Privacy Policy


1. Subject matter and scope
This privacy policy provides information about which personal data is collected during individual processing operations and how and for what purposes this personal data is processed.

This privacy policy provides information about data processing when visiting the website, but also in other contexts, e.g., the processing of data from customers, applicants, and when participating in video conferences.

Your personal data will always be processed in accordance with the statutory data protection regulations and this privacy policy.
2. Responsible party and data protection officer
The responsible party is the

ATRIVIO GmbH
6 Albert Einstein Street
87437 Kempten

Tel.: +49 831 512999-0

(hereinafter "ATRIVIO").

The data protection officer can also be contacted at info@atrivio.de.
3. Visiting the website
3.1 Hosting and log files
The website is hosted by a service provider in the EU on the basis of a data processing agreement.
Each time the website is accessed, the system automatically collects data and information from the computer system of the accessing device. The following data is logged:

  • IP address of the calling device
  • Operating system of the calling device
  • Browser version of the calling device
  • Name of the file or website accessed
  • Date and time of retrieval
  • Amount of data transferred
  • Referring URL

This data is processed in order to display the website, to ensure the security, availability, and integrity of the website (e.g., detection and prevention of DoS attacks or access by bots), to improve the quality and presentation of the website, to identify and correct errors, and for statistical purposes. This data is regularly deleted after a few days.
The legal basis for this data processing is the legitimate interest of the controller in the above-mentioned purposes.


3.2 Cookies
Cookies are used on this website. Cookies are pieces of information that are transferred from our web server or third-party web servers to the browser of visitors to the website and stored there for later retrieval. Cookies can be small files or other types of information storage. Cookies store information that is related to the specific device used. Cookies contain a characteristic string of characters that enables the browser to be uniquely identified when the website is visited again. A cookie also contains information about its origin and storage period. However, this does not mean that a cookie can be used to directly identify visitors to the website.
When you visit the website, cookies are set that are absolutely necessary for the operation of the website. These absolutely necessary cookies may, for example, be cookies that are required for the display of the website with a content management system, which are used to recognize language settings or to document whether consent has been given to set further (optional) cookies or whether such storage has been rejected. The strictly necessary cookies, including their purpose and storage period or deletion period, are explained below and additionally in the cookie banner that is displayed when you visit the website.
Optional cookies are also used, for example, to collect additional information about the interests of visitors to the website or their usage behavior in order to analyze and optimize the website and customer interactions in general on this basis.
Optional cookies, including their purpose and storage period or deletion period, are explained below and additionally in the banner that is displayed when the website is accessed. Optional cookies are only set once explicit consent has been given for the setting of optional cookies.


3.3 Google Maps
The website uses the Google Maps service provided by Google Ireland Limited in Ireland. The provider acts as a processor on the basis of a data processing agreement.
Google Maps enables interactive maps to be displayed. When a website that uses Google Maps is accessed, information about the use of the website by visitors to the website (e.g., IP address) is transmitted to Google's servers in the USA and stored there.
This may involve the transfer of personal data to third countries that do not offer an adequate level of data protection. In this case, it is ensured that appropriate safeguards are in place for such transfers to guarantee an adequate level of data protection. The controller will provide evidence of these appropriate safeguards upon request.
The legal basis for this data processing is the legitimate interest of the controller in providing a user-friendly and interactive website. If consent has been obtained, the legal basis is the consent that has been expressly given and can be revoked at any time.


3.4 Web analytics (Google Analytics)
The website uses the web analytics service Google Analytics provided by Google Ireland Limited in Ireland. The provider acts as a processor on the basis of a data processing agreement.
JavaScript tags can be used with Google Analytics to collect information about website usage. Google Analytics uses cookies to collect information about how visitors interact with the website.
When using Google Analytics, the IP address of visitors to the website, information about the use of the website, browser type and browser version, operating system used, the previously visited page, and the time of the server request are transmitted to Google's servers and processed there.
The IP addresses collected from visitors to the website are truncated within the EU before being transmitted to the USA. Only in exceptional cases, in the event of technical disruptions in Europe, is the unabridged IP address transmitted to Google in the USA and truncated there. The transmitted IP addresses are not merged with other Google data.
Accordingly, personal data may be transferred to third countries that do not offer an adequate level of data protection. In this case, it is ensured that appropriate safeguards are in place for such transfers to ensure an adequate level of data protection. The controller will provide evidence of these appropriate safeguards upon request.
The legal basis for this data processing is the express consent of visitors to the website, which can be revoked at any time.


3.5 Google Ads
The website provider uses the Google Ads advertising program from Google Ireland Limited in Ireland. The provider acts as a processor on the basis of a data processing agreement.
The Google Ads advertising program enables targeted, interest-based advertising on the Google search engine and third-party websites, and allows the performance of individual advertisements to be evaluated and optimized, for example by analyzing which advertisements were clicked on and how often.
This may involve the transfer of personal data to third countries that do not offer an adequate level of data protection. In this case, it is ensured that appropriate safeguards are in place for such transfers to guarantee an adequate level of data protection. The controller will provide evidence of these appropriate safeguards upon request.
The legal basis for this data processing is the express consent of visitors to the website, which can be revoked at any time.


3.6 Google AdSense
The website uses the Google AdSense advertising service provided by Google Ireland Limited in Ireland. The provider acts as a processor on the basis of a data processing agreement.
Google AdSense enables targeted advertisements from third parties to be displayed on the website or to be displayed by Google. The content of the advertisements is selected based on the interests of website visitors according to their previous user behavior. Google AdSense uses cookies and so-called "web beacons" (small invisible graphics) and device fingerprints (which can be used to recognize end devices based on their configuration).
This may involve the transfer of personal data to third countries that do not offer an adequate level of data protection. In this case, it is ensured that appropriate safeguards are in place for such transfers to guarantee an adequate level of data protection. The controller will provide evidence of these appropriate safeguards upon request.
The legal basis for this data processing is the express consent of visitors to the website, which can be revoked at any time.


3.7 Web analytics (eTracker)
The website uses the web analytics service eracker provided by etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg. The provider acts as a processor on the basis of a data processing agreement.
In order to better understand how visitors use the website and to continuously improve the website and the content and services offered, the use of the website is statistically evaluated. The data collected in this process is used to create aggregated usage reports.
When using the web analytics service etracker, the following data is collected:

  • Two bytes of the IP address of the user's calling system,
  • the website and subpages accessed,
  • the website from which the user accessed the website (referrer),
  • the length of time spent on the website,
  • The frequency with which the website is accessed

etracker does not set cookies, but uses a device fingerprinting process. The following information is stored in the device fingerprinting process: browser language, operating system, browser used, browser plug-ins. If etracker uses analysis and optimization cookies, explicit consent is obtained separately in advance. The cookies enable a statistical analysis of the website's reach, a measurement of the success of online marketing measures, and test procedures to test and optimize different versions of the online offering or its components, for example.
The collected data is hashed and stored for 24 hours so that the website visitor can be recognized as a unique visitor to the website the next time they visit.
The data generated by etracker is processed and stored exclusively in Germany on behalf of the provider of this website and is therefore subject to strict German and European data protection laws and standards. etracker has been independently audited, certified, and awarded the ePrivacyseal data protection seal of approval.
The legal basis for this data processing is the legitimate interest of the controller in statistically evaluating user behavior in order to continuously improve the website and the content and services offered. If consent has been obtained, the expressly granted and revocable consent at any time constitutes the legal basis.

You may object to the aforementioned data processing at any time. Objecting will not have any negative consequences.



Further information on data protection at etracker can be found here.


3.8 LinkedIn Ads
The website uses tracking pixels and cookies from LinkedIn Ireland Unlimited Company in Ireland to track the use of the website and the actions of visitors to the website for the purpose of conversion tracking. The provider acts as a processor on the basis of a data processing agreement.
Tracking pixels are code snippets that can be used to track the actions of website visitors, allowing advertisements to be personalized and improved, and their success to be measured. This enables the use of the website to be evaluated for statistical and market research purposes and advertising campaigns to be optimized.
The data collected via LinkedIn Ads may be used by LinkedIn as the controller for its own tracking and advertising purposes. For further details, please refer to LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy?.
If a visitor to the website is a member of the LinkedIn social media platform and has allowed the provider to do so via the settings of their user account with the social media network, the provider of the social media network or tracking pixel can link the information collected about the visit to the website with the associated user account on the respective social media network and use it for targeted advertising.
The website provider can also measure the effectiveness of advertisements on the respective social media networks and see whether a user was redirected to the website via such advertisements (conversion measurement).
When integrating such tracking pixels, personal data may be transferred to third countries that do not offer an adequate level of data protection. In this case, it is ensured that appropriate safeguards are in place for such transfers to ensure an adequate level of data protection. The controller will provide evidence of these appropriate safeguards upon request.
The legal basis for this data processing, including the transfer of data to LinkedIn, is the express consent of visitors to the website, which can be revoked at any time.


3.9 SalesViewer
This website uses JavaScript-based code from SalesViewer® GmbH, Universitätsstraße 60, 44789 Bochum, Germany, which is used to collect company-related data and for corresponding use. The data collected using this technology is encrypted using a non-reversible one-way function (known as hashing). The data is immediately pseudonymized and is not used to personally identify visitors to this website.
The data stored within the scope of Salesviewer will be deleted as soon as it is no longer required for its intended purpose and there are no legal retention obligations preventing its deletion.
The data generated by SalesViewer is processed and stored exclusively in Europe on behalf of the provider of this website.
The legal basis for this data processing is the legitimate interest of the controller for marketing, market research, and optimization purposes. If consent has been obtained, the expressly granted and revocable consent at any time constitutes the legal basis.
You can object to the collection and storage of data at any time with future effect by clicking on the link https://www.salesviewer.com/opt-out. An opt-out cookie for this website will then be stored on your device. If you delete your cookies in this browser, you will need to click on this link again.
4. Ticketing and support
When support requests are made or support tickets are created and when requests are processed, the personal data provided, the user's contact details, and other content and information provided are collected and processed in order to manage, process, and document the respective request. In addition, information about the browser, IP address, and location of the respective user is processed.
This may involve the transfer of personal data to third countries that do not offer an adequate level of data protection. In this case, it is ensured that appropriate safeguards are in place for such transfers to guarantee an adequate level of data protection. The controller will provide evidence of these appropriate safeguards upon request.
The legal basis for this processing is the fulfillment of the contract or the implementation of pre-contractual measures and/or the legitimate interest of the controller in providing services and communicating with visitors to the website and providing optimal support for visitors to the website.
5. Contact establishment and contact database (CRM)
If you contact us, e.g. by email, via a contact form, or via live chat, the information you provide will be processed for the purpose of handling your inquiry.
We require the information requested in a contact form or live chat in order to process your inquiry, address you correctly, and send you a response.
We process the data of our customers, service providers, and suppliers within the scope of providing our contractual services. This may involve the processing of inventory data (e.g., first and last name of the contact person(s), address), contact details (e.g., email address, telephone number), contract data (e.g., subject matter of the contract, term), payment data, and data that is collected in the course of providing services and/or is necessary for the provision of services.
Enquiries and customer relationships are regularly processed in our CRM system. The data processed in this context (surname, first name, title, postal address, date of birth if applicable, your specific interest in our products and services, and your interactions with us) may also be used by us for direct marketing purposes, in particular for postal advertising, in compliance with legal requirements.
The legal basis for this data processing is the legitimate interest of the controller in communicating with customers, service providers, suppliers, interested parties, website visitors, and other third parties, in maintaining relationships with interested parties, customers, and service providers, and in marketing products and services. If the purpose of establishing contact is to conclude a contract or if it takes place within the framework of the execution of a contract, the legal basis for the processing is the fulfillment of the contract or the implementation of pre-contractual measures.
6. Email newsletter
6.1 Registration/Subscription
You can register on the website to receive an email newsletter. When you register, the data from the input mask, the IP address of the accessing computer, and the date and time of registration are collected and stored.
To verify that a registration for a newsletter is made by the actual owner of an email address, the so-called "double opt-in" procedure is used. After registering an email address, a confirmation email is sent to the registered email address. Registration for the newsletter is only completed when a confirmation link contained in the confirmation email is activated. The IP address of the accessing computer and the date and time of activation of the confirmation link are also collected and stored.
You can unsubscribe from the newsletter at any time by using the unsubscribe link included in each newsletter or by contacting the controller using the contact details provided above.
The legal basis for processing data in connection with registration and sending the email newsletter is the consent that has been expressly given and can be revoked at any time.
Please note that in the event of withdrawal of consent, the consent data will be stored until the expiry of the statutory limitation period in order to enable the controller to defend itself legally if necessary. The obligation to provide accountability and evidence takes precedence over the obligation to delete data during this period. The legal basis for this storage of consent data is the fulfillment of a legal obligation (accountability) and the legitimate interest of the controller in potential legal defense.


6.2 Email newsletters within the framework of an existing customer relationship
If you register as a user of the platform and provide your email address, this may be used to send you an email newsletter, provided you have not objected to such use. The email newsletter sent as part of an existing customer relationship is used exclusively for direct advertising of our own similar goods or services. You can object to the use of your email address for this purpose at any time, without incurring any costs other than the transmission costs according to the basic rates, by using the unsubscribe link contained in each email newsletter or by contacting the responsible party using the contact details above.
The legal basis for sending the email newsletter within the framework of an existing customer relationship is the legitimate interest of the controller in carrying out direct marketing measures.
Please note that if you object to receiving further email newsletters within the framework of an existing customer relationship, the data relating to your consent will be stored until the expiry of the statutory limitation period in order to enable the controller to defend itself legally if necessary. The obligation to provide accountability and evidence takes precedence over the obligation to delete data for this period. The legal basis for this storage of consent data is the fulfillment of a legal obligation (accountability) and the legitimate interest of the controller in potential legal defense.


6.3 Newsletter analytics/tracking
Statistical analysis of usage data may be carried out for the email newsletter. For this purpose, the number of times the email is opened and internal clicks are recorded and stored. This information is used to measure and optimize the success of email newsletter campaigns by making the content of the email newsletters more interesting and relevant to the target group.
The legal basis for this analysis is the explicitly granted consent, which can be revoked at any time.
7. Social media
7.1 Social media buttons
Our website features social media buttons from various social media networks (e.g., LinkedIn, Instagram, Twitter, and Facebook).
If you click on one of these social media buttons, you will be redirected to our pages on the respective social media network. In this case, the provider of the respective social media network receives the information that your browser has accessed the corresponding page of our website, even if you do not have a profile with the respective social media network or are not logged in there. This information (including your IP address) is transmitted directly from your browser to a server of the respective provider. If you click on a social media button and are either logged in to the respective social media network or then log in to the page of the respective social media network, the transmitted information can be assigned to your account with the social media network.
For information on the purpose and scope of data collection and processing by the providers of the respective social media network, the provider identification, a contact option, and your rights and setting options for data protection, please refer to the respective data protection information of the providers of the social media networks.


7.2 Social media pages
We maintain a publicly accessible profile on various social media networks (e.g., LinkedIn, Instagram, Twitter, and Facebook).
If you visit our social media pages and are logged into the respective social media network, the provider of the respective social media network can analyze your usage behavior and assign the information collected to your account with the social media network and enrich it there. Even if you are not logged in or do not have an account with the respective social media network, data relating to you may be collected by the provider of the respective social media network, for example, your IP address or data collected via a cookie.
The operators of social media networks can use this data to create user profiles. Based on your user profile, interest-based advertisements can then be displayed to you both on the websites of the social media network and on other websites.
When you visit one of our social media pages, we are jointly responsible with the social media network provider for the collection and processing of your personal data that takes place there. For information about the collection and processing of your personal data that takes place there, please refer to the privacy policy of the respective social media network.
You can assert your rights as a data subject (right to information, correction, deletion, restriction of processing, data portability, etc.) both against us and against the provider of the respective social media network. In this context, we would like to point out that we can only influence the processing of personal data and the implementation of data subject rights within the scope of our social media pages to the extent that the respective provider allows us to do so.
The legal basis for our use of social media pages is our legitimate interest in the presence and marketing of our products and services on the Internet.
8. Applications
8.1 Application process
We collect and process personal data from applicants for the purpose of conducting the application process.
When we conclude an employment contract with an applicant, the data provided will be processed for the purpose of implementing the employment relationship in compliance with the statutory provisions. If no employment contract is concluded, the application documents will be deleted immediately after the application process has been completed, provided that there is no overriding legitimate interest in their deletion, such as the defense against claims or a function of preserving evidence in accordance with equal treatment and anti-discrimination laws.
The legal basis for this storage and processing is the implementation of pre-contractual measures.


8.2 Talent Pool
If an applicant has consented to the longer storage of their data in our talent pool, we will store the data submitted as part of the application in our talent pool for a further 2 years after the end of the application process in order to identify future positions that may be of interest to the applicant and to contact the applicant in this regard if necessary. The data will be deleted after this period has expired.
Such consent to the storage of application data in our applicant pool can be revoked at any time for the future. To do so, please send us an email using the contact details provided above.
The legal basis for storing application documents in our talent pool is, where applicable, the applicant's express consent, which can be revoked at any time.
9. Video surveillance
Some of our business premises are monitored by video surveillance. This monitoring is clearly indicated by signs. The legal basis for this storage and processing is Art. 6 (1) (f) GDPR. The purpose of video surveillance and our legitimate interest is to uphold our property rights, protect our employees from dangerous situations, protect our property, namely our business premises and equipment, and preserve evidence after criminal offenses. Only the management has access to the recordings. In individual cases, the recordings may be passed on to law enforcement authorities in accordance with the purpose. The data is deleted by the system after 7 working days, unless there are incidents within the scope of our legitimate interest that require longer storage.
10. Mergers and Acquisitions (M&A)
If we are involved in a restructuring, acquisition, sale of assets, merger, financing, transfer of services to another provider, due diligence review, insolvency, or receivership, your personal data may be transferred to third parties to the extent permitted by law and to the extent necessary in connection with and as part of the relevant legal transaction, in compliance with the basic principles of data protection.
11. Recipients of data
Within the organization of the controller, those internal departments or organizational units shall have access to data that they need to perform their tasks, to fulfill contracts, if applicable, to process data on the basis of the consent of the data subject(s), or to safeguard overriding legitimate interests.
Data will only be passed on to third parties within the framework of legal requirements. Your data will only be passed on to third parties if this is necessary for contractual purposes or to safeguard our overriding legitimate interest in the effective execution of our business operations.
If we use service providers or third-party providers in connection with the provision of the website or other services, we take appropriate legal precautions and implement appropriate technical and organizational measures to ensure the protection of your personal data.
12. Rights of data subjects
12.1 Right to information
Within the framework of the legal requirements, data subjects have the right to request information about the personal data processed about them.


12.2 Right to rectification
Data subjects have the right to request the correction of inaccurate personal data concerning them. They also have the right to request the completion of incomplete personal data.


12.3 Right to erasure
Data subjects have the right to request the deletion of personal data concerning them within the framework of the legal requirements.


12.4 Right to restriction of processing
Data subjects have the right to request a restriction on the processing of personal data concerning them within the framework of the legal requirements.


12.5 Right to object to processing
Within the framework of the legal requirements, data subjects have the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them which is carried out for the performance of a task carried out in the public interest or in the exercise of official authority, or on the basis of a legitimate interest. In this case, the data will not be further processed unless the controller can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or if the processing serves to assert, exercise, or defend legal claims.
Furthermore, data subjects have the right to object at any time to the processing of personal data concerning them for the purpose of direct marketing; this also applies to any profiling related to such direct marketing.


12.6 Right to withdraw consent
Data subjects who have given their consent to processing have a right of revocation within the framework of the legal requirements.


12.7 Right to data portability
Within the scope of the legal requirements, data subjects have the right to receive the personal data concerning them that they have provided to a controller in a structured, commonly used, and machine-readable format ("data portability") and the right to have this data transmitted to another controller.


12.8 Exercising rights
The rights of data subjects can be exercised by contacting the controller or, where applicable, the data protection officer using the contact details provided above.


12.9 Complaints to data protection supervisory authorities
If data subjects believe that the processing of personal data concerning them violates data protection law, they have the right to lodge a complaint with a data protection supervisory authority.
13. Mandatory information and profiling
The provision of personal data is neither required by law nor contractually required. There is no obligation to provide personal data, but the provision of personal information is necessary for the conclusion of a contract insofar as certain information is mandatory in order to conclude (and execute) a contract.
Automated decision-making, including profiling, is not carried out.
14. Storage / Retention and Deletion
We adhere to the principles of data avoidance and data minimization and only store your personal data for as long as is necessary to achieve the respective purpose of data processing or as required by the storage periods stipulated by law.
If the purpose of storage no longer applies or if a storage period stipulated by law expires, the personal data is routinely anonymized or deleted in accordance with legal requirements.
15. Information security
We take appropriate technical and organizational measures in line with the state of the art to ensure a level of protection for the personal data we process that is appropriate to the risk involved in the respective processing and to protect the data we process against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons.
Our website uses SSL encryption for security reasons and to protect the transmission of confidential content, such as orders, inquiries, or payment data that you send to us.
Our employees receive regular training on data protection and information security and are bound to confidentiality and data protection.
A restrictive rights and roles concept based on a "need to know" principle ensures that employees only have access to the personal data that they absolutely need to perform their tasks.
16. Changes to the privacy policy
We reserve the right to occasionally amend this privacy policy so that it always complies with current legal requirements and/or to implement changes to our services in the privacy policy, e.g. when introducing new services. The current privacy policy always applies when visiting the website or using our services.