Privacy Policy

Privacy Policy - ADON Solutions

We take the protection of your personal data very seriously. With the following statement, we inform you about which personal data we collect and how we process, use and protect it. This Privacy Policy applies to this website. If third-party offerings can be accessed from our offering via links (hyperlinks), this Privacy Policy does not cover those linked offerings. The controller within the meaning of the GDPR for the processing of your personal data on this website is: ADON Solutions, owner Viktor Obholz, Am Hasengründlein 13, 91413 Neustadt a.d. Aisch, Germany. Email: info@adonsolutions.de, telephone: +49 179 3956071.

Your rights

Pursuant to Art. 15–20 GDPR, you have the right of access to your personal data processed by us, as well as the rights to data portability, rectification, erasure and restriction of the processing of your personal data. In addition, you have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR in conjunction with § 19 of the German Federal Data Protection Act (BDSG). The supervisory authority competent for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach. Without prejudice to this, you may also contact the supervisory authority of your place of residence or place of work.

You have the right to object at any time to the processing of personal data concerning you that is carried out on the basis of Art. 6(1)(e) GDPR (data processing in the public interest) and Art. 6(1)(f) GDPR (data processing on the basis of a balancing of interests). You have the right to object at any time to the processing of personal data concerning you for the purposes of direct marketing; this also applies to profiling to the extent that it is related to such direct marketing. Furthermore, you may withdraw any consent you have given at any time.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. The lawfulness of processing carried out on the basis of consent before its withdrawal remains unaffected.

Asserting any of the rights mentioned is, in principle, free of charge for you and is not subject to any formal requirements. To exercise your rights, please contact the company named in the Legal Notice.

Processing of personal data in the context of basic website functions

In order to enable you to access the web pages at all, to administer the online offering and to ensure information security, usage data is automatically logged on the web server (including IP address, time of access, file accessed, amount of data transferred, other connection data). To control the internet connection during your visit and to provide functions of our website, we store cookies via the browser on your computer's hard drive. Some browsers already accept cookies in their default settings. If you do not want this, you can change your browser settings. Please refer to the information provided by the browser manufacturer to find out how to do this. If you decide against cookies, some parts of our online offering may not be usable.

In the aforementioned cases, we have a legitimate interest (Art. 6(1)(f) GDPR) in the processing of the data. Where cookies are also required for functions by which contracts between you and us are concluded, the data processing is carried out pursuant to Art. 6(1)(b) GDPR. In addition, selected logging is carried out to fulfil accountability obligations under data protection law pursuant to Art. 5(2) GDPR.

Consent

Any processing of your personal data beyond this Privacy Policy will, in principle, only take place if you have given us your consent to do so pursuant to Art. 6(1)(a) GDPR. On our website you have the opportunity to give such express consent. In the context of the consent, you will be provided with further information about the processing of your data.

Cookie consent (consent management)

When you first visit our website, we display a cookie banner through which you can consent to or reject the use of non-essential cookies and services (category “Marketing/Statistics”). Statistics and marketing services - in particular Google Tag Manager, Google Analytics, Google Ads, Microsoft Clarity, Ahrefs and the Meta Pixel - are only loaded and activated after you have given your express consent via the banner. Without consent, only technically necessary functions are executed; no analytics or marketing cookies are set.

We do not use any cookies to store your choice and do not transmit any data to third parties. Your decision is stored exclusively locally in your browser in Local Storage under the key adon-cookie-consent-v1 (content: selected categories, version and timestamp). This processing serves to obtain and document the required consent and is carried out on the basis of our legal obligation pursuant to Art. 6(1)(c) GDPR in conjunction with § 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG).

You can change or withdraw your consent at any time with effect for the future by clicking “Cookie settings” in the footer of the website. The lawfulness of the processing carried out before the withdrawal remains unaffected.

Contact form

You can get in touch with us via the contact form on our website. In doing so, we collect the data you enter: name, email address and - optionally - telephone number and your message. We use this data exclusively to handle and respond to your enquiry.

If your enquiry is aimed at the conclusion of a contract or the taking of pre-contractual steps (e.g. consultation, quotation, trial access), the processing is carried out on the basis of Art. 6(1)(b) GDPR. In all other cases, it is carried out on the basis of our legitimate interest in responding to your enquiry pursuant to Art. 6(1)(f) GDPR. The form is transmitted to our server in encrypted form.

If you have previously consented to the “Marketing” category, a server-side conversion event is additionally transmitted to Meta when the form is submitted (Meta Conversions API). In this process, your contact data is transmitted exclusively in irreversibly encrypted (hashed) form. You can find more details on this in the section “Meta Pixel”. Without marketing consent, this transmission does not take place.

Your data will be deleted as soon as the enquiry has been conclusively dealt with and no statutory retention periods preclude this (see section “Storage period”).

Cloudflare Turnstile (spam protection)

To protect our contact form against automated submissions (bots, spam), we use “Turnstile” from Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). Turnstile checks, without burdensome puzzles, whether the submission comes from a human. In the process, technical information (including IP address, browser/device details, interaction data) is transmitted to and evaluated by Cloudflare.

The legal basis is our legitimate interest in preventing misuse and in the security of our systems pursuant to Art. 6(1)(f) GDPR. A transfer to the USA may take place; Cloudflare is certified under the EU-US Data Privacy Framework and has additionally concluded the European Commission's standard contractual clauses (SCCs). Further information: https://www.cloudflare.com/de-de/privacypolicy/.

Contact initiated by the customer by email

If you contact us on your own initiative by email for business purposes, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves to handle and respond to your contact request.

If the contact serves the taking of pre-contractual steps (e.g. consultation in the event of interest in a purchase, preparation of a quotation) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR.

If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in handling and responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Art. 6(1)(f) GDPR.

We use your email address only to handle your enquiry. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Registration / trial access to the ADON CRM application

Via the buttons “Try free for 30 days” or “Sign in”, you reach our separate application at app.adon-crm.de, where you can create a user account. We process the data collected in the application in the context of registration and performance of the contract (e.g. inventory data (Bestandsdaten), access data, content stored in the account) in order to provide the service and to fulfil the user agreement on the basis of Art. 6(1)(b) GDPR.

This Privacy Policy relates to the present website. The privacy information provided there applies to data processing within the application. Contract and billing data will be stored after the end of the contractual relationship for the duration of the statutory retention periods and then deleted (see section “Storage period”).

Google Analytics 4

We use Google Analytics 4 (GA4) on our website, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”). Google Analytics uses cookies (including _ga and _ga_<Container-ID>) and similar technologies that enable an analysis of your use of the website. The information generated about your use of this website is generally transmitted to and stored on Google servers; a transfer to the USA is possible.

In Google Analytics 4, IP anonymisation is active by default: IP addresses are truncated by Google and not stored permanently (the former manual extension “_anonymizeIp()” of the predecessor version Universal Analytics no longer applies). We have limited the retention of user and event data in GA4 to 14 months.

The processing is carried out exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR, which you give via our cookie banner and can withdraw at any time with effect for the future. Google Analytics is only loaded after your consent. For the transfer to the USA, we rely on Google's certification under the EU-US Data Privacy Framework and, additionally, on the European Commission's standard contractual clauses (SCCs) pursuant to Art. 46 GDPR.

Further information can be found in the terms of use (https://marketingplatform.google.com/about/analytics/terms/de/) and in Google's privacy policy (https://policies.google.com/privacy).

Google Tag Manager

We use Google Tag Manager from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”) on our website. If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller responsible for your data.

This application is used to manage JavaScript tags and HTML tags which are used in particular to implement tracking and analytics tools. The data processing serves the purpose of designing our website in line with requirements and optimising it.

Google Tag Manager itself neither stores cookies nor processes any personal data. However, it enables the triggering of further tags which may collect and process personal data.

You can find more detailed information on the terms of use and data protection here: https://marketingplatform.google.com/intl/de/about/analytics/tag-manager/use-policy/

When using Google Tag Manager, data may be transferred to Google LLC in the USA. Google is certified under the EU-US Data Privacy Framework (adequacy decision of 10 July 2023); in addition, we have concluded the standard contractual clauses (Art. 46 GDPR) with Google.

Google Tag Manager is only loaded after you have given your consent via the cookie banner.

Google Ads and conversion tracking (Google/DoubleClick)

We use the Google Ads services and Google conversion tracking of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) to measure the effectiveness of our online advertising. For this purpose, cookies and tracking pixels may be used, which are loaded via the domain stats.g.doubleclick.net, among others. This enables us to track whether users perform certain actions on our website after clicking on an advertisement (conversion) and to create target audiences for remarketing.

The processing is carried out exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR, which you give via our cookie banner (category “Marketing”) and can withdraw at any time. These services are only loaded after your consent. A transfer to the USA may take place; Google is certified under the EU-US Data Privacy Framework and has additionally concluded the European Commission's standard contractual clauses (SCCs) pursuant to Art. 46 GDPR. Further information: https://policies.google.com/privacy.

Microsoft Clarity

We use Microsoft Clarity on our website, a web analytics service provided by Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, USA; “Microsoft”). If you have your habitual residence in the European Economic Area or Switzerland, Microsoft Ireland Operations Limited (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland) is the controller responsible for your data.

We use Microsoft Clarity to record how you use and interact with our website - through behavioural metrics, heatmaps and session recordings - in order to improve our products and services. Website usage data is collected using first-party and third-party cookies and other tracking technologies in order to understand the popularity of our content and services and the online activity on the website. In addition, we use this information to optimise the website and for fraud and security purposes.

In particular, the following are processed: IP address (truncated), browser, operating system, device type, screen resolution, language and country settings, referrer URL as well as mouse movements, clicks, scrolling behaviour and time spent on the site. Entries in form fields are masked by default by Microsoft Clarity and are not recorded.

The processing is carried out on the basis of your consent pursuant to Art. 6(1)(a) GDPR, which you give via our cookie banner and can withdraw at any time with effect for the future. A transfer of data to the USA may take place; Microsoft is certified under the EU-US Data Privacy Framework and has additionally concluded the European Commission's standard contractual clauses (SCCs) in order to ensure an adequate level of data protection.

Further information on how Microsoft collects and uses your data can be found in Microsoft's privacy statement: https://privacy.microsoft.com/de-de/privacystatement. An overview of the cookies set by Microsoft Clarity can be found here: https://learn.microsoft.com/de-de/clarity/setup-and-installation/cookie-list.

Meta Pixel (Facebook Pixel) and Meta Conversions API

We use the “Meta Pixel” (formerly Facebook Pixel) of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “Meta”) on our website. The Meta Pixel serves to measure the effectiveness of our advertisements on Facebook and Instagram (conversion measurement), to create target audiences (Custom and Lookalike Audiences) and for remarketing.

When the pixel is active, the script connect.facebook.net is loaded and a cookie (_fbp) is set. In particular, your IP address, browser and device information, referrer URL and information about your actions on our website (e.g. page views, clicks on call-to-action buttons, submission of the contact form) are processed. In addition, we use the server-side “Meta Conversions API”: when the contact form is submitted, we additionally transmit the conversion event to Meta server-side, whereby your contact data (e.g. email, telephone number, name) is transmitted exclusively in irreversibly encrypted (SHA-256 hashed) form for the purpose of matching (“Advanced Matching”).

The processing is carried out exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR, which you give via our cookie banner (category “Marketing”). Without this consent, neither is the pixel script loaded nor are server-side events transmitted to Meta. You can withdraw your consent at any time with effect for the future (“Cookie settings” link in the footer). Meta and we are joint controllers within the meaning of Art. 26 GDPR for the collection and transmission of your data in connection with the pixel.

A transfer to the USA may take place; Meta is certified under the EU-US Data Privacy Framework and has additionally concluded the European Commission's standard contractual clauses (SCCs) pursuant to Art. 46 GDPR. Further information on data processing by Meta can be found at https://www.facebook.com/privacy/policy/ and on the pixel cookies at https://www.facebook.com/business/help/471978536642445.

Joint controllership with Meta (Art. 26 GDPR)

We and Meta Platforms Ireland Limited are joint controllers within the meaning of Art. 26 GDPR for the collection of your personal data on our website by means of the Meta Pixel and the Conversions API and its transmission to Meta. We have concluded the joint controllership agreement with Meta (“Controller Addendum”), available at: https://www.facebook.com/legal/controller_addendum.

We make the essence of this agreement available to you pursuant to Art. 26(2) GDPR:

• Scope: The joint controllership extends exclusively to the collection of the data on our website and its transmission to Meta. Meta is solely responsible for the subsequent processing.
• Our responsibility: Provision of the information pursuant to Art. 13 GDPR and obtaining your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG) prior to activation.
• Meta's responsibility: further processing of the transmitted data and handling of data subject rights with regard to the data stored by Meta (information: https://www.facebook.com/privacy/policy).
• Exercising your rights: You can assert your rights both against us and against Meta.
• Third-country transfer: EU-US Data Privacy Framework (adequacy decision of 10 July 2023) and, additionally, standard contractual clauses (Art. 46 GDPR).

Ahrefs Web Analytics

We use Ahrefs Web Analytics on our website, a web analytics service provided by Ahrefs Pte. Ltd. (16 Raffles Quay, #33-03 Hong Leong Building, Singapore 048581; “Ahrefs”). The service collects usage data in aggregated form (including pages accessed, referrer, approximate origin, browser/device details) in order to evaluate the reach and use of our website.

The processing is carried out on the basis of your consent pursuant to Art. 6(1)(a) GDPR, which you give via our cookie banner and can withdraw at any time; the service is only loaded after your consent. Further information: https://ahrefs.com/privacy.

Ahrefs has its registered office in Singapore. For the associated transfer of personal data to a third country without an adequacy decision of the European Commission, we have agreed the European Commission's standard contractual clauses (Art. 46 GDPR) with Ahrefs.

Fonts (Google Fonts, hosted locally)

For the uniform display of fonts, we use the font “Outfit” (originally provided by Google). The font files are hosted permanently on our own server (local hosting). When you visit our website, no connection is therefore established to Google servers and, to that extent, no personal data (in particular your IP address) is transmitted to Google.

WhatsApp Business

If you contact us via WhatsApp for business purposes, we use the WhatsApp Business version provided by WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “WhatsApp”) for this purpose. If you are located outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA). Insofar as data is transferred to the USA in this process, Meta/WhatsApp is certified under the EU-US Data Privacy Framework; in addition, the European Commission's standard contractual clauses (Art. 46 GDPR) apply.

The data processing serves to handle and respond to your contact request. For this purpose, we collect and process your mobile telephone number stored with WhatsApp, your name if provided, and further data to the extent provided by you.

We use your personal data only to handle your enquiry. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

More detailed information on the terms of use and data protection when using WhatsApp can be found at https://www.whatsapp.com/legal/#terms-of-service and https://www.whatsapp.com/legal/#privacy-policy.

Facebook fan page

We operate a company profile on the social network Facebook. Facebook is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For the data processing that takes place when you visit our fan page, Facebook and we are joint controllers within the meaning of Art. 26(1) GDPR.

We process your personal data collected on the occasion of your visit to our Facebook fan page on the basis of a legitimate interest (Art. 6(1)(f) GDPR) in effectively informing users and communicating with you.

You can find further information on the processing and use of data by Facebook at https://www.facebook.com/about/privacy/ and specifically for Page Insights at https://www.facebook.com/legal/terms/information_about_page_insights_data.

Storage period

We store personal data only for as long as is necessary for the respective purposes or as required by statutory retention periods:

• Server log files (including IP address, time of access): deletion or anonymisation generally after 14 days at the latest, unless security-relevant incidents require longer storage.
• Contact enquiries (form, email, WhatsApp): deletion as soon as the enquiry has been conclusively dealt with, provided that no statutory retention periods preclude this.
• Contract, billing and business correspondence data: retention in accordance with the commercial and tax law periods of 6 years (§ 257 of the German Commercial Code (HGB), commercial letters) or 10 years (§ 147 of the German Fiscal Code (AO), accounting records and tax-relevant documents); deletion thereafter.
• Consent given via the cookie banner (Local Storage adon-cookie-consent-v1): until you withdraw it or until you delete the data in your browser.
• Analytics and marketing cookies: in accordance with the respective cookie lifetime - including Google Analytics _ga/_ga_* up to 24 months (retention of GA4 user data limited to 14 months), Meta _fbp up to 90 days, Microsoft Clarity up to 12 months - or until you withdraw your consent.