Intrenion

Terms of service • Privacy policy • Legal notice

Legal notice and privacy policy for these websites, including all subdomains:

Legal notice (Impressum)

Intrenion GmbH
Alemannenallee 2 • 14052 Berlin
+491781988807 • christian.ullrich@intrenion.com
Managing director: Christian Ullrich
USt-IdNr: DE306738055
HR B 178145 B - Amtsgericht Charlottenburg

Legal documents

Introduction

We’re glad you’re interested in our company.
Intrenion GmbH values data protection highly.
You can visit Intrenion GmbH’s website without providing personal information, but some services may require personal data processing.
If the personal data processing is needed and lacks a legal basis, we ask for your consent.
We always process personal data according to GDPR and relevant country-specific regulations.
This policy explains the type, extent, and purpose of the personal data we collect, use, and process.
This policy also informs you about your data protection rights.
Intrenion GmbH uses various technical and organizational measures to protect personal data on our website.
Please note that data transmissions online may have security risks, and absolute protection isn’t guaranteed.
You can provide personal data through alternative methods, like phone calls, if preferred.

Definitions

Intrenion GmbH privacy policy follows the terms the European legislature sets in the GDPR.
We aim for our privacy policy to be clear and easy to understand for everyone, including customers and business partners.
To achieve this, we’ll begin by clarifying the terms used.
In this privacy policy, we use the following terms, among others:
1. Personal data
  1. Personal data refers to information about an identifiable person, also called a “data subject.”
  2. Identifiable persons can be recognized through identifiers like name, ID number, location data, online identifiers, or other factors related to their physical, mental, or social identity.
2. Data subject
  1. A data subject is an identifiable person whose personal data is processed by the responsible controller.
3. Processing
  1. Processing includes any actions on personal data, such as collecting, organizing, storing, using, sharing, or deleting it manually or automatically.
4. Restriction of processing
  1. Limiting future processing of stored personal data by marking it.
5. Profiling
  1. Automated processing of personal data to analyze or predict a person’s traits or behavior, such as work performance, preferences, or location.
6. Pseudonymization
  1. Processing personal data so it can’t be linked to a specific person without additional information stored separately and protected to prevent re-identification.
7. Controller
  1. The person or organization decides why and how personal data is processed, as determined by Union or Member State law.
8. Processor
  1. The person or organization that processes personal data on behalf of the controller.
9. Recipient
  1. The person or organization that receives personal data, whether a third party or not.
  2. Public authorities receiving personal data for a specific inquiry follow data protection rules for processing purposes.
10. Third-party
  1. A person or organization other than the data subject, controller, processor, or those authorized to process personal data.
11. Consent
  1. A data subject’s voluntary, informed, and clear agreement to have their personal data processed.

Name and address of the controller

The controller, according to the GDPR, EU member state data protection laws, and other data protection provisions, is:

Intrenion GmbH Alemannenallee 2 14052 Berlin Germany Phone: +491781988807 Email: christian.ullrich@intrenion.com Website: https://www.intrenion.com

Cookies

Intrenion GmbH’s website uses cookies.
Cookies are text files stored on your computer through your web browser.
Websites and servers often use cookies with unique cookie IDs to identify them.
These IDs help link cookies to specific web browsers.
This differentiation allows websites to recognize individual browsers and provide a personalized experience.
Unique cookie IDs help recognize and identify specific browsers.
Cookies enable Intrenion GmbH to offer more user-friendly services on its website.
They help optimize the information and offers for individual users.
As mentioned, cookies allow us to recognize our website users.
This recognition aims to improve user experience on our website.
Users with cookies enabled don’t need to enter access data every time they visit the website, as the cookie is stored on their computer.
An example is an online shop’s shopping cart cookie, which remembers the items added by a customer.
Users can prevent cookies on our website by adjusting their browser settings and can permanently disable cookies.
Existing cookies can be deleted at any time through a browser or other software programs.
This can be done in all popular browsers. However, disabling cookies may affect some website functions, making them less usable.

Collection of general data and information

When someone visits Intrenion GmbH’s website, general data and information are collected.
This data is stored in server log files.
The collected data may include browser type, operating system, referring website, sub-websites, date and time of access, IP address, internet service provider, and other data that could be useful in case of an attack on our IT systems.
Intrenion GmbH doesn’t use this general data to draw conclusions about the individual visitor.
The collected information is used to (1) correctly deliver our website content, (2) optimize the content and its advertisement, (3) maintain the long-term functionality of our IT systems and website technology, and (4) provide law enforcement with the necessary information in case of a cyber-attack.
Intrenion GmbH analyzes the anonymously collected data to enhance our data protection and security and ensure the best protection for processed personal data.
The anonymous server log file data is stored separately from any personal data provided by users.

Users can subscribe to Intrenion GmbH’s newsletter on the website.
The subscription form collects the personal data required for sending the newsletter.
The newsletter regularly updates customers and business partners about the company’s offers.
To receive the newsletter, the data subject must have a valid email address and sign up.
For legal reasons, first-time subscribers are sent a confirmation email using the double opt-in procedure.
The confirmation email verifies that the email address owner is authorized to receive the newsletter.
During registration, the IP address, date, and time are recorded to track any potential misuse of the email address.
This data collection helps protect the controller legally.
Personal data collected during registration is used only for sending the newsletter.
Subscribers may be informed via email about changes to the newsletter service or technical updates, if necessary.
Personal data from the newsletter service won’t be shared with third parties.
The data subject can cancel the newsletter subscription anytime.
Consent for storing personal data for newsletter purposes can be withdrawn at any time.
A revocation link is provided in each newsletter.
Unsubscribing from the newsletter can be done on the controller’s website or through other means of communication with the controller.

Event invitation

Response to Your Access Request Under Article 15 GDPR:

Personal Data, Data Categories, and Origin Email Address: We obtained your email address through the company ZenLeads Inc., located at 101 Montgomery Street, Suite 400, San Francisco, CA 94104, United States of America (“ZenLeads”). ZenLeads acts as the data controller within the meaning of Article 4 No. 7 GDPR and guarantees that the provided data was lawfully collected.

Purposes of Processing and Retention Period We processed your email address to send invitations to educational events. We used your email address to send an email. We store the sent email and, consequently, your email address for one day. Afterward, the sent email and your email address are automatically deleted.

Data Recipients We have not shared your data with other organizations.

Data Subject Rights You have the right, under the legal requirements, to request the correction or deletion of your personal data, to restrict its processing, and to object to its processing. Please note that for data processed under ZenLeads’ responsibility, you must exercise these rights directly with ZenLeads. You also have the right to lodge a complaint with a supervisory authority.

Automated Decision-Making Automated decision-making within the meaning of Article 22 GDPR does not take place.

Intrenion GmbH newsletter includes tracking pixels.
Tracking pixels are tiny graphics in HTML emails used for log file recording and analysis.
They enable statistical evaluation of online marketing campaign performance.
Intrenion GmbH can see when an email was opened and which links were clicked, using tracking pixels.
Personal data from tracking pixels is stored and analyzed by the controller to improve newsletter delivery and tailor future content to the data subject’s interests.
Personal data won’t be shared with third parties.
At any time, data subjects can revoke their consent given during the double-opt-in process.
Upon revocation, the controller will delete the personal data.
Unsubscribing from Intrenion GmbH newsletter is considered a revocation.

Contact options through the website

Intrenion GmbH’s website provides easy electronic contact options, including an email address for direct communication.
When a user contacts the company via email or a contact form, their personal data is automatically saved.
This voluntarily provided personal data is stored to process requests or respond to the user.
This personal data is not shared with third parties.

Regular deletion and protection of personal data

The data controller processes and stores personal data only as long as needed for its purpose or as required by European or other applicable laws and regulations.
When the storage purpose no longer applies or the legally required storage period ends, personal data is routinely protected or deleted as per legal requirements.

Rights of the data subject

Confirmation right
1. As per European law, every individual has the right to ask the data controller if their personal data is being processed.
2. To exercise this right, the individual can contact any employee of the data controller at any time.
Access right
1. As per European law, every individual has the right to request and receive free information about their stored personal data at any time, as well as a copy of that information from the data controller.
2. European regulations also grant individuals access to the following information:
  1. Processing purposes;
  2. Personal data categories involved;
  3. Recipients or categories of recipients receiving or to receive personal data, including those in third countries or international organizations;
  4. Storage duration, if possible, or criteria determining the storage period;
  5. The right to request rectification, erasure, or processing restriction of personal data, or to object to the processing;
  6. The right to file a complaint with a supervisory authority;
  7. If the data was not collected from the individual, any available source information;
  8. The existence of automated decision-making, including profiling as per GDPR Article 22(1) and (4), and in such cases, details about the logic, significance, and potential consequences of the processing.
3. Individuals have the right to know if their personal data is transferred to a third country or international organization.
4. If so, they have the right to learn about the safeguards in place for the transfer.
5. To exercise this access right, individuals can contact any employee of the data controller at any time.
Rectification right
1. As per European law, every individual has the right to request the data controller to correct inaccurate personal data about them promptly.
2. Considering the processing purposes, individuals can request the completion of incomplete personal data, including by providing additional information.
3. To exercise this rectification right, individuals can contact any employee of the data controller at any time.
Erasure right (Right to be forgotten)
1. Every individual has the right, as per European law, to request the data controller to erase their personal data promptly. The data controller is obliged to do so if one of the following grounds applies and the processing is not necessary:
  1. Personal data is no longer needed for its original purpose.
  2. The individual withdraws consent, and there is no other legal basis for processing.
  3. The individual objects to the processing, and there are no overriding legitimate grounds, or the individual objects under GDPR Article 21(2).
  4. Personal data has been processed unlawfully.
  5. Erasing personal data is required to comply with a legal obligation.
  6. Personal data was collected in relation to information society services as per GDPR Article 8(1).
  7. If any of the above reasons apply, individuals can request the erasure of their personal data stored by Intrenion GmbH by contacting any employee at any time. The employee will promptly ensure the request is fulfilled.
2. If the data controller has made personal data public and is required by GDPR Article 17(1) to erase it, they must take reasonable steps, considering available technology and implementation costs, to inform other data controllers processing the data that the individual has requested the erasure of any links to, copies, or replications of the data, unless the processing is required.
3. An Intrenion GmbH employee will coordinate the necessary actions in each case.
Processing restriction right
1. Every individual has the right, as per European law, to request the data controller to restrict processing in any of the following situations:
  1. The individual disputes the accuracy of their personal data, allowing the controller time to verify its accuracy.
  2. Processing is unlawful, but the individual requests restricting the data use instead of erasing it.
  3. The controller no longer needs personal data, but the individual requires it for legal claims.
  4. The individual objects to processing under GDPR Article 21(1) while it is being determined if the controller’s legitimate grounds override the individual’s.
  5. If any of the above conditions apply, individuals can request processing restrictions of their personal data stored by Intrenion GmbH by contacting any employee at any time. The employee will arrange for the processing restriction.
Data portability right
1. As per European law, every individual has the right to receive personal data provided to a controller in a structured, commonly used, and machine-readable format.
2. Individuals have the right to transfer their data to another controller without interference from the current controller as long as the processing is based on consent or a contract and is carried out automatically unless necessary for public interest or official authority tasks.
3. While exercising data portability under GDPR Article 20(1), individuals can request their data to be directly transmitted from one controller to another, if possible, and without negatively impacting the rights and freedoms of others.
4. To exercise the data portability right, individuals can contact any Intrenion GmbH employee at any time.
Right to object
1. Every individual has the right, as per European law, to object to the processing of their personal data, based on their specific situation, at any time if the processing is grounded in GDPR Article 6(1)(e) or (f).
2. This right also applies to profiling based on these provisions.
3. Intrenion GmbH will stop processing personal data upon objection unless there are strong legitimate reasons for processing that outweigh the individual’s interests, rights, and freedoms or if the data is necessary for legal claims.
4. Individuals can object to their data being processed for direct marketing purposes at any time.
5. This includes profiling related to direct marketing. If an individual objects, Intrenion GmbH will no longer process their data for these purposes.
6. Individuals can also object to data processing for scientific, historical, or statistical purposes based on their specific situation, unless it’s necessary for public interest tasks.
7. Individuals can contact any GmbH employee to exercise the right to object. Additionally, they can use automated means, in accordance with the technical specifications, to object to the processing of their personal data when using information society services without violating Directive 2002/58/EC.
Automated decision-making, including profiling
1. Individuals have the right not to be subject to decisions based solely on automated processing, including profiling, that have legal effects or significantly affect them unless the decision (1) is necessary for a contract between the individual and the data controller, (2) is authorized by Union or Member State law with suitable measures to protect the individual’s rights, freedoms, and legitimate interests, or (3) is based on the individual’s explicit consent.
2. If the decision (1) is necessary for a contract between the individual and the data controller or (2) is based on the individual’s explicit consent, Intrenion GmbH will implement measures to protect the individual’s rights, freedoms, and legitimate interests, including the right to human intervention from the controller, the ability to express their viewpoint and contest the decision.
3. To exercise rights related to automated decision-making, individuals can contact any Intrenion GmbH employee at any time.
Right to withdraw data protection consent
1. Each individual has the right to withdraw their consent for processing their personal data at any time.
2. To exercise this right, individuals can contact any Intrenion GmbH employee at any time.

Privacy rules for using Google Analytics with the anonymization feature

This website uses Google Analytics with an anonymizer function.
Google Analytics is a web analytics service.
Web analytics involves collecting and analyzing visitor data on websites.
This service gathers information such as the referrer site, visited sub-pages, and their frequency and duration.
Web analytics mainly helps optimize websites and assess the cost-effectiveness of online advertising.
Google Ireland Limited in Dublin, Ireland, operates Google Analytics.
The controller uses the “_gat. _anonymizeIp” application for Google Analytics.
This application shortens and anonymizes IP addresses for EU and European Economic Area users.
Google Analytics aims to analyze our website traffic.
Google uses the collected data to evaluate website usage, create online activity reports, and offer additional services related to our website.
Google Analytics uses a cookie on the user’s device.
Cookies are defined earlier in the policy.
The cookie allows Google to analyze website usage.
When a user visits a page with Google Analytics, their browser automatically sends data to Google for online advertising and commission purposes.
Through this process, Google accesses personal information like IP addresses, helping it track visitor origins and clicks and generate commission settlements.
The cookie saves personal information like access time, location, and the user’s visit frequency to the website.
Each visit sends personal data, including the user’s IP address, to Google in the United States.
Google stores this personal data in the US.
Google may share the collected personal data with third parties.
Users can block cookies by adjusting their web browser settings, permanently preventing the setting of cookies, as mentioned earlier.
Adjusting the browser settings would also prevent Google Analytics from setting cookies on the user’s device.
Users can delete existing Google Analytics cookies through their web browser or other software.
Users can also object to data collection by Google Analytics related to the website use and its processing by Google.
To do this, users need to download and install a browser add-on from https://tools.google.com/dlpage/gaoptout.
This add-on communicates to Google Analytics via JavaScript, preventing the transmission of visit data and information to Google Analytics.
Google views the installation of the browser add-on as an objection.
If the user’s device is later reset or reformatted, the add-on must be reinstalled to disable Google Analytics.
If the add-on is uninstalled or disabled by the user or someone else, it can be reinstalled or reactivated.
More information about Google’s data protection provisions can be found at https://www.google.com/intl/en/policies/privacy/ and http://www.google.com/analytics/terms/us.html.
Further details about Google Analytics are available at https://www.google.com/analytics/.

Legal reasons for processing data

We use GDPR Article 6(1)(a) as the legal basis for processing data when we have your consent for a specific purpose.
If data processing is needed to fulfill a contract, like providing goods or services, we base it on GDPR Article 6(1)(b).
The same applies to pre-contractual actions, such as inquiries about our products or services.
If we’re legally required to process data (e.g., for tax purposes), we rely on GDPR Article 6(1)(c).
In rare cases, we may process data to protect the vital interests of an individual.
In cases like a visitor’s injury at our company, we may share their vital information (name, age, health insurance data) with medical professionals or others for assistance.
This type of processing is based on GDPR Article 6(1)(d).
Processing may also rely on GDPR Article 6(1)(f).
We use this legal basis for processing not covered by other grounds if it’s in our company’s or a third party’s legitimate interests, unless it conflicts with the individual’s rights and freedoms.
The European legislator specifically allows such processing operations.
Legitimate interests can be assumed if the person whose data is processed is a client of our company, according to GDPR Recital 47, Sentence 2.

Legitimate interests pursued by a third party or us

When processing personal data under GDPR Article 6(1)(f), our goal is to conduct business for the benefit of our employees and shareholders.

Duration of personal data storage

We determine personal data storage duration based on legal retention requirements.
Once the required period expires, we delete the data unless it’s still needed for contract fulfillment or initiation.

Personal data requirements and consequences of non-provision

Providing personal data may be required by law or contract and could be necessary to enter into a contract. The individual must provide the data, and failure may result in consequences.
Personal data may be required by law (e.g., tax regulations) or contractual agreements (e.g., partner information).
Providing personal data may be necessary to finalize a contract with us.
When entering a contract with our company, the individual is required to give personal data.
Without personal data, we cannot establish a contract with the individual.
Before providing personal data, the person should contact an employee.
The employee will explain if providing personal data is legally or contractually required and obligatory, and the consequences of not providing it.

Use of automated decision-making

As a responsible company, we don’t use automatic decision-making or profiling.

Datenschutzerklärung auf Deutsch

Einführung

Wir freuen uns über Ihr Interesse an unserem Unternehmen.
Die Intrenion GmbH legt dem Datenschutz einen hohen Stellenwert bei.
Sie können die Website der Intrenion GmbH besuchen, ohne personenbezogene Daten anzugeben, aber einige Dienste können die Verarbeitung personenbezogener Daten erfordern.
Falls eine Verarbeitung personenbezogener Daten erforderlich ist und keine gesetzliche Grundlage besteht, erheben wir Ihre Einwilligung ein.
Wir verarbeiten personenbezogene Daten stets gemäß der DSGVO und den jeweils geltenden landesspezifischen Vorschriften.
Diese Richtlinie erklärt die Art, den Umfang und den Zweck der Erhebung, Nutzung und Verarbeitung personenbezogener Daten.
Diese Richtlinie informiert Sie auch über Ihre Datenschutzrechte.
Die Intrenion GmbH setzt verschiedene technische und organisatorische Maßnahmen ein, um personenbezogene Daten auf unserer Website zu schützen.
Bitte beachten Sie, dass die Übertragung von Daten im Internet Sicherheitsrisiken mit sich bringt und ein absoluter Schutz nicht garantiert werden kann.
Sie können personenbezogene Daten auch über alternative Methoden wie Telefonanrufe bereitstellen, falls gewünscht.

Definitionen

Die Datenschutzrichtlinie der Intrenion GmbH orientiert sich an den Begriffen, die die europäische Gesetzgebung in der DSGVO festlegt.
Wir möchten, dass unsere Datenschutzrichtlinie klar und leicht verständlich ist, sowohl für Kunden als auch für Geschäftspartner.
Um dies zu erreichen, beginnen wir mit der Erklärung der verwendeten Begriffe.
In dieser Datenschutzrichtlinie verwenden wir unter anderem die folgenden Begriffe:
1. Personenbezogene Daten
  1. Personenbezogene Daten sind Informationen über eine identifizierbare Person, auch “betroffene Person” genannt.
  2. Eine identifizierbare Person kann anhand von Identifikatoren wie Name, Ausweisnummer, Standortdaten, Online-Kennungen oder anderen Faktoren in Bezug auf ihre physische, mentale oder soziale Identität erkannt werden.
2. Betroffene Person
  1. Eine betroffene Person ist eine identifizierbare Person, deren personenbezogene Daten vom verantwortlichen Datenverarbeiter verarbeitet werden.
3. Verarbeitung
  1. Verarbeitung umfasst alle Vorgänge in Bezug auf personenbezogene Daten, wie das Erheben, Organisieren, Speichern, Verwenden, Teilen oder Löschen, sei es manuell oder automatisiert.
4. Einschränkung der Verarbeitung
  1. Die Markierung gespeicherter personenbezogener Daten, um deren zukünftige Verarbeitung einzuschränken.
5. Profiling
  1. Automatisierte Verarbeitung personenbezogener Daten, um Merkmale oder Verhaltensweisen einer Person zu analysieren oder vorherzusagen, etwa hinsichtlich Arbeitsleistung, Vorlieben oder Standort.
6. Pseudonymisierung
  1. Die Verarbeitung personenbezogener Daten in einer Weise, dass sie ohne zusätzliche Informationen, die separat gespeichert und geschützt werden, nicht mehr einer spezifischen Person zugeordnet werden können.
7. Verantwortlicher
  1. Die Person oder Organisation, die über Zweck und Mittel der Verarbeitung personenbezogener Daten entscheidet, wie durch die Union oder das nationale Recht vorgeschrieben.
8. Auftragsverarbeiter
  1. Die Person oder Organisation, die personenbezogene Daten im Auftrag des Verantwortlichen verarbeitet.
9. Empfänger
  1. Die Person oder Organisation, die personenbezogene Daten erhält, sei es ein Dritter oder nicht.
  2. Öffentliche Stellen, die personenbezogene Daten im Rahmen eines spezifischen Auftrags erhalten, unterliegen bei der Verarbeitung denselben Datenschutzregeln.
10. Dritter
  1. Eine Person oder Organisation, die weder betroffene Person, Verantwortlicher oder Auftragsverarbeiter ist noch autorisiert ist, personenbezogene Daten zu verarbeiten.
11. Einwilligung
  1. Die freiwillige, informierte und eindeutige Zustimmung der betroffenen Person zur Verarbeitung ihrer personenbezogenen Daten.

Name und Anschrift des Verantwortlichen

Der Verantwortliche im Sinne der DSGVO, der Datenschutzgesetze der EU-Mitgliedstaaten und anderer datenschutzrechtlicher Bestimmungen ist:

Intrenion GmbH Alemannenallee 2 14052 Berlin Deutschland Telefon: +491781988807 E-Mail: christian.ullrich@intrenion.com Website: https://www.intrenion.com

Cookies

Die Website der Intrenion GmbH verwendet Cookies.
Cookies sind Textdateien, die von einem Internetbrowser auf Ihrem Computer gespeichert werden.
Websites und Server nutzen häufig Cookies mit einer eindeutigen Cookie-ID, um Cookies zu identifizieren.
Diese IDs ermöglichen es, Cookies mit spezifischen Webbrowsern zu verknüpfen.
Diese Unterscheidung ermöglicht Websites, einzelne Browser zu erkennen und eine personalisierte Erfahrung zu bieten.
Eindeutige Cookie-IDs helfen, bestimmte Browser zu erkennen und zu identifizieren.
Cookies ermöglichen der Intrenion GmbH, benutzerfreundlichere Dienste auf ihrer Website anzubieten.
Sie helfen dabei, die Informationen und Angebote für individuelle Nutzer zu optimieren.
Wie erwähnt, ermöglichen Cookies es uns, unsere Website-Besucher zu erkennen.
Diese Erkennung zielt darauf ab, die Benutzererfahrung auf unserer Website zu verbessern.
Nutzer, die Cookies aktiviert haben, müssen ihre Zugangsdaten nicht jedes Mal erneut eingeben, da die Cookies auf ihrem Computer gespeichert werden.
Ein Beispiel ist das Cookie eines Online-Shopping-Warenkorbs, das sich die vom Kunden hinzugefügten Artikel merkt.
Nutzer können Cookies auf unserer Website verhindern, indem sie ihre Browsereinstellungen anpassen, und Cookies dauerhaft deaktivieren.
Bestehende Cookies können jederzeit über einen Browser oder andere Softwareprogramme gelöscht werden.
Dies ist in allen gängigen Browsern möglich. Allerdings kann die Deaktivierung von Cookies dazu führen, dass einige Funktionen der Website eingeschränkt oder weniger nutzbar sind.

Erhebung allgemeiner Daten und Informationen

Beim Besuch der Website der Intrenion GmbH werden allgemeine Daten und Informationen erfasst.
Diese Daten werden in Server-Logfiles gespeichert.
Zu den gesammelten Daten können der Browsertyp, das Betriebssystem, die verweisende Website, Unterwebsites, Datum und Uhrzeit des Zugriffs, die IP-Adresse, der Internetdienstanbieter und andere Daten gehören, die im Falle eines Angriffs auf unsere IT-Systeme nützlich sein könnten.
Die Intrenion GmbH verwendet diese allgemeinen Daten nicht, um Rückschlüsse auf den individuellen Besucher zu ziehen.
Die gesammelten Informationen werden verwendet, um (1) die Inhalte unserer Website korrekt auszuliefern, (2) die Inhalte und deren Werbung zu optimieren, (3) die langfristige Funktionalität unserer IT-Systeme und Webtechnologie sicherzustellen und (4) Strafverfolgungsbehörden im Falle eines Cyberangriffs die notwendigen Informationen bereitzustellen.
Die Intrenion GmbH analysiert die anonym gesammelten Daten, um unseren Datenschutz und unsere Datensicherheit zu verbessern und den bestmöglichen Schutz der verarbeiteten personenbezogenen Daten zu gewährleisten.
Die anonymen Server-Logfile-Daten werden getrennt von den von Nutzern angegebenen personenbezogenen Daten gespeichert.

Nutzer können sich auf der Website der Intrenion GmbH für den Newsletter anmelden.
Das Anmeldeformular erhebt die personenbezogenen Daten, die für den Versand des Newsletters erforderlich sind.
Der Newsletter informiert Kunden und Geschäftspartner regelmäßig über die Angebote des Unternehmens.
Um den Newsletter zu erhalten, muss die betroffene Person über eine gültige E-Mail-Adresse verfügen und sich dafür anmelden.
Aus rechtlichen Gründen erhalten Erstabonnenten im Double-Opt-In-Verfahren eine Bestätigungs-E-Mail.
Die Bestätigungs-E-Mail dient dazu, zu überprüfen, ob der Inhaber der E-Mail-Adresse berechtigt ist, den Newsletter zu empfangen.
Während der Registrierung werden die IP-Adresse, das Datum und die Uhrzeit erfasst, um einen möglichen Missbrauch der E-Mail-Adresse nachvollziehen zu können.
Diese Datenerhebung dient dem rechtlichen Schutz des Verantwortlichen.
Die im Rahmen der Registrierung erhobenen personenbezogenen Daten werden ausschließlich zum Versand des Newsletters verwendet.
Abonnenten können per E-Mail über Änderungen des Newsletter-Dienstes oder technische Updates informiert werden, sofern erforderlich.
Die personenbezogenen Daten des Newsletter-Dienstes werden nicht an Dritte weitergegeben.
Die betroffene Person kann das Newsletter-Abonnement jederzeit kündigen.
Die Einwilligung zur Speicherung personenbezogener Daten für den Newsletterversand kann jederzeit widerrufen werden.
Ein Widerrufslink ist in jedem Newsletter enthalten.
Die Abmeldung vom Newsletter kann auf der Website des Verantwortlichen oder über andere Kommunikationswege erfolgen.

Veranstaltungseinladung

Wir beantworten Ihr Auskunftsbegehren gemäß Art. 15 DSGVO wie folgt:

Personenbezogene Daten, Datenkategorien und Herkunft E-Mail-Adresse: Ihre E-Mail-Adresse haben wir über das Unternehmen ZenLeads Inc., 101 Montgomery Street, Suite 400, San Francisco, CA 94104, United States of America (“ZenLeads”) bezogen. ZenLeads agiert im Hinblick auf diese Daten als Verantwortlicher im Sinne von Art. 4 Nr. 7 DSGVO und garantiert, dass die bereitgestellten Daten ordnungsgemäß erhoben wurden.

Verarbeitungszwecke und Speicherdauer Wir verarbeiteten Ihre E-Mail-Adresse zur Einladung zu Bildungsveranstaltungen. Dabei nutzen wir Ihre E-Mail-Adresse zum Versand einer E-Mail. Wir speichern die versandte E-Mail und damit Ihre E-Mail-Adresse für einen Tag. Anschließend löschen wir die versandte E-Mail und damit Ihre E-Mail-Adresse automatisch.

Datenempfänger Wir haben Ihre Daten nicht an andere Organisationen weitergegeben.

Betroffenenrechte Sie haben bei Vorliegen der gesetzlichen Voraussetzungen ein Recht auf Berichtigung oder Löschung der Sie betreffenden personenbezogenen Daten, auf Einschränkung der Verarbeitung und auf Widerspruch gegen die Verarbeitung. Bitte beachten Sie, dass Sie hinsichtlich der von ZenLeads verantwortlich verarbeiteten Daten diese Rechte gegenüber ZenLeads geltend machen müssen. Ihnen steht ein Beschwerderecht bei einer Aufsichtsbehörde zu.

Automatisierte Entscheidungsfindung Eine automatisierte Entscheidungsfindung im Sinne des Art. 22 DSGVO findet nicht statt.

Der Newsletter der Intrenion GmbH enthält sogenannte Tracking-Pixel.
Tracking-Pixel sind kleine Grafiken in HTML-E-Mails, die zur Protokollierung und Analyse in Logdateien verwendet werden.
Sie ermöglichen die statistische Auswertung der Leistung von Online-Marketing-Kampagnen.
Durch Tracking-Pixel kann die Intrenion GmbH erkennen, wann eine E-Mail geöffnet wurde und welche Links angeklickt wurden.
Die durch Tracking-Pixel erhobenen personenbezogenen Daten werden vom Verantwortlichen gespeichert und analysiert, um die Zustellung des Newsletters zu verbessern und zukünftige Inhalte besser auf die Interessen der betroffenen Person abzustimmen.
Personenbezogene Daten werden nicht an Dritte weitergegeben.
Die betroffene Person kann ihre im Double-Opt-In-Verfahren erteilte Einwilligung jederzeit widerrufen.
Im Falle eines Widerrufs werden die personenbezogenen Daten vom Verantwortlichen gelöscht.
Die Abmeldung vom Newsletter der Intrenion GmbH gilt als Widerruf.

Kontaktmöglichkeiten über die Website

Die Website der Intrenion GmbH bietet einfache elektronische Kontaktmöglichkeiten, einschließlich einer E-Mail-Adresse für direkte Kommunikation.
Wenn ein Nutzer das Unternehmen per E-Mail oder über das Kontaktformular kontaktiert, werden die personenbezogenen Daten des Nutzers automatisch gespeichert.
Diese freiwillig bereitgestellten personenbezogenen Daten werden gespeichert, um Anfragen zu bearbeiten oder dem Nutzer zu antworten.
Diese personenbezogenen Daten werden nicht an Dritte weitergegeben.

Regelmäßige Löschung und Schutz personenbezogener Daten

Der Verantwortliche verarbeitet und speichert personenbezogene Daten nur so lange, wie es für den jeweiligen Zweck erforderlich ist oder wie es durch europäische oder andere anwendbare Gesetze und Vorschriften vorgeschrieben ist.
Wenn der Speicherzweck entfällt oder die gesetzlich vorgeschriebene Speicherfrist abläuft, werden personenbezogene Daten gemäß den gesetzlichen Anforderungen routinemäßig gelöscht.

Rechte der betroffenen Person

Recht auf Bestätigung
1. Nach europäischem Recht hat jede Person das Recht, vom Verantwortlichen eine Bestätigung darüber zu verlangen, ob ihre personenbezogenen Daten verarbeitet werden.
2. Zur Ausübung dieses Rechts kann die betroffene Person jederzeit einen Mitarbeiter des Verantwortlichen kontaktieren.
Recht auf Auskunft
1. Nach europäischem Recht hat jede Person das Recht, jederzeit unentgeltlich Auskunft über ihre gespeicherten personenbezogenen Daten und eine Kopie dieser Informationen vom Verantwortlichen zu erhalten.
2. Die europäischen Vorschriften gewähren auch Zugang zu folgenden Informationen:
  1. Verarbeitungszwecke;
  2. Kategorien personenbezogener Daten, die verarbeitet werden;
  3. Empfänger oder Kategorien von Empfängern, die die Daten erhalten oder erhalten werden, einschließlich Empfänger in Drittländern oder internationalen Organisationen;
  4. Falls möglich, die geplante Speicherdauer oder, falls dies nicht möglich ist, die Kriterien für die Festlegung der Speicherdauer;
  5. Das Recht, Berichtigung, Löschung oder Einschränkung der Verarbeitung der personenbezogenen Daten zu verlangen oder der Verarbeitung zu widersprechen;
  6. Das Recht, eine Beschwerde bei einer Aufsichtsbehörde einzureichen;
  7. Falls die Daten nicht von der betroffenen Person erhoben wurden, alle verfügbaren Informationen über die Herkunft der Daten;
  8. Das Bestehen einer automatisierten Entscheidungsfindung, einschließlich Profiling gemäß Artikel 22 Abs. 1 und 4 DSGVO, sowie in diesen Fällen aussagekräftige Informationen über die Logik, die Tragweite und die angestrebten Auswirkungen einer solchen Verarbeitung.
3. Die betroffene Person hat das Recht, zu erfahren, ob ihre personenbezogenen Daten in ein Drittland oder an eine internationale Organisation übermittelt werden.
4. Falls ja, hat die betroffene Person das Recht, über die geeigneten Garantien im Zusammenhang mit der Übermittlung informiert zu werden.
5. Zur Ausübung dieses Auskunftsrechts kann die betroffene Person jederzeit einen Mitarbeiter des Verantwortlichen kontaktieren.
Recht auf Berichtigung
1. Nach dem europäischen Recht hat jede Person das Recht, vom Verantwortlichen die unverzügliche Berichtigung unrichtiger personenbezogener Daten zu verlangen.
2. Unter Berücksichtigung der Verarbeitungszwecke kann die betroffene Person die Vervollständigung unvollständiger personenbezogener Daten verlangen, auch durch eine ergänzende Erklärung.
3. Zur Ausübung dieses Rechts auf Berichtigung kann die betroffene Person jederzeit einen Mitarbeiter des Verantwortlichen kontaktieren.
Recht auf Löschung (“Recht auf Vergessenwerden”)
1. Jede Person hat das Recht, nach europäischem Recht vom Verantwortlichen zu verlangen, ihre personenbezogenen Daten unverzüglich zu löschen, wenn einer der folgenden Gründe vorliegt und die Verarbeitung nicht erforderlich ist:
  1. Die personenbezogenen Daten sind für den ursprünglichen Zweck nicht mehr notwendig.
  2. Die betroffene Person widerruft ihre Einwilligung, und es fehlt an einer anderen Rechtsgrundlage für die Verarbeitung.
  3. Die betroffene Person legt Widerspruch gegen die Verarbeitung ein, und es liegen keine vorrangigen berechtigten Gründe vor, oder sie widerspricht gemäß Artikel 21 Abs. 2 DSGVO.
  4. Die personenbezogenen Daten wurden unrechtmäßig verarbeitet.
  5. Die Löschung der personenbezogenen Daten ist zur Erfüllung einer rechtlichen Verpflichtung erforderlich.
  6. Die personenbezogenen Daten wurden im Zusammenhang mit Diensten der Informationsgesellschaft gemäß Artikel 8 Abs. 1 DSGVO erhoben.
  7. Liegt einer der oben genannten Gründe vor, kann die betroffene Person die Löschung der bei der Intrenion GmbH gespeicherten personenbezogenen Daten verlangen, indem sie sich an einen Mitarbeiter wendet. Der Mitarbeiter wird sicherstellen, dass dem Löschungsersuchen unverzüglich nachgekommen wird.
2. Hat der Verantwortliche die personenbezogenen Daten öffentlich gemacht und ist er gemäß Artikel 17 Abs. 1 DSGVO zu deren Löschung verpflichtet, so trifft er unter Berücksichtigung der verfügbaren Technologie und der Implementierungskosten angemessene Maßnahmen, um andere Verantwortliche, die die Daten verarbeiten, darüber zu informieren, dass die betroffene Person die Löschung aller Links zu diesen Daten oder von Kopien und Replikationen dieser Daten verlangt hat, sofern die Verarbeitung nicht erforderlich ist.
3. Ein Mitarbeiter der Intrenion GmbH wird die notwendigen Maßnahmen im Einzelfall veranlassen.
Recht auf Einschränkung der Verarbeitung
1. Jede Person hat nach europäischem Recht das Recht, vom Verantwortlichen die Einschränkung der Verarbeitung zu verlangen, wenn eine der folgenden Bedingungen erfüllt ist:
  1. Die Richtigkeit der personenbezogenen Daten wird von der betroffenen Person bestritten, und zwar für eine Dauer, die es dem Verantwortlichen ermöglicht, die Richtigkeit der Daten zu überprüfen.
  2. Die Verarbeitung ist unrechtmäßig, und die betroffene Person lehnt die Löschung der personenbezogenen Daten ab und verlangt stattdessen die Einschränkung der Nutzung der Daten.
  3. Der Verantwortliche benötigt die personenbezogenen Daten nicht länger, die betroffene Person jedoch zur Geltendmachung, Ausübung oder Verteidigung von Rechtsansprüchen.
  4. Die betroffene Person hat Widerspruch gegen die Verarbeitung gemäß Artikel 21 Abs. 1 DSGVO eingelegt, und es steht noch nicht fest, ob die berechtigten Gründe des Verantwortlichen die der betroffenen Person überwiegen.
  5. Liegt eine der oben genannten Voraussetzungen vor, kann die betroffene Person die Einschränkung der Verarbeitung ihrer personenbezogenen Daten verlangen, indem sie sich jederzeit an einen Mitarbeiter der Intrenion GmbH wendet.
Recht auf Datenübertragbarkeit
1. Nach europäischem Recht hat jede Person das Recht, die sie betreffenden personenbezogenen Daten, die sie einem Verantwortlichen bereitgestellt hat, in einem strukturierten, gängigen und maschinenlesbaren Format zu erhalten.
2. Die betroffene Person hat außerdem das Recht, diese Daten einem anderen Verantwortlichen ohne Behinderung zu übermitteln, sofern die Verarbeitung auf einer Einwilligung oder einem Vertrag beruht und automatisiert erfolgt, es sei denn, die Verarbeitung ist für Aufgaben von öffentlichem Interesse erforderlich.
3. Zur Ausübung dieses Rechts kann die betroffene Person jederzeit einen Mitarbeiter der Intrenion GmbH kontaktieren.
Recht auf Widerspruch
1. Jede Person hat das Recht, aus Gründen, die sich aus ihrer besonderen Situation ergeben, der Verarbeitung ihrer personenbezogenen Daten zu widersprechen.
Automatisierte Entscheidungen einschließlich Profiling

(Details überspringen, bitte angeben, falls eine Übersetzung des Abschnitts benötigt wird.)
Widerrufsrecht

Jede betroffene Person hat das Recht, jederzeit ihre Einwilligung zur Verarbeitung ihrer personenbezogenen Daten zu widerrufen.

Datenschutzbestimmungen zur Nutzung von Google Analytics mit Anonymisierungsfunktion

Diese Website verwendet Google Analytics mit Anonymisierung.
Google Analytics ist ein Webanalysedienst.
Webanalyse umfasst die Erhebung und Auswertung von Besucherdaten auf Websites.
Dieser Dienst sammelt Informationen wie die verweisende Website, die besuchten Unterseiten sowie deren Häufigkeit und Dauer.
Die Webanalyse dient hauptsächlich der Optimierung von Websites und der Bewertung der Kosteneffizienz der Online-Werbung.
Betreiber von Google Analytics ist Google Ireland Limited mit Sitz in Dublin, Irland.
Der Verantwortliche nutzt die Anwendung „_gat. _anonymizeIp“ für Google Analytics.
Diese Anwendung kürzt und anonymisiert IP-Adressen von Nutzern innerhalb der EU und des Europäischen Wirtschaftsraums.
Ziel von Google Analytics ist die Analyse des Website-Verkehrs.
Google verwendet die erhobenen Daten, um die Nutzung der Website auszuwerten, Berichte über die Online-Aktivitäten zu erstellen und zusätzliche Dienstleistungen im Zusammenhang mit der Website bereitzustellen.
Google Analytics setzt ein Cookie auf das Gerät des Nutzers.
Cookies wurden bereits in dieser Richtlinie definiert.
Das Cookie ermöglicht es Google, die Nutzung der Website zu analysieren.
Beim Besuch einer Seite, die Google Analytics verwendet, übermittelt der Browser automatisch Daten an Google zu Zwecken der Online-Werbung und der Provisionsabrechnung.
Dabei erhält Google Zugriff auf personenbezogene Informationen wie die IP-Adresse, um die Herkunft der Besucher und Klicks nachzuvollziehen und Provisionsabrechnungen zu erstellen.
Das Cookie speichert personenbezogene Daten wie Zugriffszeit, Standort und Häufigkeit der Website-Besuche.
Bei jedem Besuch werden personenbezogene Daten, einschließlich der IP-Adresse des Nutzers, an Google in den Vereinigten Staaten übermittelt.
Google speichert diese personenbezogenen Daten in den USA.
Google kann die gesammelten personenbezogenen Daten an Dritte weitergeben.
Nutzer können Cookies durch entsprechende Einstellungen in ihrem Webbrowser blockieren und so das Setzen von Cookies dauerhaft verhindern, wie bereits zuvor beschrieben.
Durch die Anpassung der Browsereinstellungen kann auch verhindert werden, dass Google-Analytics-Cookies auf dem Gerät des Nutzers gespeichert werden.
Nutzer können bestehende Google-Analytics-Cookies über ihren Webbrowser oder andere Software löschen.
Nutzer können der Erfassung von Daten durch Google Analytics im Zusammenhang mit der Nutzung der Website sowie deren Verarbeitung durch Google widersprechen.
Dazu müssen Nutzer ein Browser-Add-on von https://tools.google.com/dlpage/gaoptout herunterladen und installieren.
Dieses Add-on teilt Google Analytics über JavaScript mit, dass keine Besuchsdaten und Informationen an Google Analytics übermittelt werden dürfen.
Google betrachtet die Installation von Browser-Add-ons als Widerspruch.
Wird das Gerät des Nutzers später zurückgesetzt oder neu formatiert, muss das Add-on neu installiert werden, um Google Analytics zu deaktivieren.
Wird das Add-on vom Nutzer oder von Dritten deinstalliert oder deaktiviert, kann es neu installiert oder reaktiviert werden.
Weitere Informationen zu den Datenschutzbestimmungen von Google finden sich unter https://www.google.com/intl/de/policies/privacy/ und http://www.google.com/analytics/terms/de.html.
Weitere Details zu Google Analytics sind unter https://www.google.com/analytics/ verfügbar.

Rechtliche Grundlagen für die Datenverarbeitung

Wir nutzen Artikel 6 Abs. 1 lit. a DSGVO als Rechtsgrundlage für die Verarbeitung Ihrer Daten, wenn wir Ihre Einwilligung für einen bestimmten Zweck erhalten haben.
Ist die Verarbeitung von Daten erforderlich, um einen Vertrag zu erfüllen, beispielsweise zur Bereitstellung von Waren oder Dienstleistungen, stützen wir uns auf Artikel 6 Abs. 1 lit. b DSGVO.
Dasselbe gilt für vorvertragliche Maßnahmen, etwa für Anfragen zu unseren Produkten oder Dienstleistungen.
Sind wir gesetzlich verpflichtet, Daten zu verarbeiten (z. B. zu steuerlichen Zwecken), berufen wir uns auf Artikel 6 Abs. 1 lit. c DSGVO.
In seltenen Fällen können wir Daten verarbeiten, um lebenswichtige Interessen einer Person zu schützen.
Zum Beispiel könnten wir bei einer Verletzung eines Besuchers in unserem Unternehmen lebenswichtige Informationen (Name, Alter, Krankenversicherungsdaten) an medizinisches Fachpersonal oder andere Helfer weitergeben.
Diese Art der Verarbeitung basiert auf Artikel 6 Abs. 1 lit. d DSGVO.
Datenverarbeitung kann auch auf Artikel 6 Abs. 1 lit. f DSGVO beruhen.
Wir verwenden diese Rechtsgrundlage für Verarbeitungen, die nicht unter andere Rechtsgrundlagen fallen, wenn dies im berechtigten Interesse unseres Unternehmens oder eines Dritten liegt, es sei denn, die Rechte und Freiheiten der betroffenen Person überwiegen.
Der europäische Gesetzgeber erlaubt solche Verarbeitungsvorgänge ausdrücklich.
Ein berechtigtes Interesse kann angenommen werden, wenn die betroffene Person Kunde unseres Unternehmens ist, gemäß Erwägungsgrund 47 Satz 2 der DSGVO.

Berechtigte Interessen, die von uns oder einem Dritten verfolgt werden

Wenn wir personenbezogene Daten gemäß Artikel 6 Abs. 1 lit. f DSGVO verarbeiten, besteht unser Ziel darin, Geschäfte zum Wohle unserer Mitarbeiter und Anteilseigner zu führen.

Dauer der Speicherung personenbezogener Daten

Wir legen die Dauer der Speicherung personenbezogener Daten anhand der gesetzlichen Aufbewahrungsfristen fest.
Nach Ablauf der vorgeschriebenen Frist löschen wir die Daten, es sei denn, sie werden weiterhin zur Vertragserfüllung oder -anbahnung benötigt.

Erforderlichkeit personenbezogener Daten und Konsequenzen bei Nichtbereitstellung

Die Bereitstellung personenbezogener Daten kann gesetzlich oder vertraglich vorgeschrieben und erforderlich sein, um einen Vertrag abzuschließen. Die betroffene Person muss die Daten bereitstellen; eine Nichtbereitstellung kann Folgen haben.
Personenbezogene Daten können gesetzlich vorgeschrieben sein (z. B. durch Steuerregelungen) oder aus vertraglichen Vereinbarungen resultieren (z. B. Informationen zu Vertragspartnern).
Die Bereitstellung personenbezogener Daten kann erforderlich sein, um einen Vertrag mit uns abzuschließen.
Beim Abschluss eines Vertrags mit unserem Unternehmen ist die betroffene Person verpflichtet, personenbezogene Daten bereitzustellen.
Ohne die Bereitstellung personenbezogener Daten können wir keinen Vertrag mit der betroffenen Person abschließen.
Bevor personenbezogene Daten bereitgestellt werden, sollte die betroffene Person einen Mitarbeiter kontaktieren.
Der Mitarbeiter wird erklären, ob die Bereitstellung personenbezogener Daten gesetzlich oder vertraglich vorgeschrieben und verpflichtend ist und welche Konsequenzen eine Nichtbereitstellung hätte.

Einsatz von automatisierten Entscheidungen

Als verantwortungsbewusstes Unternehmen setzen wir keine automatisierten Entscheidungen oder Profiling ein.

Intrenion Ledger

Terms and Conditions for the Use of Intrenion Ledger

Preamble

Intrenion GmbH, Alemannenallee 2, 14052 Berlin, Germany, represented by the managing director Christian Ullrich (“Intrenion” or “we”), provides its customers (“Customer” or “you”) with web-based access to the software system “Intrenion Ledger” (the “System”). The System is provided as a software-as-a-service solution and enables Customers to record, manage, and approve commitments and agreements made during project execution or other business collaborations. This Agreement for the use of the System (“Agreement”), including its Appendix 1 (Data Processing Agreement), governs the entire contractual relationship between Intrenion and the Customer regarding the provision and use of the System.

1. Conclusion of the Agreement

Use of the System requires the creation of a user account (“Registration”). If the Customer is a legal entity, the Registration must be carried out by a person authorised to represent the Customer.
Registration is completed by submitting the required information via the online registration form and activating the account via the confirmation link sent to the email address provided during registration.
The System is offered exclusively to entrepreneurs within the meaning of Section 14 of the German Civil Code (BGB). Intrenion may request appropriate proof that the Customer is not a consumer within the meaning of Section 13 BGB.
By completing the Registration, the Customer submits an offer to conclude an Agreement for the use of the System. The Agreement is concluded when Intrenion confirms the Registration by email or activates the Customer’s access to the System.
The Customer’s general terms and conditions shall apply only if Intrenion has expressly agreed to them in writing.

2. Services of Intrenion Ledger

Intrenion operates and maintains the System and provides the Customer with access to the System via the internet for the duration of the Agreement (Section 7). The System enables the Customer to record, manage, and approve commitments and related information within projects or other business collaborations. A description of the System’s main functionality is available on our website at ledger.intrenion.com.
Intrenion will make reasonable efforts to ensure an average annual availability of the System of 98%. Periods of planned maintenance and disruptions outside Intrenion’s reasonable control are excluded from this calculation. Intrenion may carry out maintenance work where necessary, including without prior notice if required for operational or security reasons.
Intrenion may provide documentation and instructions for using the System electronically. The Customer may use such documentation solely for the purpose of using the System and may not publish or distribute it.
Intrenion may use subcontractors to operate or maintain the System.
Intrenion may further develop or modify the System at its discretion, provided that the core functionality of the System is not materially reduced. Additional features may be offered for an additional fee.
The System is operated using third-party infrastructure providers. The System’s application interface is hosted on Softr, and the underlying data storage is provided by Airtable. These services are provided by independent third-party providers. Intrenion may replace these providers with equivalent services if required for the operation of the System.
Intrenion may temporarily suspend the Customer’s access to the System or remove Customer Content if reasonably necessary, in particular in cases of suspected misuse of the System, violations of applicable law or this Agreement, security risks, legal obligations, payment default, or other circumstances that could harm Intrenion, the System, or third parties.
Where reasonably possible, Intrenion will inform the Customer of a suspension of access or deletion of Customer Content at least one working day in advance. This does not apply where prior notification would undermine the purpose of the suspension or is not reasonably possible.
Intrenion may provide AI-based features as part of the System. Information submitted by the Customer to such features is considered Input, and any generated results are considered Output. The Customer retains ownership of its Input and, to the extent permitted by law, of the Output generated for the Customer.
AI-based features may rely on technology provided by third-party providers.
AI-generated Output may be inaccurate, incomplete, or non-unique. The Customer is responsible for reviewing and verifying any Output before using it. Intrenion does not guarantee the accuracy or suitability of AI-generated Output.

3. Technical Requirements and Responsibilities of the Customer

The Customer is responsible for providing the technical requirements necessary to access the System, including a stable internet connection and suitable hardware and software (e.g., browser or devices).
Certain features of the System may require the Customer to use or connect to third-party services. Where such integrations are required, the Customer will be informed within the System.
The Customer is solely responsible for all data, information, and other content uploaded or entered into the System (“Customer Content”). The Customer must ensure that the use of the System and the Customer Content complies with all applicable laws and does not infringe the rights of third parties.
The Customer must keep all login credentials confidential and ensure that only authorised persons use the System under the Customer’s account. The Customer must inform Intrenion without undue delay if there is reason to believe that login credentials have been compromised.
The Customer must not attempt to circumvent the System’s security mechanisms or use the System in any manner not permitted under this Agreement.
The Customer is responsible for maintaining appropriate backups of its data.

4. Intellectual Property

Intrenion retains all rights, title, and interest in and to the System, including all related software, technology, documentation, and trademarks.
For the duration of the Agreement, Intrenion grants the Customer a non-exclusive, non-transferable right to access and use the System for the Customer’s internal business purposes in accordance with this Agreement.
The Customer retains all rights to the data and content uploaded, entered, or created within the System (“Customer Content”). The Customer grants Intrenion a limited right to process, store, and transmit Customer Content solely to the extent necessary to operate and provide the System.
The System may include components, services, or infrastructure provided by third parties, including software subject to open-source licenses. Such components remain subject to the respective third-party license terms.
Intrenion may reference the Customer as a user of the System in marketing materials and may use the Customer’s company name and logo for this purpose. The Customer may withdraw this consent at any time by written notice.

5. Fees and Payment

The Customer shall pay the subscription fees for the use of the System (“Fees”) in accordance with the pricing applicable at the time of registration or as otherwise agreed between the parties.
Unless otherwise stated, the Fees are charged monthly in advance and are payable net of applicable value-added tax (VAT).
Payments are processed through third-party payment service providers. The Customer agrees to the use of such providers for payment processing.

6. Warranty and Liability

Intrenion warrants that the System will substantially perform the functions described in the service description. A defect exists if the System significantly deviates from the agreed functionality and this materially affects its use.
If the System is defective, Intrenion will remedy the defect within a reasonable time after receiving notice from the Customer. Intrenion may, at its discretion, correct the defect, provide a workaround, or provide the service again. If the defect cannot be remedied within a reasonable time for reasons for which Intrenion is responsible, the Customer may reduce the Fees proportionally.
The Customer must notify Intrenion of any defects without undue delay and provide reasonable assistance in identifying and resolving the issue.
Intrenion shall be liable without limitation for damages caused by intent or gross negligence, as well as for damages resulting from injury to life, body, or health.
In cases of simple negligence, Intrenion shall only be liable for the breach of a material contractual obligation (“Kardinalpflicht”). In such cases, liability shall be limited to the typical and foreseeable damage at the time the Agreement was concluded.
Intrenion shall not be liable for indirect or consequential damages, including loss of profits, except where such liability cannot be excluded under applicable law.
Liability for loss of data is limited to the costs that would have been incurred in restoring the data if the Customer had performed appropriate and regular data backups.
The above limitations of liability also apply in favour of Intrenion’s employees, representatives, and agents. Liability under the German Product Liability Act, for explicitly assumed guarantees, or under mandatory data protection law, remains unaffected.

7. Term and Termination

The Agreement begins upon its conclusion in accordance with Section 1 and continues until terminated by either party.
Unless otherwise agreed, the subscription runs on a monthly basis and is billed monthly in advance.
The Agreement may be terminated by either party at any time with effect at the end of the current billing period.
The right of both parties to terminate the Agreement for good cause remains unaffected.
Upon termination of the Agreement, the Customer’s access to the System will end. Intrenion will retain the Customer Content for a period of 30 days after termination (“Grace Period”) in order to allow the Customer to export its data.
After the Grace Period, Intrenion may permanently delete the Customer Content unless legal retention obligations require a longer storage period.

8. Indemnification

The Customer shall indemnify and hold Intrenion harmless from any third-party claims arising from the Customer’s use of the System, in particular if such claims result from unlawful Customer Content or from the Customer’s violation of this Agreement or applicable law.
Intrenion will inform the Customer without undue delay of any such claims and provide the Customer with reasonable information necessary for the defense against such claims.
The Customer shall reimburse Intrenion for reasonable costs arising from such claims, including reasonable legal fees, to the extent the Customer is responsible for the underlying violation.

9. Amendments to this Agreement

Intrenion may amend or update this Agreement from time to time.
Intrenion will notify the Customer of any material changes to this Agreement in text form (e.g., by email) at least 30 days before the changes take effect.
If the Customer does not agree to the amended Agreement, the Customer may terminate the Agreement before the changes take effect.
If the Customer continues to use the System after the changes take effect, the amended Agreement shall be deemed accepted.
Intrenion’s right to terminate the Agreement in accordance with Section 7 remains unaffected.

10. Final Provisions

In the event of inconsistencies between this Agreement and Appendix 1 (Data Processing Agreement), the provisions of Appendix 1 shall prevail with respect to data protection matters.
The Customer may only offset claims of Intrenion or exercise a right of retention if the counterclaim is undisputed, legally established, or arises from the same contractual relationship.
This Agreement shall be governed by the laws of the Federal Republic of Germany, excluding the United Nations Convention on Contracts for the International Sale of Goods (CISG).
If the Customer is a merchant within the meaning of German commercial law, the exclusive place of jurisdiction for all disputes arising from or in connection with this Agreement shall be Berlin, Germany.

Appendix 1 - Data Processing Agreement

This Data Processing Agreement (“DPA”) specifies the data protection obligations and rights of the parties in connection with the processing of personal data processed by Intrenion GmbH, Alemannenallee 2, 14052 Berlin, Germany, represented by the managing director Christian Ullrich (hereinafter “Contractor”) on behalf of the Customer (hereinafter “Customer”) under the Terms and Conditions for the Use of Intrenion Ledger (hereinafter “Main Agreement”) concluded between the parties.

1. Scope of application

When providing the services in accordance with the Main Agreement, the Contractor processes personal data that the Customer has made available for the purpose of providing the services (“Customer Data”) and, in respect of which, the Customer acts as the controller in the sense of Art. 4 No. 7 GDPR. In the event of contradictions between this DPA and provisions from other agreements, in particular, the Main Agreement, the provisions of this DPA shall take precedence.

2. Subject-matter and scope of the processing / Customer’s authority to issue instructions

The Contractor will process the Customer Data exclusively on behalf of the Customer and in accordance with the Customer’s instructions unless the Contractor is legally required to do so under the law of the European Union or a Member State. In such a case, the Contractor shall inform the Customer of these legal requirements prior to processing, unless the law in question prohibits such information on important grounds of public interest.
The processing of Customer data by the Contractor shall be carried out exclusively in the manner, to the extent, and for the purpose specified in Annex 1 to this DPA; the processing shall concern only the types of personal data and categories of data subjects specified therein.
The duration of the processing corresponds to the term of the Main Agreement. The Customer shall be entitled to terminate this DPA and the Main Agreement if the Contractor violates obligations arising under this DPA or the Customer’s instructions and fails to remedy the violation immediately upon the Customer’s warning. In the event of a material breach of any obligation under this DPA or any instruction, the Customer may terminate this DPA and the Main Agreement without notice or prior warning.
The Contractor may process Customer Data, or have it processed by other processors outside the European Economic Area (“EEA”), if the requirements of Articles 44 to 48 GDPR are met or an exception under Article 49 GDPR applies.
The instructions are set out in the Main Agreement. The Customer is entitled to issue instructions on the nature, scope, purposes, and means of processing Customer Data. The Customer will confirm oral instructions in writing or by e-mail.
If the Customer issues instructions that extend beyond the services agreed in the Main Agreement and this DPA, the Customer shall bear the costs of executing such instructions. Before carrying out the instructions, the Contractor shall inform the client of the expected costs and await his confirmation. This shall not apply to instructions to refrain from data processing in its entirety, to delete individual or all Customer Data, or to hand it over to the Customer.
If the Contractor is of the opinion that an instruction of the Customer violates this DPA, the GDPR, or other data protection regulations of the Union or the Member States, it shall inform the Customer of this immediately in writing or text form. The Contractor is entitled to suspend the execution of such instruction until the Customer confirms it in writing or text form. If the Customer insists on executing the instruction despite the Contractor’s concerns, the Customer shall indemnify the Contractor against all damages and costs incurred by the Contractor as a result of executing the Customer’s instruction. The contractor shall inform the Customer of any damages and costs asserted against him, shall not acknowledge any third-party claims without the Customer’s consent, and shall either conduct the defense in accordance with the Customer’s instructions or leave it to the Customer, at the Contractor’s discretion.

3. Requirements for personnel

Contractor shall obligate all personnel processing Customer Data to maintain confidentiality unless they are subject to appropriate statutory confidentiality obligations.
Contractor shall ensure that all personnel under his authority who have access to Customer Data only process this data in accordance with this DPA and the Customer’s instructions unless they are required to do so under the law of the European Union or the Member States.

4. Security of processing

Taking into account the state of the art, the costs of implementation, and, as far as known to the Contractor, the nature, scope, context, and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of data subjects, the Contractor shall implement appropriate technical and organisational measures to ensure a level of security for the Customer Data appropriate to the risk.
Prior to the commencement of processing Customer Data, the Contractor shall, in particular, implement the technical and organisational measures specified in Annex 2 to this DPA, maintain them for the duration of the Main Agreement, and ensure that Customer Data is processed in accordance with these measures.
Customer shall verify the technical and organisational measures implemented by the Contractor, in particular whether they are also sufficient with regard to the circumstances of data processing that are unknown to the Contractor.
Since the technical and organisational measures are subject to technological progress, the Contractor is entitled and obliged to implement alternative, adequate measures to ensure that the security level specified in Annex 2 is not exceeded. If the Contractor makes significant changes to the measures specified in Annex 2, it will inform the Customer in advance. If the changes fall below the previously defined security level in such a way that they are no longer adequate, taking into account the state of the art, the implementation costs, and the nature, scope, context, and purposes of processing the Customer data, as well as the risk of varying likelihood and severity for the rights and freedoms of data subjects, the Customer shall be entitled to terminate the Main Agreement and this DPA at the time when such changes come into force.

5. Use of sub-processors

Contractor uses the sub-processors listed in Annex 3 to process Customer Data. These are deemed to be authorised upon the conclusion of this DPA.
Contractor may use additional sub-processors to process Customer Data, subject to the following conditions: Contractor shall inform the Customer before using any additional sub-processor. Unless the Customer raises an objection within 14 days after such information, the use of a further sub-processor shall be deemed to have been authorised.
If the Customer objects to the use of a further processor without good cause, the Contractor shall be entitled, at its discretion, to continue providing the services without the relevant processor or to terminate the Main Agreement and these DPA in accordance with the terms of the Main Agreement.
Contractor must obligate each sub-processor by means of a written agreement in the same way as Contractor is obligated to the Customer under this DPA.
Contractor shall be obliged to select and use only those sub-processors who offer sufficient guarantees that the appropriate technical and organisational measures are implemented in such a way that the processing of Customer Data is carried out in accordance with the requirements of the GDPR and this DPA.
If the Contractor employs further processors who process personal data outside member states of the European Union or the EEA and if the conditions of Articles 44 to 48 GDPR are not otherwise fulfilled or an exception under Article 49 GDPR exists, the Contractor shall ensure with respect to these sub-processors that the applicable data protection obligations are met by concluding any such sub-processing agreement using the applicable Module Three (Transfer processor to processor) of the EU Standard Contractual Clauses as of 2021.

6. Rights of data subjects

Contractor shall take all reasonable technical and organisational measures to assist the Customer in fulfilling its obligation to respond to data subjects’ requests to exercise their rights.
Contractors will, in particular, within the scope of their possibilities:
1. Inform the Customer if a data subject should contact the Contractor directly with a request to exercise their rights in relation to Customer Data;
2. Provide the Customer with all information in its possession concerning the processing of Customer Data which the Customer requires in order to respond to the request of a data subject and which is not available to the Customer himself;
3. correct, delete, or limit the processing of Customer Data without delay at the Customer’s instruction, insofar as this is technically and reasonably possible for the Contractor;
4. ensure that the Customer can and does receive the Customer Data processed within Contractor’s sphere of responsibility, as far as technically possible, in a structured, commonly used, and machine-readable format, provided that the data subject has a right to data portability with regard to the Customer Data.

7. Other obligations of the Contractor to assist the Customer

Contractor shall notify Customer immediately after becoming aware of any Customer Data breach, in particular incidents that lead to the destruction, loss, alteration, or unauthorised disclosure of or access to Customer Data.
In the event of any Customer Data breach, the Contractor shall, without delay, take all necessary and reasonable measures to remedy the Customer Data breach and, if necessary, to mitigate its possible adverse effects.
If the Customer is obliged to provide information to a government authority or a third party regarding the processing of Customer Data or to cooperate with such entities in any other way, the Contractor is obliged to assist the Customer, insofar as this is possible, in providing such information or in fulfilling other obligations to cooperate, in particular, to provide all information and documents regarding technical and organisational measures taken within the meaning of Art. 32 GDPR, regarding the technical procedures for processing Customer Data, the locations where Customer Data is processed, and the persons involved in the processing.
Contractor shall assist Customer in complying with its obligations under Art. 32 GDPR, to the extent possible considering the information Contractor has with respect to Customer’s use of Contractor’s services.
In the event that the Customer is obliged to inform the supervisory authorities and/or data subjects in accordance with Art. 33, 34 GDPR, the Contractor shall, to the extent possible, assist the Customer in complying with these obligations at the Customer’s request. In particular, the Contractor is obliged to document all Customer Data breaches, including all related facts, in a manner that enables the Customer to prove compliance with any relevant statutory reporting obligations.
Contractor shall support the Customer with the information available to him and assist, within reason, in any data protection impact assessment to be carried out by the Customer and, if necessary, subsequent consultations with the supervisory authorities in accordance with Art. 35, 36 GDPR.
Upon request, the Contractor shall provide the Customer with extracts from the records of processing activities in accordance with Art. 30(2) GDPR relating to the processing of Customer Data.

8. Deletion and return of Customer Data

Upon termination of the Main Agreement, Contractor shall, upon the Customer’s instruction, either completely delete all Customer Data or return it to the Customer and delete existing copies, unless the law of the European Union or a Member State requires the continued storage of Customer Data.
The Contractor is entitled to retain backup copies of Customer Data for a period of 30 days after termination, or longer if required for operational or compliance purposes, provided such retention is subject to continued application of this DPA and Art. 32 GDPR. Deletion from backups shall occur in accordance with the Contractor’s regular backup cycle, subject to technical feasibility.
Documentation which serves as proof of the orderly and proper processing of Customer Data is to be kept by Contractor in accordance with the statutory retention periods beyond the term of this DPA.

9. Evidence and inspections

Contractor shall ensure and regularly evaluate that the processing of Customer Data is carried our in accordance with this DPA, including the scope of processing of the Customer Data set out in Annex 1 and the Customer’s instructions.
Contractor shall document the implementation of the obligations under this DPA in a suitable manner and shall provide the Customer with all necessary evidence of the Contractor’s compliance with its obligations under the GDPR and this DPA at the Customer’s request.
Customer audits shall be limited to once per year (unless required by a supervisory authority or a confirmed data breach) and shall be conducted during regular business hours with at least 4 weeks’ prior written notice. Instead of an on-site audit, the Contractor may provide recent third-party audit reports or certifications (e.g., ISO 27001, SOC 2), which the Customer agrees to accept unless it has reasonable doubts about the Contractor’s compliance. The audits shall not obstruct or unduly burden the Contractor in his normal business operations. The reasonable costs actually incurred for such audits and inspections shall be borne by the Customer. Any third-party auditor chosen by the Customer may be declined for good cause, and any third-party auditor may be required to sign adequate confidentiality agreements prior to the start of the audit.
In accordance with the GDPR, the Customer and the Contractor are subject to public control by the competent supervisory authority. At the Customer’s request, the Contractor shall provide the supervisory authority with the requested information and allow the supervisory authority or the persons appointed by it to conduct audits, including inspections of the Contractor. In this context, the Contractor shall grant the competent supervisory authority the necessary rights of access, information, and inspection.

10. Liability

Each party shall be liable only for damages resulting from breaches of its own obligations under this DPA and the GDPR. Any further liability shall be governed by the liability provisions in the Main Agreement, except where mandatory statutory liability (e.g., Art. 82 GDPR) applies.

11. Miscellaneous

Amendments and subsidiary agreements to this DPA must be made in writing. This also applies to clause 11.1 of this written form.
Agreements on choice of law and place of jurisdiction in the Main Agreement shall apply to this DPA.

Annex 1: Data Processing Description

Purpose, nature, and extent of data processing, type of data, and categories of data subjects

Subject matter: Intrenion’s provision of the Services to Customer.
Duration of the data processing: The Term plus the period from the end of the Term until deletion of all Customer Data by Intrenion pursuant to the terms of this DPA.
Purpose of the data processing: Intrenion will process Customer Data to provide the Service and related support services in accordance with the Agreement.
Nature of data processing: Intrenion will process Customer Data only pursuant to written instructions from Customer, who remains responsible as the controller for determining a valid legal basis (pursuant to Article 6 or Article 9, GDPR) for processing in accordance with this DPA.
Categories of data: Customer Data, the content of which is determined and controlled by the Customer and its users. This may include identification data, contact data, communication content, and usage data. The Customer shall not use the Service to process special categories of personal data within the meaning of Article 9 GDPR unless explicitly agreed in writing with Intrenion.
Data subjects: Users of the System and other individuals whose personal data are entered into the Service by the Customer or its users, such as employees, contractors, vendor representatives, or business partners.

Annex 2: Technical and Organizational Measures

Introduction

This document describes the technical and organizational measures implemented by Intrenion GmbH to protect personal data processed in connection with the Intrenion Ledger service, in accordance with Article 32 GDPR. The purpose of these measures is to ensure an appropriate level of security, taking into account the nature of the processing and the risks to individuals’ rights and freedoms.

Physical access control

Intrenion Ledger is operated on a professional cloud infrastructure. Physical access to data centers is controlled by providers, who use industry-standard security measures, including access controls, surveillance systems, and restricted-entry procedures. Intrenion itself does not operate physical servers.

System access control

Access to systems used to operate the Service is restricted to authorized persons only.

Measures include:

Administrative access uses individual user accounts.
Strong passwords and multi-factor authentication are used where available.
Administrative access is limited to a small number of authorized persons.
Remote access occurs over encrypted connections such as HTTPS or TLS.

Data access control

Access to Customer Data is limited to the minimum number of persons necessary to operate and maintain the Service.

Measures include:

Role-based access permissions are used where supported by the system.
Access to Customer Data is granted only for operational support, maintenance, or security purposes.
System activity may be recorded through logging features provided by the infrastructure providers.

Separation of data

Customer data is logically separated within the Service.

Measures include:

Customer projects and environments are logically separated within the system.
Development and production environments are separated where possible.
Test environments do not intentionally contain real personal data.

Data transmission control

Personal data transmitted between users and the Service is encrypted using modern encryption protocols.

Measures include:

All communication with the Service uses HTTPS or TLS encryption.
System integrations use secure and encrypted interfaces where available.

Input control

Processing activities within the Service can be traced through system logs and account activity records provided by the underlying platform infrastructure.

Availability and resilience

Measures are implemented to ensure that personal data remains available and protected against accidental loss.

These measures include:

The Service is hosted on professional cloud infrastructure.
Infrastructure providers perform automated system backups.
System availability is monitored through infrastructure monitoring tools.
Data may be restored from available backups where technically possible.

Procedures for review and improvement

Intrenion regularly reviews its technical and organizational measures and adapts them where necessary to reflect changes in the Service, technology, or regulatory requirements.

Incident response

Intrenion maintains procedures for responding to security incidents or data breaches.

If a personal data breach occurs, Intrenion will:

Investigate the incident.
Take reasonable measures to mitigate potential harm.
Notify the Customer without undue delay where required under Article 33 GDPR.

Data protection management

Intrenion implements the following organizational measures:

Persons with access to personal data are bound by confidentiality obligations.
Processing activities are documented where required by law.
Service providers and subprocessors are selected with attention to data protection and security standards.
Data Processing Agreements are concluded with subprocessors where required.

Annex 3: Intrenion Sub-processors

To support the delivery of Intrenion Ledger, Intrenion GmbH may engage and use data processors with access to certain Customer Data. This list provides important information about the identity, location, and role of each Sub-processor. Intrenion may use the following Sub-processors to provide the Services to you:

Softr Platforms GmbH
- Rosenthaler Straße 13
- 10119 Berlin
- Germany
- Data location: European Union, United States
- Purpose: Application hosting and user interface
Airtable Inc.
- 1 Front Street, Floor 28
- San Francisco, CA 94111
- United States
- Data location: European Union, United States
- Purpose: Database infrastructure and storage of application data

Intrenion

Terms of service • Privacy policy • Legal notice

Legal notice (Impressum)

Legal documents

Introduction

Definitions

Name and address of the controller

Cookies

Collection of general data and information

Subscription to our newsletter

Event invitation

Newsletter tracking

Contact options through the website

Regular deletion and protection of personal data

Rights of the data subject

Privacy rules for using Google Analytics with the anonymization feature

Legal reasons for processing data

Legitimate interests pursued by a third party or us

Duration of personal data storage

Personal data requirements and consequences of non-provision

Use of automated decision-making

Einführung

Definitionen

Name und Anschrift des Verantwortlichen

Cookies

Erhebung allgemeiner Daten und Informationen

Anmeldung zu unserem Newsletter

Veranstaltungseinladung

Newsletter-Tracking

Kontaktmöglichkeiten über die Website

Regelmäßige Löschung und Schutz personenbezogener Daten

Rechte der betroffenen Person

Datenschutzbestimmungen zur Nutzung von Google Analytics mit Anonymisierungsfunktion

Rechtliche Grundlagen für die Datenverarbeitung

Berechtigte Interessen, die von uns oder einem Dritten verfolgt werden

Dauer der Speicherung personenbezogener Daten

Erforderlichkeit personenbezogener Daten und Konsequenzen bei Nichtbereitstellung

Einsatz von automatisierten Entscheidungen

Terms and Conditions for the Use of Intrenion Ledger

Preamble

1. Conclusion of the Agreement

2. Services of Intrenion Ledger

3. Technical Requirements and Responsibilities of the Customer

4. Intellectual Property

5. Fees and Payment

6. Warranty and Liability

7. Term and Termination

8. Indemnification

9. Amendments to this Agreement

10. Final Provisions

Appendix 1 - Data Processing Agreement

1. Scope of application

2. Subject-matter and scope of the processing / Customer’s authority to issue instructions

3. Requirements for personnel

4. Security of processing

5. Use of sub-processors

6. Rights of data subjects

7. Other obligations of the Contractor to assist the Customer

8. Deletion and return of Customer Data

9. Evidence and inspections

10. Liability

11. Miscellaneous

Annex 1: Data Processing Description

Annex 2: Technical and Organizational Measures

Introduction

Physical access control

System access control

Data access control

Separation of data

Data transmission control

Input control

Availability and resilience

Procedures for review and improvement

Incident response

Data protection management

Annex 3: Intrenion Sub-processors