Privacy Policy

A. Information on the Processing of Personal Data

The following informs you about the collection and processing of your data pursuant to Art. 13 GDPR.

Version: 1.3

Date: 17.05.2025

B. Contact Details

Verantwortliche Stelle

The controller responsible for data processing is:

Intenics GmbH
Versmannstraße 4
20457 Hamburg

Email: mail@intenics.io

Competent Supervisory Authority for Data Protection

The Hamburg Commissioner for Data Protection and Freedom of Information (Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit)

Ludwig-Erhard-Str 22, 7. OG

20459 Hamburg

Tel.: 040 / 428 54 – 4040

Fax: 040 / 428 54 – 4000

E-Mail: mailbox@datenschutz.hamburg.de

C. Terms

Personal Data

“Personenbezogene Daten” gem. Art 4 Nr. 1 DSGVO sind alle Informationen, die sich auf eine identifizierte oder identifizierbare natürliche Person (im Folgenden „betroffene Person“) beziehe. Als identifizierbar wird eine natürliche Person angesehen, die direkt oder indirekt, insbesondere mittels Zuordnung zu einer Kennung wie einem Namen, zu einer Kennnummer, zu Standortdaten, zu einer Online-Kennung oder zu einem oder mehreren besonderen Merkmalen, die Ausdruck der physischen, physiologischen, genetischen, psychischen, wirtschaftlichen, kulturellen oder sozialen Identität dieser natürlichen Person sind, identifiziert werden kann.

(Data) Processing

“Processing” pursuant to Art. 4 No. 2 GDPR means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Verantwortliche Stelle

The “controller” pursuant to Art. 4 No. 7 GDPR is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

Consent

“Consent” pursuant to Art. 4 No. 11 GDPR means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

D. Your Rights

You are entitled to exercise the rights listed below.

1. Right of Access, Art. 15 GDPR

Pursuant to Article 15 of the General Data Protection Regulation (GDPR), you, as the data subject, have the right to obtain information about the processing of your personal data.

Provided that the provision of information does not entail disproportionate effort, we will provide you with information free of charge about the personal data stored about you and provide you with a copy. The information must contain the following details:

• a) the purpose of the processing;
• b) the categories of personal data concernced;
• c) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
• d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
• e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
• f) the right to lodge a complaint with a supervisory authority;
  
• g) where the personal data are not collected from the data subject, any available information as to their source;
  
• h) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
  

The right of access pursuant to Art. 15 GDPR exists only insofar as it does not adversely affect the rights and freedoms of other data subjects pursuant to Art. 15 (4) GDPR.

2. Right to Data Portability, Art. 20 GDPR

If the data processing is based on consent or a contract and is carried out by automated means, you have the right to receive your data in a structured, commonly used and machine-readable format.

3. Right to Rectification, Art. 16 GDPR

You can request the rectification of inaccurate data or the completion of incomplete data concerning you.

4. Right to Erasure (“Right to be Forgotten”), Art. 17 GDPR

Your personal data must be erased under the following conditions:

• a) The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
• b) You withdraw consent on which the processing is based, and there is no other legal ground for the processing.
• c) You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing.
  
• d) The personal data have been unlawfully processed.
• e) The erasure of the personal data is required for compliance with a legal obligation in Union or Member State law to which the controller is subject.
• f) The personal data have been collected in relation to the offer of information society services to a child pursuant to Art. 8 (1) GDPR.

Your right to erasure does not apply to the extent that processing is necessary:

• a) for exercising the right of freedom of expression and information;
• b) for compliance with a legal obligation which requires processing or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
• c) for reasons of public interest in the area of public health in accordance with Art. 9 (2) lit. h GDPR and i, and Article 9 (3) GDPR;
• d) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 (1) GDPR, in so far as the right referred to is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
• e) for the establishment, exercise or defence of legal claims.

5. Right to Restriction of Processing, Art. 18 GDPR

You have the right to obtain restriction of processing where one of the following applies:

• a) the accuracy of your personal data is contested by you, for a period enabling the controller to verify the accuracy of the personal data;
• b) the processing of your data is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
• c) you need the data for the establishment, exercise or defence of legal claims;
• d) you have objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of the controller override yours.

Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If you have obtained restriction of processing, you will be informed by us before the restriction of processing is lifted.

6. Right to Object, Art. 21 GDPR

As a data subject, you have the right to object to the processing of your personal data pursuant to Article 21 of the General Data Protection Regulation (GDPR). You can exercise the right to object in the following cases:

• a) If the processing is carried out on the basis of our legitimate interest and your interests, fundamental rights and freedoms override the legitimate interest.
• b) If personal data are processed for direct marketing purposes.
• c) If you file an objection, we may only continue to process your personal data if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.
• d) You have the right to object to the processing of your personal data at any time and without giving reasons. The objection can be made in writing or electronically and should be addressed to our contact address (see above, section B.1.).

7. Withdrawal of Consent, Art. 7 (3) GDPR

You have the right to withdraw your consent given to us at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. The withdrawal can be made in writing or electronically and should be addressed to our contact address (see above, section B.1.).

Newsletter

If you receive newsletters from us, you can withdraw your consent via the unsubscribe link in the newsletter or by a declaration to our contact address.

Cookie or Consent Banner

You can adjust your declarations of consent using the “Consent Preferences” button at the bottom left.

8. Right to Lodge a Complaint, Art. 77 GDPR

You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data by us. Employees do not have to follow the chain of command for communications with the supervisory authority.

E. Data Processing Operations

1. Visiting our Website

The purpose of data processing is the provision of our internet presence.

In order for our website to be displayed on your terminal device, the website data must be transmitted to your terminal device. The processing of the following data is necessary here:

• Your public IP address,
• the date and time of page usage,
• the time zone difference to Greenwich Mean Time (GMT),
• the content of the request (specific page),
• the access status/HTTP status code,
• the respective amount of data transferred,
• the website from which the request comes,
• information about the browser,
• the operating system and its interface, and
• the language and version of the browser software.

We do not actively pass on the processed data. To provide the necessary technical infrastructure, we use service providers who may access the data listed above in the course of their activities. Furthermore, all necessary data processing agreements have been concluded. The service providers have also been obliged to take sufficient technical and organisational protective measures. Compliance with these protective measures can be checked by us at any time.

The provision of the internet presence and the information published with it is based on our own legitimate interests pursuant to Art. 6 I lit. f) GDPR. Our interests here are the presentation of our offers for participation in public business life and the provision of our contact data.

We use the infrastructure of Amazon Web Services (AWS) for hosting our web server.

Data Recipient: Amazon Web Services EMEA SARL, 5 Rue Plaetis, L-2338 Luxembourg, Luxembourg

Data protection declaration of the service provider: https://aws.amazon.com/de/privacy/

2. Website Usage Analysis

To optimise our internet presence, we carry out analyses of website usage and use the service “Google Analytics” for this purpose.

The following data are processed here: Your public IP address, the date and time of the display of the internet page, the time zone difference to Greenwich Mean Time (GMT), the content of the request (the specific page), the respective amount of data transferred, the website from which the request comes, information about the browser, the operating system and its interface, as well as the language and version of the browser software.

We use Google Analytics with the “Google Signals” function (https://support.google.com/analytics/answer/7532985?hl=de#zippy=%2Cthemen-in-diesem-artikel), which enables an anonymised evaluation of user data across various devices and platforms. The data processed by Google Signals cannot be assigned to individual persons due to the anonymisation.

The legal basis for this data processing is your consent pursuant to Art. 6 I lit. a) GDPR.

To withdraw your consent to data processing, you can call up the consent banner again and adjust the settings accordingly. Further information and the link to call up the consent banner can be found under D.7 of this privacy policy (Consent).

This service is operated by Google. Google is certified under the EU-US Data Privacy Framework. Data transmission therefore takes place on the basis of Art. 45 GDPR, and no further guarantees are required to establish lawfulness.

Data Recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Data protection declaration of the service provider: https://policies.google.com/privacy?hl=de

3. Email Infrastructure

The purpose of the processing is the sending and receiving of electronic mail.

The sending and receiving of emails requires that the email address of the recipient or sender is processed. Since various information is transmitted via email, data of all kinds, in addition to technical protocol data, are processed.

If we transmit particularly sensitive data, it is encrypted by us beforehand. We also use transport-encrypted connections for the transmission and reception of emails.

We do not actively pass on the processed data. To provide the necessary technical infrastructure, we use service providers who may access the data listed above in the course of their activities. The service providers are based in Germany, and the necessary data processing agreements have been concluded. The service providers have also been obliged to take sufficient technical and organisational protective measures. Compliance with these protective measures can be checked by us at any time.

The operation and use of the email infrastructure is based on our legitimate interest pursuant to Art. 6 I lit. f) GDPR in providing an electronic communication option.

Our email infrastructure is operated by Google. Google is certified under the EU-US Data Privacy Framework. Data transmission therefore takes place on the basis of Art. 45 GDPR, and no further guarantees are required to establish lawfulness.

Data Recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Data protection declaration of the service provider: https://policies.google.com/privacy?hl=de

4. Contact Form

The purpose of the processing is the receipt of electronic mail via the contact form.

The receipt of electronic messages via the contact form requires that the following categories of data are processed:

• Your email address,
• Your name,
• the content of the message,
• Your public IP address,
• the date and time of page usage,
• the time zone difference to Greenwich Mean Time (GMT),
• the content of the request (specific page),
• the access status/HTTP status code,
• the respective amount of data transferred,
• the website from which the request comes,
• information about the browser,
• the operating system and its interface, and
• the language and version of the browser software.

Since various information can also be transmitted via the contact form, data of all kinds are processed.

We do not actively pass on the processed data. To provide the necessary technical infrastructure, we use service providers who may access the data listed above in the course of their activities. The service providers are based in Germany, and the necessary data processing agreements have been concluded. The service providers have also been obliged to take sufficient technical and organisational protective measures. Compliance with these protective measures can be checked by us at any time.

If we transmit particularly sensitive data, it is encrypted by us beforehand. We also use transport-encrypted connections for the transmission and reception of emails.

The processing activity is based on our legitimate interest pursuant to Art. 6 I lit. f) GDPR in social participation.

5. Video Conferencing Systems

Der Zweck der Datenverarbeitung ist der Betrieb eines Systems zur Durchführung von Videokonferenzen und Online-Meetings. Wir verwenden hierbei die Kommunikationslösungen „Google Meet“.
Various personal data are processed when using these communication solutions. This includes, in particular, your name, your email address, your IP address, audio and video data, chat histories, and the transmitted communication content. The communication content is transmitted exclusively in encrypted form.

The legal basis for data processing is determined by the context. If the video conference takes place in connection with the fulfilment of (pre-)contractual obligations, the legal basis is the contractual relationship pursuant to Art. 6 (1) sentence 1 lit. b) GDPR.

Otherwise, the legal basis for data processing when conducting online meetings, video conferences, or webinars is our legitimate interest pursuant to Art. 6 (1) sentence 1 lit. f) GDPR.

This communication system is operated by Google. Google is certified under the EU-US Data Privacy Framework. Data transmission therefore takes place on the basis of Art. 45 GDPR, and no further guarantees are required to establish lawfulness.

Data Recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Data protection declaration of the service provider: https://policies.google.com/privacy?hl=de

6. Accounting

We are legally obliged (§ 238 HGB – German Commercial Code) to record all business-relevant transactions and to retain them in accordance with § 147 AO (German Tax Code) (or § 257 HGB).

We must record, retain, and, in the case of audits, present your data (master data, address data, contact data, and data on the service).

In the case of official audits, public bodies (e.g., the tax authority) can inspect the data. In tax-related matters, we make use of the assistance of tax advisors if required. They can also view our accounting data.

The legal basis is Art. 6 I lit. c) GDPR in conjunction with the respective legal provisions (e.g., § 147 AO or § 257 HGB).

7. Application Procedure

The purpose of the processing is the execution of application procedures.

In the context of application procedures, we process the data provided in the application documents. This includes both master data and professional data of the interested parties. If an employment relationship arises, the data is stored in the personnel file. You can apply to us by email or via our application portal. For applications submitted via our website, we use the applicant management software from the service provider Personio (Personio SE & Co. KG Seidlstraße 3 80335 Munich). A data processing agreement has been concluded with the service provider. Further information on the provider can be found here: https://www.personio.de/datenschutzerklaerung/ https://www.personio.de/datenschutzerklaerung/

Internally, the application documents are made available to the respective departments.

The legal basis for the processing of application documents is Art. 6 (1) sentence 1 lit. b) GDPR for the initiation or arrangement of contractual relationships. If an employment relationship does not materialise, the data will be destroyed or deleted after 6 months at the latest.

Furthermore, you have the option of being included in our “Talent Pool” should your application for the advertised position not be successful. The legal basis for the data processing is your consent pursuant to Art. 6 (1) sentence 1 lit. a) GDPR. You have the option to withdraw your consent at any time and for the future. Your data will be deleted after 365 days at the latest.

8. Social Media

We operate our own subpages on social media (Facebook, Instagram, LinkedIn, and Xing). The purpose is to inform the public about our work and to provide additional communication channels.

No data is transmitted to social media by visiting our pages. Only when you use our subpages on the respective platforms do the providers process the information that must be processed in the context of providing a website. This includes, in particular, the following data:

• Your public IP address,
• the date and time of page usage,
• the time zone difference to Greenwich Mean Time (GMT),
• the content of the request (specific page),
• the access status/HTTP status code,
• the respective amount of data transferred,
• the website from which the request comes,
• information about the browser,
• the operating system and its interface, and
• the language and version of the browser software.

Furthermore, digital content (photographs, videos, reports, etc.) is published on social media.

We cannot influence how and which other data are processed by the platform operators. Information about the data processing of the respective platform operators can be found below:

Facebook: https://www.facebook.com/policy.php

Instagram: https://help.instagram.com/519522125107875

LinkedIn: https://de.linkedin.com/legal/privacy-policy

Xing: https://privacy.xing.com/en/your-privacy

All data processed by you when using the platforms can be viewed by the platform operators.

The operation and use of the email infrastructure is based on our legitimate interest pursuant to Art. 6 I lit. f) GDPR in providing additional communication channels.

If we publish personally identifiable content from you, this publication is based on consent pursuant to Art. 6 I lit. a) GDPR.

9. Terminvereinbarung mit Calendly

We use the service provider Calendly for scheduling telephone appointments.

For this purpose, your name, your email address, and your message to us are recorded by Calendly and transmitted to us.

The data is processed in connection with an existing contractual relationship or for the initiation of a new contractual relationship. The legal basis is therefore Art. 6 I lit. b) GDPR. If the appointment does not serve to initiate a contract, the processing is based on our legitimate interest pursuant to Art. 6 I lit. f) GDPR in providing additional communication channels.

Da wir die Benachrichtigung per E-Mail erhalten, werden die bereitgestellten Daten auch unserem E-Mail-Provider bekanntgegeben.

Further information on the data processing of the US service provider can be found at the following link: https://calendly.com/privacy

10. Provision of an Interactive Map by Google

The purpose of the processing is the provision of an interactive map by Google (Google Maps).

We use the service “Google Maps” to provide the interactive map. The provider processes the information that must be processed in the context of providing a website. In particular, the following data are processed in this context:

• Your public IP address,
• the date and time of page usage,
• the time zone difference to Greenwich Mean Time (GMT),
• the content of the request (specific page),
• the access status/HTTP status code,
• the respective amount of data transferred,
• the website from which the request comes,
• information about the browser,
• the operating system and its interface, and
• the language and version of the browser software.

Further information about the data processing can be found below:

Google: https://policies.google.com/privacy?hl=en

The display of the map is based on your consent pursuant to Art. 6 I lit. a) GDPR.

11. Google reCAPTCHA

We use Google reCAPTCHA on this website.

This function serves to distinguish whether a data input on our website, e.g. in our contact form, is carried out by abusive automated processing or by a human. Through an automated test, reCAPTCHA analyses the behaviour of website visitors based on different interaction patterns.

Zur Analyse wertet die Funktion Informationen über die Webseitenbesucher, wie die IP-Adresse, Verweildauer des Besuchs, Infos über das Betriebssystem oder Mausbewegungen aus. Die ermittelten Daten werden Google weitergeleitet. Ebenso kann es zu einer Übermittlung von personenbezogenen Daten an die Server der Google LLC. in den USA kommen.

As website operator, we have a legitimate interest pursuant to Art. 6 (1) lit. f GDPR in protecting our website from abusive use and SPAM.

Further information on Google reCAPTCHA and Google’s privacy policy can be found at the following link: https://www.google.com/intl/en/policies/privacy/

12. Cookies and Adjustment of Consent

Cookies are files that are created on your computer when you use the website. You can delete the cookies at any time using your browser settings or generally prevent their storage.

We use the cookies listed below:

You can adjust your declarations of consent using the “Consent Preferences” button at the bottom right.

13 Google Tag Manager

The purpose of data processing is the management and control of so-called website tags and tracking codes. Other services for website analysis and marketing are integrated into our website via the Google Tag Manager. The Tag Manager itself generally does not process any personal data, but forwards it for the execution of the integrated services.

The legal basis for the use of the Google Tag Manager is our legitimate interest pursuant to Art. 6 (1) sentence 1 lit. f) GDPR in the efficient integration and management of various tools.

Data Recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Data protection declaration of the service provider: https://policies.google.com/privacy?hl=en

14. Google Ads (Conversion Tracking and Remarketing)

The purpose of the processing is the measurement of the effectiveness of our advertising measures (conversion tracking) and the targeting of interest-based advertising for visitors to our website (remarketing). Cookies are used here to recognise you on other websites.

The following data are processed: Your public IP address, cookie information, device IDs, interaction data with the website and advertisements.

The legal basis for this data processing is your consent pursuant to Art. 6 I lit. a) GDPR.

Data Recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Data protection declaration of the service provider: https://policies.google.com/privacy?hl=en

15. Usage Analysis with Microsoft Clarity

The purpose of the processing is the analysis of user behaviour on our website, for example through heatmaps and optionally through anonymised session recordings, in order to optimise our website offering and to fix errors.

The following data are processed, among others: Your anonymised IP address, mouse movements, clicks, scrolling behaviour and the time spent on the page.

The legal basis for this data processing is your consent pursuant to Art. 6 I lit. a) GDPR.

Data Recipient: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland

Data protection declaration of the service provider: https://www.microsoft.com/en-gb/privacy/privacystatement

16. Consent Management with CookieYes

The purpose of the processing is the collection, management, and documentation of the legally required user consents for data processing on our website (Consent Management Platform – CMP).

The following categories of data are processed: Your IP address, date and time of consent, browser information, consent status (Yes/No), and the selected cookie category.

The processing is carried out for the fulfilment of a legal obligation to document and prove the granted consents pursuant to Art. 6 I lit. c) GDPR.

Data Recipient: CookieYes (implied by the service).

Further information on data processing can be found at the following link: https://www.cookieyes.com/privacy-policy/