Newsletters, user community and similar offers

If you register for our user community at https://community.21strategies.com/ without already having a business relationship with 21strategies and without having actively agreed to receive the newsletter, you must give us your consent to data processing, the terms of use and the sending of the newsletter (double opt-in) when you first register (Art. 6 (1) (a) GDPR).
You can revoke your consent to all or individual support offers or newsletters at any time.
If you already have a business relationship with 21strategies, newsletters will also be sent on the legal basis of legitimate interest (Art. 6(1)(f) GDPR). The purpose is to serve the economic and technical interest in exchanging information for the benefit of both parties, for example, information about general developments or updates to products used by the contractual partner.
If we send you a newsletter and you no longer wish to receive it, please use the unsubscribe link provided or send us an informal email to hello@21strategies.com with the subject line “Unsubscribe newsletter”.
You can unsubscribe from the user community in the user community by clicking on the “Unsubscribe” button.

Contact forms

The 21strategies websites offer contact and/or mail-to fields. Visitors can use these to contact 21strategies. If you wish to use this service, you will be asked to enter personal data that is necessary to process your enquiry.
We collect at least your email address (mandatory information). Additional voluntary information may include: title, name(s), telephone number(s), company, postal address. It is your decision whether you wish to use these offers and enter your data.
The legal basis for data processing is Art. 6 (1) (a) GDPR. The purpose is the economic, public relations and technical interest in the provision and use of modern information media in order to facilitate contact with interested parties.

Ongoing contact with interested parties, partner companies, customers, service providers

21strategies collects and processes personal data in order to
· fulfill ontractual obligations and related activities,
· implement pre-contractual measures
· ensure after-sales care and product quality
from previous and, if applicable, subsequent contractual obligations. This includes, for example, the collection of data from business cards and emails and their transfer to our company cloud-managed customer list. The legal basis for data processing is Art. 6 (1) (b) GDPR (zur Vertragserfüllung).

Recipients of the data

Your contact and business data will not be passed on to third parties and will only be managed by authorised employees with access rights and on our own cloud infrastructure.
Where applicable, the data will also be used and stored in accordance with legal provisions.
We collect personal data in a similar manner if there is a legitimate interest pursuant to Art. 6 (1) (f) GDPR. The respective purpose for this may be:
· Customer satisfaction surveys to improve products and/or processes
· Economic interest by submitting offers for similar products and services and to strengthen business relationships.

Contacting our customer support

When you contact our employees, we process your personal data in order to clarify your concerns. We also process your data in order to analyse the quality of our customer support after contact.
You can contact us at any time with questions by emailing individual staff members known to you or, more generally, by emailing hello@21strategies.com .
We store your enquiry in a ticket system in order to process it and to make our service traceable and improve it. Personal details are only used to process your enquiry.
The legal basis for processing the data is our legitimate interest in responding to customer enquiries and improving our support services (Art. 6(1)(f) GDPR). If the purpose of the contact is to conclude or perform a contract, this constitutes a pre-contractual or contractual measure (Art. 6(1)(b) GDPR).

Social media

LinkedIn

We use our LinkedIn page https://www.linkedin.com/company/21strategies for Blockpost.
When you visit our LinkedIn company page, follow our page or engage with the page, LinkedIn processes personal data relating to this interaction, which enables us to evaluate user behaviour by means of statistics. This is the so-called “Page Insights” function. For these statistical analyses, LinkedIn primarily processes data that you have provided to the platform via information in your profile. In addition, LinkedIn processes information about how you interact with our LinkedIn company page, e.g. whether you are a follower of our LinkedIn company page.
LinkedIn does not provide us with any personal data via Page Insights. We only have access to summarised Page Insights that do not allow conclusions to be drawn about individual members.
The processing of personal data within the scope of Page Insights is carried out by LinkedIn and us. The evaluation of actions on our LinkedIn company page supports our ongoing efforts to tailor our public relations work to the needs of users. The legal basis for this processing is Art. 6 (1) lit. f) GDPR.
LinkedIn is solely responsible for the processing of personal data within the LinkedIn platform in accordance with data protection law. Further information about the processing of personal data by LinkedIn can be found at https://de.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy. Please note that LinkedIn processes personal data in the USA or other third countries. LinkedIn only transfers personal data to countries for which the European Commission has issued an adequacy decision pursuant to Art. 45 GDPR or on the basis of appropriate safeguards pursuant to Art. 46 GDPR.

Applications

We process the data provided by the applicant during the application process. This includes the following data: name, address, telephone and/or mobile numbers, email address and the personal data contained in the application documents.
Applicant data is processed in accordance with Art. 88 GDPR in conjunction with § 26 BDSG (Federal Data Protection Act) and will be deleted after 6 months at the latest in the event of rejection.
We do not carry out background checks.

Application portal

On our website, we link the job advertisements we publish at https://www.21strategies.com/careers/ to the JOIN application tool from JOIN Solutions GmbH, Schönhauser Allee 36, 10435 Berlin, Germany. The data protection provisions of JOIN Solution GmbH can be viewed at https://join.com/de/datenschutz. If you send us your application documents directly by email, we will transfer them to JOIN for further use and storage. Once the position has been filled, we will delete the application data received within 6 months, including from JOIN. Further storage, e.g. in a talent pool, will only take place after rejection and only with your express consent. Only designated employees from management and human resources have access to the JOIN portal.

Categories of data recipients

Personal data may be transferred to the following categories of recipients:
• Public authorities, based on legal requirements.
• Affiliated companies, for the purpose of fulfilling contracts or providing information society services.
• Processors within the meaning of Art. 28 GDPR in the course of order processing.
• Other third parties in the course of the transfer of functions.

Transfer to third countries

21strategies ensures that all data is processed in the EU, the European Economic Area or in third countries for which an adequacy decision has been issued by the EU Commission. A list of third countries covered by adequacy decisions is available here, for example: https://datenschutz.hessen.de/datenschutz/internationaler-datentransfer/angemessenheitsbeschluesse-der-europaeischen-kommission
If, in individual cases, data transfer to a third country is necessary, we will first check to ensure that an adequate level of data protection is maintained in the destination country in accordance with the requirements of the European Court of Justice and the European Commission, or obtain consent that indicates any risks. We will then provide separate information about this.

Scoring

Your personal data will not be processed for the purpose of automated individual decision-making, including profiling, in accordance with Art. 22 (1) and (4) GDPR.

Data retention period

Personal data will only be stored for as long as is necessary to fulfil the purposes stated here or as required by the retention periods specified by law. Once the respective purpose no longer applies or the retention periods have expired, the data will be deleted in accordance with the statutory provisions.
Note:
Emails with tax-relevant content (cf. Section 147 of the German Fiscal Code) are subject to a retention period of 10 years.
Emails with contractually relevant content (cf. Section 257 of the German Commercial Code) are subject to a retention period of 6 years.
In all other respects, the storage period is generally based on the purpose of the processing or on contractual or more specific legal obligations.
Once the purpose has been fulfilled (e.g. the final execution of a contractual obligation without the need for follow-up support relating to the product or related products and without the prospect of follow-up contracts), the data will be deleted – after expiry of any relevant tax or commercial law retention periods or periods for the enforcement of interests – deleted, unless the data subject consents to storage.

Rights of data subjects

You have the option of exercising your “rights of data subjects” at any time:
• Right of access pursuant to Art. 15 GDPR.
• Right to rectification pursuant to Art. 16 GDPR.
• Right to erasure (“right to be forgotten”) in accordance with Art. 17 GDPR.
• Right to restriction of processing pursuant to Art. 18 GDPR.
• Right to data portability pursuant to Art. 20 GDPR.
• Right to object pursuant to Art. 21 GDPR.
• Right to withdraw consent at any time with effect for the future pursuant to Art. 7 GDPR. The withdrawal only applies to the future and does not affect the lawfulness of the processing of personal data until the withdrawal.
• The right not to be subject to automated decision-making, including profiling, in accordance with Art. 22(1).
If you wish to exercise your rights, please send your request by email to hello@21strategies.com or by post to the address given above. In addition, you have the right to lodge a complaint with a supervisory authority in accordance with Art. 77(1) GDPR. Further information is available from your local supervisory authority. You can find your local supervisory authority on the website of the Federal Commissioner for Data Protection and Freedom of Information at the following link:
https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html
If you wish to exercise the rights mentioned here, we are obliged to verify your identity and will therefore request appropriate proof of identity. This serves in particular to protect your data from unauthorised access by third parties.

Status and changes to this privacy policy

This privacy policy is current as of XXX.
Due to technical developments and/or changes in legal and/or regulatory requirements, our website is constantly being revised and further developed. Accordingly, we regularly update this privacy policy. The current status can be found in this privacy policy at any time.