Privacy Policy (English version)
When you use our website or enter into a business relationship with MARMIND, personal data is processed. On this page, we inform you about the various types of processing.
The data controller is MARMIND GmbH, Wagenseilgasse 3, Europlaza 5i, 1120 Vienna, together with MARMIND GmbH, Seering 5/4, 8141 Premstätten (jointly ‘MARMIND’). If you have any questions about data protection at MARMIND, please contact our data protection officer at datenschutz@marmind.com.
Your data will not be passed on to third parties unless this is necessary for the respective processing purpose. In this case, we will inform you of this in the descriptions of the individual processing operations. The transfer of data to processors who work exclusively on the instructions of MARMIND, who do not use the data for their own purposes and who are bound by their own agreements to the data protection obligations of the General Data Protection Regulation is also permitted.
You have the right to access, correct and delete your data, the right to restrict processing, the right to object to processing (in particular the objection to direct marketing) and the right to lodge a complaint with a supervisory authority if you believe that your data is being processed unlawfully.
Processing on our website
Web server logs
When you access our website, information about your visit (date, time, page viewed, IP address) is stored as log files on our server. We do this in the legitimate interest of monitoring technical operations, optimising our information offering and detecting attacks on our website. We evaluate this data exclusively for our own statistical purposes in anonymised form.
The log files are deleted after three months.
Contact
The data from your enquiry (name, contact details, content of the enquiry, history of previous contacts with us) that you send us via the contact form or by email will be processed by us for customer service (pre-contractual measures) and for marketing purposes (legitimate interest in sending direct advertising by post). Your data will be deleted by us 3 years after your last enquiry, unless there are legal obligations to retain the data.
Newsletter subscription (marketing communication)
The newsletter, respectively any marketing communication will only be sent with your express consent by entering your data and email address, activating the ‘Marketing Updates’ checkbox, clicking the ‘Submit’ button and clicking the confirmation link in the confirmation email that will be sent automatically (double opt-in).
You can revoke your consent to receive the newsletter at any time by clicking on the unsubscribe link included in every newsletter. The revocation does not affect the legal basis applicable until the revocation.
In addition to your email address, we also process information about your usage behaviour when reading the newsletter, e.g. which articles are read particularly often. We use this information to make our content more interesting and relevant to you.
Your data will be stored until you revoke your consent or unsubscribe from the newsletter.
Information on the use of cookies
This website uses software to analyse how the website is used.
The evaluation of this data provides valuable insights into the needs of users. These insights help us to further improve the quality of our website.
In this context, so-called cookies are used. Cookies are data stored in your browser that enable the recognition of a visitor on an anonymous basis. Cookies can generally be rejected or deleted by adjusting your browser settings. The statements made here with regard to cookies also apply in a similar form to other technical browser functions such as local storage and session storage.
Some of the cookies on this website are necessary for the functioning of the website and are set on the basis of our legitimate interest in the secure and efficient operation of the website. Information is not passed on to third parties for their own business purposes.
The following processing operations are among the cookies and data transfers to external parties that are absolutely necessary:
- To manage user logins (*.marmind.com)
- To detect entries from bots
- To check browser functionality (e.g. test cookies)
- To manage consent for additional services
- To ensure security and detect cyber attacks against the website
- To detect error states
Cookies for analysis and profiling purposes are only used with your express consent.
Consent management and cookie management with HubSpot
We use HubSpot software to manage the cookies used by the various website services and to manage the related consents. For this purpose, data (IP address of your device, selection of consents for specific services) is transferred to HubSpot. A data processing agreement has been concluded with HubSpot, which obliges HubSpot not to use the data for its own purposes. The processing is necessary to fulfil legal obligations (Art. 6 (1) c GDPR).
You can revoke your consent at any time HERE.
Storage of Personal Data
Tag Manager
Google Tag Manager
Personal data is processed when you visit this website. Processed data categories: technical connection data of the server access (IP address, date, time, requested page, browser information). Purpose of processing: Triggering, controlling and managing other services on our website. The legal basis for processing: a legitimate interest that overrides the rights and freedoms of the data subject (Art. 6 (1) f GDPR). Legitimate interests: strong economic interest in safe and functioning operation of the technical systems, Compliance with legal and contractual obligations. Data is transmitted: to the data processor Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This may also mean a transfer of personal data to a country outside the European Union. The data is transferred to the USA on the basis of Art. 45 GDPR in conjunction with the European Commission's adequacy decision C(2023) 4745, since the data recipient has committed to comply with the data processing principles of the Data Privacy Framework (DPF).
Web analysis
Google Analytics
Personal data is processed when you visit this website. Processed data categories: technical connection data of the server access (IP address, date, time, requested page, browser information)data about the use of the website and the logging of clicks on individual elements. Purpose of processing: Anonymization and creation of statistics, analysis of user behavior and content optimization. The legal basis for processing: Your consent according to Art. 6 (1) a GDPR. Data is transmitted: to the data controller Google LLC, Amphitheatre Parkway, Mountain View, CA 94043, USA. The legal basis for the data transfer to Google LLC is Your consent according to Art. 6 (1) a GDPR. This may also mean a transfer of personal data to a country outside the European Union. The data is transferred to the USA on the basis of Art. 45 GDPR in conjunction with the European Commission's adequacy decision C(2023) 4745, since the data recipient has committed to comply with the data processing principles of the Data Privacy Framework (DPF).
Hotjar
Personal data is processed when you visit this website. Processed data categories: technical connection data of the server access (IP address, date, time, requested page, browser information)data about the use of the website and the logging of clicks on individual elements. Purpose of processing: Anonymization and creation of statistics, analysis of user behavior and content optimization. The legal basis for processing: Your consent according to Art. 6 (1) a GDPR. Data is transmitted: to the data processor Hotjar Limited, Level 5, Dragonara Business Centre, Dragonara Road, Paceville St Julian's STJ 3141, Malta. This may also mean a transfer of personal data to a country outside the European Union. The data is transmitted on the basis of your consent in accordance with Art. 6 Para. 1 lit a in conjunction with Art. 49 Para. 1 lit a GDPR. You were informed before you gave your consent that the USA does not have a level of data protection that corresponds to the standards of the EU. In particular, US secret services can access your data without you being informed and without you being able to take legal action against it.
Hubspot Analytics
Personal data is processed when you visit this website. Processed data categories: technical connection data of the server access (IP address, date, time, requested page, browser information)data about the use of the website and the logging of clicks on individual elements. Purpose of processing: Anonymization and creation of statistics, analysis of user behavior and content optimization. The legal basis for processing: Your consent according to Art. 6 (1) a GDPR. Data is transmitted: to the data processor HubSpot, Inc., Two Canal Park, Cambridge, MA 02141-1814, USA (https://www.hubspot.com). This may also mean a transfer of personal data to a country outside the European Union. The data is transferred to the USA on the basis of Art. 45 GDPR in conjunction with the European Commission's adequacy decision C(2023) 4745, since the data recipient has committed to comply with the data processing principles of the Data Privacy Framework (DPF).
Remarketing
Bing Ads
Personal data is processed when you visit this website. Processed data categories: data about the use of the website and the logging of clicks on individual elements. Purpose of processing: analysis of user behavior, Analysis of the effect of online marketing measures and Selection of online advertising on other platforms, which are automatically selected using real-time bidding based on user behavior. The legal basis for processing: Your consent according to Art. 6 (1) a GDPR. Data is transmitted: to the data controller Microsoft Ireland Operations Limited, One Microsoft Place South County Business Park, Leopardstown Dublin, 18 D18 P521, Ireland. The legal basis for the data transfer to Microsoft Ireland Operations Limited is Your consent according to Art. 6 (1) a GDPR. This may also mean a transfer of personal data to a country outside the European Union. The data is transferred to the USA on the basis of Art. 45 GDPR in conjunction with the European Commission's adequacy decision C(2023) 4745, since the data recipient has committed to comply with the data processing principles of the Data Privacy Framework (DPF).
Google GTag
Personal data is processed when you visit this website. Processed data categories: data about the use of the website and the logging of clicks on individual elements. Purpose of processing: analysis of user behavior, Analysis of the effect of online marketing measures and Selection of online advertising on other platforms, which are automatically selected using real-time bidding based on user behavior. The legal basis for processing: Your consent according to Art. 6 (1) a GDPR. Data is transmitted: to the data controller Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The legal basis for the data transfer to Google Ireland Limited is Your consent according to Art. 6 (1) a GDPR. This may also mean a transfer of personal data to a country outside the European Union. The data is transferred to the USA on the basis of Art. 45 GDPR in conjunction with the European Commission's adequacy decision C(2023) 4745, since the data recipient has committed to comply with the data processing principles of the Data Privacy Framework (DPF). The privacy policy of Google Ireland Limited: https://business.safety.google/privacy.
LinkedIn Pixel
Personal data is processed when you visit this website. Processed data categories: data about the use of the website and the logging of clicks on individual elements. Purpose of processing: analysis of user behavior, Analysis of the effect of online marketing measures and Selection of online advertising on other platforms, which are automatically selected using real-time bidding based on user behavior. The legal basis for processing: Your consent according to Art. 6 (1) a GDPR. Data is transmitted: to the data controller LinkedIn Ireland Unlimited Company, Wilton Place, Dublin, D02 X527, Ireland. The legal basis for the data transfer to LinkedIn Ireland Unlimited Company is Your consent according to Art. 6 (1) a GDPR. This may also mean a transfer of personal data to a country outside the European Union. The data is transferred to the USA on the basis of Art. 45 GDPR in conjunction with the European Commission's adequacy decision C(2023) 4745, since the data recipient has committed to comply with the data processing principles of the Data Privacy Framework (DPF).
Embeddings
Google Maps
When accessing some sub-services of our website, additional personal services are processed. Processed data categories: technical connection data of the server access (IP address, date, time, requested page, browser information)data for creating usage statistics. Purpose of processing: Delivery of content provided by third parties and display interactive maps. The legal basis for processing: a legitimate interest that overrides the rights and freedoms of the data subject (Art. 6 (1) f GDPR). Legitimate interests: Interest in a user-friendly presentation. Data is transmitted: to the data processor Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This may also mean a transfer of personal data to a country outside the European Union. The data is transferred to the USA on the basis of Art. 45 GDPR in conjunction with the European Commission's adequacy decision C(2023) 4745, since the data recipient has committed to comply with the data processing principles of the Data Privacy Framework (DPF).
Google Forms (Free)
Processed data categories: technical connection data of the server access (IP address, date, time, requested page, browser information)data for creating usage statisticsdata about the use of the website and the logging of clicks on individual elements. Purpose of processing: Delivery and provision of the website. The legal basis for processing: Your consent according to Art. 6 (1) a GDPR. Data is transmitted: to the data controller Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The legal basis for the data transfer to Google Ireland Limited is Your consent according to Art. 6 (1) a GDPR. This may also mean a transfer of personal data to a country outside the European Union. The data is transferred to the USA on the basis of Art. 45 GDPR in conjunction with the European Commission's adequacy decision C(2023) 4745, since the data recipient has committed to comply with the data processing principles of the Data Privacy Framework (DPF). The privacy policy of Google Ireland Limited: https://business.safety.google/privacy.
Spotify
When accessing some sub-services of our website, additional personal services are processed. Processed data categories: technical connection data of the server access (IP address, date, time, requested page, browser information)data for creating usage statistics. Purpose of processing: Delivery of content provided by third parties and transmission of audio content. The legal basis for processing: Your consent according to Art. 6 (1) a GDPR. Data is transmitted: as joint controllers for Spotify AB, Regeringsgatan 19, SE-111 53 Stockholm, Sweden.
YouTube
When accessing some sub-services of our website, additional personal services are processed. Processed data categories: technical connection data of the server access (IP address, date, time, requested page, browser information)data for creating usage statistics. Purpose of processing: Delivery of content provided by third parties, Selection of online advertising on other platforms, which are automatically selected using real-time bidding based on user behavior and transmission and display of video content. The legal basis for processing: Your consent according to Art. 6 (1) a GDPR. Data is transmitted: as joint controllers for Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This may also mean a transfer of personal data to a country outside the European Union. The data is transferred to the USA on the basis of Art. 45 GDPR in conjunction with the European Commission's adequacy decision C(2023) 4745, since the data recipient has committed to comply with the data processing principles of the Data Privacy Framework (DPF).
Contact Form
You can contact us by using a contact form provided on our website. After submission of the contact form, the controller will process the personal data you have provided for the purpose of handling your request on the basis of your consent which you have given by submitting the form according to Art. 6 (1) (a) GDPR, until revocation. You have no legal or contractual obligation to provide personal data. If you do not provide such data, you are simply not able to submit and we are not able to process your request.
Registration Form
You can register on our website. After you have registered, we will process the data provided in the registration form for the performance of the contract based on the contract concluded with us with your registration according to Art. 6 (1) (b) GDPR. You have no legal or contractual obligation to provide personal data. You simply cannot register for the service if you do not provide such data. >We do not transfer your job application data to third parties.
Application Form
You can also apply for a job on our website. We will process the personal data provided in the application form in order to manage your application based on a pre-contractual relationship according to Art. 6 (1) (b) GDPR until further notice, and for a duration of not more than 6 months after completion of the application procedure. If you explicitly want us to retain the application documents you have submitted, we will keep your records for not more than 18 months based on your consent according to Art. 6 Abs. 1 lit. a GDPR. You have no legal or contractual obligation to provide personal data. If you do not provide such data, we are simply not able to manage your application. >We do not transfer your job application data to third parties.
Comments Form
You can also apply for a job on our website. We will proc
By commenting our products, postings, photographs or videos we will process your personal data for the purpose of imaging your comments on our website and internal documentation of the legal basis of the contract concluded according to Art. 6 (1) (b) GDPR (gratuitous hosting contract to image your commentation on our website). We will publish your name and comment on our website and store your personal data until deletion of your comment.
Right to object
You have the right to object to processing if your personal data are processed based on legitimate interests. We will then cease the processing carried out on this basis, unless there are compelling and legitimate reasons for us to do so. You have the right to object to the processing of your personal data for the purpose of direct marketing. In this case, we will cease the processing of your personal data for the purpose of direct mail. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Right to withdraw
You have the right to withdraw your consent at any time by changing the settings at Privacy settings. If you have given your consent to receipt of advertising by email, you may withdraw your consent by clicking the unsubscribe link. In this case, we will cease the processing operations, unless there is any other legal basis. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Other rights
You have the right to access to, rectification, erasure and restriction of processing of personal data. You have also the right to data portability if the processing of your personal data is based on your consent or on a contract concluded with you. You have also the right to lodge a complaint with the supervisory authority. If you need more information on the supervisory authorities in the European Union, click here.
Other processing
A range of data processing takes place when you express interest in our products and contact our sales department or when a customer relationship exists.
Booking appointments for product demos and webinars
We use the HubSpot CRM service provided by HubSpot Ireland Limited (One Sir John Rogerson's Quay, Dublin 2, Ireland) to schedule appointments for online meetings for product demos or product webinars. This involves the processing of data such as your name, your contact details (e.g. email address, telephone number) and the content of our correspondence.
This data is processed on the basis of Art. 6 (1) lit. b GDPR, as the provision and execution of the webinar is part of the agreement with you.
Customer support with Hubspot CRM
We use the HubSpot CRM service provided by HubSpot Ireland Limited (One Sir John Rogerson's Quay, Dublin 2, Ireland) to manage our customer relationships and optimise our customer support. HubSpot CRM enables us to process enquiries efficiently, store contact information centrally and coordinate communication with you. This involves processing data such as your name, contact details (e.g. email address, telephone number) and the content of our correspondence.
The processing is carried out on the basis of Art. 6 (1) lit. b GDPR, as it is necessary for the fulfilment of the agreement with you or for the implementation of pre-contractual measures. In cases where the processing is not directly related to a contractual relationship, we rely on our legitimate interest pursuant to Art. 6 (1) lit. f GDPR to ensure efficient and structured customer service.
HubSpot also processes some of the data on servers outside the EU, in particular in the USA. HubSpot is certified under the EU-U.S. Data Privacy Framework and thus guarantees an adequate level of data protection.
Offers, orders, invoicing, accounting
In the context of requests for quotations, orders for our products, invoicing and accounting, personal data, in particular of contact persons at customer companies, is processed in some cases. This generally includes names and contact details as well as the content of correspondence.
This data is stored for seven years after the end of the respective calendar year following statutory retention obligations pursuant to Art. 6 (1) c GDPR.
Conducting online meetings with Microsoft Teams
We use Microsoft Teams, provided by Microsoft Ireland Operations Limited (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland), to conduct video conferences. During use, data such as your name, email address, profile picture (if stored), shared content, your video and audio data, and chat messages may be processed. If meetings are recorded, this also includes video and audio recordings and shared content. In addition, transcripts and summaries may be created using AI functions.
Processing is carried out on the basis of Art. 6 (1) lit. b GDPR, provided that the use of Microsoft Teams is necessary for the performance of a contract or for the implementation of pre-contractual measures. In all other cases, processing is carried out on the basis of our legitimate interest pursuant to Art. 6 (1) lit. f GDPR in order to ensure efficient and flexible communication and documentation. Participation in recorded meetings will of course only take place with your prior consent.
Microsoft stores the data on servers within the EU. In certain cases, data may be transferred to third countries, in particular to the USA. Microsoft ensures an adequate level of data protection through certifications under the EU-U.S. Data Privacy Framework.
Processing of job applications
As part of your application, we process personal data for the purpose of selecting applicants. This includes general contact information (name, address, telephone number, etc.), any references or proof of qualifications, and notes from an interview. This is done on the legal basis of pre-contractual measures and is necessary for the processing purpose (Art. 6 (1) b GDPR). Any access to a criminal record extract will be noted, but the information from the criminal record extract will not be stored.
The MARMIND Group consists of several companies. If the position has been advertised by another company in the MARMIND Group, your data will be transferred to that other company after a preliminary selection for further steps (e.g. trial day). If your application is not successful for the position currently advertised, but another, possibly more suitable position is available in another company of the MARMIND Group, MARMIND will forward your application data to the other company of the MARMIND Group on the legal basis of the legitimate interest in selecting the best possible job applicants.
After the selection process has been completed, we will retain your data for a further six months on the legal basis of our legitimate interest in asserting or defending legal claims. Your application will only be retained for a longer period of up to three years with your express consent. In this case, we will ask you for your written consent to this retention, which you can revoke at any time in writing, including by email.