PRIVACY POLICY

The following information provides an overview of what happens to your personal data when you visit this website. Personal data is all data with which you can be personally identified.

The person responsible for this website is

AuthoriseMe GmbH
Austraße 34
35745 Herborn
Germany

Phone: +49 2772 57 59 100
Email: info(at)authoriseme.eu

Managing Director:
Raffael A. Fruscio

Contact details of the data protection officer (Art. 13 para. 1 lit. b) GDPR)

We have appointed a data protection officer. You can reach him at
data.de(at)raan-group.com

How do we collect your data and what do we use it for?

Your data is collected when you provide it to us, e.g. when you send us an e-mail or commission our services.

All data transmitted to us, including all resulting personal data (e.g. name, e-mail address, etc.), will be stored and processed by us for the purpose of processing your enquiry or providing our services. If you do not provide us with this data, we will not be able to process your enquiry or provide our services.

This data is processed on the basis of Art. 6 para. 1 lit. b or c GDPR if your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR), if this has been requested. Consent can be revoked at any time.

Further data is automatically collected by our IT systems when you visit the website. This is primarily technical data such as the Internet browser used, operating system or time of the page view, etc. This data is required to ensure that the website is displayed correctly. If we cannot collect this data, we will not be able to display the website. This data is collected on the basis of Art. 6 para. 1 lit. f GDPR.

Data processing within the Raan Group

AuthoriseMe GmbH is part of the Raan Group. The companies within the group work closely together in terms of internal organisation and sales.

Specialised companies or divisions within our Group perform certain data processing tasks centrally for the companies affiliated with the Group. In addition, certain data processing operations are carried out in centralised IT systems. If a contract exists between you or your company and one or more companies in our group, your data may be processed centrally by a company in the group or jointly by the companies, for example for the central administration of customer data, for telephone customer service, for contract processing, for billing purposes, as well as for collection and disbursement or for joint mail processing.

To guarantee your rights and in compliance with the provisions of the EU General Data Protection Regulation (GDPR), we have concluded an agreement that sets out rules on the processing of your personal data. As joint controllers (in accordance with Art. 26 GDPR), we are jointly responsible for the processing of your data.

You can contact each company involved individually with regard to the processing of your data and assert your rights.

Further information on data protection and the handling of personal data can be found in the data protection notices of the respective affiliated companies.

Storage duration

Your data will be stored until the purpose for data storage no longer applies, you revoke your consent to storage or you request us to delete it. Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

What rights do you have?

On the basis of Articles 15 – 20 GDPR, you have the following rights with regard to the processing of personal data:

  • You have the right to receive information free of charge at any time about the origin, recipient and purpose of the data stored about you (Art. 15 GDPR)
  • If incorrect personal data is processed, you have the right to rectification (Art. 16 GDPR).
  • If the legal requirements are met, you can request the erasure or restriction of processing and object to processing (Art. 17, 18 and 21 GDPR).
  • If you have provided the data and the data processing is carried out using an automated procedure, you have the right to data portability (Section 20 GDPR).
  • You also have the right to lodge a complaint with a supervisory authority.

Right to object to the collection of data in special cases and to direct marketing (Art. 21 GDPR)

If the data processing is carried out on the basis of Art. 6 para. 1 lit. e or f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this data protection information. If you lodge an objection, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defence of legal claims (objection pursuant to Art. 21 (1) GDPR).

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection pursuant to Art. 21 para. 2 GDPR).

Hosting

This website is hosted by an external service provider (hoster). The commissioning of this service is called order processing. The personal data collected on this website is stored on the hoster’s servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website. The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR). Our hoster will only process your data to the extent necessary to fulfil its performance obligations and follow our instructions with regard to this data. To this end, we have concluded the legally required contract with them for order processing.

We use the following hoster:
Mittwald CM Service GmbH & Co.KG

Cookies and external services

We use cookies and external services on our websites. Cookies are files that are stored on your end device. They are generally required to ensure smooth electronic communication. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of our website may be restricted.

Borlabs Cookie

In addition to the technically necessary cookies, we also use cookies and external services to optimise our website and our offers.

To do this, we need your consent, which we obtain and store with the help of Borlabs technology in accordance with the legal requirements. When you access our website, a cookie from the provider Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, is therefore stored in your browser, in which the consent you have given or the revocation of consent is stored.

Once consent has been given, it can be revoked at any time. The data collected will be stored until you ask us to delete it, or you delete the Borlabs cookie yourself, or the purpose for data processing no longer applies. You can make changes at any time by clicking on the button left sign.

Details on the data processing of Borlabs Cookie can be found at: https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/

External services and analysis tools

When you visit our website, your user behaviour may be statistically evaluated. This is done using analysis programmes.

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyse the behaviour of website visitors. The website operator receives various usage data, such as page views, length of visit, operating systems used and origin of the user. This data is summarised in a user ID and assigned to the respective end device of the website visitor.

We can also use Google Analytics to record your mouse and scroll movements and clicks, among other things. Google Analytics also uses various modelling approaches to supplement the recorded data records and uses machine learning technologies for data analysis.

Google Analytics uses technologies that enable the recognition of the user for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is generally transmitted to a Google server in the USA and stored there.

The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Consent can be revoked at any time.

IP anonymisation

Google Analytics IP anonymisation is activated. As a result, your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator.

Google Tag Manager, Google Ads

We use various Google services. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create any user profiles, does not store any cookies and does not carry out any independent analyses. It is only used to manage and display the tools integrated via it. However, Google Tag Manager records your IP address, which may also be transmitted to Google’s parent company in the United States.

Google Ads enables us to display adverts in the Google search engine or on third-party websites when the user enters certain search terms in Google (keyword targeting). Furthermore, targeted adverts can be displayed based on the user data available at Google (e.g. location data and interests) (target group targeting). As the website operator, we can evaluate this data quantitatively by analysing, for example, which search terms led to the display of our advertisements and how many advertisements led to corresponding clicks.

The services are used on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the fast and uncomplicated integration and management of various tools on our website. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Google is certified in accordance with the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

Google AdSense

This website uses Google AdSense, a service for integrating adverts. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

With the help of Google Adsense, we can display targeted adverts from third-party companies on our website. The content of the advertisements is based on your interests, which Google determines based on your previous user behaviour. Furthermore, contextual information such as your location, the content of the website you have visited or the Google search terms you have entered are also taken into account when selecting the appropriate adverts. Google AdSense uses cookies, web beacons (invisible graphics) and comparable recognition technologies. This allows information such as visitor traffic on these pages to be analysed.

The information collected by Google Adsense about the use of this website (including your IP address) and the delivery of advertising formats is transferred to a Google server in the USA and stored there. This information may be passed on by Google to contractual partners of Google.

The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Consent can be revoked at any time.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified according to

The company certified by the DPF undertakes to comply with these data protection standards.

Further information on this can be obtained from the provider at the following link:
https://www.dataprivacyframework.gov/s/participant-search/participantdetail?contact=true&id=a2zt000000001L5AAI&status=Active

Adobe Fonts

This website uses web fonts from Adobe for the uniform display of certain fonts. The provider is Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe). When you call up this website, your browser loads the required fonts directly from Adobe in order to be able to display them correctly on your end device. In doing so, your browser establishes a connection to Adobe’s servers in the USA. This enables Adobe to know that your IP address has been used to access this website. According to Adobe, no cookies are stored when providing the fonts. The storage and analysis of the data is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the uniform presentation of the typeface on its website. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time. Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.adobe.com/de/privacy/eudatatransfers.html For more information on Adobe Fonts, please visit: https://www.adobe.com/de/privacy/policies/adobe-fonts.html

Google Fonts

This site uses so-called Google Fonts, which are provided by Google, for the standardised display of fonts. When you access a page, your browser loads the required fonts into your browser cache in order to display texts and fonts correctly. For this purpose, the browser you are using must connect to Google’s servers. This informs Google that this website has been accessed via your IP address. The use of Google Fonts is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the uniform presentation of the typeface on its website. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time. If your browser does not support Google Fonts, a standard font will be used by your computer. Further information on Google Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

Storage duration

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored by us for other purposes remains unaffected by this.

After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist if this is necessary to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). Storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.

You can find more details in Brevo’s privacy policy at: https://www.brevo.com/de/datenschutz-uebersicht/ and https://www.brevo.com/de/legal/privacypolicy/.

We do not carry out profiling or automated decision-making.

Status of the information: April 2025