Privacy Policy

I. General Information on Data Protection & Data Subject Rights

General Information

Data protection is an important topic. In the following, we inform you about the collection and processing of personal data. Personal data includes all data that can be related to you personally.

Controller pursuant to Art. 4 (7) GDPR

countX GmbH
Friedrichstr. 171
10117 Berlin
Phone: +49 30 6293155 0
Email: hello@countx.com

Data Protection Officer

Mr. Patrick Grihn
grihn@dsb.ruhr
DSB Ruhr
℅ nextindex GmbH & Co. KG
Grabenstr. 12
44787 Bochum

If you have any questions regarding the processing, security, or a request for information, you can confidently reach out to him directly.

General Overview of Data and Processing Activities

We aim to provide the required transparency in accordance with Art. 12 GDPR. Below is an overview of the data processing activities:

Types of data processed:

  • Usage data or communication data (e.g. when accessing a website: IP address, device information, access time and timestamp, etc.)
  • Contact data (provided during registration or form submissions)
  • Master data (e.g. name, company, address)
  • Communication data (e.g. metadata related to calls or emails)
  • Content data (particularly when receiving emails)

Additionally (internally), we process the following data for our customers, prospects, suppliers, and business partners in connection with services related to proposals, contracts, support, marketing, and customer care:

  • Contract data
  • Customer master data (CRM)
  • Payment data
  • Order and invoice data

Categories of data subjects:

  • Users of this website (also referred to as visitors)
  • Customers
  • Prospects
  • Users of our software

Purposes:

  • Operating the website and providing information
  • Ensuring the security and functionality of the website and our systems (e.g. firewall)
  • Communication with our customers
  • Responding to inquiries
  • Optimizing and analyzing the website
  • Providing information to (potential) customers

Your Rights

You have the following rights with respect to the personal data concerning you:

Summary:

  • Right of access
  • Right to rectification or erasure
  • Right to restriction of processing
  • Right to object to processing
  • Right to data portability
  • Right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data by us

Detailed Rights:

  • According to Art. 15 GDPR, you have the right to request information about your personal data that we process. In particular, you can request information on the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the intended storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data (if not collected by us), and the existence of automated decision-making including profiling with meaningful details.
  • According to Art. 16 GDPR, you have the right to request the immediate rectification of inaccurate or incomplete personal data we hold about you.
  • According to Art. 17 GDPR, you have the right to request the erasure of your stored personal data, provided that the processing is not required for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims.
  • According to Art. 18 GDPR, you have the right to request restriction of the processing of your personal data if you contest the accuracy of the data, the processing is unlawful but you oppose erasure, we no longer need the data but you require it to assert, exercise or defend legal claims, or you have objected to processing under Art. 21 GDPR.
  • According to Art. 20 GDPR, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request its transfer to another controller.
  • According to Art. 7 para. 3 GDPR, you have the right to withdraw any consent you have given us at any time. As a result, we will no longer be permitted to continue processing data based on this consent in the future.
  • According to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. You can usually contact the supervisory authority at your place of residence, your workplace, or our company headquarters.

Exceptions:

The right to erasure does not apply where processing is necessary:

  • to exercise the right to freedom of expression and information
  • to comply with a legal obligation under EU or Member State law to which the controller is subject
  • for reasons of public interest
  • for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes as per Art. 89 para. 1 GDPR, insofar as the right to erasure would likely render impossible or seriously impair the achievement of the purposes of that processing
  • for the establishment, exercise, or defense of legal claims

Legal Bases

When processing personal data necessary for the performance of a contract to which the data subject is party, Art. 6 (1)(b) GDPR serves as the legal basis. This also applies to processing operations required to carry out pre-contractual measures.

If processing is necessary for the legitimate interests of our company or a third party, and such interests are not overridden by the interests, fundamental rights, or freedoms of the data subject, Art. 6 (1)(f) GDPR serves as the legal basis.

If processing is necessary to comply with a legal obligation that applies to our company, Art. 6 (1)(c) GDPR is the legal basis.

In cases where processing is necessary to protect vital interests of the data subject or another natural person, Art. 6 (1)(d) GDPR serves as the legal basis.

Where we obtain consent from the data subject for processing operations, Art. 6 (1)(a) GDPR is the legal basis.

II. Website and App

General Information

General Data When Accessing the Site

When using the website purely for informational purposes — i.e., if you do not register or otherwise provide information — we only collect the personal data that your browser transmits to our server to display the website and ensure its stability and security. The legal basis for this processing is Art. 6 (1)(f) GDPR (legitimate interest).

Logfiles

Logfiles are stored to ensure the functionality of the website. Additionally, they help us optimize the website and safeguard the security of our IT systems. The legal basis for this processing is Art. 6 (1)(f) GDPR (legitimate interest).

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

In the case of log file storage, this is generally the case after seven days. Extended storage is possible, but in such cases, IP addresses are deleted or anonymized so that identification of the accessing client is no longer possible.

Cookies

In addition to the aforementioned data, cookies may be stored on your device when you use our website.

We use technically necessary cookies for the purposes of security and the technical operation of the website. The legal basis for this processing is Art. 6 (1)(f) GDPR (legitimate interest).

These cookies are usually deleted after you log out or close your browser.

We also use cookies for the purposes of analyzing usage behavior or for marketing purposes. These cookies are deleted after a predetermined period.

Unless otherwise stated in this privacy policy, processing is based on Art. 6 (1)(f) GDPR (legitimate interest). Otherwise, processing is based on your consent in accordance with Art. 6 (1)(a) GDPR.

You can delete cookies stored on your device at any time via your browser settings.

You can also configure your browser to automatically delete cookies when closing or to reject cookies altogether.

Please note that some functions of our website may not work properly without cookies.

Third-Party Services

We use third-party services to make our website more user-friendly, effective, and secure.

This includes the use of analytics tools to analyze user behavior and improve our web offering.

Unless otherwise stated in this privacy policy, the use of analytics tools is based on the legal basis of legitimate interest under Art. 6 (1)(f) GDPR. This applies especially when the data is collected in a pseudonymized manner and the provider does not use the data for its own purposes.

Google Services

We use various services on our website from Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland – a company registered and operating under Irish law (registration number: 368047).

The use of Google services only occurs after your informed consent under Art. 6 (1)(a) GDPR.

Google may store cookies on your device in connection with the services and functions used. The information generated by these cookies (e.g., about your use of the website) may be transferred to a server in the USA and stored there. This may also include your IP address. As a rule, your IP address will be anonymized before being stored. Google is certified under the “Data Privacy Framework”. The transfer takes place under the adequacy decision according to Art. 45 GDPR.

More information about the Data Privacy Framework:

🔗 https://www.dataprivacyframework.gov/s/

We use the following services and functions from Google:

Google Analytics

We use Google Analytics to analyze and continuously improve the use of our website. The statistics collected help us improve our offering and make it more relevant to users. We use Google Analytics with the extension anonymizeIp(). This means that IP addresses are shortened before being processed, eliminating any direct personal reference. If the data collected can still be linked to a person, this is immediately excluded and deleted.

This website also uses Google Analytics for cross-device tracking of user flows via a User ID. You can disable this analysis in your customer account under “My Data” > “Personal Data”.

Google Ads

We use Google Ads to draw attention to our website on third-party websites or search engines.

As part of this, we use Google Ads Remarketing. This allows users of our website to be shown interest-based ads across the Google advertising network. Google uses cookies to recognize a browser on a specific device. We do not receive any information that personally identifies users.

We also use conversion tracking. If you click on a Google ad, a conversion tracking cookie is set. Each Google Ads customer receives a unique cookie. Cookies cannot be tracked across the websites of different Ads customers. The data collected helps Google generate conversion statistics. We do not receive personally identifiable information in this process.

Google Tag Manager

We use Google Tag Manager. This tool allows us to efficiently manage “tags” (small pieces of code) on our website and helps us implement other Google services more easily.

Google Maps

We use Google Maps to display interactive maps directly on our website, allowing convenient use of the mapping function. When you access a page with a map, Google receives the information that you have accessed the corresponding subpage. We have no control over the data transmitted.

YouTube

We embed videos from the YouTube platform, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in enhanced privacy mode (youtube-nocookie.com). This prevents YouTube from placing cookies until the video is actively played. Only once a video is played will data be transferred to YouTube (e.g., IP address, device type, page access).

If you have consented to marketing cookies via our cookie banner, this data transfer is based on Art. 6 (1)(a) GDPR. You can revoke your consent at any time via the cookie banner.

For more details on how YouTube processes your data, see Google’s privacy policy:

https://policies.google.com/privacy

Opt-Out Options (Right to Object)

You have several options to object to or restrict the collection and processing of your data by Google:

  • You can disable the storage of cookies through your browser settings (note: this may limit the functionality of our website).
  • You can prevent Google from collecting and processing data (including your IP address) via a browser plugin available at:
  • https://tools.google.com/dlpage/gaoptout?hl=en
  • (Only applies to data collected via Google Analytics)
  • You can withdraw your consent to data processing by Google Services at any time. To do so, delete the cookies in your browser and do not give consent again on your next visit.
  • If you have a Google account, you can manage how your data is stored via your account settings under “Data & Personalization.”

For more information about how Google processes your data, visit their Privacy Policy.

Facebook Pixel

We use the Facebook Pixel by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

This allows us to track whether Facebook ads lead to actions like purchases and gather statistical data to evaluate ad effectiveness. This is based on your explicit consent (Art. 6(1)(a) GDPR).

Data may be transferred to the USA. Meta complies with the Data Privacy Framework under Art. 45 GDPR (Adequacy Decision).

More info: https://www.dataprivacyframework.gov/s/

Meta’s privacy policy: https://www.facebook.com/about/privacy/

LinkedIn Insights

We use LinkedIn Conversion Tracking and Retargeting technologies by LinkedIn Corporation. These allow us to serve personalized ads to visitors on LinkedIn and analyze ad performance through anonymized reports.

For this, the LinkedIn Insight Tag is integrated into our website. If you’re logged into your LinkedIn account, a connection is established with LinkedIn’s servers.

This is based on your explicit consent (Art. 6(1)(a) GDPR). Data may be transferred to the USA. LinkedIn complies with the Data Privacy Framework under Art. 45 GDPR (Adequacy Decision).

More info: https://www.dataprivacyframework.gov/s/

LinkedIn privacy policy: https://www.linkedin.com/legal/privacy-policy

If you’re logged in to LinkedIn, you can adjust your advertising preferences here:

HubSpot

We use an online marketing tool from HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland (“HubSpot”) on our website.

Processing is based on your consent in accordance with Art. 6(1)(a) GDPR.

It is possible that data will be transferred to the USA. In such cases, an adequate level of data protection cannot be guaranteed, particularly due to potential access by U.S. authorities. The transfer is based on your explicit consent in accordance with Art. 49(1)(a) GDPR.

For more information, see HubSpot’s privacy policy:

https://legal.hubspot.com/privacy-policy

Hotjar

This website uses Hotjar, provided by Hotjar Ltd., Level 2, St Julians Business Centre, 3 Elia Zammit Street, St Julians STJ 1000, Malta, Europe (https://www.hotjar.com).

Hotjar helps us understand how users interact with our pages (e.g. how much time they spend on which sections, which links they click, what they like or ignore), allowing us to tailor our content to user behavior.

Processing is based on your consent in accordance with Art. 6(1)(a) GDPR.

For details, see Hotjar’s privacy policy:

https://www.hotjar.com/privacy.

Calendly

You can book an appointment with us via Calendly, a service provided by Calendly, LLC, 1315 Peachtree St NE, Atlanta, GA 30309, USA (https://calendly.com).

Processing is based on our legitimate interest in offering an easy scheduling tool (Art. 6(1)(f) GDPR).

It is possible that your data will be transferred to the USA. Calendly complies with the Data Privacy Framework and the transfer is based on Art. 45 GDPR (Adequacy Decision).

More information:

Contact Form and Email Contact

We provide a contact form on our website, which can be used to get in touch with us electronically. If a user chooses this option, the data entered in the input form will be transmitted to and stored by us. This includes:

  • User’s name
  • Email address
  • Phone number (optional)
  • Message

At the time the message is sent, the following data is also stored:

  • User’s IP address
  • Date and time of submission

Alternatively, you may contact us via the provided email address. In this case, the personal data submitted with the email will be stored.

We process this personal data for the purpose of communication (contact request and response) on the basis of Art. 6(1)(f) GDPR (legitimate interest) or Art. 6(1)(b) GDPR (contract performance or pre-contractual measures).

The data will be deleted when it is no longer required for the intended purpose.

Provisions for Users of Our Software

Our software is available at:

https://app.countx.com/

In addition to the data mentioned above, we process further data to provide our software and services.

For this purpose, customers can create a user account.

Processing is based on Art. 6(1)(b) GDPR (contract performance or pre-contractual measures).

Data Retention Period

Your data will be stored until you delete your user account.

After deletion, the data will be permanently erased, unless legal obligations require longer retention (e.g. tax or commercial law).

Weitergabe von Daten (auch Empfänger)

Disclosure of Data (including recipients)

Your data may be shared with third parties:

  • in response to information requests from credit agencies,
  • in the event of payment defaults,
  • for tax consultancy,
  • or for the establishment, exercise or defense of legal claims.

We may also forward your data to relevant authorities (e.g. tax offices) if you request our services to do so.

III. Newsletter Subscribers

Newsletter

We offer a newsletter that you can subscribe to on our website.

We process your email address for the purpose of sending the newsletter. Optionally, you may also provide your name and salutation. We use this data to personalize the communication.

We only send the newsletter after your explicit consent in accordance with Art. 6(1)(a) GDPR.

You can withdraw your consent to receive the newsletter at any time by clicking the unsubscribe link included in each newsletter email.

Please note that when we send the newsletter, we also analyze user behavior. For this analysis, the emails contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. Using this data, we create a user profile to tailor the newsletter to your interests.

IV. Social Media

General Information

We are active on social media platforms. However, we do not embed any platforms directly into our website.

When you click on the icons for specific platforms, the respective terms of use and privacy policies of those platforms apply.

You are under no obligation to register with any of these portals for information or contact purposes.

You can always reach us via other available contact options (e.g., phone, email, contact form).

Facebook

Below, we inform you about how we process personal data on the Facebook social media platform.

This applies to all content on our official Facebook fan page.

Controller according to Art. 4(7) GDPR:

Responsibility for data processing lies partly with us, the page operator, and partly with Meta Platforms Ireland Ltd. (“Facebook”), as detailed in Facebook’s privacy policy.

Information on Processing Activities

a) Processing by Facebook

Facebook collects and processes your personal data partly as an independent controller. We have no control over these processing operations.

You can find more information and Facebook’s contact details in their privacy policy:

https://www.facebook.com/privacy/explanation

b) Joint Responsibility, Art. 26 GDPR

We have entered into a joint controllership agreement with Facebook Ireland Ltd. in accordance with Art. 26 GDPR.

Facebook provides us, as the operator of a fan page, with so-called “Page Insights”. Page Insights provide aggregated data about how users interact with our fan page.

This processing is carried out jointly for the purpose of fan page optimization and is based on Art. 6(1)(f) GDPR (legitimate interest).

For information on recipients, retention periods, and your rights, please refer to Facebook’s privacy policy:

https://www.facebook.com/privacy/explanation

c) Processing by Us

We process your personal data for the following purposes:

  • Operating the fan page
  • Providing information (e.g. about products, services, etc.)
  • Communicating with our customers
  • Responding to inquiries
  • Optimizing and analyzing the fan page

Legal basis:

The processing for the above-mentioned purposes is based on Art. 6(1)(f) GDPR (legitimate interest) or Art. 6(1)(b) GDPR (contract performance or pre-contractual measures).

Recipients / Categories of Recipients:

Your data is processed internally by the relevant departments within our organization.

Depending on how you interact with our fan page, some data may be made public by Facebook (e.g. through comments, likes, shared content). These data may be visible to other visitors of our fan page.

Retention period:

Data you publish on Facebook (e.g. comments, likes, images, videos) remain available indefinitely unless you or we delete them (e.g. in case of unlawful content).

All other personal data is deleted when it is no longer required for the purpose for which it was collected.

We have no influence over data deletion by Facebook. For more information, please see Facebook’s policy:

https://www.facebook.com/privacy/explanation

V. Version of this Privacy Policy

This privacy policy is reviewed and updated regularly to reflect changes in legal or business requirements.

The most current version is always available on our website.

Last updated: June 2024