Data Privacy Policy

1. General

hoorai (“we”) takes the protection of your personal data very seriously. Your privacy is important to hoorai. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. When you use our platform or interact with our website, various personal data is collected. Personal data is data that can be used to identify you personally. Relevant personal data includes, in particular, your personal details (e.g., name, email address), data collected online (e.g., usage data, cookie or tracking data, user IDs, IP addresses), and data relating to communication with you.

This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

2. Responsible body

The responsible body is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.). The responsible body for the processing of your personal data on this platform is:

hoorai by mayven GmbH

Ringstraße 4 - 6
63179 Obertshausen

E-Mail: hello@hoorai.io

If you have any questions or comments regarding data protection (e.g., regarding access to and updating of your personal data), you can contact mayven's data protection officers at hello@hoorai.io, using the subject line “Data Protection”.

3. General information about visiting our website

3.1 Log files

Every time the website/platform is accessed, hoorai collects data and information using an automated system. This data is stored in the server's log files. Log files are files in which processes that run in a computer or network system are logged.

Log files collected by hoorai when you visit the website:

· Information about the browser type and version used

· User's operating system

· User's IP address

· Date and time of access

· Websites from which the user's system accesses the website (referrer)

Log files that are additionally collected when using the platform:

· Region of access

· Preview of the platform response

· Pages visited within the website/platform

· Entries made and functions used

The processing of the IP address serves to protect against and track hacker and cyber attacks. The processing of the remaining data serves to deliver the content of hoorai, to ensure the functionality of the information technology systems and to optimize the offer, as well as to ensure the functionality of the website. The data in the log files is always stored separately from other personal data of the users.

This processing of your aforementioned data is necessary to safeguard legitimate interests pursuant to Art. 6 (1) (f) GDPR and is justified by a balancing of interests in favor of hoorai. We have a legitimate interest in ensuring that the website functions properly from a technical point of view and in protecting the website from attacks. Your legitimate interest in ensuring that your aforementioned data is not used for this purpose does not outweigh this legitimate interest, as we use this data appropriately in accordance with the described processing purpose and you also benefit from its functionality.

Your personal data will be deleted after 90 days at the latest, unless hoorai is legally obliged to retain it or retention is permitted on legal grounds.

3.2 Web analysis and web optimization through cookies

hoorai uses cookies and tracking technologies on this website. These serve to optimize our website, further develop our services, and for marketing purposes. Below, we explain the technologies and how they work. When you visit one of our websites, we store information in the form of a “cookie” on your computer, which we automatically recognize when you visit again. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again. The use of cookies helps us to offer you unrestricted use of our website. With the help of cookies, we make your visit to our website as comfortable as possible. Cookies allow us, for example, to tailor a website to your interests or to store your user name so that you do not have to re-enter it each time you visit. We also use tracking pixels on our website. Tracking pixels are small graphics on websites that enable log file recording and log file analysis. When you visit the website, the tracking pixels write information to the cookie file in your browser. The use of pixels enables us to display targeted information and content to you.

hoorai uses cookies and pixels from the following categories:

3.2.1 Necessary cookies and pixels

Necessary cookies are used to ensure the technical integrity of our website. They ensure the stability of the website, provide a secure login, and store the progress of your order, your login details, and your shopping cart. The cookie and pixel list available here provides information about the necessary cookies we use.

The data collected from you in this way is pseudonymized by technical measures so that it can no longer be assigned to you. The data is not stored together with other personal data about you. When you visit our website, an information banner informs you about the use of cookies and refers you to this privacy policy. In this context, there is also a note on how to prevent the storage of cookies in your browser settings.

This processing of your aforementioned data is necessary to safeguard our legitimate interests and is justified by a balancing of interests in our favor. Without its use, some functions of our website cannot be offered. For these, it is necessary that the browser is recognized even after a page change. We also have a legitimate interest in processing your aforementioned data accordingly, namely to promote the sale of our own products through the functional operation of our own websites. Your legitimate interest in ensuring that your aforementioned data is not used for this purpose does not outweigh our legitimate interest, as we use this data appropriately in accordance with the described processing purpose and you also have an interest in using our website in a customer-friendly manner.

3.2.2 Analytical cookies

We also use cookies on our website that enable us to analyze users' browsing behavior. Analytical cookies enable us to analyze the website so that we can measure and improve the performance of our pages. In this context, we use cookies for so-called reach measurement. With the help of these cookies, we create statistical profiles that cannot be traced back to individual persons, but only to groups. These are used to analyze visitor and click behavior as well as the demographic characteristics of visitors. The cookie and pixel list available here informs you about the analysis cookies we use and also gives you the option to object to the use of all or specific cookies and pixels. The data collected from you in this way is pseudonymized by technical measures so that it can no longer be attributed to you. The data is not stored together with other personal data about you.

When you visit our websites, our cookie banner informs you about the use of cookies for analysis purposes and obtains your consent to the processing of personal data used in this context. You will also be referred to this privacy policy. The legal basis for the processing of personal data using cookies and pixels for analysis purposes is your consent.

You have the right to revoke your consent at any time with effect for the future, without affecting the legality of the processing carried out on the basis of your consent until revocation. The easiest way to revoke your consent is to set the corresponding opt-out cookie/pixel via our cookie and pixel list, which can be viewed here.

3.2.4 Duration of storage

The information transmitted to us by cookies and pixels is stored by us for the periods specified below after collection and then automatically deleted.

Cookie category - Storage period

· Analytical cookies - 24 months

· Social media cookies - 3 months

· Session cookies - 24 hours

Session cookies are small pieces of information that we store in your computer's memory. A randomly generated unique identification number, known as a session ID, is stored in a session cookie. A cookie also contains information about its origin and storage period.

3.3 Tracking systems in use

We have integrated third-party systems and tools into our website. Detailed information on all the technologies we use can be found in our cookie and pixel list, which is available here. These technologies are so-called third-party services that require consent. Your personal data will only be processed once you have given your consent via our cookie banner.

Due to their special integration, we inform you separately about the following tracking systems:

3.1 YouTube

We embed videos on our website that are not stored on our servers but on YouTube servers. YouTube is a service provided by YouTube LLC (“YouTube”), 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

By integrating YouTube, we aim to show you various videos on our website so that you can access them directly on our website.

When you visit a page with embedded videos, your IP address is sent to YouTube/Google and cookies are installed on your computer. The following data is transmitted:

· IP address

· Date and time of the request

· Time zone difference to Greenwich Mean Time (GMT)

· Content of the request (specific page)

· Access status/HTTP status code

· Amount of data transferred in each case

· Website from which the request originates

· Browser

· Operating system and its interface

· Language and version of the browser software.

· Hardware used (PC, smartphone, etc.)

· Location (if Google Maps is activated)

We have no influence on this data transfer.

However, to ensure that visiting our website or app with embedded videos does not automatically lead to third-party content (YouTube/Google, USA) being reloaded, we have implemented a so-called 2-click solution on our website. This function ensures that when you visit our website, which contains YouTube integration, no connection is established with the YouTube/Google servers. In a first step, we only display a placeholder for the respective video. This means that the third-party provider does not receive any information. Only after clicking on the preview image is the third-party provider's content reloaded and the third-party provider receives the information that you have accessed our site, as well as the technically necessary usage data. In addition, the third-party provider is then able to implement tracking technologies. This also establishes a connection to the Google DoubleClick network.

For more information on how user data is handled, please refer to the privacy policy of YouTube or Google: https://policies.google.com/privacy.

Information on Google's privacy settings can be found at: https://safety.google/.

In addition, we use the YouTube no-cookies function, i.e., we have activated “extended data protection,” a function provided by YouTube that initially does not allow cookies to be stored on your device. The videos are not accessed via youtube.com, but via youtube-nocookie.com. However, as soon as you start playing an embedded video by clicking on it, YouTube stores cookies on your device. Here too, a connection to the Google DoubleClick network cannot be ruled out.

If you are logged into YouTube at the same time, YouTube assigns the connection information to your YouTube account. If you want to prevent this, you must either log out of YouTube before visiting our website or make the appropriate settings in your YouTube user account.

For more information on how user data is handled, please refer to the privacy policy of YouTube or Google: https://www.google.de/intl/de/policies/privacy/.

Information on Google's privacy settings can be found at: https://privacy.google.com/take-control.html?categories_activeEl=sign-in.

Clicking on the video preview image triggers the corresponding processing. The legal basis for the transfer of your personal data is your consent. You have the right to revoke your consent to the aforementioned service at any time.

If you have given your consent, we will disclose your personal data to YouTube/Google. YouTube/Google processes your personal data in the USA and shares this data with third parties (e.g. affiliated companies). However, any transfer of personal data will be carried out in compliance with the conditions set out in Articles 44–50 of the GDPR and the other provisions of the GDPR in order to ensure that the level of protection for natural persons is maintained. We have no influence on further data processing by the third-party provider.

We store your personal data for as long as it is necessary for use. You are not obliged to provide personal data.

You have the right to withdraw your consent at any time with effect for the future, without affecting the lawfulness of the processing carried out on the basis of your consent until withdrawal. For this reason, we ask for your consent separately each time you view our YouTube videos.

3.2 Google Tag Manager

hoorai uses Google Tag Manager. This is a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland – hereinafter referred to as “Google”). Google Tag Manager does not collect any personal data itself. Tag Manager makes it easier for us to integrate and manage our tags. Tags are small code elements that are used, among other things, to measure traffic and visitor behavior, track the impact of online advertising and social channels, set up remarketing and targeting, and test and optimize websites. We have activated the anonymization of IP addresses before they are forwarded to Google.

Google's privacy policy can be found at: https://policies.google.com/privacy.

3.3 Google Analytics

hoorai uses Google Analytics, a web analytics service provided by Google Ireland Limited, located at Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), on its websites. The processing of your personal data for the use of Google Analytics to analyze your website behavior and, in particular, the storage of any related cookies, is carried out with the extension “anonymizeIP()” to ensure anonymous collection of IP addresses, so that a direct personal reference to the collected information is excluded. This automatic anonymization is achieved by Google truncating the IP address transmitted by your device within member states of the European Union (EU) or other signatory states to the Agreement on the European Economic Area (EEA).

Google will use the transmitted data on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

For more information about the terms of use of Google Analytics and data protection at Google, please visit

https://marketingplatform.google.com/about/analytics/terms/de/ and https://policies.google.com/?hl=de.

3.4 Google Ads

We use Google Ads to show you targeted and personalized advertising on Google and the Google advertising network. The content of the ads should be as relevant to you as possible. To achieve this, we share some of your interactions on our websites with Google Ads. This includes, for example, information that you have viewed a particular page. This enables us to target you with Google advertising based on your recent interactions.

The provider of these services is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA (“Google”).

Your data is collected exclusively on the basis of your consent within the meaning of Art. 6 (1) (a) GDPR.

You have the right to withdraw your consent at any time with effect for the future, without affecting the lawfulness of the processing carried out on the basis of your consent until withdrawal. The easiest way to exercise your right of withdrawal is to set the corresponding opt-out cookie/pixel by calling up our cookie banner.

If you have given us your consent, your personal data, including your IP address, will be transferred to Google in the USA. Google processes your personal data in the USA. The USA does not offer an adequate level of data protection. Where legally required to ensure an adequate level of protection for your data, we implement the legal requirements of Art. 44 - 50 GDPR, including EU standard contracts and the EU-US Data Privacy Framework (DPF). Google's privacy policy can be found at: https://policies.google.com/terms?hl=de.

3.5 Plausible

We use Plausible Analytics on our website to analyze the use of our website anonymously. Plausible Analytics is a service offered by the provider of the same name based in Estonia (OÜ Plausible Insights, Västriku tn 2, Tartu 50403, Estonia). This is a privacy-friendly analysis tool that works without the use of cookies and does not store any personal data of website visitors.

Plausible Analytics is used exclusively to improve the functionality and user experience of our website. We receive statistical reports on the use of our website, which help us to optimize the structure and content of the website.

Plausible Analytics only collects aggregated data and no personal information. No information such as IP addresses, user agents, or other tracking data that can be traced back to individual persons is stored.

The anonymous data collected includes:

· Pages visited

· Duration of stay on the pages

· Access source (how users arrived at the page, e.g., search engines or direct entries)

· Usage statistics (e.g., number of visits)

The Plausible Analytics privacy policy can be found at: https://plausible.io/data-policy.

3.6 Salesviewer

We use SalesViewer on our website, a tool for analyzing the behavior of corporate visitors. SalesViewer helps us identify companies that visit our website and obtain contact information for potential business relationships. The tool is a product of the provider of the same name based in Bochum (SalesViewer GmbH, Universitätsstraße 60, 44789 Bochum).

SalesViewer is used exclusively to analyze company visits to our website and to improve our marketing and sales activities. Information about the course of visits to our website is collected in order to generate targeted business contacts and optimize the approach to potential customers.

SalesViewer does not process any personal data from private individuals. Instead, the tool exclusively collects and processes business-related data from companies. The data collected includes, among other things:

· Company name and industry

· Visit history on the website (e.g., pages visited and length of stay)

· Source/referrer of the visiting company

· IP address of the company network (recorded in pseudonymized form)

The IP address is immediately rendered unrecognizable after collection by means of pseudonymization, so that it is not possible to identify the natural person behind the IP address.

SalesViewer does not collect or store any personal data from private individuals, but only processes company-related information. The anonymization of IP addresses prevents the identification of private individuals or individuals.

SalesViewer's privacy policy can be found here: https://www.salesviewer.com/de/plattform/datenschutz/.

3.7 Mailjet

We use the email service provider Mailjet to send emails. The provider is Mailjet SAS, 13-13 bis, Rue de l'Aubrac, 75012 Paris, France.

When you sign up for our newsletter or contact us by email, your email address and, if applicable, other personal data (e.g., name) will be transmitted to Mailjet and stored there. This data is used exclusively for sending emails and managing your subscriptions. The emails sent by Mailjet contain so-called tracking pixels, which enable us to compile statistical evaluations of the success of our email campaigns. This allows us to see whether an email has been opened and which links have been clicked on. We use this information to improve our email communication.

Mailjet's privacy policy can be found here: https://www.mailjet.com/de/rechtliches/datenschutzerklaerung/

You have the right to revoke your consent at any time with future effect and thus cancel your subscription to the newsletter at any time without affecting the legality of the processing carried out on the basis of your consent until revocation. The easiest way to revoke your consent is to use the link provided in our newsletter.

3.8 Use of Paperform to conduct the hoorai Talent Test

The Paperform service from Paperform Pty Ltd (Australia) is used to conduct the hoorai Talent Test. This enables structured, user-friendly, and efficient collection and evaluation of test results.

Processing is based on legitimate interest pursuant to Art. 6 (1) (f) GDPR. This consists of enabling the hoorai Talent Test to be carried out and making the individual test results available to interested participants in order to offer data-supported reflection on personal team roles. Where necessary, processing is also carried out on the basis of your consent in accordance with Art. 6 (1) (a) GDPR. In the context of recruiting, processing is also based on consent in accordance with Art. 6 (1) (a) GDPR, § 26 (2) BDSG, and Art. 9 (2) (a) GDPR, as the test can provide insights into personal aptitude and personality within the meaning of Art. 9 (1) GDPR. Participation is voluntary.

As part of the test, personal data such as email addresses and answers to test questions are processed. This data is used exclusively for individual evaluation and provision of the test results. In the context of recruitment, the test results may be made available to authorized persons at the company to which the application was submitted. The results will not be used for automated decisions with legal effect or for profiling within the meaning of Art. 22 GDPR.

The hoorai Talent Test is made available to several companies. The platform uses organizational and technical measures to ensure that data is only accessible to the company to which the application was specifically submitted. Transmission to other companies or unauthorized third parties is excluded.

The personal data collected will be stored until the purpose of processing has been fulfilled, specifically until participants have been sent their individual test results. The data will then be reused in anonymized form for scientific purposes for a maximum period of three months. After that, all data will be completely deleted. In the context of recruiting, the data will be stored for the duration of the application process. After completion of the process, but no later than after 6 months, personal data will be deleted or reused in completely anonymized form exclusively for scientific or statistical purposes. The legal basis for this is Art. 6 (1) lit. f GDPR.

The processing takes place on Paperform servers, which may also be located in third countries outside the EU, in particular the USA. Paperform undertakes to comply with appropriate safeguards in accordance with Art. 46 GDPR, in particular by concluding EU standard contractual clauses (SCCs). These ensure an adequate level of data protection even outside the European Economic Area (EEA).

Further information on data processing by Paperform can be found at https://paperform.co/privacy.

3.9 Use of Edudip for online seminars and webinars

We use the “Edudip” platform, a service provided by edudip GmbH, Jülicher Straße 306, 52070 Aachen, Germany, to conduct online seminars and webinars. Edudip enables us to hold digital events securely and efficiently.

When using Edudip, participants' personal data (e.g., name, email address, other voluntary information if applicable) is processed. This data is processed exclusively for the purpose of conducting and following up on the respective event.

We have concluded a data processing agreement (DPA) with edudip GmbH in accordance with Art. 28 GDPR. This ensures that Edudip processes personal data only in accordance with our instructions and within the framework of the applicable data protection regulations.

Further information on data processing by Edudip can be found at: https://www.edudip.com/de/datenschutz.

4. Special offers on our website

4.1 Contact form

We process your personal data for the purpose of contacting you. Our website contains contact forms that can be used to contact us electronically. Alternatively, you can contact us using the contact details provided in section 2.

If you contact us via one of these channels, the personal data you voluntarily provide will be stored automatically. The storage serves the purpose of processing your request, contacting you, or, with your consent, for marketing purposes.

The provision of contact forms is necessary to safeguard our legitimate interests and is justified by a balancing of interests in our favor. We have a legitimate interest in offering you a platform for easy contact and communication with us. Your legitimate interest in ensuring that your aforementioned data is not used for this purpose does not outweigh our legitimate interest, as it is also in your interest that we process your contact request and respond to it. The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

Your personal data will be automatically deleted after 6 months once your contact request has been answered and there is no justification (such as an existing customer relationship) or legal retention periods.

4.2 Newsletter

On our websites, you have the option of subscribing to a free, customized newsletter tailored to your needs. When you register for the newsletter, we collect the necessary data (name, title, salutation, email address) and your product interests. In addition, the following data is collected when you register via our website:

· IP address of the accessing computer

· Date and time of registration

· Date and time of confirmation of consent, including the current version of the confirmed consent (verification process) and the text of the email we sent to you

Furthermore, your email opening, clicking, and downloading behavior is recorded in the course of sending and receiving the newsletter.

Your email address is collected for the purpose of delivering the newsletter. Other personal data collected during the registration process is used to prevent misuse of the services or the email address used.

Your consent is obtained during the registration process for the processing of data for the purpose of sending the newsletter, and reference is made to this privacy policy. The legal basis for this processing of your personal data is your consent.

Your product interests and your email opening, clicking, and downloading behavior are collected and analyzed in order to create a personal usage profile and to contact you individually and in a manner tailored to your needs. The legal basis for the aforementioned processing of personal data is your consent.

You have the right to revoke your consent at any time with effect for the future and thus to cancel your subscription to the newsletter at any time without affecting the legality of the processing carried out on the basis of your consent until revocation. The easiest way to revoke your consent is to use the link contained in our newsletter.

The data collected for newsletter registration will be stored for as long as the newsletter subscription is active.

4.3 User account

When you register and log in to our member platform, we process your personal data for the following purpose: to create and manage your user account. This includes authentication, managing access data, and providing access to our services.

The processing of your personal data is based on your consent in accordance with Art. 6 (1) (a) GDPR, provided that you have given us your consent. For the performance of a contract or to take steps prior to entering into a contract, processing is carried out in accordance with Art. 6 (1) (b) GDPR.

When you register and use our portal, we process the following categories of data:

· Mandatory information: first name, last name, email address.

· Voluntary information: Position, location, description of yourself, skills, and competencies.

Your personal data will be stored for as long as necessary to fulfill the above-mentioned purposes. After termination of the user relationship, your data will be deleted, provided that there are no legal retention obligations to the contrary. Data processed within the scope of your consent will be stored until you revoke your consent.

5. Company presence on social media platforms

5.1 General information about appearances and fan pages on social media platforms

By presenting ourselves on social media platforms (Instagram, LinkedIn, Xing, YouTube) via so-called company pages/fan pages, we want to actively communicate with you and offer you the opportunity to find out more about our company, our products, and our services. The specific social media platforms we use can be found under 5.2.

It should be noted that, within the scope of these company appearances, the processing of personal data in countries outside the European Union and the European Economic Area cannot be ruled out. Under certain circumstances, this may be associated with the risk of more difficult legal enforcement, which represents a risk for the individual user.

When you visit our company pages, the respective social media platforms process data points from your visit on their own responsibility – and not on ours. In addition, the social media platforms process personal data as described in their respective data policies.

When you use our fan page on the respective social media platforms, cookies are usually stored on your computer. These cookies store information about your usage behavior and interests. As a rule, the data obtained from this is used for market research and advertising purposes, whereby advertising that presumably corresponds to the interests of the user is displayed based on their usage behavior.

We manage our company pages ourselves and take care of the associated interactions. We would like to point out that if you use any of the social media platforms and their functions offered below, you do so at your own risk. This applies in particular to interactive functions such as sharing, rating, liking, and sending messages. Alternatively, you can also access the information offered on this page on our website.

Comments and exchanges of opinion on the respective fan pages and on our posts there are important to us. We would like to hear your opinion on our posted contributions.

However, the quality of comments is more important to us than their quantity. We want lively and interesting discussions and to offer users an environment in which everyone feels comfortable joining in. For this reason, we ask you to observe the following points when commenting on our posts (“netiquette”):

When writing your comments, please always use a factual, polite, and respectful tone, as you would like to be addressed yourself.
Insults, slander, defamation, and provocation, as well as comments containing vulgar, violent, discriminatory, racist, sexist, hateful, and/or illegal statements or content, should not be part of your post.
Mentions and comments should be relevant to the topic of the post.

Please note that the respective social media platforms and the discussions held there are public. With this in mind, we ask you not to post any contact addresses, phone numbers, or other private details—especially those of third parties.

If individual social media users on our fan page and in the posts there violate this netiquette, we reserve the right to delete posts or comments or to have them deleted, or to exclude the respective user from future discussions.

Our presence on social media platforms and our fan pages are intended to ensure the most comprehensive online presence possible. We process users' personal data on the basis of our legitimate interest in communicating with individual users in accordance with Art. 6 (1) (f) GDPR. The processing of personal data relates in particular to your inventory data (e.g., names, addresses), contact details (e.g., email, telephone numbers), content data (e.g., entries in online forms), usage data (e.g., websites visited, interest in content, access times), meta/communication data (e.g., device information, IP addresses).

In addition, this data is used to provide us, as the operator of the accounts and fan pages, with statistical information about the use of the accounts and fan pages (e.g., visits to our website, the extent of interactions, information about the gender ratio of our visitors, the countries and cities our visitors come from, statistics about the field of work of our visitors, statistics on age composition, and the average duration of video playbacks) provided to us by the respective social media platform.

If processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract, we will process your personal data on this basis, Art. 6 (1) (b) GDPR.

Furthermore, the respective social media network provider may ask you for consent in accordance with Art. 6 (1) (a) GDPR to process your data.

We store the personal data we collect about you for as long as is necessary to process your respective request or as long as we are entitled or obliged to store it due to statutory retention obligations.

We have no influence on the data collected and data processing operations carried out by the respective social media platform provider, nor are we aware of the full scope of data collection, the purposes of processing, or the storage periods. We also have no information about the deletion of the collected data by the respective provider. For further information regarding the data collected and data processing operations, the purposes of processing, or the storage periods, please refer to the data policy of the respective social media platform (more under 5.2).

We would like to point out that the assertion of data subject rights must be made to the provider, as only the provider has direct access to the collected data and can take appropriate measures and provide information. In accordance with Art. 15 ff. GDPR, you have the right to information, correction, portability, and deletion of your data, as well as the right to object to the processing of your data and to restrict its processing.

You can also contact the data protection officer of the respective social media portal, whose contact details can be found in the respective data policy.

5.2 Our fan pages on social media platforms

5.2.1 LinkedIn

We maintain a fan page on the social media platform of LinkedIn Ireland Unlimited Company (LinkedIn for short), Wilton Place, Dublin 2, Ireland.

Information about which data is processed by LinkedIn and for what purposes it is used, as well as further information on data protection, can be found here: www.linkedin.com/legal/privacy-policy.

Information on LinkedIn's cookie policy can be found here: www.linkedin.com/legal/cookie-policy.

The agreement provided by LinkedIn within the meaning of Article 26 GDPR on joint responsibility for your personal data can be found at legal.linkedin.com/pages-joint-controller-addendum. Here you will find all the information that is relevant to you as a data subject, in particular with regard to exercising your data protection rights.

5.2.2 Instagram

We maintain a corporate presence on the social media platform Instagram Inc. (Instagram for short). This internet service is a subsidiary of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA.

Information about what data is processed by Instagram and for what purposes, as well as how you can manage or delete existing information, can be found in the following Instagram privacy policy: https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect, https://www.facebook.com/help/instagram/261704639352628.

5.2.3 Xing

We maintain a fan page on the social media platform Xing, which is operated by New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany.

Information about what data is distributed by Xing and for what purposes it is used can be found here: privacy.xing.com/de/datenschutzerklaerung.

Further information about Xing can be found at: www.new-work.se/de/unternehmen/.

5.2.4 YouTube

The processing of personal data in connection with the embedding of videos on our website and in our app is described in section 3.1 under “YouTube.”

We also operate our own YouTube channel. As part of this corporate presence, we use the social media portal YouTube, which is operated and provided by YouTube LLC (“YouTube”), 901 Cherry Ave, San Bruno, CA 94066 USA. YouTube is a subsidiary of Google.

YouTube is responsible for data processing within this platform. Information on data processing can be found at https://policies.google.com/privacy.

6. Recipients of your personal data

6.1 Third parties and processors

Your personal data is also used by other companies that work on our behalf (“processors”) or within the scope of business partnerships with us (“third parties”).

Possible recipients of your data are social media companies and IT service providers.

For details, please refer to the detailed descriptions of data processing in this privacy policy.

The processors mentioned in this privacy policy have been commissioned by us and are bound by our data protection and data security standards. As part of this obligation, it has been stipulated, among other things, that service providers only receive data that is necessary for the fulfillment of the respective order.

6.2 Empfänger außerhalb der Europäischen Union (EU)

We have individual services and tasks performed by carefully selected and commissioned service providers based outside the European Economic Area (“third countries”), e.g., social media companies. In these cases, a transfer to a third country takes place. Where legally required to ensure an adequate level of protection for your data, we implement safeguards in accordance with legal requirements to ensure an adequate level of data protection, including EU standard contracts and the EU-US Data Privacy Framework (DPF). You have the option of requesting further information at any time and obtaining copies of the relevant agreements.

7. Your rights

In accordance with the statutory provisions (including any applicable restrictions under the GDPR and/or the new German Federal Data Protection Act (BDSG-neu)), you can assert the following rights against us:

Information

You have the right to obtain information from us about your data stored by us.

Correction

At your request, we will correct the data stored about you if it is inaccurate or incorrect.

Deletion

If you wish, we will delete your data, provided that this does not conflict with other legal regulations (e.g., statutory retention obligations) or an overriding interest on our part (e.g., to defend our rights and claims).

Restriction

Taking into account the legal requirements, you can request that we restrict the processing of your data.

Data transfer

You also have the right to receive your data in a structured, commonly used, and machine-readable format or to transfer it to a third party, subject to legal requirements.

Complaints

You have the right to contact a supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement, if you have any questions or complaints. The supervisory authority responsible for hoorai is the Hessian Commissioner for Data Protection and Freedom of Information:

Postfach 3163
65021 Wiesbaden
E-Mail: poststelle@datenschutz.hessen.de
www.datenschutz.hessen.de

Right of withdrawal

If you have given us separate consent to process your personal data, you can revoke this consent at any time. The legality of the processing of your data until revocation remains unaffected by a revocation.

Objection

You may also object to the processing of your data. To exercise these rights, you can contact us using one of the contact details listed in section 2.

Information about your right to object

You have the right to object at any time to the processing of your data on the basis of a balancing of interests or in the public interest if there are reasons for this arising from your particular situation.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

The objection can be made informally and should be addressed to:

hoorai by mayven GmbH, Ringstr. 4-6, 63179 Obertshausen, email: hello@hoorai.io