Data protection

Loomion AG (hereinafter: "Loomion") and its affiliated companies take the issue of data protection very seriously and want to ensure that your privacy is protected as a Loomion customer and user of the Loomion website.

We have thus prepared this statement on data protection in which we explain how your data is handled. We reserve the right to change the content of this statement from time to time; we therefore recommend that you review it at regular intervals.

In individual areas of the Loomion website (e.g. the Help section) less data processing takes place than the extent described here.

1. General 

We process your personal data only with your consent or if permitted by law. We process only the data required to provide our services and to use our website, or data that you voluntarily provide to us.

2. Definition of terms 

2.1 Personal data

Personal data includes all information relating to an identified or identifiable natural person (hereinafter “person concerned”). A natural person is considered identifiable if he or she can be identified directly or indirectly, in particular through assignment to an identifier such as a name, ID number, location data, an online ID, or one or more particular characteristics that express the natural person’s physical, physiological, genetic, psychological, economic, cultural, or social identity.

2.2 Data subject (person concerned)

Data subject is any identified or identifiable natural person whose personal data is processed by the party responsible for data processing (Loomion).

2.3 Processing 

Processing means any executed operation in connection with personal data such as collecting, recording, organizing, arranging, storing, editing or changing, selecting, querying, utilizing, disclosing through transmission, dissemination or other means of delivery, comparing, linking, restricting, deleting, or destroying.

2.4 Processors

A processor is a natural person or legal entity, authority, institution, or other office that processes personal data on behalf of the responsible party.

2.5. Consent

Consent is any statement of intent voluntarily given by the person concerned in an informed and unambiguous manner for the particular case, in the form of a declaration or other clear affirmative action with which the person concerned indicates that he or she is agreement with the processing of the personal data pertaining to him or her.

3. Processing your data

3.1 We process the data that you have provided to us when completing a survey, registering for our services, or concluding a contract, for example, to the extent respectively necessary for the following purposes:

Registration: for your test access to our services (e.g. your name and email address); 

Contacting you: to answer your questions (e.g. your name and email address);

Providing Services: to manage (provide, charge, and ensure quality) and process our contractual relationship when you utilize our services (e.g. your name and email address);

Supplier relationship: we process the data necessary for executing the contract (auditing, quality assurance).

Marketing purposes: if you have agreed to data use for this purpose or have not objected, we will send you information about our products and services (further information on marketing and your opportunities to object can be found in sections 6 and 8)

Personalization of offerings: in order to arrange our service optimally we save cookies on the end device used by you. Further information on the use of cookies can be found in section 4. 

3.2 Loomion observes a high level of security when transferring your data. We thus transmit your data only to partner companies and service providers that we have carefully selected in advance and that are contractually bound according to the relevant data protection regulations. In addition, data is transferred only to the extent necessary for providing the services offered, or if you have given us your consent, or if transfer is legally required or permitted. Your data are neither sold nor otherwise marketed to third parties. The transfer of data to state institutions and authorities takes place only in the framework of mandatory law. 

3.3 Loomion passes your data on to our affiliated companies in order to process your inquiries and provide the services offered on our website. This is necessary in particular when inquiries regarding Loomion products and services are submitted from other countries. We also save your data in a central customer database for accounting and billing purposes.

3.4 Loomion saves and uses Data entered by the user on the website (e.g. first name, last name, email address) on the systems of the company Salesforce.com Sàrl, Route de la Longeraie 9, 1110 Morges, Switzerland (hereinafter “Salesforce”) for the purpose of customer relationship management. Salesforce is Loomion’s data processor and acts exclusively in accordance with Loomion’s instructions. Loomion has concluded appropriate contractual agreements with Salesforce in order to comply with the applicable legal requirements.

3.5 The period of data storage is based on the legal retention requirements.

4. Cookies

4.1 Loomion uses cookies in order to make your visit to the website as pleasant as possible and enable you to utilize all of its functions. A cookie is a text file that is temporarily saved on your computer when you visit the website. Loomion primarily uses session cookies that expire when your visit to the website ends. In addition, a so-called permanent cookie indicating your language choice is saved for six months. With these cookies Loomion only saves a random session number and a random serial number for your visit.  

In particular, Loomion uses the following cookies on the website:

Loomion_contact: This cookie saves information on your visit of the website. It allows users to be recognized on the website and use all of its functionalities. The cookie is necessary to properly display and use the website. It expires when your visit to the website ends.

selected_language:This cookie saves your chosen language for the website. It expires after six months.

4.2 This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics utilizes “cookies” to enable analysis of the use of our website. Information created by the cookie about your visit to this website is generally transmitted to a Google server in the USA and stored there. Your IP address, however, is first abbreviated by Google within member states of the European Union or other countries party to the Agreement on the European Economic Area. Google Analytics adds the code “anonymizeIp” for this purpose in order to ensure that IP addresses are recorded anonymously (so-called IP masking). In exceptional cases, the complete IP address is transmitted to a Google server in the USA and only then abbreviated. Google will use this information on behalf of Loomion AG to evaluate your visit to this website, prepare reports about visitor activity there, and provide further services to Loomion in connection with the use of this website and the internet. The IP address conveyed from your browser to Google in the context of Google Analytics is not combined with other data of Google. Loomion`s legitimate interest in data processing lies in these purposes. The legal basis for the use of Google Analytics is § 15 para. 3 TMG and Art. 6 para. 1 lit. f GDPR. The data sent by Loomion and linked to cookies, user-identifiers (e.g. User-IDs) or advertising-identifiers are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month. You can prevent cookies from being saved by selecting the appropriate settings in your browser software. You can also prevent the transmission of the data about your website visit generated by the cookie (incl. your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plugin available here: tools.google.com/dlpage/gaoptout. You can also prevent Google Analytics from recording data by clicking this link:

Click here to opt-out of Google Analytics

In this case an opt-out cookie will be set that will prevent the collection of your data when visiting this website in the future. Further information is available at www.google.com/analytics/terms/us.html and at policies.google.com . We also use Google Analytics to evaluate data from the double-click cookie for statistical purposes. If you do not wish this, you can deactivate it using Google ads personalization (https://support.google.com/ads/answer/2662922?hl=en).

Further information is available at www.google.com/analytics/terms/gb.html and at www.google.com/intl/en/policies/

4.3 Our website utilizes the remarketing function of Google Inc. (“Google”). This function allows us to address visitors to our website with specific advertising by displaying ads that are personalized and based on their interests when they visit other websites in the Google Display Network.

Google also uses cookies to conduct the analysis of website use that forms the basis for creating the interest-based advertisements. Google saves a small file with a sequence of numbers in the browsers of visitors to the website. This retargeting tag is used to create a direct connection between your browser and a Google server, and the website visits as well as anonymized data about website use are collected. This allows the computer you use to be added to a target audience list for retargeting. No personal data of website visitors is saved, so that no connection back to specific individuals is possible. If you later visit another website in the Google Display Network, you will be shown Loomion banners or test advertisements that very likely concern product and information areas you previously looked up. The legal basis for the processing of aforementioned data is § 15 para. 3 TMG and Art. 6 para. 1 lit. f GDPR. You can permanently disable the use of cookies by Google by following this link and downloading and installing the plug-in there: www.google.com/settings/ads/plugin. Alternatively, you can disable the use of cookies by third parties by visiting www.youronlinechoices.eu and implementing the further opt-out information you find there.

More information on Google remarketing as well as Google’s privacy policy is available at policies.google.com/privacy.

4.4 We use the marketing automation software HubSpot on our website.

(1) HubSpot uses a cookie that it places on the user’s computer to collect data. 

It collects the following data: information about the computer you are using, your visit to our website, especially your IP address, your location, your browser, the referral source and the duration of your visit to our website. This information is stored on one of HubSpot’s servers. The legal basis for the processing of aforementioned data is § 15 para. 3 TMG and Art. 6 para. 1 lit. f GDPR.

(2) When you register for one of our offers using a web-based form, your contact information – including your name, email address, company name, address and phone number are collected and saved. We only use this data for statistical analyses in order to ensure the trouble-free operation of our offering and to optimise it on an ongoing basis. We also use the data to optimise our marketing activities. We hereby confirm that your data is stored in HubSpot databases and under certain conditions also in Salesforce CRM database. The data is not passed on to other third parties. The personal information we process includes information about you that is freely available on the internet and that HubSpot also stores. We reserve the right to use the information to contact visitors to our website by mail or phone, assuming they have provided their contact details for this purpose, to enable us to find out which of our company’s services they are interested in. 

HubSpot is a software company based in the USA with a subsidiary in Ireland. Contact: HubSpot, 2nd Floor, 30 North Wall Quay, Dublin 1, Ireland. Phone: +353 1 518 7500. HubSpot complies with the TRUSTe Privacy Seal standard. Loomion and HubSpot have signed an agreement that comprises the standard EU contractual clauses in order to regulate data transmission. Further information about HubSpot and its privacy protection is available at legal.hubspot.com/privacy-policy. If you do not want the information about your visit to be used, please do not hesitate to contact us (see section 10 for contact details).

4.5 If you do not wish cookies to be used, you may use your browser settings to view and delete stored cookies and manage the handling of cookies in general. Further information is available in your browser’s help menu or from the manufacturer. It is possible, however, that important parts of the Loomion website and its services will no longer function properly if cookies are not permitted.

5. Social Plugins

Loomion offers social plugins from various social networks (e.g. Xing, LinkedIn, Twitter, etc.) on its website.

5.1. LINKEDIN

Access to LinkedIn (LinkedIn, 2029 Stierlin Court, Mountain View, CA 94043 USA) can be found on our website via the “in” icon. When you click to activate the “in” icon a connection with the LinkedIn server is established and the LinkedIn plugin is loaded on the respective Internet page. The content of the “in” icon is sent by LinkedIn directly to your browser, which integrates it into the webpage. It is possible that your IP address may be transmitted to LinkedIn in the USA on the way. The purpose and scope of the data collection, the further processing and use of the data by LinkedIn, as well as your rights in this regard and options to adjust your settings to protect your privacy are available in LinkedIn’s privacy policy (http://www.linkedin.com/legal/privacy-policy) regarding the “in” icon. If you are a LinkedIn member and don’t want LinkedIn to collect data about you and connect it to your LinkedIn member data when the “in” icon is activated on our website, you must log out of LinkedIn before visiting our website.

5.2. XING

Access to XING (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany) can be found on our website via the “X” or “XING” icon. When you click to activate the “XING” icon a connection with the XING server is established and the XING Share Button functions (especially the calculation/display of the counter value) are loaded on the respective Internet page. XING does not save any personal data from you when you access this Internet page; XING also does not save any IP addresses in particular. There is no evaluation of your usage behavior through cookies in connection with the XING Share Button. The respective current data protection information regarding the XING Share Button as well as supplementary information may be found at www.xing.com/app/share.

5.3. Other 

In order to protect your privacy regarding the other social plugins (e.g. YouTube), we use a technical solution to integrate them which prevents data (e.g. IP addresses) from already being sent to the respective social networks just through opening our website.

6. Use of data for marketing purposes

6.1 If you consent into our Data Privacy notice and by completing our web-based-forms we are allowed to use your data (e.g. first and last name, email address) for sending information on Loomion products and services if you have expressly requested this (e.g. using the contact form) or subscribed to the Loomion information services. A confirmation email is sent to the email address first entered for information mailing in a double opt-in process for legal reasons. We also send a confirmation email to prospects who contact us via web-based-form. This confirmation email serves to check whether the owner of the email address has authorized receipt of the information email.

In order for Loomion to receive information about the interactions on the email recipient’s side, a function called “tracking pixel” is used in the HubSpot products. This function uses image resources to recognize when a recipient opens an email sent via one of the HubSpot products. When an email is sent via the HubSpot marketing or sales product, an image tag for a miniscule image is inserted in the body of the email. If the recipient opens the message with an appropriately configured email client, the client sends a request for the image to the HubSpot platform. This request is converted into the email opening rate, which is available to Loomion for evaluation. These pixel requests contain no information that may be traced back to persons and are masked by a long, randomly generated character sequence. 

You may revoke your statement of consent given to us and your consent to the storage of personal data at any time with effect for the future in accordance with section 8 of this Data Privacy notice. If you have subscribed to the Loomion information services, you may also revoke your consent by clicking the link contained in the respective email.  

6.2 We may additionally use your date as permitted by law for sending you information on our products and services through the post, for example. You may object to this use of your data at any time with effect for the future; information on your right to object can be found in section 8. 

7. Data processing in the application process  

7.1 We process personal data regarding you for the purposes of your application for employment, in so far as it is required for the decision on employment. The legal basis is § 26 Par. 1 along with Par. 8 S. 2 of the German Federal Data Protection Act (FDPA). This applies to data in connection with your application, such as data on your identity (first and last name, address, contact information), information on your professional qualifications and education, information on professional training, or other information that you provide to us in connection with your application. In addition, we may process professional information that you have made publicly available, such as on profiles in social media networks.

7.2 Further, we may process your personal data to the extent necessary to defend against legal claims arising from the application process. The legal basis is Art. 6 Par. 1 lit. f GDPR. 

7.3 Should an employment relationship be established between us, we may process your personal data already received for the purposes of the employment relationship as well, if required for carrying out or terminating the employment relationship (legal basis: § 26 Par. 1 FDPA).

7.4 In so far as the employment relationship is to be established between you and one of our subsidiaries (Loomion S.à r.l., Luxembourg), we may also transmit your personal data to them.

7.5 Applicant data are stored as long as necessary for the decision regarding your application. If no employment relationship is established between us, your application data are deleted four months after the negative decision is announced, if a longer period of storage is not required to avoid litigation.

8. Rights of the person concerned

8.1. Right to confirmation

You have the right to request a confirmation from Loomion regarding whether your personal data are being processed. You may contact our data protection officer or the address provided in section 10 at any time for this purpose.

8.2 Right to information

You have the right to receive information from Loomion free of charge at any time regarding the personal data stored about you, and a copy of such information. You also have a right to information about the following:

The purpose of the data processing

The categories of personal data being processed

The recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations

If possible, the planned period for which the personal data are stored; if not possible, the criteria for determining this period

The existence of a right to correction or deletion of your personal data or to limitation of processing by Loomion or objection to this processing

The existence of a right to complain to a supervisory authority

If the personal data were not collected from you: all available information about the origin of the data

The existence of an automated decision-making process including profiling according to Article 22 Par. 1 and 4 GDPR and – at least in these cases – meaningful information about the logic involved as well as the scope and intended effect of such processing

In addition, you have the right to know whether your personal data were transmitted to a third country or to an international organization. If this is the case, you also have the right to receive information about the appropriate guarantees in connection with the transmission.

If you would like to exercise this right to information, you may contact our data protection officer or the address provided in section 10 at any time.

8.3 Right to correction

You have the right to request the immediate correction of incorrect personal data concerning you. You also have the right, under consideration of the purposes of the data processing, to request that incomplete personal data be made complete – including by means of a supplementary statement.

If you would like to exercise this right to correction, you may contact our data protection officer or the address provided in section 10 at any time.

8.4. Right to deletion (right to be forgotten)

You have the right to request that Loomion delete your personal data right away, if one of the following reasons applies and if the processing of your data is not required:

The personal data were collected or otherwise processed for purposes for which they are no longer needed.

You are revoking your consent upon which the processing is based according to Art. 6 Par. 1 a GDPR or Art. 9 Par. 2 a GDPR and there is no other legal basis for the processing.

You are objecting according to Art. 21 Par. 1 GDPR and there are no overriding legitimate reasons for the data processing, or you object to the processing according to Art. 21 Par. 2 GDPR.

The personal data were processed unlawfully.

The deletion of the personal data is necessary to meet a legal obligation according to the law of the European Union or the Member States to which Loomion is subject.

The personal data were collected in relation to “information society services” according to Art. 8 Par. 1 GDPR

In so far as one of the reasons above applies and you would like to effect the deletion of your personal data saved at Loomion, you may contact our data protection officer or the address provided in section 10 at any time.

If the personal data were made public by Loomion and if Loomion is obliged to delete them as the responsible party according to Art. 17 Par. 1 GDPR, Loomion will take appropriate measures under consideration of the available technology and the implementation costs to inform other responsible parties processing the published personal data that you have requested that they delete all links to the data and copies of the data, in so far as the data processing is not required.

8.5 Right to limitation of processing

You have the right to request a limitation of the data processing by Loomion if one of the following prerequisites exists:

The correctness of the personal data is disputed for a period that allows Loomion to check such correctness

The processing is unlawful; you decline the deletion of the personal data and instead request the limitation of its use

Loomion no longer requires the personal data for processing purposes; however, you need the data to assert, exercise, or defend legal claims

You have objected to the data processing according to Art. 21 Par. 1 GDPR, and it is not yet clear if the legitimate reasons of Loomion outweigh your own

If one of these prerequisites is given and you would like to request the limitation of personal data stored by Loomion you may contact our data protection officer or the address provided in section 10 at any time.

8.6 Right to data portability

You have the right to receive the personal data that you have provided Loomion outside of the Loomion twelve Directors Portal offered by Loomion in an organized, accessible, and machine-readable format. You are also entitled to transmit the personal data to another responsible party without interference by Loomion, in so far as the processing is based on consent according to Art. 6 Par. 1 lit. a GDPR or Art. 9 Par. 2 lit. a GDPR, or on a contract according to Art. 6 Par. 1 lit. b GDPR, and in so far as the processing is done with automated procedures and is not necessary for performing a task in the public interest or in the exercise of public authority delegated to the responsible party. 

When exercising your right to data portability according to Art. 20 Par. 1 GDPR, you have the further right to have the personal data transmitted directly from one responsible party to another responsible party, if this is technically feasible and does not infringe upon the rights and freedoms of other persons. 

If you would like to exercise this right to data portability, you may contact our data protection officer or the address provided in section 10 at any time.

8.7 Right to object

You have the right to object at any time, for reasons resulting from your particular situation, to the processing of your personal data taking place based on Art. 6 Par. 1 lit. e or f GDPR. This also applies to profiling based on these provisions.

Loomion no longer processes personal data in the case of an objection unless we can demonstrate compelling legitimate reasons for the processing that outweigh the interests, rights, and freedoms of the person concerned, or unless the data processing serves to assert, exercise, or defend legal claims.

If personal data are used for direct advertising purposes, you have the right at any time to object to the processing of your personal data for such advertising. If you object to Loomion to the data being processed for direct advertising purposes, Loomion will no longer process your personal data for these purposes.

If you would like to exercise this right to object, you may contact our data protection officer or the address provided in section 10 at any time.

8.8 Right to revoke data protection consent

You have the right to revoke your consent to the processing of personal data at any time.

If you would like to exercise this right to revoke consent, you may contact our data protection officer or the address provided in section 10 at any time.

8.9 Right to complain to a supervisory authority

Without prejudice to any other judicial remedy, you have the right to complain to a supervisory authority responsible for data protection if you are of the opinion that the processing of your personal data violates the GDPR. The responsible supervisory authorities are those of the Member State of your residence, your workplace, or the place of alleged infringement. The supervisory authority to which the complaint was made will inform the complainant of the status and results of the complaint including the possibility of legal remedy according to Art. 78 GDPR.

9. Legal basis of data processing

Besides the legal basis listed in sec. 4.2, 4.3 and 4.4. above, the following applies: If we obtain consent for the processing of data, the legal basis is Art. 6 Par. 1 lit. a GDPR. If processing personal data is required to fulfil an agreement (e.g. agreement on the use of the Loomion Services) or to process inquiries regarding Loomion services before an agreement is concluded, the processing takes place according to Art. 6 Par. 1 lit. b GDPR. If Loomion is under a legal obligation that requires the processing of personal data, such as meeting tax and social security obligations, the legal basis of such processing is Art. 6 Par. 1 lit. c GDPR.

10. Name and address of the party responsible for data processing responsible according to GDPR

Loomion AG, Nauenstrasse 73a, 4052 Basel, Switzerland

Tel.: +41 61 500 16 25

E-Mail: dataprivacy(at)Loomion.com

Website: www.Loomion.com

©2019 by Loomion AG