IMPRINT & DATA PRIVACY

Imprint & data protection

Information according to § 5 TMG:

HatCount isa brand of

Aschenbach Advisors GmbH

82335 Berg

HRB: 140146

Contact:

eMail: info@hatcount.com

Tel: +49 (177) 8770903

TaxID:

Tax-ID. 117/121/00399

Photo credit:

All images, unless otherwise stated, are licensed by ©wix.

Website: created by Adeline Wehrhahn

Liability for Content

As a service provider, we are liable for our own content on these websites in accordance with Section 7 (1) of the German Telemedia Act (TMG). However, according to Sections 8 to 10 of the German Telemedia Act (TMG), we are not obligated as service providers to monitor transmitted or stored third-party information or to investigate circumstances that indicate illegal activity. Legal obligations to remove information or to block the use of information remain unaffected. However, liability in this regard is only possible at the time of knowledge about a specific violation of law. Upon knowledge of such violations, we will remove such content immediately.

Liability for Links

Our website contains links to external third-party websites over whose content we have no influence. Therefore, we cannot accept any liability for this external content. The respective provider or operator of the linked pages is always responsible for the content of the linked pages. The linked pages were reviewed for possible legal violations at the time of linking. Illegal content was not recognizable at the time of linking. However, permanent monitoring of the content of the linked pages is unreasonable without concrete evidence of a legal violation. Upon notification of any legal violations, we will remove such links immediately.

The content and works on these pages created by the site operators are subject to German copyright law. Reproduction, processing, distribution, and any type of exploitation outside the limits of copyright law require the written consent of the respective author or creator. Downloads and copies of this site are permitted for private, non-commercial use only. To the extent that the content on this site was not created by the operator, the copyrights of third parties are respected. In particular, third-party content is marked as such. Should you nevertheless become aware of a copyright infringement, please notify us accordingly. Upon notification of any violations, we will remove such content immediately.

Quellverweis: http://www.e-recht24.de

Data Protection

The operators of these websites take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy. Use of our website is generally possible without providing any personal data. Where personal data (such as name, address, or email addresses) is collected on our websites, this is always done on a voluntary basis, wherever possible. This data will not be passed on to third parties without your express consent. We point out that data transmission over the Internet (e.g., when communicating by email) may have security gaps. Complete protection of data against access by third parties is not possible.

Some of our websites use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies are designed to make our website more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are so-called "session cookies." They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser the next time you visit. You can set your browser to inform you when cookies are set, to only allow cookies in individual cases, to exclude cookies for certain cases or generally, and to activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.

Server-Log-Files

The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us.

This includes:

(1) Browser type and version

(2) Operating system used Referrer URL Hostname of the accessing computer Time of the server request. This data cannot be assigned to specific individuals. This data is not merged with other data sources. We reserve the right to subsequently review this data if we become aware of concrete indications of illegal use.

Contact form

If you send us inquiries via the contact form, your information from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing your inquiry and in case of follow-up questions. We will not share this data without your consent.

Google Analytics

This website uses features of the web analysis service Google Analytics. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses "cookies," which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website is usually transferred to a Google server in the USA and stored there.

IP anonymization

states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Browser Plugin

also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de

Objection to data collection

You can prevent Google Analytics from collecting your data by clicking on the following link. This will set an opt-out cookie that prevents your data from being collected on future visits to this website: Deactivate Google Analytics For more information on how Google Analytics handles user data, please see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de

Contract data processing

We have concluded a contract data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics. Comment function on this website. For the comment function on this page, in addition to your comment, information about the time of creation, your email address, and, if you do not post anonymously, the username you have chosen will be stored.

Storage of the IP address

Our comment function stores the IP addresses of users who post comments. Since we do not review comments on our site before they are published, we need this data to take action against the author in the event of legal violations such as insults or propaganda.

Integration of third-party services and content

It may happen that third-party content, such as videos from YouTube, maps from Google Maps, RSS feeds or graphics from other websites, is integrated into this online offering. This always assumes that the providers of this content (hereinafter referred to as "third-party providers") perceive the user's IP address. Without the IP address, they could not send the content to the respective user's browser. The IP address is therefore necessary for the display of this content. We endeavor to only use content whose respective providers use the IP address solely to deliver the content. However, we have no influence on whether the third-party providers store the IP address, e.g. for statistical purposes. As far as we are aware of this, we will inform users.

SSL encryption
This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the requests you send to us as the site operator. You can recognize an encrypted connection by the browser's address bar changing from "http://" to "https://" and by the lock symbol in your browser's address bar. When SSL encryption is enabled, the data you transmit to us cannot be read by third parties.

Right to information, deletion, blocking data.

You can contact us at any time at the address provided in the legal notice for this purpose and for any other questions regarding personal data.

Objection to advertising emails

The use of contact data published in accordance with the imprint obligation to send unsolicited advertising and information materials is hereby prohibited. The operators of the website expressly reserve the right to take legal action in the event of unsolicited advertising, for example, through spam emails.

Quelle: e-recht24.de

WHO WE ARE

The data controller responsible in accordance with the purposes of the General Data Protection Regulation (GDPR) of the European Union and other data protection regulations is:

HatCount

Hatcount is a brand of

Aschenbach Advisors GmbH

82335 Berg

HRB: 140146

CONTACT:

HatCount

eMail: info@hatcount.com

Tel: +49 (177) 8770903

TaxID:

Tax-Id. 117/121/00399

HOW TO CONTACT THE DATA PROTECTION OFFICER

The designated data protection officer is:

DataCo GmbH Nymphenburger Str. 86 80636 Munich Germany
+49 89 7400 45840 www.dataguard.de

GENERAL INFORMATION ON DATA PROCESSING

On this page, we provide you with information regarding the processing of your personal data on our website. How we collect and use your personal data will depend on how you interact with us or the services you use. We only collect, use or share your personal data where we have a legitimate purpose and a legal basis for doing so.

What do we mean by ‘legal basis’?

Consent (Art. 6(1) (a) GDPR)– You have given us your consent to process your personal data for the specific purpose we have explained to you. You have the right to withdraw your consent at any time. For further information on how to withdraw consent, please see the ‘Exercising your rights’ subsections in the subsequent sections of this Privacy Policy.

Contract (Art 6(1) (b) GDPR) – We need to use your data to fulfil a contract you have with us. Alternatively, it’s necessary to use your data because we have asked you to, or you have taken yourself, specific steps before entering that contract.

Legal Obligation (Art 6(1) (c) GDPR) – We need to use you’re your data to comply with the law.

Vital Interests (Art 6(1) (d) GDPR) – Processing your data is necessary to protect your vital interests or of another person. For example, to prevent you from serious physical harm.

Public Task (Art 6(1) (e) GDPR) – Using your data is necessary for the performance of a task carried out in the public interest, or because it is covered by a task set out in law, for example, for a statutory function.

Legitimate Interests (Art 6(1) (f) GDPR) – Processing your data is necessary to support a legitimate interest we or another party has, only where this is not outweighed by your own interests.

Please note that if your data is processed to fulfill a contract or legal obligation and you do not provide the requested data, we may not be able to provide you with our website services.

DATA SHARING AND INTERNATIONAL TRANSFERS

As explained throughout this Privacy Policy, we use various service providers to help us deliver our services and keep your data secure. When we use these service providers, it is necessary for us to share your personal data with them. We have agreements in place with all our service providers that we share your data with that oblige them to protect your data.

Where your personal data is shared outside the EU, we ensure that your personal data is given an equivalent level of protection, either because the jurisdiction to which your data is transferred has an ‘adequate’ data protection standard according to the European Commission, or by using another safeguard such as an enhanced contractual agreement, i.e. Standard Contractual Clauses adopted by the European Commission (SCCs). For example, where we use US service providers, we either rely on SCCs or the EU-US Data Protection Framework, depending on the specific provider. You can request a copy of SCCs we have concluded with our service providers by sending an email to the email address provided in this Privacy Policy.

YOUR RIGHTS

When your personal data is processed, you are a data subject within the meaning of the GDPR and have the following rights:

1. Right of access (Art. 15 GDPR)

You may request the data controller to confirm whether your personal data is processed by them. If such processing occurs, you can request the following information from the data controller:

Purposes of processing
Categories of personal data being processed.
Recipients or categories of recipients to whom the personal data have been or will be disclosed.
Planned storage period or the criteria for determining this period
The existence of the rights of rectification, erasure or restriction or opposition.
The existence of the right to lodge a complaint with a supervisory authority.
If applicable, origin of the data (if collected from a third party).
If applicable, existence of automated decision-making including profiling with meaningful information
about the logic involved, the scope and the effects to be expected.
If applicable, transfer of personal data to a third country or international organization.

2. Right to rectification (Art. 16 GDPR)

You have a right to rectification and/or modification of the data, if your processed personal data is incorrect or incomplete. The data controller must correct the data without delay.

3. Right to the restriction of processing (Art. 18 GDPR)

You may request the restriction of the processing of your personal data under the following conditions:

If you challenge the accuracy of your personal data for a period that enables the data controller to verify the accuracy of your personal data.
The processing is unlawful, and you oppose the erasure of the personal data and instead request the restriction of their use instead.
The data controller or its representative no longer need the personal data for the purpose of processing, but you need it to assert, exercise or defend legal claims; or
If you have objected to the processing pursuant and it is not yet certain whether the

legitimate interests of the data controller override your interests.

4. Right to erasure ("Right to be forgotten") (Art. 17 GDPR)

If you request from the data controller to delete your personal data without undue delay, they are required to do so immediately if one of the following applies:

Personal data concerning you is no longer necessary for the purposes for which they were collected or processed.
You withdraw your consent on which the processing is based pursuant to and where there is no other legal basis for processing the data.
You object to the processing of the data and there are no longer overriding legitimate grounds for processing, or you object pursuant to Art. 21 (2) GDPR.
Your personal data has been processed unlawfully.
The personal data must be deleted to comply with a legal obligation in Union law or Member State law to which the data controller is subject.
Your personal data was collected in relation to information society services offered pursuant to Art. 8 GDPR. The right to deletion does not exist if the processing is necessary
to exercise the right to freedom of speech and information:
to fulfil a legal obligation required by the law of the Union or Member States to which

the data controller is subject

or to perform a task of public interest or in the exercise of public authority delegated to the representative.
for reasons of public interest in the field of public health.
for archival purposes of public interest, scientific or historical research purposes or for

statistical purposes.

to enforce, exercise or defend legal claims.

5. Right to data portability

You have the right to receive your personal data given to the data controller in a structured and machinereadable format. In addition, you have the right to transfer this data to another person without hindrance by the data controller who was initially given the data.

6. Right to object

For reasons that arise from your particular situation, you have, at any time, the right to object to the processing of your personal data pursuant to Art. 6 (1) (e) or 6 (1) (f) GDPR; this also applies to profiling based on these provisions.

If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data in regard to such advertising; this also applies to profiling associated with direct marketing.

7. Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes the GDPR.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR.

A list, of the locally competent supervisory authorities in Germany can be found on the website of the Federal Commissioner for Data Protection at the following link: https://www.bfdi.bund.de/EN/Service/Anschriften/Laender/Laender-node.html

APPLICATION VIA EMAIL

1. Description and scope of data processing

You can send us your application via email. We process your email address and the information you provide in the email.

After sending your application, you will receive confirmation of receipt of your application documents from us by email.

2. Purpose of data processing

The processing of personal data from the application form serves us solely to process your application.

3. Legal basis for data processing

The legal basis for the processing of the data is the initiation of the contractual relationship at the request of the data subject, Art. 6 (1) (b) Alt. 1 GDPR and § 26 (1) BDSG (Federal Act of Data Protection).

4. Duration of storage

After completion of the application procedure, the data will be stored for up to 6 months. Your data will be deleted after 6 months at the latest. In the event of a legal obligation, the data will be stored within the framework of the applicable provisions.

USE OF CORPORATE PROFILES IN PROFESSIONALLY ORIENTED NETWORKS

1. Scope of data processing

We use corporate profiles on professionally oriented networks to showcase the products offered by Hatcount. They provide information about the company, insights into projects, and articles on relevant industry topics and trends.
We do not have any information on the processing of your personal data by the companies jointly responsible for the corporate profile. Further information can be found in the privacy policy of:

LinkedIn: https://www.linkedin.com/legal/privacy-policy
XING: https://privacy.xing.com/en

If you carry out an action on our company profile (e.g. comments, contributions, likes etc.), you may make personal data (e.g. clear name or photo of your user profile) public.

2. Legal basis for data processing

The legal basis for the processing of personal data for the purpose of communication with customers and interested parties is Art. 6 (1) (f) GDPR. Our legitimate interest is to answer your request optimally or to be able to provide the requested information. If the aim of contacting you is to conclude a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR.

3. Purpose of the data processing

Our corporate web profile serves to inform users about our services. Every user is free to publish personal data.

4. Duration of storage

The data generated on the company profile are not stored in our own systems.

5. Exercising your rights

You can object at any time to the processing of your personal data that we collect within the framework of your use of our corporate web profiles and assert your rights as a data subject mentioned the "Your rights" section of this privacy policy. Please send us an informal email to the email address stated in this privacy policy.

You can find further information on objection and removal options here: LinkedIn: https://www.linkedin.com/legal/privacy-policy

HOSTING

The website is hosted on servers of a service provider commissioned by us. Our service provider is:

Host Europe GmbH Hansestraße 111 51149 Cologne Germany

For further information on the processing of personal data by Lima City please see:

https://www.hosteurope.de/AGB/Datenschutzerklaerung/

The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The stored information is:

This data will not be merged with other data sources. The data is collected on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of his website -and server log files are therefore recorded.

The server of the website is geographically located in Germany.

USE OF VISITOR MANAGEMENT SOFTWARE

1. Scope of the Processing of Personal Data
We use Vizito, a visitor management platform provided by Vizito BV, Hasseltweg 408, 3600 Genk, Belgium. The tool is used for managing and organizing visitor data to ensure efficient and secure visitor registration in our facilities.

2. Purpose of Data Processing
The purpose of data processing is to manage visitor traffic efficiently, meet security requirements, and ensure a professional visitor experience.

3. Legal Basis for Processing Personal Data
The processing of personal data by Vizito is based on our legitimate interest pursuant to Art. 6 (1) lit. f GDPR. This legitimate interest lies in the efficient organization and management of visitor data, compliance with legal security requirements, and the improvement of visitor management.

4. Duration of Storage
The personal data collected by Vizito is stored only as long as necessary for the organization and tracking of visits and as long as a legitimate interest in retaining this data exists. Once the purpose of data collection has been fulfilled or the legitimate interest ceases to exist, the data will be securely deleted or anonymized, unless legal retention requirements apply.

5. Exercising Your Rights
You can prevent the collection and processing of your personal data by Vizito by disabling the storage of third-party cookies on your computer, using the "Do Not Track" feature of a supporting browser, disabling script code execution in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
For more information about your rights and how Vizito processes personal data, please see Vizito's Privacy Policy.

PRIVACY NOTICE FOR OUR PROSPECTS AND CUSTOMERS

1.1 YOUR PERSONAL DATA PROCESSED BY US

In the context of the existing customer relationship and the initiation of a business relationship/contract, we process the following data about you:

Name
Surname
Salutation
Titles and academic degrees
Company Name
Position in the company
Business address
Bank details
TaxID
Customer number
Your email address,
Your mobile phone number
Your landline number
Your fax number
All personal data provided to us in the context of customer communication
Creditworthiness data

HatCount collects data from prospects and customers in the following ways:

Requests Hatcount employees, e.g. by e-mail, LinkedIn messages or other communication channels.
Enquiries at trade fairs or other events at which data is passed on to Hatcount employees with the aim of contacting them.
research on prospects in business directories, contact details on websites or professional networks.
Self-booking of an appointment by a prospect.
Consultation of personal data from the person himself after the conclusion of a

contract with HatCount or receipt of personal data by an employee of the client

company. This may also affect employees of service providers of the client

company.

1.2 PURPOSES OF DATA PROCESSING

As part of the existing customer relationship and the initiation of a contract, your personal data will be processed for the following purposes:

To process your request as a prospect. For this purpose, we use your contact details to be able to answer your request.
To prepare and carry out pre-contractual measures – this includes, for example, the preparation and sending of an individual offer or individual agreement and transmission of contractual terms with the aim of concluding the contract.
To add your contact details to our customer and contact database.
Contacting us (e-mail, phone)

HatCount

Adeline Wehrhahn

c/o aschenbach&Partner

Stollbergstrasse 22

80539 München

CONTACT:

HatCount

eMail: info@hatcount.com

Tel: +49 (177) 8770903

Steuernummer:

Steuer-IdNr. 51 465 027 931

Establishment, implementation and termination of the contractual relationship
Customer management and customer support – in particular the processing of

customer enquiries

To provide you with the best possible information about our products and services. This also includes sending (direct) advertising by e-mail or telephone.
In order to provide you as our customer with the best possible service. This includes, in particular, communicating with you by e-mail, mobile phone, landline number or fax.
To ensure smooth billing of the services provided.
To comply with our legal obligations. This includes, for example, the transmission

of your personal data to the tax office.

For the purpose of carrying out marketing initiatives such as: newsletters, product

updates, invitations to events and webinars

To comply with post-contractual measures.
To assert, exercise or defend legal claims.
For the purpose of carrying out credit checks
To carry out product test phases
To inquire about your satisfaction with our products and services

1.3 LEGAL BASIS FOR DATA PROCESSING

Processing of your personal data on the basis of consent
Insofar as we obtain your consent for the processing of your personal data, the processing of your personal data is carried out on the basis of Art. 6 para. 1 sentence 1 lit. a GDPR in conjunction with Art. 5, 7 GDPR.

Processing for the purpose of performing the contract with you
Insofar as we process your personal data for the purpose of fulfilling the contract, Art. 6 (1) sentence 1 (b) GDPR serves as our legal basis. This also applies to processing operations that are necessary for the implementation of pre- and post-contractual measures.

Processing to comply with a legal obligation
Insofar as the processing of your personal data is necessary for the fulfilment of a legal obligation to which our company is subject, Art. 6 para. 1 sentence 1 lit. c GDPR serves as our legal basis. Our legal obligation to process data arises, for example, from retention obligations under tax and/or commercial law.

Processing on the basis of legitimate interest
The legal basis for the purpose of direct marketing may constitute Art. 6 (1) sentence 1 lit. f GDPR in the case of our legitimate interests, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail. The legitimate interests pursued by us in this regard - in addition to the purposes listed under 1.2 - include:

To provide you with the best possible information about our products, offers and services through direct marketing;
In communicating with you, in particular to be able to respond to your inquiries by email, telephone and/or fax;
To be able to conduct due diligence with our potential business partner
We carry out credit checks on our potential business customers. Our legitimate interest is to avoid payment defaults.
To receive customer feedback to improve the customer experience, improve our products and services

The legal basis for processing activities in connection with the assertion, exercise or defence of legal claims is also our legitimate interest in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

2. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF THE PERSONAL DATA

As part of the processing of your personal data, we may pass on the personal data concerning you to the following recipients. We will only transfer your personal data to external recipients if you have given your consent or if this is permitted by law.

External recipients of your personal data are, in particular:

Project stakeholders
Processor
Authorities
Court
Attorney
Tax advisor
Auditor
Postal Service Providers
IT-Administrator
Affiliated companies
Potential business partners in the context of a (future) due diligence review
Billing partners

Your personal data will be transferred to the following service providers:

HatCount – xxx Munich, Germany
Microsoft Ireland Operations Limited - One Microsoft Place, South County

Business Park, Leopardstown, Dublin 18 D18 P521, Irland

Various processors, depending on the project
In addition, your personal data may be transferred to the following service providers located In order to make the third-country transfer as data-friendly as possible, standard contractual clauses in accordance with Art. 46 (2) (c) GDPR have been concluded with providers in unsafe third countries.

3. DURATION OF STORAGE OF PERSONAL DATA

We do not store your personal data for longer than is necessary for the purpose for which it was collected. This means that data in our systems is destroyed or deleted as soon as it is no longer needed. We will take reasonable steps to ensure that your personal data is only processed under the following conditions:

For the duration that the data will be used to provide you with a service
As required by applicable law, contract or in light of our legal obligations
Only for as long as is necessary for the purpose for which the data was collected,

or longer if required by contract, applicable law, using appropriate safeguards.

A requirement may exist in particular if the data is still needed to fulfil contractual services, to be able to examine and grant or defend warranty and, if applicable, guarantee claims. If the data is no longer required for the fulfilment of contractual or legal obligations, it will be deleted on a regular basis, unless its - temporary - retention is still necessary, in particular for the fulfilment of statutory retention periods of up to ten years (e.g. from the Commercial Code, the Tax Code and the Money Laundering Act). In the case of statutory retention obligations, deletion is only possible after the expiry of the respective retention obligation.

4. OBLIGATION TO PROVIDE THE DATA

In order to (planned) conclude and execute the contract with you, you must provide the personal data that is necessary for the establishment and performance of the contractual relationship and the fulfilment of the associated contractual obligations or that we are legally obliged to collect (see in particular the standards listed under "III.3."). This obligation also arises from the law, e.g. § 14 UstG. Without this data, we will generally not be able to conclude.

5. IP anonymization
This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the requests you send to us as the site operator. You can recognize an encrypted connection by the browser's address bar changing from "http://" to "https://" and by the lock symbol in your browser's address bar. When SSL encryption is enabled, the data you transmit to us cannot be read by third parties.
Right to information, deletion, blocking data.

BACK