Erstgespräch

Data protection

1. introduction & contact

1.1 Thank you for visiting our website. The protection of your personal data is important to us. In the following, we inform you about the processing of your personal data when you use our website. Personal data is any information relating to an identified or identifiable natural person, such as name, address, e-mail address or user behavior.

1.2 The controller in charge of data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is

piparo.tech GmbH
Frauentorgraben 61, 90443 Nuremberg, Germany
E-mail: [email protected]

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2. data collection when visiting our website

2.1 If you use our website for purely informational purposes, i.e. if you do not register or otherwise provide us with information, we only process the data that your browser automatically transmits to our server (so-called "server log files"). This data is technically necessary in order to display the content of our website correctly and to ensure stability and security. In detail, the following information is collected:

This data is processed in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in ensuring the trouble-free operation of the website and the optimization of our offer. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are specific indications of unlawful use.

2.2 In order to protect the transmission of personal data and other confidential content (e.g. inquiries or orders), our website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.

3. hosting & content delivery network

3.1 Hetzner

We use the services of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, to host our website and provide the page content.

All data collected on our website is processed on Hetzner's servers. We have concluded an order processing contract (AVV) with Hetzner in accordance with Art. 28 GDPR. This ensures that the data of our website visitors is protected and is not passed on to third parties without authorization.

The data is processed exclusively in data centers within the European Union. This ensures compliance with the requirements of the General Data Protection Regulation (GDPR) and a high level of European data protection.

3.2 Bunny CDN

To optimize the loading speed and availability of our website, we use the Content Delivery Network (CDN) of BunnyWay d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia ("Bunny CDN").

Ein CDN ist ein Netzwerk aus weltweit verteilten Servern, das dazu dient, Inhalte, insbesondere große Mediendateien wie Bilder, Videos, Stylesheets und Skripte, möglichst schnell bereitzustellen. Bei der Nutzung des Bunny CDN wird Ihre IP-Adresse an Bunny übermittelt, um die Inhalte aus dem geografisch nächstgelegenen Rechenzentrum auszuliefern. Diese Verarbeitung erfolgt ausschließlich zum Zweck der technischen Auslieferung und Verbesserung der Performance unserer Website.

The processing is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR to ensure the stability and speed of our website and to improve the user experience.

Bunny CDN operates server locations within the European Union and ensures a high level of data protection. Further information on data processing by Bunny CDN can be found in the provider's privacy policy at https://bunny.net/privacy

4. cookies

We use cookies to make your visit to our website attractive and to enable the use of certain functions. Cookies are small text files that are stored on your end device. Some cookies are automatically deleted after you close your browser ("session cookies"), while other cookies remain on your device for a longer period of time in order to save your settings ("persistent cookies"). The storage duration of persistent cookies can be found in the cookie settings of your browser.

When cookies process personal data, this is done on the basis of the following legal bases:

You can set your browser so that you are informed about the setting of cookies. You can also decide whether to allow cookies in individual cases, reject cookies in general or have cookies deleted automatically. Further information on this can be found in the help function of your browser.

Please note that the functionality of our website may be limited if you refuse cookies.

5. making contact

5.1 Calendly

We use the services of the following provider to provide an online appointment booking function:

Calendly, LLC
BB&T Tower, 271 17th St NW,
Atlanta, GA 30363, USA

For the purpose of making appointments, we collect the following personal data in accordance with Art. 6 para. 1 lit. b GDPR: First and last name, e-mail address and, if applicable, your telephone number (if an appointment is made by telephone). The data is transmitted to Calendly and stored there on the basis of our legitimate interest in efficient appointment management and effective customer management in accordance with Art. 6 para. 1 lit. f GDPR.

Your data will be deleted by Calendly after the appointment has been completed or after the agreed period has expired. We have concluded an order processing contract (AVV) with Calendly in accordance with Art. 28 GDPR to ensure the protection of your data and to prevent unauthorized disclosure to third parties.

5.2 Contact form and e-mail

If you contact us via the contact form on our website or by email, we collect personal data. Which data is collected in the case of the contact form can be seen from the respective input fields. This data is used exclusively to process your request and to ensure the associated technical administration.

The legal basis for the processing of this data is our legitimate interest in processing your request in accordance with Art. 6 para. 1 lit. f GDPR. If your request is aimed at the conclusion of a contract, the additional legal basis is Art. 6 para. 1 lit. b GDPR.

Your data will be deleted as soon as the purpose of the processing has been fulfilled and there are no statutory retention obligations (e.g. commercial or tax law requirements) to the contrary.

6. web analysis services

6.1 Plausible analytics

This website uses Plausible Analytics, a privacy-friendly web analytics service provided by Plausible Insights OÜ, Västriku tn 2, 50403, Tartu, Estonia. Plausible enables us to analyze the use of our website without collecting personal data from visitors.

Unlike other web analysis tools, Plausible works without the use of cookies. All data collected is completely anonymized and does not allow any conclusions to be drawn about individual persons. The information only includes aggregated statistics, such as

Plausible does not store or process IP addresses. All data is processed exclusively on servers within the European Union, which guarantees compliance with the European level of data protection.

Plausible Analytics is used in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in analyzing user behavior and continuously optimizing our offer. As Plausible does not process any personal data, user consent is not required.

Further information on Plausible Analytics and the provider's privacy policy can be found here: https://plausible.io/data-policy.

6.2 PostHog

This website uses PostHog, a web analysis and product analysis service of PostHog Inc, 965 Mission Street, San Francisco, CA 94103, USA. PostHog enables us to analyze user behavior on our website in order to improve the user experience and make technical optimizations.

Among other things, PostHog can record how users interact with our website (e.g. click behavior, scroll depth, pages visited). Depending on the configuration, data is collected with or without the use of cookies. The data collected by PostHog is processed in pseudonymized form and generally does not allow any direct conclusions to be drawn about individual persons.

If personal data is processed (e.g. shortened IP addresses), this is done exclusively on the basis of your express consent in accordance with Art. 6 para. 1 lit. a GDPR. Consent is given via the cookie consent tool integrated on this website and can be revoked at any time with effect for the future.

PostHog operates its own cloud infrastructure, which can be operated within the European Union or in the USA, depending on the server location selected. In the case of processing in third countries such as the USA, data is only transferred in compliance with the legal requirements, in particular on the basis of EU standard contractual clauses or the EU-US Data Privacy Framework.

Further information on data processing by PostHog can be found in the provider's privacy policy at https://posthog.com/privacy

6.3 Google Ads conversion tracking

This website uses the online advertising program Google Ads and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising material (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the advertising campaign data. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your end device. These cookies generally lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked via the websites of Google Ads customers. The information collected using the conversion cookie is used to generate conversion statistics for Google Ads customers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. When using Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA.

Details on the processing triggered by Google Ads Conversion Tracking and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites

All processing described above, in particular the setting of cookies for reading information on the terminal device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

You can also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the Google browser plug-in available at the following link: https://www.google.com/settings/ads/plugin?hl=de

Please note that if you have deactivated the use of cookies, certain functions of this website may not be available or may only be available to a limited extent.

Google's privacy policy can be viewed here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

For data transfers to the USA, the provider has signed up to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

6.4 Sentry

This website uses Sentry, a real-time error monitoring and analysis service provided by Functional Software, Inc. dba Sentry, 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA.

Sentry is used for the technical monitoring of our web application, in particular to identify and rectify code errors, performance problems and other technical faults. In the event of an error, information such as device type, operating system, browser version, timestamp and technical details about the error (e.g. stack trace) are transmitted to Sentry's servers.

The data transmitted in this way does not contain any directly personal information, but in certain cases may allow conclusions to be drawn about user interactions. IP addresses are stored in abbreviated or anonymized form. Processing only takes place in the event of a specific error and solely for the purpose of maintaining and improving the website.

Soweit dabei personenbezogene Daten betroffen sein sollten, erfolgt die Verarbeitung auf Grundlage Ihrer Einwilligung gemäß Art. 6 Abs. 1 lit. a DSGVO oder, im Falle rein technischer Diagnosedaten, auf Grundlage unseres berechtigten Interesses an der Stabilität und Sicherheit unserer Website gemäß Art. 6 Abs. 1 lit. f DSGVO.

The data can also be processed on servers in the USA. Sentry has signed up to the EU-US Data Privacy Framework and thus offers an appropriate level of data protection in accordance with the European Commission's adequacy decision.

Further information on data processing by Sentry can be found in the provider's privacy policy at https://sentry.io/privacy/

7. page functionalities

7.1 Confluence

To provide and manage the content of our blog, we use the services of Confluence, a product of Atlassian Corporation Plc, Level 6, 341 George Street, Sydney, NSW 2000, Australia.

Confluence serves as a platform for creating, editing and organizing content. The data from the Confluence API is transferred to our website. However, no personal data of website visitors is transmitted to Confluence or stored there.

The processing takes place exclusively for the provision of content on our website in accordance with Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the efficient administration and presentation of our blog content.

Further information on data processing by Atlassian can be found in Atlassian's privacy policy at https://www.atlassian.com/legal/privacy-policy.

7.2 Cloudflare

We use the services of Cloudflare, Inc, 101 Townsend Street, San Francisco, CA 94107, USA, to ensure the secure provision of our website and to protect against attacks. Cloudflare offers DNS management and firewall functions that prevent attacks such as DDoS attacks and ensure the stability and availability of the website.

When you access our website, your data traffic is routed via Cloudflare's servers. Cloudflare processes technical connection data such as:

According to Cloudflare, this data is usually anonymized within 24 hours and is used exclusively to detect and ward off attacks. Cloudflare does not permanently store personal data.

The use of Cloudflare is based on our legitimate interest in the security and availability of our website in accordance with Art. 6 para. 1 lit. f GDPR.

Cloudflare processes data exclusively within the European Union and in secure third countries on the basis of standard contractual clauses (SCCs) to ensure an adequate level of data protection.

Further information on data processing by Cloudflare can be found in the provider's privacy policy at https://www.cloudflare.com/privacypolicy/.

8. tools and miscellaneous

8.1 Cookie consent tool

This website uses a so-called "cookie consent tool" to obtain effective user consent for cookies and cookie-based applications that require consent. The cookie consent tool is displayed to users in the form of an interactive user interface when they access the page. Via this user interface, users can give or refuse consent for the use of certain cookies and/or cookie-based applications by making a selection (e.g. ticking a box).

Cookies or services requiring consent are only activated if the user has given the corresponding consent. This ensures that such cookies are only set on the user's end device if express consent has been given.

The cookie consent tool sets technically necessary cookies to save your cookie preferences. These technically necessary cookies are generally used without processing personal data.

If it is necessary to process personal data in individual cases (e.g. storage of the IP address for documentation purposes), this is done in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management. In addition, where required by law, processing is carried out in accordance with Art. 6 para. 1 lit. c GDPR in order to comply with our legal obligation to only set technically unnecessary cookies after the user has given their consent.

If necessary, we have concluded an order processing contract (AVV) with the provider of the cookie consent tool in accordance with Art. 28 GDPR. This contract ensures that the data of our website visitors is protected and is not passed on to third parties without authorization.

Further information about the operator of the cookie consent tool and the setting options can be found in the tool's user interface on our website.

9 Rights of the data subject

9.1 The applicable data protection law grants you the following rights vis-à-vis the controller with regard to the processing of your personal data. Please refer to the stated legal basis for the respective conditions for exercising these rights:

9.2 Right of objection

If we process personal data on the basis of our overriding legitimate interest (Art. 6 para. 1 lit. f GDPR), you have the right to object to this processing at any time with effect for the future on grounds relating to your particular situation.

If you exercise your right to object, we will stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

If your personal data is processed by us for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing. You can exercise your objection as described above.

If you exercise your right to object, we will stop processing your personal data for direct marketing purposes.

10. duration of the storage of personal data

Die Dauer der Speicherung personenbezogener Daten richtet sich nach der jeweiligen Rechtsgrundlage, dem Verarbeitungszweck und, sofern zutreffend, den gesetzlichen Aufbewahrungsfristen (z. B. handels- und steuerrechtliche Vorgaben).

If personal data is processed on the basis of express consent in accordance with Art. 6 para. 1 lit. a GDPR, the data will remain stored until you withdraw your consent.

If there are statutory retention periods for data processed in the context of legal or quasi-legal obligations pursuant to Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after expiry of the periods, provided that it is no longer required for contract fulfillment or contract initiation and/or there is no legitimate interest on our part in further storage.

Personal data processed on the basis of Art. 6 para. 1 lit. f GDPR will be stored until you exercise your right to object in accordance with Art. 21 para. 1 GDPR. Further processing will only take place if we can demonstrate compelling legitimate grounds that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

If personal data is processed for the purpose of direct advertising in accordance with Art. 6 para. 1 lit. f GDPR, this data will remain stored until you exercise your right to object in accordance with Art. 21 para. 2 GDPR.

Unless otherwise stated in this statement about specific processing situations, personal data will be deleted as soon as it is no longer necessary for the purposes for which it was collected or otherwise processed.

Data obtained from the Confluence API does not contain any personal information and is therefore not subject to any specific retention period. The content provided is deleted or updated when it is no longer relevant.

11. changes to this privacy policy

We reserve the right to amend this privacy policy from time to time to ensure that it complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services or functions. The updated privacy policy will then apply to your next visit.

The current version of this privacy policy can be accessed at any time on our website.

12. security of your data

We use suitable technical and organizational measures (TOMs) to protect your personal data from loss, misuse and unauthorized access. These measures are regularly reviewed and adapted to the state of the art in order to ensure the security of your data.