The following information provides a simple overview of what happens to your personal data when you visit this website.
Personal data is any data that can be used to personally identify you. Detailed information on the subject of data protection can be found in the following sections of this privacy policy.
Data processing on this website is carried out by the controller:
Datenbusiness GmbH
Scheibenstraße 119
48153 Münster
Germany
Represented by:
Dr. Bernard Sonnenschein and Marcel Windau
Phone: 015678 363258
Email: hey@data-unplugged.de
Some of your data is collected when you provide it to us. This may include, for example, data you enter into a contact, inquiry, newsletter, or other form.
Other data is collected automatically or with your consent by our IT systems when you visit the website. This primarily includes technical data such as your internet browser, operating system, IP address, or the time of your visit.
In addition, data may be processed by analytics, marketing, appointment booking, communication, and automation services that we use.
We use personal data in particular for:
You have the right to obtain information about the origin, recipients, and purpose of your stored personal data free of charge at any time.
You also have the right to rectification, erasure, and – subject to legal requirements – restriction of the processing of your personal data.
If you have provided consent for data processing, you may withdraw this consent at any time with future effect.
Furthermore, subject to legal requirements, you have the right to data portability and the right to object to certain processing activities.
You also have the right to lodge a complaint with a data protection supervisory authority.
We host our website content with the following provider:
ALL-INKL.COM – Neue Medien Münnich, owner René Münnich
Hauptstraße 68
02742 Friedersdorf
Germany
The use of All-Inkl is based on Art. 6(1)(f) GDPR. We have a legitimate interest in ensuring our website is presented as reliably and securely as possible.
Where consent has been requested, processing is carried out on the basis of Art. 6(1)(a) GDPR and Section 25 TDDDG, where applicable.
We have entered into a data processing agreement with the provider.
The operators of these pages take the protection of your personal data very seriously.
We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.
When you use this website, various personal data are collected. This privacy policy explains what data we collect, what we use it for, the legal basis for doing so, and what rights you have.
Please note that data transmission over the internet, such as communication via email, can have security vulnerabilities. It is not possible to completely protect data from access by third parties.
The controller responsible for data processing on this website is:
Datenbusiness GmbH
Scheibenstraße 119
48153 Münster
Germany
Represented by:
Dr. Bernard Sonnenschein
Marcel Windau
Phone: 015678 363258
Email: hey@data-unplugged.de
The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.
Unless a more specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies.
If you submit a legitimate request for erasure or withdraw your consent for data processing, your data will be deleted, provided there are no other legally permissible reasons for its retention.
This may include, in particular, statutory retention obligations under tax or commercial law. In this case, the data will be deleted after the respective statutory retention period has expired.
If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR.
If special categories of personal data within the meaning of Art. 9(1) GDPR are processed and consent is required for this, processing is based on Art. 9(2)(a) GDPR.
If processing is necessary for the performance of a contract or to take steps prior to entering into a contract, it is based on Art. 6(1)(b) GDPR.
If we are subject to a legal obligation, processing is based on Art. 6(1)(c) GDPR.
Furthermore, processing may be based on our legitimate interest in accordance with Art. 6(1)(f) GDPR.
If your consent is required for the storage of information on your device or for access to information already stored on your device, this is done in accordance with Section 25 of the TDDDG.
The relevant legal basis is explained in the respective sections of this privacy policy.
We sometimes use services from companies whose providers are based outside the European Economic Area or where processing of personal data outside the European Economic Area cannot be ruled out.
Where personal data is transferred to a third country, this is done only in compliance with the legal requirements of Art. 44 et seq. GDPR.
In this regard, adequacy decisions by the European Commission, standard contractual clauses of the European Commission, or other legally permissible appropriate safeguards may be used.
For certain providers, particularly those based in the U.S., certifications under the EU-U.S. Data Privacy Framework may also be relevant, depending on the specific service and data flow.
Many data processing operations are only possible with your express consent.
You may withdraw any consent you have already given at any time with effect for the future.
The legality of the data processing carried out prior to the withdrawal remains unaffected by the withdrawal.
If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation.
This also applies to profiling insofar as it is related to such direct marketing.
If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such advertising.
In the event of violations of the GDPR, you have the right to lodge a complaint with a data protection supervisory authority.
The authority responsible for North Rhine-Westphalia is:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf
Germany
You have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or to a third party in a standard, machine-readable format.
If you request the direct transfer of the data to another controller, this will only be done to the extent that it is technically feasible.
Within the scope of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of the data processing.
You may have a right to the rectification or erasure of this data.
You can contact us at any time using the contact details provided above for this purpose or for any further questions regarding personal data.
You have the right to request the restriction of the processing of your personal data under the statutory requirements.
This right applies in particular:
If processing has been restricted, the data in question may generally only be processed under the conditions stipulated by law.
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content.
You can recognize an encrypted connection by the fact that the browser's address line changes from "http://" to "https://" and a lock icon is displayed.
When SSL or TLS encryption is activated, the data you transmit to us cannot be easily read by third parties.
The use of contact data published as part of our legal notice requirements for the purpose of sending unsolicited advertising and information materials is hereby prohibited.
The site operators expressly reserve the right to take legal action in the event of unsolicited advertising information, such as spam emails.
Our websites may use cookies and similar technologies.
Cookies are small data packets that are stored on your device and do not cause any damage.
They can be stored temporarily for the duration of a session or permanently.
Cookies can be placed by us or by third-party companies.
Cookies serve various functions. Some are technically necessary for certain website features to work properly. Others may be used to analyze user behavior or for marketing and advertising purposes.
Technically necessary technologies may be used if they are strictly required to provide the website or a service you have explicitly requested.
For non-essential cookies and similar technologies, we obtain your consent before use, as required by law.
The legal basis for storing information on your device or accessing information already stored there is, where necessary, Section 25 of the TDDDG.
The subsequent processing of personal data is based on the relevant provisions of Article 6 of the GDPR.
You can change your cookie settings or withdraw your consent at any time via the consent solution provided on the website.
Our website uses the consent technology of Borlabs Cookie to obtain and document your consent for the storage of certain cookies or the use of certain technologies.
The provider is:
Borlabs GmbH
Rübenkamp 32
22305 Hamburg
Germany
When you visit our website, a Borlabs cookie may be stored in your browser, which records the consents you have given or withdrawn.
This information is used to document your consent decision.
Processing is carried out to fulfill legal data protection obligations in accordance with Art. 6(1)(c) GDPR.
When you contact us via a contact or inquiry form, the information you provide, including your contact details, is processed for the purpose of handling your inquiry and for any potential follow-up questions.
Processing may include, in particular, the following data:
Processing is based on Art. 6(1)(b) GDPR if your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures.
In all other cases, processing is based on our legitimate interest in effectively handling inquiries addressed to us in accordance with Art. 6(1)(f) GDPR, or on your consent in accordance with Art. 6(1)(a) GDPR, provided that such consent has been requested.
We use Make for the automated processing and forwarding of data from our forms.
Make is an automation platform that allows various applications, systems, and databases to be connected and automated processes to be executed.
Data submitted via our forms can be automatically forwarded via Make to systems we use, where it is then stored or further processed.
This may include, in particular, the transmission of the following data:
Processing via Make serves exclusively to automate our internal business and communication processes and to handle the respective inquiry.
Insofar as Make processes personal data on our behalf, this is done on the basis of a data processing agreement in accordance with Art. 28 GDPR.
Make is part of the Celonis group of companies.
Insofar as personal data is processed outside the European Economic Area during the use of Make, the transfer takes place in compliance with Art. 44 et seq. GDPR and on the basis of the relevant appropriate safeguards.
As part of our internal processes, personal data collected via our website forms can be automatically transmitted via Make to Microsoft Excel or Microsoft 365 and stored there.
Storage is used in particular for the structured processing, management, and documentation of inquiries and contacts.
In this context, the following data in particular may be processed:
The provider of the Microsoft 365 services is:
Microsoft Corporation
One Microsoft Way
Redmond, WA 98052-6399
USA
Where Microsoft processes personal data on our behalf, this is done on the basis of the applicable contractual data protection provisions and, where necessary, a data processing agreement in accordance with Art. 28 GDPR.
Where personal data is processed outside the European Economic Area or transferred there, this is done in compliance with the legal requirements of Art. 44 et seq. GDPR.
Personal data transmitted via a form may—provided this is expressly stated in the respective form—be passed on to other companies or business partners.
Such a transfer only takes place if there is a corresponding legal basis under data protection law.
Insofar as the transfer to other companies is based on your consent, this consent is obtained separately and voluntarily.
Consent relates to the specific purpose of the transfer and to the recipients or categories of recipients mentioned in the respective form.
Consent is voluntary and may be withdrawn at any time with future effect.
The lawfulness of processing based on consent before its withdrawal remains unaffected by the withdrawal.
This is distinct from the transfer of data to technical service providers, such as hosting, automation, or software providers, for the purpose of carrying out our processes. Such service providers may process personal data as data processors in accordance with Art. 28 GDPR.
We have integrated Typeform into this website.
The provider is:
TYPEFORM S.L.
Carrer Bac de Roda, 163
08018 Barcelona
Spain
Typeform allows us to create online forms and embed them on our website.
The data you enter into Typeform forms may be stored and processed on Typeform's servers.
This may include, in particular, your name, email address, telephone number, company details, and any other information entered into the respective form.
Typeform is used to provide and manage our online forms.
Where processing is based on our legitimate interest, it is carried out in accordance with Art. 6(1)(f) GDPR.
Where consent has been obtained, processing is based on Art. 6(1)(a) GDPR and—insofar as the consent relates to the storage of or access to information on the user's device—Section 25 of the TDDDG.
You have the option to schedule appointments with us directly on our website.
For this purpose, we use Calendly.
The provider is:
Calendly LLC
271 17th St NW, 10th Floor
Atlanta, Georgia 30363
USA
To book an appointment, please enter the requested information and your preferred time slot into the designated form.
The data entered is used for planning, conducting, and, if necessary, following up on the appointment.
This may include, in particular, your name, email address, telephone number, appointment details, and any other information you provide.
Processing is based on Art. 6(1)(f) GDPR, as we have a legitimate interest in making appointment scheduling as straightforward as possible for interested parties and customers.
If consent is required, processing is based on Art. 6(1)(a) GDPR and, where applicable, Section 25 of the TDDDG.
Where personal data is transferred to the USA, this is done in compliance with the requirements of Art. 44 et seq. GDPR.
This website may use features of the web analytics service Google Analytics.
The provider is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Google Analytics allows us to analyze the behavior of website visitors.
In this context, page views, duration of stay, operating systems used, user origin, and other usage data may be processed.
Google Analytics may use technologies that enable user recognition, such as cookies or similar technologies.
Usage only occurs following appropriate consent.
The legal basis is Art. 6(1)(a) GDPR and, where applicable, Section 25 of the TDDDG.
Consent can be withdrawn at any time with effect for the future.
Where data is transferred to the USA, this is done in compliance with the requirements of Art. 44 et seq. GDPR.
We may use Google Ads to display online advertising.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads enables, among other things, the display of advertisements based on specific search terms or target groups.
In this process, usage data and information regarding interactions with our advertisements may be processed.
Usage is based on your consent in accordance with Art. 6(1)(a) GDPR and, where applicable, Section 25 of the TDDDG.
This website may use the features of Google Ads Remarketing.
This allows individuals who have interacted with our online services to be assigned to specific target groups in order to subsequently display interest-based advertising within the Google advertising network.
Usage is based solely on your consent in accordance with Art. 6(1)(a) GDPR and, where applicable, Section 25 of the TDDDG.
Consent can be withdrawn at any time.
We may use Google Ads Customer Match for audience targeting.
In this process, certain customer data, such as email addresses from our customer lists, may be transmitted to Google, provided there is a corresponding legal basis under data protection law and, if necessary, consent.
The data is processed by Google to create relevant advertising audiences.
This website may use Google Conversion Tracking.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Conversion Tracking allows us to evaluate whether specific actions have been performed on our website.
For this purpose, actions such as clicks on specific buttons or interactions with certain website content can be analyzed.
Usage is based on your consent in accordance with Art. 6(1)(a) GDPR and, where applicable, Section 25 of the TDDDG.
This website may use the Meta Pixel for conversion tracking.
The provider is:
Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Ireland
The Meta Pixel allows us to track the behavior of site visitors after they have reached our website, for example, by clicking on a Meta advertisement.
This allows the effectiveness of advertisements to be evaluated and future advertising measures to be optimized.
Processing only takes place after corresponding consent has been given in accordance with Art. 6(1)(a) GDPR and, where applicable, Section 25 TDDDG.
To the extent that personal data is transferred to Meta, it may also be processed in the USA or other third countries.
The necessary data protection guarantees for this are based on the applicable requirements of Art. 44 et seq. GDPR.
If you would like to receive the newsletter offered on the website, we require your email address.
Additional information may be provided voluntarily.
Data is processed exclusively for the purpose of sending the requested newsletter and managing the newsletter subscription.
The legal basis is Art. 6(1)(a) GDPR.
You may withdraw your consent at any time, for example, by using the unsubscribe link in a newsletter.
The lawfulness of the processing carried out prior to the withdrawal remains unaffected by the withdrawal.
Upon unsubscribing, your data will be deleted from the newsletter distribution list, provided there is no other legal basis or statutory retention requirement.
To prevent future mailings, your email address may be stored on a blocklist. This data is stored solely for this purpose and is based on our legitimate interest in accordance with Art. 6(1)(f) GDPR.
This website may embed videos from the YouTube platform.
The provider is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
When you visit a page that has a YouTube video embedded, a connection to YouTube's servers may be established.
In this process, your IP address, technical information, and information about the video access may be processed in particular.
If the integration is not technically necessary, it will only be activated after you have provided your consent.
Processing then takes place on the basis of Art. 6 (1) (a) GDPR and Section 25 TDDDG, as far as necessary.
This website may use the map service Google Maps.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
To use the features of Google Maps, it may be necessary to process your IP address.
Depending on the integration, further technical information may be transmitted to Google.
Use only occurs after corresponding consent has been given, provided this is required by law.
The legal basis is Art. 6 (1) (a) GDPR and Section 25 TDDDG.
Features of the music service Spotify may be integrated into this website.
The provider is:
Spotify AB
Birger Jarlsgatan 61
113 56 Stockholm
Sweden
The integration may establish a direct connection between your browser and Spotify's servers.
In particular, this allows Spotify to receive information that you have visited our website using your IP address.
If you are logged into Spotify while using our site, Spotify may be able to associate your visit to our website with your user account.
Use is based solely on the respective required data protection legal basis.
In addition to processing form data via Make, Make can also be used to connect and synchronize various systems and applications.
Depending on the specific automation process, personal data may be processed during this activity.
For example, Make can receive data from forms, structure it, forward it to other systems, or store it in databases and spreadsheets.
Processing is carried out for the specified purposes and only to the extent necessary.
Insofar as Make acts as a data processor on our behalf, processing is carried out on the basis of Art. 28 GDPR.
Make is part of the Celonis group of companies.
Where personal data is transferred to third countries, the legal requirements of Art. 44 et seq. GDPR are observed.
We may use online conference tools to communicate with customers, prospective clients, and other business partners.
When you communicate with us via video or audio conference over the internet, personal data may be processed by both us and the respective provider of the conference service.
The conference tools may process the following data in particular:
If content is exchanged, uploaded, or otherwise made available within the tool, this may also be processed.
This may include, for example, chat messages, files, images, videos, whiteboards, or recordings.
The conference tools are used to communicate with existing or potential contractual partners or to provide services to customers.
The legal basis is Art. 6(1)(b) GDPR, provided that the use is necessary for the performance of a contract or for taking steps prior to entering into a contract.
Furthermore, use may be based on our legitimate interests in accordance with Art. 6(1)(f) GDPR.
Where consent is required, processing is based on Art. 6(1)(a) GDPR.
We use Google Meet for online meetings.
The provider is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
When using Google Meet, the communication, usage, and technical data described above may be processed.
Further information on data processing by Google can be found in Google's privacy policy.
We offer you the opportunity to apply to us, for example via email, by post, or through an online application form.
We process your personal data during the application process confidentially and in accordance with applicable data protection regulations.
When you submit an application to us, we process the associated personal data to the extent necessary to decide on the establishment of an employment relationship.
This may include, in particular:
The legal basis is Section 26 of the German Federal Data Protection Act (BDSG) and Article 6(1)(b) GDPR.
If you provide your consent, Article 6(1)(a) GDPR may also serve as the legal basis.
If we are unable to offer you a position, you decline a job offer, or you withdraw your application, we reserve the right to retain the data you submitted for up to six months after the end of the application process.
Retention serves in particular for documentation and defense against potential legal claims.
After this period, application data will be deleted unless there are statutory retention obligations or other legally permissible reasons for longer storage.
If legal proceedings are pending or there are concrete indications that data is required for legal proceedings, storage may be extended until the conclusion of the relevant proceedings.
If we do not offer you a position, there may be an opportunity to include your application data in an applicant pool.
Inclusion in the applicant pool is based exclusively on your explicit consent in accordance with Art. 6 (1) (a) GDPR.
Consent is voluntary and is not linked to the ongoing application process.
You may withdraw your consent at any time with future effect.
In the event of a withdrawal of consent, the data will be deleted from the applicant pool, provided there are no legal retention requirements to the contrary.
Data in the applicant pool will be deleted no later than two years after consent is granted.
We generally only share personal data if there is a legal basis for doing so under data protection law.
Recipients may include, in particular:
Where service providers process personal data on our behalf, they are engaged—to the extent required by law—on the basis of data processing agreements in accordance with Art. 28 GDPR.
Any further disclosure to companies that process personal data for their own purposes will only take place if there is a corresponding legal basis for doing so.
Where disclosure is based on your consent, this consent will be obtained separately before the data is shared.
If you expressly consent via a form to your data being shared with other companies or business partners, the data you provide may be forwarded to the recipients named in the respective form via our technical systems—including Make and, where applicable, Microsoft Excel/Microsoft 365.
The specific purpose and the specific recipients of the respective disclosure are stated in the form or in connection with the consent.
Consent is voluntary.
Refusing consent has no impact on your ability to submit an inquiry to us, provided that disclosure to third parties is not required to process your request.
You may withdraw your consent at any time with effect for the future.
Automated decision-making, including profiling as defined by Art. 22 GDPR, does not generally take place on this website.
Should we use procedures in the future that fall under Art. 22 GDPR, we will inform you of this separately.
We implement appropriate technical and organizational measures to protect your personal data against loss, destruction, manipulation, unauthorized access, or other unauthorized processing.
Our security measures are continuously adapted in line with technological developments and organizational capabilities.
Data transmission on our website is encrypted via a TLS connection, provided it is technically supported.
We reserve the right to update this privacy policy if legal requirements, the services we use, or the nature of our data processing change.
The current version published on our website applies at all times.
As of September 2026