Privacy policy

Overview

The protection of personal data and the responsible handling of information that you entrust to us is an important and special concern of ours. Cambrion GmbH (Cambrion) processes personal data only in accordance with the statutory regulations. These are in particular the EU General Data Protection Regulation (DSGVO) and the Federal Data Protection Act (BDSG).

The following notes provide a simple overview of what happens to your personal data when

  • When you visit our website at https://www.cambrion.ai (Section 2),

  • when you register for our newsletter or contact us through the contact form (Sections 2.2 and 2.3),

  • when you explore our company page on a social network (Section 11),

  • when we enter into a contract (Section 12), and

  • when you apply for a position with us (Section 13).


In addition, this privacy policy provides detailed information regarding the recipients of personal data within the EEA (as stated in Section 14), in third countries (as stated in Section 14), the deletion of your personal data and retention periods (as stated in Section 16), your rights as a data subject (as stated in Section 16), and automated decision-making (as stated in Section 18).

Personal data refers to any information that can be used to personally identify you.

1. Responsible Person and Data Protection Officer

Data Protection Officer:

Cambrion GmbH
Thierschstr. 20
80538 Munich
Germany

Registered office: Munich
Register court: Munich (HRB 295569)
Managing Directors: Dr. Daniel Tiarks, Lars Kornhoff, Daniel Gamber

Phone: +49 89 20003530

Email: hello@cambrion.ai

2. Data collection on our website

When you visit our website http://www.cambrion.ai, we process personal data to enable you to use it (usage data), as described in section 2.1. Additionally, we process personal data for newsletter delivery, web analysis, and other purposes as described in section 2.2 and onwards. Below, you will find information about the legal basis, purposes, and, if applicable, legitimate interests and the necessity of processing your personal data.

2.1 Data Processing to Enable Website Usage

We automatically collect and store information in server log files, which are files that your browser automatically sends to us. This includes:

  1. Browser type and version

  2. Operating system used

  3. Referring URL

  4. Hostname of the accessing computer

  5. Server request time

  6. IP address

We do not merge this data with other data sources. The collection of this data is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in providing and optimizing our website without technical errors. If you would like detailed information on the balancing of interests, please contact one of the addresses mentioned under section 1. The server log files must be recorded.

2.2 Newsletter and email advertising

If you would like to receive the newsletter offered on our website, we require a name and an email address from you, as well as information that allows us to verify that you are the owner of the provided email address and agree to receive the newsletter. No further data is collected, or only on a voluntary basis. We use this data exclusively to send the requested information and do not share it with third parties. You will receive a confirmation email with a confirmation link that you must click to subscribe to our newsletter or receive information about us. The legal basis for this is Art. 6 para. 1 lit. a GDPR.

In addition, we will include you in our mailing list to send you advertising for our own similar goods or services by email if you have not previously objected to the processing of your email address when purchasing a product or service from us. You can unsubscribe from the newsletter at any time and object to email advertising at any time. You will find an unsubscribe option in every newsletter and other promotional email we send you.

2.3 Contact inquiries and form

If you send us inquiries via contact form, email, or phone, your information from the inquiry form, including the contact details you provide, will be stored with us for the purpose of processing the inquiry and for any follow-up questions. The legal basis is either the fulfillment of a contractual obligation or our legitimate interest in providing a contact form (Art. 6 para. 1 lit. b GDPR or Art. 6 para. 1 lit. f GDPR). You are not obliged to contact us through the contact form or provide personal data. If you do not provide your personal data, we may not be able to process your inquiry. Otherwise, there will be no consequences for you. If you would like detailed information on the balancing of interests, please contact one of the addresses listed under section 1.

2.4 Cookies and web analytics

Our website utilizes what we call "cookies". These cookies are small text files that are stored on your computer, allowing us to save your data.

The majority of the cookies we use are known as "session cookies". They are stored after your visit to our website and are automatically deleted. However, there are other cookies that remain on your device until you delete them. These cookies enable us to recognize your browser when you revisit our site. Among these cookies are those essential for ensuring the technical functionality of the website. Our legitimate interest in providing our website serves as the legal basis for using these necessary cookies, in accordance with Art. 6 (1) (f) of the General Data Protection Regulation (GDPR).

Additional cookies may be used as part of web analysis. They can be combined with further information about your activities on our website and processed in pseudonymized usage profiles. This helps us analyze web traffic and improve our website to better meet the needs of users. We only use this information for statistical evaluations. The legal basis for the use of other cookies and web analysis is your consent according to Art. 6 para. 1 lit. a GDPR. Your consent also covers any data transfers to the USA that may be associated with the use of cookies (see also section 14).

When you visit our website, you will be informed about the use of cookies for analytical purposes and your consent will be obtained by displaying a corresponding banner. This also includes a reference to this privacy policy. Only when you agree to the use of all cookies we employ, will we set other non-essential cookies. Before you give your consent, only technically necessary cookies will be set.

You have the power to revoke your consent, either in part or entirely, by clicking the "Privacy Settings" button in the footer of our website. In addition to our cookie banner, you can limit or disable the use of cookies by configuring your browser settings accordingly. To protect your privacy, you can also install browser plugins like AdBlock, Ghostery, or NoScript, which allow you to prevent web analytics (please refer to the privacy policies of the respective plugin providers). Furthermore, certain web analytics providers are members of industry associations, where you can centrally prevent usage-based online advertising and web analytics by the respective members. Below, you will find the websites of these associations for convenient cross-provider prevention of web analytics. This way, you can also prevent the creation of pseudonymous usage profiles.

If you choose not to give your consent for the use of cookies or delete cookies from your device, it may affect your ability to use the website or certain functionalities. For detailed information about the specific cookies used on our website, please refer to our cookie banner under "Settings" and anytime you click on the wrench icon for "Privacy Settings".

3. Google Analytics

When you grant us your consent through the cookie banner, we utilize Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google utilizes cookies to collect information about how users interact with our website. Typically, this information is transmitted to and stored on Google servers in the United States.

On our behalf, Google will use this information to evaluate the usage of our website, compile reports on website activity, and provide us with other services related to website usage and internet activity. Pseudonymous usage profiles can be created from the processed data.

We only utilize Google Analytics with IP anonymization enabled. This means that Google will truncate the IP address of users within member states of the European Union or other contracting states of the Agreement on the European Economic Area. In exceptional cases, the full IP address may be transmitted to a Google server in the United States and truncated there (for data transfers to the United States, see also section 14).

The IP address transmitted by the user's browser is not merged with other data from Google.

To prevent processing by Google, see section 4, especially the information in the table. Users can prevent the installation of cookies by adjusting their browser software accordingly: http://tools.google.com/dlpage/gaoptout?hl=en. Alternatively, you can revoke your consent by clicking on the "Revoke Google Analytics" button. In this case, we will set a technically necessary cookie that recognizes your withdrawal of consent when visiting our website.

Revoke Google Analytics

The legal basis for this processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR.

For further information on data usage by Google, as well as settings and options to object, please refer to Google's privacy policy (https://policies.google.com/privacy) and the settings for personalized advertising by Google (https://adssettings.google.com/authenticated).

The personal data of users will be deleted or anonymized after 14 months.

4. Google Tag Manager

When using the website, the Google Tag Manager may be used to manage website tags. A tag is a JavaScript snippet that is used to send information from a website to recipients, especially in the context of web tracking. The Google Tag Manager tool itself does not collect personally identifiable information. The tool triggers other tags that can collect data (such as the Google Analytics tag). Google Tag Manager does not access this data. If deactivation has been done at the domain or cookie level, it remains effective for all tracking tags contained in Google Tag Manager. This allows for comprehensive prevention of tracking according to your preference.

5. Google Ads, Google General

If you consent to the placement of "other cookies," we utilize Google Ads Conversion services from Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland ("Google") on our website. Google Remarketing allows us to display advertisements for our services on websites within the Google advertising network. These ads are delivered by Google through so-called "ad servers." For this purpose, cookies are set, which enable Google to measure the success of advertising campaigns by certain parameters such as the successful display or clicks of users, and analyze the interaction of visitors on our website to determine which of our services may be of interest to you. If you access our website through a Google ad or certain services of Google or websites within the Google advertising network, Google saves a cookie on your device. These cookies allow Google to recognize your internet browser. If a website visitor visits certain websites of an ads company client and the cookie stored on their computer has not expired, Google and the company client can recognize that the website visitor clicked on the ad and was redirected to this page. Each ads company client is assigned a different cookie. Therefore, cookies cannot be tracked across the websites of different ads company clients. We do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can identify which of the advertising measures used are particularly effective; however, we cannot identify users based on this information. By integrating Ads Conversion, Google receives the information that you have accessed the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or have not logged in, there is a possibility that Google will obtain and store your IP address.

Deletion - Google Ads cookies typically expire after 30 days and are not intended to personally identify you.

Withdraw Consent - Most browsers provide instructions on how to prevent the acceptance of new cookies, how to be notified when you receive a new cookie, and how to disable existing cookies. However, please note that without cookies, you may not be able to fully utilize all the features of the services. You can prevent Google from collecting and transmitting data about your use of the website (including your IP address) and processing this data by downloading and installing the browser plugin available at the following link. Alternatively, you can prevent Google from collecting data by visiting https://tools.google.com/dlpage/gaoptout. For more information on privacy at Google, please visit: https://www.google.com/policies/privacy/ (US) and https://policies.google.com/privacy (EU).

6. HubSpot

We utilize HubSpot for marketing activities on our website. HubSpot is an American company with a branch in Germany, located at Am Postbahnhof 17, 10243 Berlin. Our use of HubSpot's integrated software solution includes various marketing processes such as lead generation, qualification, and management. This encompasses email marketing, which automates personalized mailings, as well as social media publishing and reporting, contact management including user segmentation and CRM, landing pages, and contact forms. Our contact forms allow visitors to learn more about our company, download content, and provide us with their contact information. This information, along with the content of our website, is stored on HubSpot servers in Europe. We use this information to engage with you. Before processing your data for the purposes mentioned in this section, we obtain your consent. You can revoke this consent at any time for the future in accordance with Art. 7 (3) of the GDPR. If you have granted us permission to contact you via email through a contact form, each email will contain an unsubscribe link.

We conduct success measurements of email content that we send to you through HubSpot in order to identify your reading habits based on email openings, opening times, and clicked links. This allows us to create and send you content that is tailored to your interests and useful. Your consent to data processing includes success measurement. The legal basis for data processing is Art. 6 (1) (a) of the GDPR. You can revoke your consent at any time with effect for the future. To do so, you can use the unsubscribe link in each email or contact us directly. Separate revocation of success measurement is unfortunately not possible; in this case, the consent to receive emails must be revoked entirely.

We also utilize HubSpot as our Content Management System and host our website on the HubSpot platform. This is because we believe in having a strong online presence and showcasing our company on a technically flawless and optimized website. As part of HubSpot's services, they work with Cloudflare to enhance the security of our website. Cloudflare utilizes necessary cookies to ensure the smooth functioning of our website.

HubSpot utilizes cookies to gather and store usage data in pseudonymous profiles, allowing us to provide personalized advertising based on your interests. Additionally, HubSpot analyzes the information collected on our behalf to generate reports on website visits and pages viewed. If you prefer not to have your data stored by HubSpot through cookies or have your browsing behavior recorded, you can disable the storage of cookies or delete existing cookies through your browser settings. More information on this can be found in section 2.4.

Your data is stored by HubSpot in Europe. However, HubSpot also utilizes sub-processors in the United States, including HubSpot Inc. While it is possible that these sub-processors may have access to data, particularly for support purposes, we strive to ensure that your data remains protected. When data is accessed from countries outside the European Economic Area, it constitutes international data transfers under the GDPR. The consent you provide also extends to the transfer of data to the United States (for more information on data transfers to the United States, please refer to section 14).

For more information on data processing by HubSpot, please visit the HubSpot website (https://www.hubspot.de/data-privacy/gdpr).

7. Google Fonts

Our website has an interface with Google Fonts provided by Google. However, we do not use "Google Fonts" for the consistent display of fonts. Through the interface, your IP address may be transmitted to Google's servers. Google Fonts also uses cookies. We only use Google Fonts with your consent in accordance with Art. 6 (1) (a) of the GDPR, which you can give us through the cookie banner.

For more information on Google Fonts, please visit https://developers.google.com/fonts/faq and Google's privacy policy.

8. Google Maps

On the "Contact" page with our contact form, you'll find a plugin that displays a Google Maps map. Google Maps is a web service that visually presents interactive (land) maps to showcase geographical information. By using this service, our location is shown to you, making it easier to find and navigate to us.

To do this, a connection is established between your browser and Google's servers, just as if you were visiting the Google search engine website. If you're logged in to Google, your data is directly associated with your account. If you don't want this association with your Google profile, you'll need to log out before activating the button. Google is responsible for the data processing. There is no tracking by Google on our website.

Google Maps uses cookies. We only use Google Maps with your consent in accordance with Article 6(1)(a) of the GDPR, which you can give us through the cookie banner. If you do not agree to the future transmission of your data to Google in the context of using Google Maps, you also have the option to completely deactivate the Google Maps web service by disabling the JavaScript application in your browser. Google Maps, and therefore the map display on this website, cannot be used in that case.

For more information on the use of Google Maps, please refer to the Google Maps terms of use. For information on privacy at Google, please consult Google's privacy policy.

9. Dealfront

We use the technologies of Dealfront (Liidio Oy as part of Dealfront Group GmbH) to analyze visitor behavior. In this process, the IP address of a visitor is processed.

This processing has the purpose of helping us understand which businesses (B2B) are visiting our site, by enriching IPs with associated information such as the company name or industry code. To do this, at the beginning of the visitor’s session, their IP address and corresponding session data is matched against a large whitelist of known companies.

To increase data protection of our visitors we have turned on “IP address anonymisation”, so that only shortened values instead of the actual IP addresses will be stored. If the feature is on, we will not store the actual IP address anywhere in our systems, including logs. This anonymisation makes it impossible to connect outside IP address information later, preventing identification of an individual person.

As part of this processing, first party cookies are used in order to analyze visitor behavior.

Whenever we process website traffic data, this is based on our legitimate interest (Art. 6 (1) lit. f GDPR) in optimizing our products, services, sales and marketing.

To prevent this processing activity, you (website visitor) may install and configure appropriate ad-blockers or use no-script-plugins in your browser.

The data will be deleted as soon as it is no longer required for its intended purposes. Statutory retention obligations can lead to a longer retention period of the data in question.

We have concluded a data processing agreement with Dealfront in order to ensure compliance with applicable data protection standards. 

10. Social Media

Social Media Plugins

We utilize a LinkedIn social media plugin on our pages, which can be identified by the respective social media logos. These plugins may transmit data to the provider as soon as you visit the page for the first time. Once you activate the plugin, the provider is informed that you have visited our site with your IP address. If you are logged into your LinkedIn social media account at the same time, the respective providers associate the visit to our pages with your user account.

For more information, please refer to LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy.

11. Shared responsibility with LinkedIn

We maintain a company page on the LinkedIn social network. As the operator of this page, we are jointly responsible with the operator of the LinkedIn social network, LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland, for the collection (but not further processing) of data from visitors to our company page, as defined by the General Data Protection Regulation (GDPR).

The collected data includes

  • Details about the types of content visitors view or interact with, as well as the actions they take on our website, are collected and analyzed.

  • Details about the devices used by visitors (such as IP addresses, operating systems, browser types, language settings, and cookie data)

  • Social networks collect and use information to provide analysis services, known as "Page Insights," to page operators. This allows them to gain insights into how individuals interact with their pages and associated content.

We have entered into a special agreement with the operator of the social network:

LinkedIn: “Page Insights Joint Controller Addendum" https://legal.linkedin.com/pages-joint-controller-addendum .

These agreements specifically outline the security measures that the operator must adhere to and in which the operator has agreed to fulfill the rights of individuals (i.e., users can directly address inquiries or deletion requests to the operator of the social network).

The rights of visitors (particularly regarding information, deletion, objection, and complaints to the supervisory authority) are not restricted by the agreements with the operator. You can exercise your rights (information, correction, deletion, processing restriction, data portability, objection, and complaint) both with us and with LinkedIn.

  • Processing purposes: Contact inquiries and communication, tracking (e.g., interest/behavior-based profiling, use of cookies), remarketing, reach measurement (e.g., access statistics, recognition of recurring visitors).

  • Legal basis: The legal basis for data processing is our legitimate interest in having a comprehensive presence of our offerings and our company on the internet, as well as the ability to communicate with you through social networks (Art. 6 (1) (f) of the GDPR).

  • Affected individuals: Website visitors, visitors to our company page on LinkedIn.

There is a possibility that some of the collected information on LinkedIn may be processed outside of the European Union, specifically in the United States. It is important to note that the United States is not considered a safe third country under EU data protection laws (see also Section 13). However, data transfers are carried out based on standard contractual clauses. LinkedIn and its affiliated companies are contractually obligated to process data in compliance with data protection regulations. For more information on how LinkedIn handles personal data, please refer to LinkedIn's privacy policy.

12. Processing your data when you engage with us for business purposes

If you contact us as a prospective client, supplier, service provider, or other business partner, we will process your personal data such as contact details or correspondence. This is done to handle your inquiry (based on legitimate interest according to Art. 6 (1) (f) of the GDPR) or to initiate or carry out the respective business (based on Art. 6 (1) (b) of the GDPR) as necessary. We may also retain the data in accordance with legal retention obligations (based on legal obligations according to Art. 6 (1) (c) of the GDPR).

The same applies if you are an employee of a prospective client, supplier, service provider, or other business partner, and we receive your personal data in this context. In this case, the legal basis is our legitimate interest in initiating or carrying out the business relationship with your employer (based on Art. 6 (1) (f) of the GDPR).

13. Processing of data when applying for a position with us

You can apply with us via email. During the application process, regardless of whether the application is submitted through the website, email, or by post, we process your personal data, typically including your name, address, email, phone number, marital status, qualifications, and any additional personal information from your cover letter and resume, as well as any attachments (such as your resume and certificates) that you may include. The processing is done for the purpose of contacting you and evaluating your suitability for the position you are applying for. The legal basis for this is Article 6(1)(b) of the GDPR. If your application is unsuccessful, these data will be deleted six months after the completion of the application process, unless you have expressly agreed to longer storage. If we enter into an employment contract with you, the transmitted data will be stored for the purpose of handling the employment relationship in compliance with legal regulations. You are not obligated to provide us with your personal data. However, we would like to inform you that your application cannot be considered if you do not provide us with your personal data. No further consequences will arise for you.

14. Transmission of data to third parties and to countries outside the European Economic Area (EEA)

Transmission of your data to third parties does not generally occur, unless we are legally obligated to do so, the data transfer is necessary for the performance of the contractual relationship, or you have explicitly consented to the data transfer. In cases where our service providers come into contact with your personal data, we ensure, in accordance with Article 28 of the GDPR, that they comply with the provisions of data protection laws. Please also refer to the respective privacy policies of the providers.

We value processing your data within the European Union (EU)/European Economic Area (EEA). With the exception of the processing activities outlined in sections 5-11, we do not transfer your data to recipients outside of the EU or EEA. The United States does not offer a level of data protection comparable to the European Union. In certain cases, US companies are obligated to disclose personal data to security authorities without the possibility of legal recourse for individuals. Therefore, it cannot be ruled out that US authorities (such as intelligence agencies) process, analyze, and store your data located on US servers for surveillance purposes. We have no control over these processing activities. However, our US service providers are contractually obligated to ensure data protection-compliant processing through EU standard contractual clauses.

15. Data Security

For security reasons, this website utilizes an SSL or TLS server, as well as encryption, to safeguard the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can identify an encrypted connection by the "https://" in the browser's address bar and the lock symbol in your browser.

When the SSL or TLS encryption is enabled, the data you transmit to us cannot be used to identify you.

16. Deletion

We will delete your personal data as soon as it is no longer necessary for the purposes of processing, unless there are compelling legitimate reasons for us to retain it in the event of an objection, or unless there is no other legal basis for processing in the event of revocation. In certain cases, such as when there is a legal retention obligation, your personal data will be initially blocked and deleted upon expiration of the retention period.

17. Your Rights

Data protection law grants you a range of rights concerning data that relates to you as an individual (known as data subject rights). Generally, these include

  • The right to request information about the personal data we store about you (Article 15 of the GDPR),

  • The right to correct inaccurate data (Article 16 of the GDPR),

  • The right to delete data that should no longer be stored (Article 17 of the GDPR),

  • The right to restrict processing in certain cases (Article 18 of the GDPR),

  • The right to data portability, meaning the transfer of data you have provided in electronic form to yourself or to a third party (Article 20 of the GDPR), and

  • The right to withdraw consent given with effect for the future (Article 7(3) of the GDPR). Please note that in the event of withdrawal, we will continue to retain your consent. This is because we must be able to provide evidence of your consent even after withdrawal and deletion of your personal data. The legal basis for the (continued) retention of consent is Article 6(1)(c) in conjunction with Article 5(1)(a), (2), Article 7(1) of the GDPR, and Article 6(1)(f) of the GDPR.


Furthermore, you have the right to object to the processing of your personal data based on legitimate interests (Article 6(1)(f) of the GDPR) or Article 6(1)(e) of the GDPR (Article 21(1) of the GDPR), or if it is carried out for the purpose of direct advertising (Article 21(2) of the GDPR), provided that you can provide a specific reason, except in the case of direct advertising.

 

The extent and conditions of these rights in individual cases are determined by the law, namely the GDPR and the BDSG. Additionally, you have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data by us. If you have any questions or concerns about data protection at Cambrion, we recommend that you first contact our data protection officer (see contact details in section 1).

18. No automated individual decision-making

We do not utilize your personal data for automated individual decision-making as defined by Article 22(1) of the GDPR.

19. Amendment to the Privacy Policy

New legal requirements, business decisions, or technological advancements may necessitate changes to our privacy policy. The privacy policy will be accordingly updated, with the latest version always available on our website.

As of August 2024.