Privacy statement

Below you will find the information that has to be provided in accordance with Articles 13 and 14 of the General Data Protection Regulation (“GDPR”) on the processing of your personal data when you visit (hereinafter “you” or “your”) our websites www.soma.de, www.soma-prueftechnik-automation.de, www.flexassistant.de, www.flex-tsa.de and www.soma-dosiertechnik.de (hereinafter each referred to as “Website”) by SOMA GmbH Systementwicklung-Software-Automation (hereinafter “we” or “us”).

A. Data controller and data protection officer

SOMA GmbH Systementwicklung-Software-Automation,
Gewerbering 9, 58579 Schalksmühle,
info@soma.de, telephone: +49 (0) 2355 50828-0

Data Protection Officer of the KOSTAL Group, An der Bellmerei 10, 58513 Lüdenscheid, dataprotection@kostal.com

B. Information on the processing of personal data

Below you will find information on the processing of your personal data for the purposes specified in more detail there and, for example, about the legal basis for this processing. If the legal basis for the processing specified there is the balancing of interests, you can request additional information about the balancing of interests carried out by us using the contact details specified in Section A.

I. Use of the Website

1. Use of the Website for information purposes

When you visit our Website, we process the IP address of your device for technical reasons, i.e. in order to be able to display the Website at all. We cannot provide the Website content accessed without the provision of this data.

In order to protect our IT infrastructure, we also process the IP address of your device, the type and version of the internet browser used by you, information on the operating system of your device, information on the pages accessed, the site previously visited (referrer URL) and the access date and time and store this information in so-called log files.

The legal basis of this processing is the balancing of interests (point (f) of Article 6 paragraph 1 of the GDPR). Our legitimate interest for this processing is the provision of the Website content accessed by you and the protection of the IT infrastructure used to provide the Website, in particular to identify, remedy and document IT disruptions (e.g. DDoS attacks) for evidence purposes.

The recipient of these data is our hosting provider Microsoft Azure, which acts for us as processor. A further recipient is PSV GmbH, which likewise acts as processor and has been commissioned with the development of the Website as well as its maintenance and servicing.

We generally store these personal data in the log files for 3 (three) months. In the case of any security-relevant event (e.g. an attack), we also store the log files until the security-relevant event has been eliminated and clarified in full.

2. Typo 3

To provide this website, we use the Typo3 web content management system, which provides analysis functions for evaluating surfing behaviour. For this purpose, information generated by cookies about the use of this website is stored in a database on a server of a service provider contractually bound to us. The data collected is anonymized by technical measures (e.g., by deleting the last digits of the IP address), including the anonymized IP address (anonymization is achieved by deleting the last digits).

The legal basis for the use of Typo3 is the balancing of interests pursuant to Art. 6 (1) (f) GDPR. Our legitimate interest is to provide the content of the website accessed by the user and to protect the IT infrastructure used to provide the website.

You can prevent the installation of cookies by adjusting your browser software settings accordingly. This is described in Section D.II. However, we would like to point out that this may mean that not all functions of this website can be used to their full extent.

The recipient of this data is our hosting provider Microsoft Azure, which acts as a processor on our behalf.

We store this personal data in the log files for a period of thirty (30) days. In the event of a security incident (e.g., an attack), we will store the log files until the security incident has been resolved and fully investigated.

3. Usercentrics

The Usercentrics Consent Manager is used by us to manage your consents, possible revocations of consents and objections to the use of cookies.

The data processing in this context is carried out to manage the user decisions regarding cookies (consent, revocation, opt-out) and to ensure the security of the application.

The IP address of your terminal device, the type and version of the Internet browser you are using, information about the operating system of your terminal device, information about the pages accessed, the previously visited page (referrer URL) and the date and time of access are processed. In addition, the user's decision on individual cookies or groups of cookies is stored at the time of the decision and the last visit.

Legal basis for the processing of the balance of interests (point f of Art. 6(1) GDPR). Our legitimate interest is the simple and reliable control of Cookies.

The recipient of the data is Usercentrics GmbH, which acts as our order processor.

We store the data for a period of 6 months. The revocation of a previously given consent is stored for three years (accountability). Server log data is anonymized before storage.

We would like to point out that it is not possible to use the website without transmitting personal data, such as the IP address. An automatic decision-making process for consenting to the use of cookies does not take place.

II. Use of the contact form

If you contact us using our contact form due to a request, we process your contact data and information about your request in order to process your request. These data typically include your name, the name of a company you may work for, your position at the company, your request, address data and telephone numbers as well as any arrangements made with you. You are not obliged to provide these data. However, without these data we are unable to process your request properly. Such data, which have to be provided in the contact form, are marked with an asterisk (*).

If you are a potential customer or a customer, the legal basis of the processing is to take steps at your request prior to entering into a contract or to perform a contract with you (point (b) of Article 6 paragraph 1 of the GDPR). If you are not acting for yourself, but – for example as an employee – for a legal entity, the legal basis of the processing is the balancing of interests (point (f) of Article 6 paragraph 1 of the GDPR). Our legitimate interest in this case is processing the request communicated by you.

The recipient of these data is our hosting provider Microsoft Azure, which acts for us as processor. A further recipient is PSV Neo GmbH, which likewise acts as processor and has been commissioned with the development of the Website as well as its maintenance and servicing Leopold Kostal GmbH & Co. GmbH as further resipient of the data, acting as a processor, and storing the data in our Customer-Relations Management System (CRM System).

We store these data for the duration of processing your request and thereafter for the duration of the statutory retention periods (sec. 257 of the German Commercial Code (Handelsgesetzbuch – HGB) and sec. 147 of the German Tax Code (Abgabenordnung – AO)). These are currently 6 (six) years for business letters and 10 (ten) years for supporting documents. The legal basis for this further storage is compliance with our legal obligation (point (c) of Article 6 paragraph 1 of the GDPR).

III. Job vacancies

You can also find links to job vacancies on our Website. These links lead to an external website for which a separate data protection statement applies. You can find this here.

IV. Analysis of behaviour on the Website

1. Google Analytics

If you have given your consent, we use the web analysis tool “Google Analytics” to record and analyse usage behaviour on our Website by means of cookies (see Section D). Google Analytics is a service provided by Google LLC (“Google”), which is headquartered in the USA. The personal data collected with the help of these cookies include your IP address as well as information about the subpages visited, visit duration and the website via which you reached our site and the website you access after visiting our Website. There is no obligation to provide these data. If these data are not provided, we cannot measure web audience.

This processing serves the optimisation of the Website by analysing your usage behaviour on our Website. We can, for example, based on the frequency with which subpages are accessed, identify which content is particularly interesting for our Website visitors and which content has to be placed differently, for example, in order to be seen by visitors.

It is technically necessary that your full IP address is transmitted to Google. However, we use so-called IP anonymisation. This means that your IP address is shortened immediately after transmission to Google as our processor and is no longer stored by Google. It is then no longer possible to identify the user of the device.

Based on this shortened IP address and the information contained in the cookies, Google prepares the aforementioned analysis of usage behaviour on our Website. As a rule, it is not possible for us to identify you as an individual based on this usage profiles. We do not know which pseudonym you have been given. Therefore, based on the usage profiles of Google Analytics, we are generally unable to identify what specific actions you have taken on the Website.

The legal basis for this processing, including the setting and reading of cookies, is consent to be given separately by you (point (a) of Article 6 paragraph 1 of the GDPR)). You can withdraw this consent by deleting the cookies. This is described in Section C.2.

The data described in this Section B.IV can be transmitted to Google in the USA. For the purposes of EU data protection law, the USA is not considered a safe third country. We would like to point out that US companies are obliged to hand over personal data to security authorities without giving the data subject the possibility to take legal action against this.

We have no influence on this processing activity and it cannot be ruled out that US authorities (e.g. intelligence services) may process, evaluate and permanently store your data located on US servers for monitoring purposes.

We store usage profiles for 26 (twenty-six) months.

2. Google Analytics 4

The website, if you have given your consent, uses the web analytics service Google Analytics 4, provided for persons from the European Economic Area and Switzerland by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and for all other persons by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). We integrate Google Analytics 4 via the Google Tag Manager. If you have not consented to the use of the analytics tools, your data will not be collected as part of Google Analytics 4.

Google Analytics 4 uses JavaScript and pixels to read information on your device and cookies to store information on your device. This is done to analyse your usage behaviour and improve our website. On our behalf, the access data is combined by Google into pseudonymous user profiles and transmitted to a Google server in the USA. We will use the information to evaluate the use of our website and to compile reports on website activities.

As part of the evaluation, Google Analytics 4 also uses artificial intelligence such as machine learning for automated analysis and enrichment of the data. For example, Google Analytics 4 models conversions to the extent that not enough data is available to optimize the evaluation and reports. Information on this can be found in the associated Google documentation. The data analysis are carried out automatically with the help of artificial intelligence or on the basis of specific, individually defined criteria. You can find more about this in the associated Google documentation.

The data collected as part of the usage analysis of Google Analytics 4 is enriched with data from the Google Search Console and linked with data from Google Ads, in particular to measure the success of our advertising campaigns (so-called conversions).

Processed data: The following data can be processed by Google Analytics 4:

IP address;
User ID and device ID;
referrer URL (previous visited page);
Pages viewed (date, time, URL, title, duration of visit);
downloaded files;
clicked links to other websites;
Achievement of specific goals (Conversions);
Technical information (operating system; browser type, version and language; device type, brand, model and resolution);
approximate location (country, region and city, if applicable, based on anonymized IP address).

Privacy settings: We have made the following privacy settings for Google Analytics 4:

Anonymization of the IP address;
deactivated advertising function;
deactivated personalized advertising;
deactivated remarketing;
retention period of 2 months (and no reset of retention period with new activity);
disabled cross-device and cross-page tracking (Google Signals);
disabled data shares (especially Google products and services, benchmarking, technical support, account specialist).

We have concluded a data processing agreement with Google Ireland Limited for the use of Google Analytics 4. In the event that personal data is transferred from Google Ireland Limited to the USA, Google Ireland Limited and Google LLC have concluded standard contractual clauses (Implementing Decision (EU) 2021/914, Module 3) pursuant to Art. 46 point (c) paragraph 2 GDPR. In addition, we also obtain your explicit consent for the transfer of your data to third countries in accordance with Art. 49 point (a) paragraph 2 GDPR.

You can find more information about Google Analytics 4 in Google’s privacy statement and in the Google Analytics privacy policy.

3. Google Ads Conversion Tracking und Ads Remarketing (formally AdWords)

This website uses the services of “Google Ads” provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, for users in the European Economic Area and Switzerland, and by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (collectively “Google”) for all other users.

Google Ads uses “Google Ads Conversion Tracking” to collect and analyze customer actions defined by us (such as clicks on an ad, page views, downloads). We use “Google Ads Re-marketing” to display customized advertising messages for our products on Google partner websites.

The advertising material is delivered by Google via so-called “ad servers.” For this purpose, we use ad server cookies, which allow certain parameters for measuring success, such as the display of ads or clicks by users, to be measured. If you access our website via a Google ad, Google Ads will store a cookie on your device.

These cookies usually expire after 30 days and are not intended to identify you personally. The following information is usually stored as analysis values for this cookie: unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), and opt-out information (indicating that the user no longer wishes to be targeted).

The cookies enable Google to recognize your Internet browser. If a user visits certain pages of an Ads customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user has clicked on the ad and been redirected to that page. Each Ads customer is assigned a different cookie. Cookies cannot therefore be tracked across the websites of Ads customers.

We do not collect any personal data in this context and only receive statistical evaluations from Google that enable us to identify which advertising measures are effective. We do not receive any further data; in particular, it is not possible for us to identify the user.

It is technically necessary for your browser to establish a direct connection to Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool.

To the best of our knowledge, Google receives information that you have accessed the corresponding part of our website or clicked on an advertisement from us through the integration of Ads Conversion. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address.

The legal basis for this processing – including the setting and reading of cookies – is your separate consent (Art. 6 para. 1 sentence 1 lit. a GDPR). You can prevent participation in this tracking process in various ways: a) by adjusting your browser software settings accordingly; in particular, suppressing third-party cookies means that you will not receive any third-party ads; b) by installing the plug-in provided by Google at the following link: www.google.com/settings/ads/plugin; c) by deactivating interest-based advertising from providers who are part of the “About Ads” self-regulation campaign via the link www.aboutads.info/choices, whereby this setting will be deleted; d) by permanently deactivating them in your Firefox, Internet Explorer, or Google Chrome browsers at the link www.google.com/settings/ads/plugin, e) by means of the corresponding cookie settings. You can revoke your consent by deleting the cookies. This is described in Section D.II.

The data described in this section B.IV. may be transferred to Google in the USA. In this case, we have concluded standard contractual clauses with Google. Under EU data protection law, the USA is not considered a safe third country. We would like to point out that US companies are obliged to disclose personal data to security authorities without you, as the data subject, being able to take legal action against this.

We have no influence on this processing activity and it cannot be ruled out that US authorities (e.g., secret services) may process your data stored on US servers for surveillance purposes.

4. Plausible Analytics

The website uses Plausible Analytics. The provider is Plausible Insights OÜ, Västriku tn 2, 50403, Tartu, Estonia.

Plausible Analytics is a web analytics tool that provides us with anonymized information about the use of our website. We use the insights gained to optimize our content and services accordingly. Plausible Analytics collects the following data: page URL, HTTP request, HTTP referrer, browser, operating system, device type, and IP address. HTTP requests and IP addresses are stored in a hash for 24 hours; during this period, a user can be recognized if they return to the website. It is not possible to identify the person; Plausible Analytics does not set cookies and does not store any information in the user's browser. Plausible Analytics acts as a data processor for us and processes the data only in accordance with our instructions and in compliance with the GDPR.

Plausible Analytics is integrated based on our interest in statistical analysis of the use of our website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. Further information on the handling of user data can be found in the privacy policy of Plausible Analytics: plausible.io/privacy and plausible.io/data-policy.

5. Google Doubleclick (Floodlioghts)

This website uses Google DoubleClick cookies. Doubleclick is a service provided to users in the European Economic Area and Switzerland by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and to all other users by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (together “Google”). Cookies are small text files that are stored in a user's browser. These are used to evaluate the use of this website. The data collected is only evaluated for statistical purposes and in anonymized form. Your browser is assigned a pseudonymous identification number (ID). Double Click cookies do not contain any personal data. As a rule, it is not possible for us to draw any conclusions about you as an individual from these usage profiles. We do not know which pseudonym has been assigned to you. Therefore, based on Google DoubleClick's usage profiles, we cannot generally recognize what specific actions you have taken on the website.

The legal basis for this processing—including the setting and reading of cookies—is your separate consent (Art. 6 para. 1 sentence 1 lit. a GDPR). You can revoke this consent by deleting the cookies. This is described in Section D.II. You can prevent the use of DoubleClick cookies by downloading and installing the browser plugin available at the following link under the item DoubleClick Deactivation Extension. Alternatively, you can deactivate DoubleClick cookies on the Digital Advertising page at the following link (http://optout.aboutads.info/?c=2&lang=EN).

The data described in this Section B.VI. may be transferred to Google in the USA. In this case, we have concluded standard contractual clauses with Google. Under EU data protection law, the USA may not be considered a safe third country. We would like to point out that US companies are obliged to disclose personal data to security authorities without you, as the data subject, being able to take legal action against this. For more information, please refer to Google's privacy policy: policies.google.com.

C. Third Party Plug- ins

The third-party plug-ins described below are integrated into our website. These enable you to use certain services provided by external providers directly on our website. These third-party plug-ins are provided by the providers listed below and are their sole responsibility. Plug-in providers may (similar to when you visit an external website via a link) obtain your IP address and the address (URL) of the website from which you accessed the plug-in. If you are registered as a user with the third-party provider, the plug-in provider can usually also assign the data obtained to your user account.

I. Google Maps

Google Maps map service is integrated. The third-party provider of this plug-in is Google. Information about Google Maps can be found here, and Google's privacy policy can be found here. There you will find information about how Google processes personal data.

The information on the transfer of personal data to the US in Section B.IV. therefore applies accordingly.

II. YouTube

YouTube video player is integrated. The third-party provider of this plug-in is YouTube LLC. This is a company under US law. Information about YouTube can be found here, and the privacy policy of YouTube LLC can be found here. There you will find information about the processing of personal data by YouTube LLC.

YouTube is a subsidiary of Google. The information on the transfer of personal data to the US in Section B.IV. therefore applies accordingly.

III. Maptoolkit

We use the Maptoolkit map service to display maps on our website. Maptoolkit is provided by Toursprung GmbH, Mariahilfer Str. 93/20, 1060 Vienna, Austria. When you access the content of our website, you will be connected to the servers of Tour-sprung GmbH. Your IP address and possibly browser data such as your user agent will be transmitted. This data is processed exclusively for the purposes mentioned above and to maintain the security and functionality of Maptoolkit. The IP address is technically anonymized before any further processing. It is not possible to trace this data back to individual persons.

The data mentioned above is only stored for the duration of use. Further information can be found in the privacy policy at www.maptoolkit.com/de/privacy/.

IV. Google Fonts

If you have given your consent, the website uses the Google Fonts service, which is provided for users in the European Economic Area and Switzerland by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and for all other users by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (together “Google”). We use Gstatic to improve and speed up Google services, but this does not collect any personal data.

When you visit the website, your browser loads the necessary fonts so that texts can be displayed correctly and in accordance with the specified web design. To enable the download, your browser must connect to Google's servers. It cannot be ruled out that the Google server to which the connection is established is located in the USA. Google thus receives the information that our website has been accessed via your IP address. According to Google, such access is separate from other Google services that require user authentication. No data is merged with other data. No cookies are stored.

V. Google Tag-Manager

Our website uses the Google Tag Manager service, which is provided for users in the European Economic Area and Switzerland by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and for all other users by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (together “Google”).

Google Tag Manager is used exclusively to manage website tools by integrating so-called website tags. A tag is an element that is stored in the source code of our website in order to execute a tool, for example through scripts. If these are optional tools, they will only be integrated by Google Tag Manager with your consent. Google Tag Manager does not use cookies.

The legal basis is Art. 6 para. 1 lit. f GDPR, based on our legitimate interest in integrating and managing multiple tags on our website in an uncomplicated manner.

For the purpose of ensuring stability and functionality in the use of Google Tag Manager, Google collects information about which tags are integrated by our website, but generally no personal data, in particular no data about usage behaviour, the IP address, or the pages visited.

We have concluded a data processing agreement with Google. In the event that personal data is transferred to the US, we have concluded standard contractual clauses with Google.

You can find more information on this in Google's information on Tag Manager: support.google.com/tagmanager/answer/9323295

D. Use of cookies

When you use our Website, we store cookies in your device’s browser, unless you prohibit this with appropriate settings in your browser.

I. General information on Cookies

Cookies are small text files containing information which can be placed on the user’s device via its browser when a website is visited. When the website is visited again with the same device, the cookie and the information stored in it can be read.

Generally and also in the description of the individual cookies used by us in Section D.III, a distinction is made between (i) first-party and third-party cookies, (ii) transient and persistent cookies as well as (iii) cookies that do not require consent and those that do require consent.

First-party cookies are cookies placed by us or a processor commissioned by us, whereas third-party cookies are cookies that are placed and accessed by another controller.

Transient cookies are deleted when you close your browser, whereas persistent cookies are cookies that are stored on your device for a specific period of time.

Cookies that do not require consent are cookies whose sole purpose is to transmit a message via an electronic communications network. Cookies that are strictly necessary so that the provider of an information society service expressly requested by the subscriber or user can make this service available do not require consent either (also referred to as “strictly necessary cookies”). All other cookies require consent.

II. Cookie management

If the user’s consent is required for the use of certain cookies, we only place these cookies when you use the Website if you have given your consent to this beforehand. Please refer to Section D.III for information about whether the use of a cookie requires consent.

When you visit our Website, we display a so-called cookie banner in which you can give your consent to the use of cookies on this Website. By clicking on the button provided for this, you have the possibility to consent to the use of all cookies requiring consent described in detail in this Section D.III of this cookie information. You may also revoke your consent here at any time.

We likewise store your consent and, where applicable, your individual selection of cookies requiring consent in an additional cookie (“opt-in cookie”) on your device so that we can determine whether you have already given your consent when the Website is accessed again. The opt-in cookie is valid for a limited period of 1 (one) month.

Strictly necessary cookies cannot be deactivated with the cookie management function of this Website. However, you can at any time deactivate these cookies generally in your browser.

You can also manage the use of cookies in your browser settings. Additional detailed information can, for example, be found at www.allaboutcookies.org/manage-cookies/.

When you deactivate the storage of cookies in your browser, some Website functions may no longer work or no longer work properly.

III. Cookies used on this Website

Below we provide you with information about the cookies we use. These are exclusively first-party cookies.

1. Name: uc_settings and/or ucString

Purpose and content: Strictly necessary opt-in cookie (see section II above) to store your consent and, if applicable, your individual selection for the use of cookies on your end device in order to determine whether you have already given your consent when you return to the website Responsibility: First party. Validity: transient. Requirement for consent: no. Permission under data protection law: balancing of interests (Art. 6 para. 1 sentence 1 lit. f GDPR). Our legitimate interest is the management of cookie consents granted by the user for this website.

2. Name: ucData (optional)

Purpose and content: Strictly necessary opt-in cookie to store your consent and, if applicable, your individual selection for Google Consent Mode. Responsibility: First party. Validity: transient. Requirement for consent: no. Permission under data protection law: balancing of interests (Art. 6 para. 1 sentence 1 lit. f GDPR). Our legitimate interest is the management of cookie consents granted by the user for this website.

3. Name: _ga

Purpose and content: for use with Google Analytics (see section B.IV ), used to distinguish users by means of an assigned ID.. Validity: persistent (2 years). Requirement for consent: yes. Data protection permission: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

4. Name: ga

Purpose and content: This cookie is used by Google Analytics (see section B IV and V) and is used to ensure that the session status is maintained. Responsibility: First party. Validity: persistent (two (2) years). Requirement for consent: yes. Permission under data protection law: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

5. Designation: _gid

Purpose and content: for use with Google Analytics and Google Analytics 4 (see section B.IV ), used to distinguish users by means of an assigned ID.. Validity: persistent (24 hours). Requirement for consent: yes. Data protection law permission: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

6. Name: _ga_NEQ0TVR751 (for soma.de); ga_79L985QPD (for flexassistant.de); _ga_CLSG6QY4X8 (for soma-prueftechnik-automation.de); _ga_Z1161W9F67 (for soma-dosiertechnik,de)

Purpose and content: For use with Google Analytics 4 (see section B.VI.), serves to maintain the information of the current session Responsibility: First party. Validity: persistent 1 year and 1 month. Requirement for consent: yes. Data protection law permission: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

7. Name: sak

Purpose and content: Stores information about video preferences Responsibility: First party. Validity: Session. Requirement for consent: yes. Data protection law permission: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

8. Name: LAST_RESULT_ENTRY_KEY

Purpose and content: This cookie is used to save the user settings when accessing a YouTube video embedded on other websites. Responsibility: First party. Validity: Session. Requirement for consent: yes. Permission under data protection law: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

9. Name: yt-player-bandaid-host, yt-player-bandwidth, yt-player-headers-readable

Purpose and content: This cookie is used to determine the optimal video quality based on the visitor's device and network settings Responsibility: First-party. Validity: Session. Requirement for consent: yes. Legal basis for permission under data protection law: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

10. Name: yt-remote-cast-installed, yt-remote-connected-devices, yt-remote-device-id, yt-remote-fast-check-period, yt-remote-session-app, yt-remote-session-name

Purpose and content: This cookie is used to save the video player settings of the user with an embedded YouTube video. Responsibility: First party. Validity: Session. Requirement for consent: yes. Permission under data protection law: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

11. Name: YEC

Purpose and content: This cookie is used to save the video player settings of the user with an embedded YouTube video. Responsibility: Third party. Validity: persistent (1 year 1 month). Requirement for consent: yes. Permission under data protection law: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

12. Name: CONSENT

Purpose and content: This cookie is used to embed videos on the website using YouTube (see section D.II ). Responsibility: Third party. Validity: persistent (19 years). Requirement for consent: yes.

13. Name: DEVICE_INFO

Purpose and content: This cookie is used to track the user's interaction with embedded content. Responsibility: Third party. Validity: persistent (5 months 26 days). Requirement for consent: yes. Permission under data protection law: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

14. Name: remote_sid

Purpose and content: This cookie is used to enable the implementation and functionality of YouTube video content on the website. Responsibility: First party. Validity: Session. Requirement for consent: yes. Permission under data protection law: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR)

15. Name: test_cookie

Purpose and content: The cookie is set as a test to check whether the browser allows cookies to be set. Contains no identification features. Responsibility: Third party. Validity: persistent for one (1) day. Requirement for consent: yes. Permission under data protection law: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

16. Name: NID

Purpose and content: This cookie is used to embed videos on the website using YouTube (see section D.II ). Responsibility: Third party. Validity: persistent (6 months). Requirement for consent: yes. Permission under data protection law: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

17. Name: PREF

Purpose and content: This cookie is used to embed videos on the website using YouTube (see section D.II ). Responsibility: Third party. Validity: persistent eight (8)) months. Requirement for consent: yes. Permission under data protection law: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

18. Name: VISITOR_INFO_LIVE

19. Name: YSC

Purpose and content: This cookie is used to embed videos on the website using YouTube (see section D.II ). Responsibility: Third party. Validity: Session. Requirement for consent: yes. Permission under data protection law: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

20. Name: pm_sess

Purpose and content: This cookie is used to maintain the browser session. Responsibility: Third party. Validity: persistent (30 minutes). Requirement for consent: yes. Permission under data protection law: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

21. Name: CGIC

Purpose and content: This cookie is used to provide search results by auto-completing search queries based on a user's initial input. Responsibility: Third party. Validity: persistent (6 months). Requirement for consent: yes. Permission under data protection law: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

22. Name: UULE

Purpose and content: This cookie is used to determine the geographical location of the user. Responsibility: Third party. Validity: persistent (6 hours). Requirement for consent: yes. Permission under data protection law: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

23. Name: Secure_YEC

24. Name: FPAU

Purpose and content: This cookie is used to collect information about users and their activities on the website through embedded elements for analysis and reporting purposes. Responsibility: Third party. Validity: persistent (2 years year 29 days). Requirement for consent: yes. Permission under data protection law: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

25. Name: AID

Purpose and content: This cookie is used to link activities on other devices on which the user has previously logged in with a Google account. Responsibility: Third party. Validity: persistent (1 year 1 month). Requirement for consent: yes. Permission under data protection law: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

26. Name: 1P_JAR

Purpose and content: This cookie is used to collect information about how the end user uses the website and what advertisements the end user may have seen before visiting this website. Responsibility: Third party. Validity: session. Requirement for consent: yes. Permission under data protection law: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

27. Name: _gcl_Aw

Purpose and content: Used by Google Ads to understand user interaction with the website by generating analytics data. Responsibility: Third party. Validity: persistent (1 day). Requirement for consent: yes. Permission under data protection law: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

28. Name_gcl_gb

Purpose and content: This cookie is used to track campaign-related information about the user. Responsibility: Third party. Validity: persistent (2 years 29 days). Requirement for consent: yes. Permission under data protection law: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR)

29. Name: _gcl_gb

Purpose and content: For use with Google Analytics 4 (see section B.VI.), serves to store campaign-related information and, if applicable, link to Google Ads Conversion Tracking. Responsibility: First party. Validity: persistent (90 days). Requirement for consent: yes. Permission under data protection law: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

30. Name: FPGCLGB

Purpose and content: This cookie is used to track campaign-related information about the user. Responsibility: Third party. Validity: persistent (1 year 1 month). Requirement for consent: yes. Permission under data protection law: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

31. Designation: _gcl_au

Purpose and content: For use with Google Adsence (see section B. VI), serves to track which ads you have seen. Responsibility: First party. Validity: persistent (3 months). Requirement for consent: yes. Permission under data protection law: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

32. Name: ANID

Purpose and content: This cookie is used to display advertising on websites outside of Google. Responsibility: Third party. Validity: persistent (1 year 1 month). Requirement for consent: yes. Permission under data protection law: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

33. Name: _gads

Purpose and content: This cookie is used to provide advertising or retargeting. Responsibility: Third party. Validity: persistent (1 year 1 month). Requirement for consent: yes. Permission under data protection law: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

34. Name: ASLBSA

Purpose and content: This cookie is used to provide a load balancing function Responsibility: First party. Validity: transient. Requirement for consent: no. Permission under data protection law: balancing of interests (Art. 6 para. 1 sentence 1 lit. f GDPR). Our legitimate interest is to ensure the security of our website.

35. Name: ASLBSACORS

36. APISID, SSID, SAPISID, HSID, SIDCC, SID

Purpose and content: This cookie is used to personalize ads on websites based on recent searches and interactions. Responsibility: Third party. Validity: persistent (2 years). Requirement for consent: yes. Permission under data protection law: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

37. AEC

Purpose and content: This cookie is used to ensure that the request originates from a user and not from another website. Responsibility: Third party. Validity: persistent (6 months). Requirement for consent: yes. Permission under data protection law: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

38. SOCS

Purpose and content: This cookie is used to store the user's consent decision Responsibility: Third party. Validity: persistent (1 year 1 month). Requirement for consent: yes. Permission under data protection law: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

39. SEARCH_SAMESITE

Purpose and content: This cookie is used to prevent the browser from sending this cookie together with cross-page requests. Responsibility: Third party. Validity: persistent (2 years). Requirement for consent: yes. Permission under data protection law: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

40. Secure-3PSIDCC, Secure-3PSID, Secure-1PSID

Purpose and content: This cookie is used to generate a random user ID. Google can use this ID to recognize the user across different websites and display personalized advertising. Responsibility: Third party. Validity: persistent (2 years). Requirement for consent: yes. Permission under data protection law: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

41. Name: IDE

Purpose and content: The cookie contains a randomly generated user ID. Based on this ID, Google can recognize the user across different websites and display personalized advertising. Responsibility: Third party. Validity: persistent (1 year). Requirement for consent: yes. Permission under data protection law: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

42. Name: _Secure_Rollout_Token

Purpose and content: These cookies are used by YouTube to manage the gradual rollout of new features and updates. That is, it helps assign users to specific test groups for new features being tested on the platform Responsibility: First-party. Validity: persistent (180 days). Requirement for consent: yes. Legal basis for permission under data protection law: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

43. Name: _gc_gb

Purpose and content: For use with Google Analytics 4 (see section B.VI.), serves to store campaign-related information and, if applicable, link to Google Ads Conversion Tracking. Responsibility: First party. Validity: persistent (90 days). Requirement for consent: yes. Data protection law permission: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

E. Information on the rights of data subjects

As a data subject, you have the following rights with respect to the processing of your personal data. You can contact us for the purpose of exercising your rights using the contact details in Section A:

A right to obtain access to and information (Article 15 GDPR) about which personal data from you we process. This includes additional information on the data processing, such as the purpose and legal basis as well as the recipients of these data. You also have the right to request a copy of these data.
A right to obtain from us the rectification of inaccurate personal data concerning you and the completion incomplete personal data concerning you (Article 16 of the GDPR).
A right to obtain the erasure of personal data concerning you in the cases provided for by law (Article 17 of the GDPR), such as when the data are no longer needed for the purposes for which they were collected or have been unlawfully processed.
A right to obtain the restriction of processing in the cases provided for by the law (Article 18 of the GDPR).
A right to receive the personal data concerning you that we process on the basis of consent which has been given or for the performance of a contract (see Section B) in a structured, commonly used and machine-readable format (right to data portability, Article 20 of the GDPR).
A right to withdraw the consent given to us at any time. This does not affect the lawfulness of processing based on consent before its withdrawal.
A right to lodge a complaint with a supervisory authority (Article 77 of the GDPR). A list of the data protection supervisory authorities and their addresses can be found here.

Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (f) of Article 6 paragraph 1 of the GDPR (see Section B). We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

The above rights do not necessarily apply to you without limitation in every case. The law provides for restrictions in each case. You can find the full extent of your rights in the Articles of the GDPR specified above, which you can access by using the following link: eur-lex.europa.eu/legal-content/EN/TXT/HTML/.

Last modified: 01st of June 2025

Industry-independent worker assistance