In this privacy statement we (the company caralegal GmbH) inform you about the processing of personal data when using our website (https://caralegal.eu/en/). You can print or save this privacy statement using your browser's standard functionality.
The point of contact and so-called controller for the processing of your personal data when visiting this website within the meaning of the EU General Data Protection Regulation (GDPR) is
caralegal GmbH
Am Hamburger Bahnhof 4
10557 Berlin
Germany
Email: privacy@caralegal.eu
Phone: +49 30 3119 3897
If you have any questions about data protection in connection with our product caralegal or the use of our website, you can also contact our data protection officer at any time. The data protection officer can be contacted at the above postal address or by sending an email to the address provided (please mark all correspondence with: “F.A.O. data protection officer”).
Every time you use/visit our website, we collect the connection data automatically transmitted by your browser in order to make visiting the website possible. This connection data includes the so-called http-header-information, including the user agent, and include in particular:
The data processing of this connection data is necessary to enable the visit of the website and to ensure the permanent operability and security of our systems as well as to generally administratively maintain our website. For the purposes described above, the connection data is also stored temporarily and limited to the most necessary content in internal log files in order to compile statistical information about the use of our website, to further develop our website with regard to the usage habits of our visitors (e.g. if the proportion of mobile devices with which the pages are accessed increases) and for general administrative maintenance of our website.
The legal basis is Art. 6 para. 1 lit. b GDPR, insofar as the page call occurs in the course of the initiation or fulfillment of a contract, and otherwise Art. 6 para. 1 lit. f GDPR due to our legitimate interest in enabling the website call and the permanent functionality and security of our systems. The automatic transmission of the connection data and the log files developed from it, however, do not constitute access to the information in the terminal equipment in the sense of the ePrivacy Directive of the EU member states, in Germany § 25 TDDDG. Apart from that, however, it would be absolutely necessary anyway.
For data protection reasons, log files are not permanently stored or analyzed by us.
You have various options for contacting us, for example via the contact form on this website or by phone. In this context, we process personal data exclusively for the purpose of communication with you.
The legal basis is Art. 6 para. 1 lit. b GDPR, insofar as your information is required to answer your inquiry or to initiate or fulfill a contract, and otherwise Art. 6 para. 1 lit. f GDPR due to our legitimate interest that you contact us and that we can answer you inquiry. We only make promotional telephone calls if you have given your consent for this. If you are not an existing customer, we will also send you promotional emails only on the basis of your consent. The legal basis in these cases is Art. 6 para. 1 lit. a GDPR in conjunction with § 7 para. 2 No. 1 or 2 UWG.
The data collected by us when using the contact form will be automatically deleted after your request has been fully processed, unless we still need your request to fulfill contractual or legal obligations (see section 7 “Storage period”).
We use our newsletter primarily to keep you informed about current developments in the world of data protection, articles from and about our specialist fields as well as about events, news, offers and other important information. To subscribe to the newsletter, we collect your email address and, in the case of events, also your name and, if applicable, the company name.
For newsletter subscriptions we use the so-called double opt-in procedure, which means that we will only send you newsletters by email if you click on a link in our notification email to confirm that you are the owner of the email address provided. If you confirm your email address, we will store your email address, the time of registration and the IP address you used when registering until you unsubscribe from the newsletter. The sole purpose of storing this data is to be able to send you the newsletter and prove that you registered. You can unsubscribe from the newsletter at any time. A corresponding unsubscribe link can be found in every newsletter. It is of course also sufficient if you notify us using the contact details provided above or in the newsletter (e.g. by email or letter).
We use so-called pixels (tiny, invisible image files) in our newsletters, which can be used to measure the opening rate, as well as links, where we can measure the click on the link before the forwarding to the target page. The data is collected by Sendinblue individually at the level of the recipients of the newsletter. However, the evaluation of the data takes place exclusively in aggregated form for statistical evaluation and for the optimization and further development of our content and customer communication. A usage analysis at the level of individual recipients of the newsletter does not take place. In addition, it is also recorded whether newsletters could be delivered and for which e-mail addresses delivery was not possible. A link with other data does not take place. You can prevent the measurement of the opening rate by deactivating the loading of images in your email client.
We use HubSpot, a service provided by HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA ("HubSpot"), to send our newsletter. For customers in Europe, the responsible entity is HubSpot Ireland Limited, 1 Sir John Rogerson's Quay, Dublin 2, Ireland.
We have concluded a Data Processing Agreement with HubSpot pursuant to Art. 28 GDPR. Your data is transmitted in encrypted form and stored within the European Union. Where HubSpot uses subprocessors located outside the European Union or the European Economic Area, personal data is transferred on the basis of the European Commission's Standard Contractual Clauses together with additional appropriate safeguards.
The legal basis for sending the newsletter, carrying out aggregated usage analyses and determining the deliverability of newsletters is your consent pursuant to Art. 6 (1) (a) GDPR.
The personal data processed in connection with your newsletter subscription will be deleted once you unsubscribe from the newsletter. To ensure that no further newsletters are sent to you, your email address will be added to a suppression list (blacklist). This data is processed solely for this purpose.
Further information: https://legal.hubspot.com/privacy-policy
We use the webinar platform Livestorm, operated by Livestorm SAS, 24 Rue Rodier, 75009 Paris, France, to organise and host free webinars.
When you register for or participate in a webinar, we process personal data where necessary. This may include your first and last name, email address, company name, webinar date, participation data, IP address and any information you voluntarily provide. If you use chat, Q&A or poll functions during a webinar, the content you submit will also be processed.
Processing is carried out for the purpose of registration, organisation and delivery of webinars as well as communication with participants.
The legal basis is Art. 6 (1) (b) GDPR where processing is necessary to provide webinar participation. Otherwise processing is based on your consent pursuant to Art. 6 (1) (a) GDPR.
We partly embed Livestorm registration forms via an iframe on our website. When accessing such embedded forms, technical data (including IP address, browser and device information) may be transmitted to Livestorm. Livestorm may also use Google reCAPTCHA to protect the registration form against abuse.
Where cookies or similar technologies are used when loading the embedded registration form, these are only used on the basis of your consent pursuant to §25 (1) TDDDG.
Livestorm acts as our processor under a Data Processing Agreement pursuant to Art. 28 GDPR. Personal data may also be processed outside the European Union or European Economic Area. In these cases Livestorm relies on the European Commission's Standard Contractual Clauses together with additional safeguards.
Data is retained only for as long as necessary for providing the respective service. Further information can be found in the cookie settings of our consent management tool and in Livestorm's Privacy Policy.
Further information: https://livestorm.co/privacy-policy
This website uses various services and applications (collectively, “tools”) provided either by us or by third parties. These include, in particular, tools that use technologies to store or access information in the terminal equipment:
With the aid of these technologies and also by simply establishing a connection on a page, so-called “fingerprints” can be created, i.e. usage profiles that do not require the use of cookies or web storage and can still recognize visitors. Fingerprints based on the connection setup cannot be completely prevented manually. Most browsers are set by default to accept cookies, the execution of scripts and the display of graphics. However, you can usually adjust your browser settings to reject all or certain cookies or to block scripts and graphics. If you block cookies from being stored, graphics from being displayed, and scripts from running entirely, our services are not likely to function properly or at all.
In the following, we list the tools used by category, informing you in particular about the providers of the tools, the storage period of the cookies or information in local storage and session storage, and the transfer of data to third parties. We also explain in which cases we obtain your voluntary consent to use the tools and how you can revoke it.
If - even despite the greatest care - the information in the consent banner contradicts that said in this data privacy policy, the information in this data privacy policy prevails.
We use tools necessary for website operation based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR to provide the basic functions of our website. In certain cases, these tools may also be necessary for the fulfillment of a contract or to carry out pre-contractual measures, in which case the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR. In these cases the access to and the storage of information in the terminal equipment is absolutely necessary and takes place on the basis of the ePrivacy Directive of the EU member states, in Germany according to § 25 para. 2 TDDDG.
We use all other non-essential (optional) tools that provide additional functions, in particular those for marketing purposes, based on your consent pursuant to Art. 6 para. 1 lit. a GDPR. The access to and the storage of information in the terminal equipment then takes place on the basis of the implementation laws of the ePrivacy Directive of the EU member states, in Germany in accordance with § 25 para. 1 TDDDG. Data processing with the help of these tools only takes place if we have received your prior consent for this.
If personal data is transferred to third countries, we refer you to section 6 ("Data transfer to third countries"), also with regard to the possible associated risks. We will inform you if an adequacy decision exists for the third country in question or if standard contractual clauses or other guarantees have been concluded. If you have given your consent to the use of certain tools and the associated transfer of your personal data to third countries, we (also) transfer the data processed when using the tools to third countries on the basis of this consent in accordance with Art. 49 para. 1 lit. a GDPR.
For obtaining and managing your consents, we use the WordPress plugin “Borlabs Cookie”. This generates a banner that informs you about data processing on our website and gives you the option to consent to all, some or no data processing through optional tools. This banner appears the first time you visit our website and when you revisit the selection of your preferences to change them or revoke consents. The banner also appears on subsequent visits to our website, provided that you have disabled the storage of cookies or the cookies or information in the local storage of "Borlabs Cookie" have been deleted or have expired.
In addition, the WordPress plugin "Borlabs Cookie" sets a necessary cookie ("borlabs-cookie") to store your given consents and revocations. If you delete your cookies, we will ask you for your consent again when you visit our website at a later time.
The data processing by the WordPress plugin "Borlabs Cookie" is necessary to provide you with the legally required consent management and to comply with our documentation obligations. The legal basis is Art. 6 para. 1 lit. f GDPR, based on our legitimate interest in meeting and fulfilling the legal requirements for cookie consent management. The access to and storage of information in the end device is absolutely necessary in these cases and takes place on the basis of the implementation laws of the ePrivacy Directive of the EU member states, in Germany according to § 25 para. 2 TDDDG.
You can revoke your consent for certain tools at any time. To do so, click on the following link: Cookie Settings. There you can also change the selection of the tools you wish to consent to using, as well as obtain additional information about the cookies and the respective storage period. Alternatively, you can assert your revocation for certain tools directly with the provider.
We use certain tools to enable the basic functions of our website ("necessary tools"). These include ensuring the security of our website.. Without these tools, we could not provide our service. Therefore, necessary tools are used without consent.
The legal basis for necessary tools is the necessity to fulfill our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR in the provision of the respective basic functions and the operation of our website. In cases where the provision of the respective website functions is necessary for the fulfillment of a contract or for the performance of pre-contractual measures, the legal basis for data processing is Art. 6 para. 1 lit. b GDPR. Access to and storage of information in the terminal device is absolutely necessary in these cases and is carried out on the basis of the implementation laws of the ePrivacy Directive of the EU member states, in Germany according to § 25 para. 2 TDDDG.
In the event that personal data is transferred to third countries (such as the USA), we refer to Section 6 ("Data transfer to third countries") in addition to the information provided below.
Our website uses Google Tag Manager, a service provided for users from the European Economic Area and Switzerland by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and for all other users by Google LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (collectively "Google").
The Tag Manager is used exclusively to manage website tools through integration and other services, so-called website tags. A tag is an element that is stored in the source code of our website in order to execute a tool, for example through scripts. If these are optional tools, they will only be integrated by the Google Tag Manager with your consent. The Google Tag Manager uses JavaScript and does not require the use cookies.
The legal basis is Art. 6 para. 1 lit. f GDPR, based on our legitimate interest to integrate and manage multiple tags on our website.
Google collects information about which tags are integrated by our website for the purpose of ensuring stability and functionality in the context of using the Google Tag Manager. However, the Google Tag Manager does not store any personal data beyond the mere establishment of the connection, in particular no data about user behavior or the pages visited.
We have concluded a data processing agreement with Google Ireland Limited. In the event that personal data is transferred by Google Ireland Limited to the USA or other third countries, Google Ireland Limited and Google LLC have concluded standard contractual clauses (Implementing Decision (EU) 2021/914, Module 3) pursuant to Art. 46 para. 2 lit. c GDPR.
For more information, please see Google’s information on the Tag Manager.
In order to improve our website, we use optional tools to recognize visitors and to statistically collect and analyze general usage behavior based on access data (“analytics tools”). We also use analytics services to evaluate the use of our various marketing channels. The usage information collected is processed in aggregated form and enables us to track usage behavior of our visitors. This is used to adapt and optimize the design of our website and to make the user experience more pleasant.
The legal basis for the analysis tools is - unless otherwise stated - your consent pursuant to Art. 6 para. 1 lit. a GDPR. The access to and the storage of information in the terminal equipment is then based on the implementation laws of the ePrivacy Directive of the EU member states, in Germany according to § 25 para. 1 TDDDG. For revocation of your consent, see 3.2.3.: "Revocation of your consent or changing your selection".
In the event that personal data is transferred to the USA or other third countries, your consent expressly extends to the data transfer (Art. 49 para. 1 lit. a GDPR). Please refer to section 6 ("Data transfer to third countries") for the associated risks.
Our website uses the web analytics service Google Analytics 4 (“Google Analytics 4”), a service provided for users from the European Economic Area, the Middle East and Africa (EMEA) by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and for all other persons by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (together “Google”).
Google Analytics 4 uses JavaScript and pixels to read information on your terminal device and cookies to store information on your terminal device. This is used to analyze your usage behavior and to improve our website. We will process the information obtained to evaluate your use of the website and compile reports on website activities for the website operators. The data generated in this context may be transferred by Google to a server in the USA for evaluation and stored there.
As part of the evaluation, Google Analytics 4 also uses artificial intelligence such as machine learning for automated analysis and enrichment of the data. This is done in particular for forecast metrics on the future behavior of visitors based on structured event data, such as forecast revenue, purchase probability, and churn probability. The forecast metrics can also be used for forecast target groups.
For further information, please visit: https://support.google.com/analytics/answer/9846734?hl=en&sjid=404984716171533111-EU.
In addition, Google Analytics 4 models conversions to the extent that not enough data is available to optimize the evaluation and reports. For further information, please visit: https://support.google.com/analytics/answer/10710245.
The data evaluations are automated with the help of artificial intelligence or on the basis of concrete individually defined criteria. For further information, please visit: https://support.google.com/analytics/answer/9443595.
The following data is processed by Google Analytics:
We have made the following privacy setting for Google Analytics 4:
The legal basis for this data processing is your consent pursuant to Art. 6 para. 1 lit. a GDPR. Access to and storage of information in the end device is then based on the implementation laws of the ePrivacy Directive of the EU member states, in Germany according to § 25 para. 1 TDDDG.
We have concluded a data processing agreement with Google Ireland Limited for the use of Google Analytics 4. In the event that personal data is transferred from Google Ireland Limited to the USA, Google Ireland Limited and Google LLC have concluded standard contractual clauses (Implementing Decision (EU) 2021/914, Module 3) pursuant to Art. 46 para. 2 lit. c GDPR. In addition, we also obtain your explicit consent for the transfer of your data to third countries pursuant to Art. 49 para. 1 lit. a GDPR.
For more information, please see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en&sjid=404984716171533111-EU.
We use the Content Delivery Network (CDN) provided by Cloudflare Germany GmbH, Rosenheimer Str. 143 C, 81671 Munich, Germany ("Cloudflare"), for the technical integration of the Google Tag Gateway. This integration is limited to isolated requests required for the provision, delivery and forwarding of tags and measurement requests in connection with Google Analytics (Section 3.4.1) and Google Ads Conversion Tracking (Section 3.5.2). All other website traffic is not routed through this infrastructure.
In this context, personal data such as your IP address, header and log data, timestamps, and technical information about the requesting browser or device may be processed. The processing is carried out for the purpose of ensuring the secure and reliable provision of the tag infrastructure and the technical forwarding of the corresponding requests.
The legal basis for this processing is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the technically reliable, secure and efficient integration and delivery of our tag infrastructure.
Where the integrated tags are used for analytics or advertising purposes, in particular in connection with Google Analytics or Google Ads Conversion Tracking, the processing is governed by the provisions described in the respective sections of this Privacy Statement. Such processing only takes place on the basis of the applicable consent where required.
Cloudflare acts as a recipient of your personal data and processes such data on our behalf as our processor. We have concluded a Data Processing Agreement with Cloudflare in accordance with Art. 28 GDPR.
Further information about Cloudflare is available at: https://www.cloudflare.com/privacy
We also use optional tools for advertising purposes ("marketing tools"). Some of the access data collected when using our website is used to create usage profiles, which store in particular your usage behavior, the advertisements you have viewed or clicked on and, based on this, the classification into advertising categories, interests and preferences. By analyzing and evaluating this access data, we are able to present you with personalized advertising, i.e. advertising that corresponds to your actual interests and needs, on our website and on the websites and services of other providers. In doing so, we also analyze your usage behavior in order to recognize you on other sites and to address you in a personalized manner based on your use of our site (so-called retargeting). In addition, we evaluate the effectiveness and success of our advertising campaigns (especially so-called conversions and leads).
Marketing tools also include optional social network tools that are used to share posts and content via these networks ("social media plugins").
The legal basis for the marketing tools is your consent pursuant to Art. 6 para. 1 lit. a GDPR, which you give via the consent banner or with the respective tool itself by individually allowing its use via a banner (overlay) placed over it. The access to and the storage of information in the terminal equipment is then based on the implementation laws of the ePrivacy Directive of the EU member states, in Germany according to § 25 para. 1 TDDDG. For revocation of your consent, see 3.2.3: "Revocation of your consent or changing your selection".
In the event that personal data is transferred to third countries (such as the USA), your consent expressly extends to the data transfer (Art. 49 para. 1 lit. a GDPR). Please refer to section 6 ("Data transfer to third countries") for the associated risks.
In the following section, we would like to explain the tools and the providers used for this in more detail. The data collected may include in particular:
However, the collected data is stored exclusively pseudonymized, so that no direct conclusions can be drawn about individuals.
Our website uses the LinkedIn Insight Tag service of LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland ("LinkedIn"). This enables us to collect statistical data about your visit and the use of our website and to evaluate it. Thereby it enables us to show you interest-based and relevant offers, recommendations and advertising on LinkedIn (retargeting). In addition, an analysis of the effectiveness of advertisements (conversion tracking) is carried out in this context. For this purpose, LinkedIn uses cookies, pixels and JavaScript.
The legal basis for this data processing is your consent pursuant to Art. 6 para. 1 lit. a GDPR. The access to and the storage of information in the terminal equipment is then based on the implementation laws of the ePrivacy Directive of the EU member states, in Germany according to § 25 para. 1 TDDDG.
If you are logged in to LinkedIn while visiting our website, LinkedIn may link the collected information to your member account and use it for targeted advertising on LinkedIn. You can view your privacy settings on LinkedIn at the following link: https://www.linkedin.com/psettings/enhanced-advertising.
We have concluded a data processing agreement with LinkedIn in accordance with Art. 28 GDPR. The data generated in this context may be transmitted by LinkedIn to a server in the USA and stored there. In the event that personal data is transferred to the USA or other third countries, we have concluded standard contractual clauses with LinkedIn (Implementing Decision (EU) 2021/914, Module 2) pursuant to Art. 46 para. 2 lit. c GDPR. In addition, we also obtain your express consent for the transfer of your data to third countries pursuant to Art. 49 para. 1 lit. a GDPR.
LinkedIn stores personal data and user-related information only for as long as necessary to provide, secure, analyse and optimise its services. Depending on their purpose, the cookies used are stored for periods ranging from 24 hours to up to 2 years. Further information about the cookies used by LinkedIn and their respective storage periods can be found in the cookie settings of our consent management tool as well as in LinkedIn's Privacy Policy.
For further information:
https://de.linkedin.com/legal/privacy-policy
https://www.linkedin.com/legal/l/cookie-table.
Our websites use the service "Google Ads Conversion Tracking", which is offered to persons from the European Economic Area and Switzerland by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and to all other persons by Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (together "Google").
With the help of the service, customer actions defined by us, such as clicking on a button and then submitting a form, are recorded and analysed. This helps us to evaluate the success of campaigns and advertisements and to optimise the design of our website. We also use and analyse parameters in the URL (such as source of the visitor (e.g. a domain), type and name of the campaign) to better measure the campaigns and assign them to users.
The service uses cookies, JavaScript, pixels and other technologies for this purpose. Google also processes the data to improve the quality and accuracy of conversions.
The legal basis for this processing is your consent pursuant to Art. 6 (1) (a) GDPR. Access to and the storage of information on your terminal device are carried out on the basis of your consent in accordance with the national laws implementing the ePrivacy Directive of the EU Member States, in Germany pursuant to Section 25 (1) TDDDG.
The data collected may be transferred by Google to a server in the United States for analysis and stored there. This transfer of your data to the United States is based on an adequacy decision (Google LLC is certified under the EU–U.S. Data Privacy Framework).
Google stores personal data and user-related information only for as long as necessary for conversion tracking and the analysis of advertising campaigns. Depending on their purpose, the cookies used are stored for periods of up to one year.
Further information can be found in Google's Privacy Policy: https://policies.google.com/privacy
Our website uses Microsoft Conversion Tracking, a service provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland ("Microsoft").
The service enables us to record and analyse customer actions defined by us, such as clicking a button and subsequently submitting a form. This helps us evaluate the success of our campaigns and advertisements and optimise the design of our website. We also use and analyse URL parameters (such as the source of the visitor, e.g. a referring domain, as well as the type and name of the campaign) in order to better measure our campaigns and attribute them to users. The service uses cookies, JavaScript and Local Storage for these purposes.
The legal basis for this processing is your consent pursuant to Art. 6 (1) (a) GDPR. Access to and the storage of information on your terminal device are carried out on the basis of your consent in accordance with the national laws implementing the ePrivacy Directive of the EU Member States, in Germany pursuant to Section 25 (1) TDDDG.
The data collected may be transferred by Microsoft to a server in the United States for analysis and stored there. This transfer of your data to the United States is based on an adequacy decision (Microsoft Corporation is certified under the EU–U.S. Data Privacy Framework).
Microsoft stores personal data and user-related information only for as long as necessary for conversion tracking, usage analysis and personalised advertising. Depending on their purpose, the cookies and information stored in Local Storage are retained for periods ranging from 24 hours to 13 months. Further information can be found in the cookie settings of our consent management tool as well as in Microsoft's Privacy Statement: https://www.microsoft.com/en-gb/privacy/privacystatement
We use HubSpot, a service provided by HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA ("HubSpot"), on our website. For customers in Europe, the responsible entity is HubSpot Ireland Limited, 1 Sir John Rogerson's Quay, Dublin 2, Ireland.
On the one hand, we use HubSpot to provide and manage our contact and enquiry forms and to process incoming enquiries within our CRM system. When you use our forms, HubSpot processes the personal data you provide (such as your name, email address, company, telephone number and the content of your enquiry) as well as technical data, including the date and time of submission, your IP address and browser and device information. In addition, information relating to the origin of your enquiry (such as UTM parameters, the landing page visited or the content requested) may be transmitted to and processed by HubSpot together with your form data for the purpose of assigning and analysing enquiries.
The processing of your enquiry submitted via our forms and the use of HubSpot as our CRM system are based on Art. 6 (1) (b) GDPR and Art. 6 (1) (f) GDPR, respectively. Our legitimate interest lies in the efficient handling and administration of contact enquiries and the structured organisation of prospective customer data.
On the other hand, HubSpot enables us to identify companies visiting our website in order to carry out more targeted marketing activities. In this context, information about the behaviour of website visitors (such as pages visited, referral source and time spent on the website) is processed. In addition, the IP address is processed to determine the company and the approximate geographical location of the visitor. For these purposes, HubSpot uses cookies and, depending on the functions enabled, Local Storage and Session Storage.
Where HubSpot uses analytics or tracking functions or places cookies or similar technologies, such processing takes place solely on the basis of your consent pursuant to Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG.
HubSpot stores personal data only for as long as necessary to provide the respective services, process your enquiries, operate security mechanisms and, where applicable, analytics and tracking functions. Technically necessary security cookies used in connection with the provision of forms are stored for a period of 30 minutes. Further information can be found in the cookie settings of our consent management tool as well as in HubSpot's Privacy Policy.
Further information on data processing and data protection at HubSpot is available at: https://knowledge.hubspot.com/
Our website uses Supademo, a service provided by Supademo Inc., 651 N Broad St, Suite 201, Middletown, DE 19709, USA ("Supademo"). This service enables us to provide clear and easy-to-follow step-by-step demonstrations of our products and services.
When you visit a page that uses Supademo, technical information such as your IP address, browser type, operating system and your interactions with the provided demos may be processed.
Where cookies or similar technologies are used or information is accessed from your terminal device when loading Supademo content, the legal basis for this processing is your consent pursuant to Art. 6 (1) (a) GDPR. Access to and the storage of information on your terminal device are carried out on the basis of your consent in accordance with the national laws implementing the ePrivacy Directive of the EU Member States, in Germany pursuant to Section 25 (1) TDDDG.
Supademo acts as our processor, and we have concluded a Data Processing Agreement with Supademo pursuant to Art. 28 GDPR. To provide its services, Supademo uses subprocessors, in particular Amazon Web Services (AWS) for hosting and infrastructure services.
Personal data may also be processed in the United States. For transfers of personal data outside the European Economic Area, Supademo has concluded the European Commission's Standard Contractual Clauses pursuant to Art. 46 (2) (c) GDPR with its subprocessors and has implemented additional appropriate safeguards.
Supademo stores personal data only for as long as necessary to provide the respective service. Further information can be found in the cookie settings of our consent management tool as well as in Supademo's Privacy Policy.
Further information is available in Supademo's Privacy Policy:
https://supademo.com/privacy-policy
https://supademo.com/privacy-policy/subprocessors
Our website uses the "Google Ads Remarketing" service, which is provided for users in the European Economic Area and Switzerland by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and for all other users by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (collectively, "Google").
Google Ads Remarketing enables us to display targeted advertisements for caralegal to users of caralegal.eu after they have visited our website, either on websites within the Google Partner Network or in Google Search. For this purpose, the collected and analysed usage information, including information obtained through Google Ads Conversion Tracking, is compiled into audience lists in Google Analytics. These audience lists may then also be used by Google Ads Remarketing. Audience lists for the Google Display Network contain at least 100 users, while audience lists for Google Search contain at least 1,000 users. Advertisements are therefore displayed to audience groups rather than to individually identifiable users. Google Ads Remarketing uses cookies, JavaScript and pixels for these purposes.
The legal basis for this processing is your consent pursuant to Art. 6 (1) (a) GDPR. Access to and the storage of information on your terminal device are carried out on the basis of your consent in accordance with the national laws implementing the ePrivacy Directive of the EU Member States, in Germany pursuant to Section 25 (1) TDDDG.
The data collected may be transferred by Google to a server in the United States for analysis and stored there. This transfer of your data to the United States is based on an adequacy decision (Google LLC is certified under the EU–U.S. Data Privacy Framework).
If you use a Google Account, Google may, depending on the settings of your Google Account, associate your web and app browsing history with your Google Account and use information from your Google Account to personalise advertisements. If you do not wish this association to take place, you should sign out of your Google Account before visiting our website.
If you have not consented to the use of Google Ads Remarketing, Google will only display general advertisements that are not selected based on the information collected about you through this website. In addition to withdrawing your consent, you can also disable personalised advertising in your Google Ads settings: https://adssettings.google.com/notarget
Google stores personal data and user-related information only for as long as necessary for conversion tracking, campaign analysis and personalised advertising. Depending on their purpose, the cookies used are stored for periods ranging from 90 days to 13 months. Further information can be found in the cookie settings of our consent management tool as well as in Google's Privacy Policy.
Google Privacy Policy: https://policies.google.com/privacy
We maintain online presences in social networks in order to communicate on these platforms with customers and interested parties, among others, and to provide information about our products and services.
The users' data is generally processed by the social networks concerned for market research and advertising purposes. In this way, usage profiles can be created based on the interests of the users. For this purpose, cookies and other identifiers are stored on the users' computers. Based on these usage profiles, advertisements, for example, are then placed within the social networks but also on third-party websites.
As part of the operation of our online presences, it is possible that we may access information such as statistics on the use of our online presences provided by the social networks. These statistics are aggregated and may include, in particular, demographic information (e.g., age, gender, region, country) as well as data on interaction with our online presences (e.g., likes, subscription, sharing, viewing of images and videos) and the posts and content distributed via them. This may also provide information about the interests of users and which content and topics are particularly relevant to them. This information may also be used by us to adapt the design and our activities and content on the online presence and optimize it for our audience. Please see the list below for details and links to the social network data that we, as operators of the online presences, can access. The collection and use of these statistics is generally subject to joint responsibility. Where applicable, the relevant agreement is listed below.
The legal basis for data processing is Art. 6 para. 1 lit. f GDPR, based on our legitimate interest in effectively informing users and communicating with users, or Art. 6 para. 1 lit. b GDPR, in order to stay in contact with and inform our customers and to carry out pre-contractual measures with future customers and interested parties.
If you have an account with the social network, it is possible that we can see your publicly available information and media when we access your profile. In addition, the social network may allow us to contact you. For example, this may be through direct messages or posted articles. The content communication via the social network and the processing of the content data are thereby subject to the responsibility of the social network as a messenger and platform service. As soon as we transfer or further process personal data from you into our own systems, we are independently responsible for this and this is done to carry out pre-contractual measures and to fulfill a contract in accordance with Art. 6 para. 1 lit. b GDPR.
For the legal basis of the data processing carried out by the social networks under their own controllership, please refer to the data protection notices of the respective social network. The links below also provide you with further information on the respective data processing and the options to object.
We would like to point out that data protection requests can be asserted most efficiently with the respective provider of the social network, as only these providers have access to the data and can take appropriate measures directly.
Below is a list with information on the social networks on which we operate online presences:
On the social network LinkedIn we use the LeadGen Forms of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. These are ads on LinkedIn with an integrated form field. LeadGen Forms allow you to sign up for out services and events or submit requests to us directly from the ads. This includes in particular the request for a demo of our software.
In the form field provided, you can voluntarily enter your contact information, such as name, company and email address, so that we can contact you. This enables us, for example, to send you the date and link for the demo or for participation in our events.
In this context, the data processing is under the controllership of LinkedIn as the platform operator as well as the telecommunications service provider for sending and receiving messages on LinkedIn. You can voluntarily choose to enter your contact data via the LeadGen Forms. We expressly point out that you can also contact us at any time via the contact options on our website.
Insofar as we also process your data entered in the LeadGen Forms for the aforementioned purposes under our own controllership, the legal basis for the data processing is Art. 6 para. 1lit. f GDPR based on our legitimate interests in order to use our advertisements to inform you about our services and to contact you, or Art. 6 para. 1 lit. b GDPR in order to initiate a contract with you.
For further information regarding the data processing on LinkedIn, please refer to LinkedIn's privacy policy: https://de.linkedin.com/legal/privacy-policy.
In principle, we will only pass on the data we collect if:
Part of the data processing may be carried out by our service providers. In addition to the service providers mentioned in this privacy statement, this may in particular include data centers that store our website and databases, software providers, IT service providers that maintain our systems, agencies, market research companies, group companies and consulting firms. If we pass data on to our service providers, they may use the data exclusively for the fulfillment of their tasks. We have carefully selected and commissioned the service providers. They are contractually bound by our instructions, have appropriate technical and organizational measures in place to protect the rights of data subjects and are carefully monitored by us.
As explained in this privacy notice, we use services whose providers are partly located in so-called third countries (outside the European Union or the European Economic Area) or process personal data there, i.e. countries whose level of data protection does not correspond to that of the European Union. Insofar as this is the case and the European Commission has not issued an adequacy decision (Art. 45 GDPR) for these countries, we have taken appropriate precautions to ensure an adequate level of data protection for any data transfers. These include, among others, the standard contractual clauses of the European Union or binding internal data protection regulations.
Where this is not possible, we base the transfer of data on exceptions to Art. 49 GDPR, in particular your expressed consent or the necessity of the transfer for the performance of the contract or for the implementation of pre-contractual measures.
If a third country transfer is provided for and there is no adequacy decision or appropriate safeguards, it is possible and there is a risk that authorities in the respective third country (e.g. intelligence services) may gain access to the transferred data in order to collect and analyse it and that enforceability of your data subject rights cannot be guaranteed. When obtaining your consent via the cookie banner, you will also be informed of this.
In principle, we only store personal data for as long as necessary to fulfill contractual or legal obligations for which we have collected the data. We then delete the data without delay, unless we still require the data until the end of the statutory limitation period for evidence purposes for claims under civil law or due to statutory retention obligations or there is another legal basis under data protection laws in the specific case for the continuing standard limitation period at this point in time at the earliest.
For evidence purposes, we must keep contract data for another three years after the end of the year in which the business relationship with you ends. After the standard statutory period of limitation, any claims become statute-barred at this point in time at the earliest.
Even after that, we are still required to store some of your data for accounting reasons. We are obliged to do so due to statutory documentation obligations, which may arise on the basis of the German Commercial Code, the Fiscal Code, the Banking Act and the Money Laundering Act. The periods specified there for retaining documents range from two to ten years.
We do not carry out automated decision-making, including profiling, within the meaning of Art. 22 (1) and (4) GDPR.
You may generally use our website for informational purposes without actively providing personal data.
However, if you wish to use certain features, such as contact forms, demo requests, newsletter subscriptions, webinar registrations or event registrations, we require certain information in order to process your request or provide the requested service.
Without this information, some features may not be available.
You are entitled to the data subject rights formulated in Art. 15 – 21, Art. 77 GDPR at any time:
To exercise your rights described here, you can contact us at any time using the contact details above. This also applies if you would like to receive copies of guarantees to prove an adequate level of data protection. Provided that the respective legal requirements are met, we will comply with your data protection request.
Your requests for the assertion of data protection rights and our responses to them will be stored for documentation purposes for a period of up to three years and, in individual cases, even longer for the assertion, exercise or defense of legal claims. The legal basis is Art. 6 para. 1 lit. f GDPR, based on our interest in defending against any civil claims under Art. 82 GDPR, avoiding fines under Art. 83 GDPR and fulfilling our accountability obligations under Art. 5 (2) GDPR.
Finally, you have the right to complain to the data protection supervisory authority responsible for us. You can assert this right at a supervisory authority in the member state of your place of residence, your place of work or the place of the alleged infringement. In Berlin, where we are based, the competent supervisory authority is: Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59-61, 10555 Berlin.
You have the right to withdraw the consent you gave us at any time. As a result of this, we will cease the data processing based on this consent with future effect. This withdrawal of your consent will not affect the lawfulness of the processing carried out on the basis of the consent prior to the withdrawal.
Insofar as we process your data on the basis of legitimate interests, you have the right to object to the processing of your data at any time for reasons arising from your particular situation. If your objection is to data processing for direct marketing purposes, you have a general right of objection, which we will implement without requiring you to give reasons.
If you would like to make use of your right of withdrawal or objection, it is sufficient to simply notify us using the contact details provided above.
We regularly update this Privacy Statement, for example when we make changes to our website or where legal or regulatory requirements change.
Last updated: June 2026
You are currently viewing a placeholder content from Hubspot Embedded Content. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
More InformationYou are currently viewing a placeholder content from Hubspot Meetings. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
More Information
