Privacy Policy

Introduction

At Polarise, we understand the trust you place in us. Therefore, we strive to provide you with transparent and comprehensive information regarding the handling of your personal data. This includes informing you about the types of data we collect during your visit and/or use of our website, as well as how we utilize this data. Furthermore, this Privacy Policy extends to any personal data received through alternative communication channels, such as email, ensuring consistency across all interactions.

As both our website and the underlying technologies continue to evolve, alongside our ongoing business processes, we recognize the need to adapt our Privacy Notice accordingly. Any future updates or modifications will be readily accessible and published on this website, allowing you to stay informed about the latest privacy practices we employ.

Use of the Website and Data Protection

1. Name and Contact Data of the Controller of the Website

Polarise Holding GmbH
Speditionstraße 2
40221 Düsseldorf
Germany

2. Data Protection Officer and Contact for Privacy Inquiries

Our data protection officer:

Falk GRC IT GmbH
Im Breitspiel 21
69126 Heidelberg
Germany

Email: datenschutz [ɛt] falk-grc.com

You can also address general privacy inquiries directly to us:

Polarise Holding GmbH
Speditionstraße 2
40221 Düsseldorf
Germany
info [ɛt] polarise.eu

3. Restriction of the Scope of this Privacy Policy for Visits to Our Website

Our Privacy Policy solely governs content stored on our website, excluding any third-party website links.

Processing of Personal Data in the Context of Informational Use of Our Website

4a. Description and Scope of Data Processing

When using our website for informational purposes, we collect certain data transmitted by your browser for enabling the visit. The data includes:

Additionally, cookies are stored on your computer and, with your consent, we use Google Analytics 4 for tracking website usage.

We store end-device data to:

Any profiles created based on website usage are anonymized and are used solely to enhance user navigation and optimize our products and services. These purposes align with our legitimate interest in data processing, as outlined in Art. 6 (1) lit. f GDPR.

4c. Duration of Data Storage

Data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. For website provision, this is typically when the session ends.

5. Cookies

We use the following categories of cookies:

An overview of all cookies used, including provider and storage period, is available in the cookie settings, which you can open via the “Cookie Settings” link at the bottom of every page. You can also manage cookies via your browser settings.

6. Google Analytics 4

With your consent, we use Google Analytics 4, a web analytics service. For users in the European Economic Area and Switzerland, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

a. Description and Scope of Data Processing

Google Analytics 4 sets cookies that allow us to analyse how our website is used, for example which pages are visited, how long a visit lasts, which source brought you to us and whether a form was submitted. The data is first sent to our own tracking server at heimat.polarise.eu and forwarded from there to Google (see section 6c). According to Google, Google Analytics 4 does not store full IP addresses.

We use this information to analyse the use of our website and to improve our offering. The legal basis is your consent: Section 25 (1) TDDDG for storing and accessing information on your device, and Art. 6 (1) lit. a GDPR for the further processing of your personal data.

You can withdraw your consent at any time with effect for the future via the “Cookie Settings” link at the bottom of every page.

6a. Conversion Tracking and Remarketing for Advertising Campaigns

We run ads on Google, on Microsoft (Bing), on LinkedIn, on Reddit, on X and in ChatGPT. To measure whether these ads are effective, we use the pixels of the respective providers, subject to your consent. A pixel is a small script that is loaded when you visit our website. It tells the provider that you visited our website or submitted a request via a form after seeing or clicking one of our ads.

a. Description and Scope of Data Processing

The pixels are only loaded once you have given your consent in our cookie banner for the category “Advertisements / Ads” or for the respective service. After that, the following data in particular may be transmitted to the respective provider:

The providers may combine this data with other information they hold about you, for example if you have a user account with them. This processing is subject to the privacy policy of the respective provider.

Enhanced conversions and server-side transmission: For Google Ads and LinkedIn, we also transmit conversions via our own tracking server (see section 6c). When you submit a form on our website, your email address may be transmitted to Google or LinkedIn in hashed form, i.e. as a non-reversible checksum. The provider matches this value against its own user data in order to attribute the request to an ad previously shown or clicked.

Automatic matching with OpenAI: For the OpenAI Measurement Pixel, automatic matching of contact data is enabled. If the pixel detects an email address, phone number or name on our website, in particular when you submit a form, it converts this information into a non-reversible checksum (SHA-256 hash) within your browser and transmits only this checksum to OpenAI. OpenAI matches this value against its own user data in order to attribute your visit or request to an ad previously shown or clicked in ChatGPT.

Remarketing: With your consent, we use the remarketing features of Google Ads and Microsoft Advertising. Visitors to our website are added to audiences to whom we can later show ads for our offering on other websites or in search results.

The processing serves to measure and optimise the performance of our advertising campaigns. The legal basis is your consent: Section 25 (1) TDDDG for storing and accessing information on your device, and Art. 6 (1) lit. a GDPR for the further processing of your personal data.

You can withdraw your consent at any time with effect for the future via the “Cookie Settings” link at the bottom of every page. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

d. Services Used

Reddit Pixel

Provider for users in the European Economic Area and Switzerland: Reddit Netherlands B.V., Euro Business Center, Keizersgracht 62, 1015 CS Amsterdam, Netherlands. Data may be transferred to the parent company Reddit, Inc. in the USA. Reddit, Inc. is certified under the EU-US Data Privacy Framework. Privacy policy: https://www.reddit.com/policies/privacy-policy

X Pixel

Provider for users in the EU, the EFTA States and the United Kingdom: X Internet Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. Data may be transferred to X Corp. in the USA. X participates in the EU-US Data Privacy Framework and also uses the Standard Contractual Clauses of the European Commission. According to X, information received from advertising partners is kept for up to 12 months. Privacy policy: https://x.com/en/privacy

OpenAI Measurement Pixel (advertising in ChatGPT)

Provider for users in the European Economic Area and Switzerland: OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland. The pixel sets two cookies on our domain: __oppref stores the identifier of an ad click (expires after 30 days), __obref stores a randomly generated browser identifier (expires after 365 days). A transfer of personal data to the USA cannot be ruled out. For such transfers, OpenAI relies on the Standard Contractual Clauses of the European Commission. Privacy policy: https://openai.com/policies/eu-privacy-policy/

Google Ads (conversion tracking, enhanced conversions, remarketing)

Provider for users in the European Economic Area and Switzerland: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework. Privacy policy: https://policies.google.com/privacy

Microsoft Advertising (Universal Event Tracking, remarketing)

Provider for users in the European Economic Area and Switzerland: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland. Data may be transferred to Microsoft Corporation in the USA. Microsoft Corporation is certified under the EU-US Data Privacy Framework. Privacy policy: https://www.microsoft.com/en-us/privacy/privacystatement

LinkedIn Insight Tag and LinkedIn Conversions API

Provider for users in the European Economic Area and Switzerland: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. Data may be transferred to LinkedIn Corporation in the USA. According to LinkedIn, it relies on legally provided transfer mechanisms for this. LinkedIn Corporation is certified under the EU-US Data Privacy Framework. Privacy policy: https://www.linkedin.com/legal/privacy-policy

6b. Other Analytics Services (Microsoft Clarity, Leadinfo)

a. Microsoft Clarity

With your consent, we use Microsoft Clarity to understand how our website is used. Clarity records, among other things, mouse movements, clicks and scrolling behaviour and can create heatmaps and recordings of individual sessions from this. According to Microsoft, input in form fields is masked by default. For users in the European Economic Area and Switzerland, the provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland. Data may be transferred to Microsoft Corporation in the USA. Microsoft Corporation is certified under the EU-US Data Privacy Framework. Privacy policy: https://www.microsoft.com/en-us/privacy/privacystatement

b. Leadinfo

With your consent, we use Leadinfo. Based on the IP address, Leadinfo recognises whether a visit comes from a company and shows us which companies are interested in our offering and which pages they visited. For this purpose, Leadinfo sets cookies to recognise returning visits. The provider is Leadinfo B.V., Rivium Quadrant 141, 2909 LC Capelle aan den IJssel, Netherlands. According to Leadinfo, data may be shared with parties outside the European Economic Area. Privacy policy: https://www.leadinfo.com/en/legal/privacy/

The processing serves to analyse and improve our website and, in the case of Leadinfo, to identify interested companies for our sales team. The legal basis is your consent under Section 25 (1) TDDDG and Art. 6 (1) lit. a GDPR. You can withdraw it at any time with effect for the future via the “Cookie Settings” link at the bottom of every page.

6c. Google Tag Manager and Server-Side Tagging

We use Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use it to integrate the services listed in sections 6 to 6b. Google Tag Manager itself does not analyse usage data, but your IP address is transmitted to Google when it is loaded. It is only loaded once you have given your consent in the cookie banner.

Some of the data (Google Analytics 4, parts of Google Ads and the LinkedIn Conversions API) is not sent directly from your browser to the providers, but first to a tracking server under our subdomain heimat.polarise.eu. There we control which data is passed on to which provider. The server is operated on our behalf by Stape, Inc., 901 N Market St., Suite 100, Wilmington, DE 19801, USA, as a processor. Stape is certified under the EU-US Data Privacy Framework and additionally uses the Standard Contractual Clauses of the European Commission. Privacy policy: https://stape.io/privacy-notice

The legal basis is the same consent as for the respective service to which the data is forwarded.

To request and manage your consent, we use CCM19, provided by Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn, Germany. Your choice in the cookie banner, the date of consent and technical information such as your IP address are processed in order to be able to prove consent. Your selection is stored in your browser. The legal basis is our legal obligation to obtain and document consent (Art. 6 (1) lit. c GDPR in conjunction with Art. 7 (1) GDPR) and, for storage in your browser, Section 25 (2) no. 2 TDDDG. Privacy policy: https://www.ccm19.de/datenschutzerklaerung.html

7. Processing of Personal Data During Use of Website Features

a. Contact Form

Data collected:

Data provided via the contact form is processed according to Art. 6 (1) lit. b GDPR for contract initiation or Art. 6 (1) lit. f GDPR based on our legitimate interest in responding to inquiries. We also use Google reCAPTCHA to protect our forms from spam and abuse, which processes your IP address and browser information based on Art. 6 (1) lit. f GDPR. This data will not be shared with third parties without consent, except for the reCAPTCHA service as described below.

b. Newsletter

We use a double opt-in process for newsletter registration. Data collected includes:

The legal basis for processing is Art. 6 (1) lit. a GDPR for consent and Art. 7 (3) UWG for post-purchase communication.

c. Waitlist

For our waitlist functionality, we use Brevo (formerly Sendinblue) as a service provider. When you sign up for our waitlist, the following data may be collected:

This data is processed based on your consent according to Art. 6 (1) lit. a GDPR. Brevo processes this data on our behalf and in accordance with our instructions. For more information about Brevo’s data processing practices, please refer to their privacy policy at https://www.brevo.com/legal/privacypolicy/.

d. Vimeo Hosted Videos

Our website uses Vimeo services to embed and provide videos. These videos are only accessible after clicking on “Play”. Only after this click will a connection to the Vimeo servers be established and data transmitted to Vimeo, including:

There is no connection to Vimeo before you click on “Play” and no data is transmitted.

The use of Vimeo videos is aimed at the appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. You can prevent the use of Vimeo videos by not playing the videos or by deactivating JavaScript in your browser settings.

Provider: Vimeo, Inc.
555 West 18th Street
New York, New York 10011, USA
Website | Privacy Policy

e. Google reCAPTCHA

We use Google reCAPTCHA to protect our website forms from spam and abuse. reCAPTCHA analyzes user behavior to determine whether the user is human or a bot.

Data collected:

Legal basis: Art. 6 (1) lit. f GDPR - legitimate interest in protecting our website from spam and abuse.

Data processing: Google may process this data in the USA. Google is certified under the EU-US Data Privacy Framework.

Opt-out: You can prevent reCAPTCHA by not accepting functionality cookies in our cookie banner.

Provider: Google LLC
1600 Amphitheatre Parkway
Mountain View, CA 94043, USA
Website | Privacy Policy

f. HubSpot (CRM and Contact Management)

To manage contact requests, prospect and customer relationships, and to coordinate our sales and marketing communication, we use the customer relationship management system HubSpot, provided by HubSpot, Inc.

When you use our contact form, newsletter sign-up or waitlist, or otherwise get in touch with us, the data collected is stored and processed in HubSpot. This may include in particular:

Legal basis: Art. 6 (1) lit. b GDPR (initiation or performance of a contract) or Art. 6 (1) lit. f GDPR (legitimate interest in efficient contact, prospect and customer management). Where tracking, analytics or marketing functions of HubSpot are used via cookies, this is done solely on the basis of your consent pursuant to Art. 6 (1) lit. a GDPR, which you provide via our cookie banner and may withdraw at any time with effect for the future.

HubSpot processes this data as a processor exclusively in accordance with our instructions. A data processing agreement pursuant to Art. 28 GDPR is in place with HubSpot. For more information, please refer to HubSpot’s privacy policy.

8. International Data Transfers

Some of our service providers are located outside the European Union:

9. Social Media (Company Pages)

We maintain profiles on platforms like LinkedIn.

The legal basis for social media presence is our legitimate interest under Art. 6 (1) sentence 1 lit. f GDPR.

b. Responsible Party and Assertion of Rights

When visiting our social media platforms, you can exercise your data protection rights both with us and the platform operator.

c. Storage Period

Data directly collected by us will be deleted when no longer necessary. Cookies stored on your device remain until manually deleted.

10. Sharing with Third Parties

We may share your data with third parties to fulfill purposes mentioned, provided there is a legitimate basis or legal obligation. Recipients of your personal data include:

11. Data Security and Encryption

We use HTTPS and TLS encryption to ensure secure data transmission over the internet, compliant with Art. 25(1) GDPR. We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

12. Technologies Used

Our website may use internet technologies like JavaScript for improved functionality, without spying on or manipulating user data. All tracking technologies require your explicit consent through our cookie banner.

13. Your Rights

Under the GDPR, you have the following rights:

To exercise your rights, contact our Data Protection Officer.