on the Data Privacy Framework can be found at https://www.dataprivacyframework.gov/s/.

We use the following Google services and functions:

Google Analytics

We use Google Analytics to analyze and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user.

We use Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are further processed in abbreviated form, thus excluding the possibility of personal references. If the data collected about you is personally identifiable, it is immediately excluded and the personal data is deleted immediately.

This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under "My data", "Personal data".

Google Ads

We use Google Ads to draw attention to our website on external websites or search engines.

As part of this, we use the Google Ads remarketing function. With the remarketing function, we can present users of our website with advertisements based on their interests on other websites within the Google advertising network. For this purpose, Google stores cookies to uniquely identify a web browser on a specific end device. In this context, we do not receive any information with which users can be personally identified.

We also use so-called conversion tracking. When you click on an ad placed by Google, a cookie is set for conversion tracking.

Each Google Ads customer receives a different cookie. The cookies cannot be tracked via the websites of Google Ads customers. The information collected using the conversion cookie is used to generate conversion statistics for Ads customers. We do not receive any information that can be used to personally identify users.

Google Tag Manager

We use the Google Tag Manager. This service is used to efficiently manage so-called "tags" (small code elements on the website). This service makes it easier for us to use other Google services, among other things.

Google Maps

We use the Google Maps service on this website. This enables us to show you interactive maps directly on the website and allows you to use the map function conveniently. When you visit the website, Google receives the information that you have accessed the corresponding subpage of our website. We have no influence on this data transfer.

Possibility of objection:

You have several options to object to or restrict the collection and processing of your data by Google.

  • You can prevent the storage of cookies by setting your browser software accordingly (this may mean that not all functions of the website can be used)
  • You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de. (Only applies to data collected and processed in the context of Google Analytics)
  • You can withdraw your consent to the processing of data by Google services at any time. You can do this by deleting the cookies in your browser and not giving your consent the next time you visit our website.
  • If you have a Google account, you can make settings for the type, scope and storage of data by Google in the account management under the menu item "Data & personalization".

Further information on the purpose and scope of data collection and processing can be found in Google's privacy policy ( https://policies.google.com/privacy?hl=de&gl=de).

Facebook-Pixel

We use the Facebook pixel of Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

By using the Facebook pixel, we can recognize whether a Facebook ad was successful and led to a purchase. We also receive statistical data from Facebook in order to optimize the effectiveness of our ads. This is used on the basis of Art. 6 para. 1 lit. a GDPR (consent). It is possible that data may be transferred to the USA and Meta has submitted to the "Data Privacy Framework". The transfer takes place under certification of the Data Privacy Framework on the basis of Art. 45 GDPR (adequacy decision). Further information on the Data Privacy Framework can be found at https://www.dataprivacyframework.gov/s/.

Further information can be found in Meta's data protection information https://www.facebook.com/about/privacy/ .

LinkedIn Insights

We use the conversion tracking technology and the retargeting function of the LinkedIn Corporation on our website. With the help of this technology, visitors to this website can be shown personalized advertisements on LinkedIn. Furthermore, it is possible to create anonymous reports on the performance of the advertisements and information on website interaction. For this purpose, the LinkedIn Insight tag is integrated on this website, which establishes a connection to the LinkedIn server if you visit this website and are logged into your LinkedIn account at the same time.

The use is based on Art. 6 para. 1 lit. a GDPR (consent). It is possible that data may be transferred to the USA. LinkedIn has submitted to the "Data Privacy Framework". The transfer takes place under certification of the Data Privacy Framework on the basis of Art. 45 GDPR (adequacy decision). Further information on the Data Privacy Framework can be found at https://www.dataprivacyframework.gov/s/.

In the LinkedIn privacy policy at https://www.linkedin.com/legal/privacy-policy you will find further information on data collection and data use as well as the options and rights to protect your privacy. If you are logged in to LinkedIn, you can deactivate data collection at any time by clicking on the following link: https://www.linkedin.com/psettings/enhanced-advertising.

Hubspot

We use an online marketing tool from the provider HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland ("Hubspot") on our website. The tool is used on the basis of Art. 6 para. 1 lit. a GDPR (consent). It is possible that data may be transferred to the USA. An adequate level of data protection cannot be guaranteed if data is transferred to the USA. In particular, access by US authorities cannot be ruled out. The transfer takes place on the basis of Art. 49 para. 1 lit. a GDPR (consent).

Further information can be found in Hubspot's privacy policy: https://legal.hubspot.com/privacy-policy.

Hotjar

This website uses Hotjar. The provider is Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe (Website: https://www.hotjar.com ), to better understand user behavior, to better understand the needs of our users and to optimize our services and user experience. Hotjar enables us to better understand the user experience on our pages (i.e. how long users spend on which of our pages, which links they click on, what they like and dislike, etc.) so that we can tailor our offers to user feedback, which is used on the basis of Art. 6 para. 1 lit. a GDPR. For more information about Hotjar and the data collected, please refer to Hotjar's privacy policy at the following link: https://www.hotjar.com/privacy.

Further information can be found in Hubspot's privacy policy: https://legal.hubspot.com/privacy-policy.

Calendly

You can make an appointment with us on our website. We use "Calendly" for this purpose. Calendly is a service of Calendly, LLC, 1315 Peachtree St NE, Atlanta, GA 30309, https://calendly.com.

Processing is carried out for the purpose of booking appointments on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest). It is possible that your data will be transferred to the USA. It is possible that data may be transferred to the USA. Calendly has submitted to the "Data Privacy Framework". The transfer takes place under certification of the Data Privacy Framework on the basis of Art. 45 GDPR (adequacy decision). Further information on the Data Privacy Framework can be found at https://www.dataprivacyframework.gov/s/.

Further information can also be found at https://calendly.com/pages/dpa.

Contact Form and Email Contact

There is a contact form on our website that can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored. These data are:

  • Name of the user
  • E-mail address
  • Telephone number (optional)
  • Message

The following data is also stored at the time the message is sent:

  • The IP address of the user
  • Date and time of registration

Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored.

We process the respective personal data for the purpose of processing the conversation (contact, reply) on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest) or on the basis of Art. 6 para. 1 lit. b GDPR (fulfillment of a contract or pre-contractual measures).

The data will be deleted if it is no longer required to fulfill the purpose of processing.

Provisions for Users of Our Software

We offer our software on the following website:

https://app.countx.com/

In addition to the data mentioned in §4, we process further data for the purpose of providing our software and services. Customers can create a user account with us for this purpose. The processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR (fulfillment of a contract or pre-contractual measures).

Storage duration

Your data will be stored until you delete your user account with us.

After deletion of your user account, your data will be permanently deleted, unless the corresponding data is required for the fulfillment of statutory retention obligations.

Forwarding of data (also recipients)

In the course of a request for information from a credit agency, the notification of a payment default, in the course of tax advice or the defense or assertion of legal claims, the data may be passed on to third parties for corresponding purposes.

On request, we will transmit your data to the relevant authorities, such as the responsible tax offices, in order to provide our services.

III.Newsletter Subscribers

Newsletter

We offer a newsletter that you can subscribe to on our website.

We process your e-mail address for the purpose of sending the newsletter. Optionally, you can also voluntarily provide your name and title. We process this data for the purpose of addressing you personally.

We only send the newsletter with your express consent in accordance with Art. 6 para. 1 lit. a GDPR.

You can revoke your consent to receive the newsletter at any time. You can withdraw your consent by clicking on the link provided in every newsletter email.

We would like to point out that we evaluate your user behavior when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. We use the data obtained in this way to create a user profile in order to tailor the newsletter to your individual interests.

IV.Social Media

General Information

We are also represented on social media. However, we do not directly integrate any platform; if you click on the icons of the corresponding portals, the terms of use and data protection provisions of the respective portals apply.

At no time is there an obligation to register with one of these portals for information purposes or to contact us (the provider). Instead, you have various options for contacting us (telephone, e-mail, contact form).

Facebook

Below we provide information about the collection and processing of personal data on the social media platform Facebook.

This information applies to all content on our fan page on the Facebook social media platform.

Controller pursuant to Art. 4 para. 7 GDPR

The controller responsible for the collection and processing of personal data is partly us, the entity named as responsible in this privacy policy and partly the platform operator Meta Platforms Ireland Ltd ("Facebook").

Information about the processing operations

a) Processing by Facebook

Facebook collects and processes some of your personal data as an independent controller. We have no influence on these processing operations.

Further information and contact details can be found in Facebook's data policy: https://www.facebook.com/privacy/explanation.

b) Joint responsibility, Art. 26 GDPR

We have concluded a joint controllership agreement with Facebook Ireland Ltd. in accordance with Art. 26 GDPR.

Facebook creates so-called "Page Insights" for fan page operators. Page Insights are information about how users use or interact with our fan page. There is joint responsibility for this processing.

The processing is carried out for the purpose of optimizing the fan page on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest).

Information on the recipients or categories of recipients, the storage period or the criteria for determining the storage period, as well as the possibility of exercising your rights can be found in Facebook's data policy https://www.facebook.com/privacy/explanation.

c) Processing by us

Processing purposes:

We process your personal data for the following purposes:

  • Operating the fan page
  • Providing information (e.g. about products, services, etc.)
  • Communication with our customers
  • Answering inquiries
  • Optimization and analysis of the fan page

Legal basis:

The processing for the above-mentioned purposes is carried out on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest) or Art. 6 para. 1 lit. b GDPR (fulfillment of a contract or pre-contractual measures).

Recipients / categories of recipients:

Your data will be processed and made available at the necessary places within the responsible body.

Furthermore, depending on how you interact with our fan page, some data may be published on Facebook (e.g. comments, "likes", images, videos, etc.). This data may be visible to other users of our fan page.

Storage duration:

Data that you have published on Facebook (e.g. comments, "likes", images, videos, etc.) will remain indefinitely unless you or we delete this data. We reserve the right to delete public content if this should be necessary (e.g. in the case of illegal content).

All other data will be deleted unless they are still required to fulfill the processing purposes for which they were collected.

We have no influence on the deletion of data by Facebook. Further information can be found in Facebook's data policy (https://www.facebook.com/privacy/explanation).

V.Status of the Privacy Policy

The privacy policy is occasionally updated to reflect changes in the business process and the legal situation. You will always find the latest version on the website.

Status: June 2024