Privacy Policy

In the following, we provide information about the processing of personal data

• on our website www.ella-group.io
• in our profiles on social media
• within application processes
• outside the website (e.g. when disclosing data to recipients).

Personal data is any information relating to an identified or identifiable natural person, e.g. their name or email address.

The controller pursuant to Art. 5 lit. j of the Federal Act on Data Protection (FADP) is Ella Media AG, Metallstrasse 9A, 6300 Zug, Switzerland, email: office@ella-group.io. We are legally represented by Michael Keusgen.

Our data protection advisor can be reached via heyData GmbH, Schützenstraße 5, 10117 Berlin, www.heydata.eu , email: datenschutz@heydata.eu.

Insofar as we transfer personal data to service providers or other third parties outside Switzerland, decisions of the Federal Council pursuant to Art. 16 para. 1 FADP usually guarantee the security of the data during the transfer. According to these decisions, the legislation there ensures adequate protection. The Federal Council has determined such adequacy for the states, territories, specific sectors within a state and international bodies listed in Art. 8 para. 1 of the Ordinance on Data Protection (Data Protection Ordinance, DPO) in conjunction with Annex 1. These are available at https://www.bj.admin.ch/de/schweizerische-anerkennung-von-staaten-die-einen-angemessenen-datenschutz-gewaehrleisten.

This is the case for the following countries:

• Germany
• Andorra
• Argentina
• Austria
• Belgium
• Bulgaria
• Canada (An adequate level of data protection is considered guaranteed if the Canadian federal law "Loi sur la protection des renseignements personnels et les documents électroniques" of 13 April 2000 applies in the private sector, or the law of a Canadian province that largely corresponds to this federal law. The federal law applies to personal data collected, processed or disclosed in the course of commercial activities, regardless of whether these are organisations such as associations, partnerships, individuals or trade unions, or federally regulated businesses such as facilities, works, undertakings or business activities that fall within the legislative competence of the Canadian Parliament. The provinces of Quebec, British Columbia and Alberta have enacted legislation that largely corresponds to the federal law; the provinces of Ontario, New Brunswick, Newfoundland and Labrador and Nova Scotia have enacted legislation that largely corresponds to this law in the area of health data. In all Canadian provinces, the federal law applies to all personal data collected, processed or disclosed by federally regulated businesses, including data about employees of these businesses. The federal law also applies to personal data transferred to another province or another country in the course of commercial activities.)
• Cyprus
• Croatia
• Denmark
• Spain
• Estonia
• Finland
• France
• Gibraltar
• Greece
• Guernsey
• Hungary
• Isle of Man
• Faroe Islands
• Ireland
• Iceland
• Israel
• Italy
• Jersey
• Latvia
• Liechtenstein
• Lithuania
• Luxembourg
• Malta
• Monaco
• Norway
• New Zealand
• Netherlands
• Poland
• Portugal
• Czech Republic
• Romania
• United Kingdom
• Slovakia
• Slovenia
• Sweden
• Uruguay

In other cases (e.g. if no adequacy decision exists), the legal basis for the data transfer is generally, i.e. unless we indicate otherwise, standard data protection clauses. These are a set of rules adopted by the Federal Data Protection and Information Commissioner (FDPIC) and form part of the contract with the respective third party. Pursuant to Art. 16 para. 2 lit. d FADP, they ensure security during the data transfer. Many of the providers have given contractual guarantees that protect the data beyond the standard contractual clauses. These are, for example, guarantees regarding the encryption of the data or regarding an obligation of the third party to notify data subjects if law enforcement authorities wish to access data.

Data subjects generally have, among others, the following rights against us with regard to the personal data concerning them:

• Right to information as to whether personal data about them is being processed.
• Right to receive the personal data they have disclosed to us,
• Right to rectification,
• Right to object to the processing.

We reserve the right to inform customers who have already used our services or purchased goods from us about our offers from time to time by email or by other means, provided they have not objected to this. The processing is carried out for the purpose of direct marketing. Recipients of the communication can object to the use of their email address or other communication data for advertising purposes at any time without additional costs, for example via the link at the end of each email or by email to our email address stated above.

We also process the opening and click rates of our newsletters by interested parties in order to understand which content is relevant to our recipients. This serves to improve our direct marketing.

We use a service from the provider HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin for email marketing. The provider is a recipient of personal data within the scope of the processing mentioned. Further information can be found in the provider's privacy policy at https://legal.hubspot.com/privacy-policy.

The provider processes personal data in the EU. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

When the website is used for informational purposes, i.e. if visitors do not separately transmit information to us, we collect the personal data that the browser transmits to our server in order to ensure the stability and security of our website. This serves to ensure the IT security of the website.

This data includes, for example:

• IP address
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• Amount of data transferred in each case
• Website from which the request comes
• Browser
• Operating system and its interface
• Language and version of the browser software.

This data is also stored in log files.

Through our website, we process data on third-party devices by means of telecommunications transmission within the scope described in the previous and following sections.

Visitors can refuse the processing, e.g. by making the appropriate settings in their browser and thereby blocking or deleting cookies.

Our website is hosted by Neotrend Solutions GmbH, Lindenstrasse 9, 6340 Baar, Switzerland. In doing so, the provider processes the personal data transmitted via the website, some of which is also mentioned in other sections of this privacy policy, e.g. content, usage, meta/communication data or contact data. The provider is therefore a recipient of the data. Further information can be found in the provider's privacy policy at https://www.neotrend.ch/datenschutz. The processing is a prerequisite for us to be able to offer a website and thus present ourselves externally.

The provider processes personal data in Switzerland. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

Website visitors can book appointments with us on our website. For this purpose, we use a service from the provider HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin for scheduling appointments. The provider is a recipient of personal data within the scope of the processing mentioned. When you book an appointment, you are redirected to the provider's booking page meeting.hubspot.com.

We process the data collected in this context in order to plan and conduct the appointments and to offer interested parties a user-friendly way of scheduling appointments.

Further information can be found in the provider's privacy policy at https://legal.hubspot.com/privacy-policy.

The provider processes personal data in the EU. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

Our website uses cookies. Cookies are small text files that are stored in the web browser on a site visitor's device. Cookies help to make the offer more user-friendly, effective and secure. Insofar as data is processed in this context, this is done for the purpose of providing customers and other site visitors with a functional website. Specifically, we use technically necessary cookies for the following purpose or purposes:

• Cookies that apply language settings and that are set for the playback of media content

We use a service from the provider Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA for analytics. The provider is a recipient of personal data within the scope of the processing mentioned. Further information can be found in the provider's privacy policy at https://business.safety.google/privacy/.

The provider processes personal data in the USA. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

We use a service from the provider HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin for analytics, for marketing automation and for lead generation. The provider is a recipient of personal data within the scope of the processing mentioned. Further information can be found in the provider's privacy policy at https://legal.hubspot.com/privacy-policy.

The provider processes personal data in the EU. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

We use a service from the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for managing website tags. The provider is a recipient of personal data within the scope of the processing mentioned. The service itself does not set any cookies and does not process any personal data, but triggers other tags (such as Google Analytics), which in turn may process personal data. Further information can be found in the provider's privacy policy at https://business.safety.google/privacy/.

The provider processes personal data in the EU. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

We use a service from the provider Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany (privacy policy: https://usercentrics.com/de/datenschutzerklaerung/) for managing consents (cookie banner). The provider is a recipient of personal data within the scope of the processing mentioned.

The provider processes personal data in the EU. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

We use a data protection seal from the provider heyData GmbH, Schützenstraße 5, 10117 Berlin, Germany (privacy policy: https://heydata.eu/en/privacy-policy) to provide website visitors with confirmation of our data protection compliance. The provider is a recipient of personal data within the scope of the processing mentioned.

The provider processes personal data in Germany. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

We are present on social media networks in order to present our organisation and our services there. The operators of these networks regularly process their users' data for advertising purposes. Among other things, they create user profiles from their online behaviour, which are used, for example, to show advertising on the networks' pages and elsewhere on the internet that corresponds to the users' interests. For this purpose, the network operators store information on usage behaviour in cookies on the users' computers. Furthermore, it cannot be ruled out that the operators combine this information with other data. Further information and notes on how users can object to processing by the site operators can be found in the respective operators' privacy policies listed below. The operators or their servers may also be located abroad, so that they process data there. This may result in risks for users, e.g. because the enforcement of their rights is made more difficult or government authorities access the data.

If users of the networks contact us via our profiles, we process the data provided to us in order to respond to the enquiries.

We maintain a profile on Instagram. The operator is Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The privacy policy is available here: https://help.instagram.com/519522125107875.

We maintain a profile on YouTube. The operator is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The privacy policy is available here: https://policies.google.com/privacy?hl=en.

We maintain a profile on LinkedIn. The operator is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. The privacy policy is available here: https://www.linkedin.com/legal/privacy-policy. One way to object to data processing is via the settings for advertisements: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

We embed a podcast player from the provider Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden on our website. The provider is a recipient of personal data within the scope of the processing mentioned. To protect your data, the player is deactivated by default (opt-in loading). The player is only loaded, and personal data (such as your IP address) is only transmitted to the provider, once you have actively consented. Further information can be found in the provider's privacy policy at https://www.spotify.com/legal/privacy-policy/. The provider processes personal data in the EU. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

If persons apply to us for open positions (which we have advertised ourselves or which we advertise on third-party websites) or submit unsolicited applications to us, we process their data for the purposes of the application process.

We may also contact interesting candidates directly about a position. In this case, we process their master data (e.g. name), contact data (e.g. email address) and other data that may be of interest for the specific position.

Recipients of the data are service providers used in the application process (e.g. processors in the context of recruiting) and providers of cloud software that we use. Recipients that we can currently identify are listed below in the section "Recipients of data".

We ask applicants to refrain from including information on political opinions, religious beliefs and similarly sensitive data in their CV and cover letter. Such information is not required for an application. If applicants nevertheless provide such information, we cannot prevent its processing.

We accept applications by email. If we do not hire applicants, we delete their documents six months after the conclusion of the application process, unless they have consented to a longer retention period. Applications that are not received via the designated contact channels but directly by individual employees are forwarded by us to the responsible department and processed according to the same principles and retention periods.

If applicants have given us their consent to use their data for further application processes, we also process their data for the purpose of conducting further application processes.

We process personal data for the purposes stated below or elsewhere in this document (e.g. under "Recipients of data"):

• Provision of contractual services and fulfilment of contractual obligations
• Contacting (e.g. by email or telephone)
• Communication
• Responding to enquiries
• IT security measures
• Direct marketing
• Requesting and taking into account feedback
• Security measures in our office

Recipients of data are service providers we use (e.g. processors), providers of cloud software that we use and other external bodies. Recipients that we can currently identify are listed by name below. However, this list is not to be understood as exhaustive.

We use a service from the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Dublin, Ireland (privacy policy: https://business.safety.google/privacy/) for cloud storage. The provider is a recipient of personal data within the scope of the processing mentioned. Data subjects are users.

We use a service from the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Dublin, Ireland (privacy policy: https://business.safety.google/privacy/) as platform as a service, as infrastructure as a service and as serverless computing environments. The provider is a recipient of personal data within the scope of the processing mentioned. Data subjects are employees, users, third parties, customers.

The provider processes personal data in the EU. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

We use a service from the provider Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland (privacy policy: https://privacy.microsoft.com/en-gb/privacystatement) for cloud storage, for drafting documents and for collaboration at work. The provider is a recipient of personal data within the scope of the processing mentioned. Data subjects are employees, third parties, users, customers.

The provider processes personal data in the EU. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

We use a service from the provider Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland (privacy policy: https://privacy.microsoft.com/en-gb/privacystatement) as platform as a service, as infrastructure as a service and as serverless computing environments. The provider is a recipient of personal data within the scope of the processing mentioned. Data subjects are employees, users, third parties, customers.

The provider processes personal data in the EU. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

We use a service from the provider Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (privacy policy: https://privacy.microsoft.com/en-gb/privacystatement) for collaboration at work and for cloud storage. The provider is a recipient of personal data within the scope of the processing mentioned. Data subjects are employees, users, third parties, customers.

The provider processes personal data in the EU. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

We use a service from the provider Zoom Video Communications, Inc., 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA (privacy policy: https://explore.zoom.us/trust/privacy) for video conferences. The provider is a recipient of personal data within the scope of the processing mentioned. Data subjects are employees, third parties.

The provider processes personal data in the EU. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

We use a service from the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Dublin, Ireland (privacy policy: https://business.safety.google/privacy/) for video conferences. The provider is a recipient of personal data within the scope of the processing mentioned. Data subjects are users.

The provider processes personal data in the EU. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

We use a service from the provider Slack Technologies Limited, One Park Place, Upper Hatch Street, Dublin 2, Ireland (privacy policy: https://slack.com/trust/privacy/privacy-policy) for communication. The provider is a recipient of personal data within the scope of the processing mentioned. Data subjects are employees, customers.

The provider processes personal data in the EU. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

We use a service from the provider Atlassian B.V., c/o Atlassian, Inc., 350 Bush Street, Floor 13, San Francisco, CA 94104, USA (privacy policy: https://www.atlassian.com/legal/privacy-policy) for project management. The provider is a recipient of personal data within the scope of the processing mentioned. Data subjects are prospects, employees, third parties, users, customers.

The provider processes personal data in the EU. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

We use a service from the provider Atlassian B.V., c/o Atlassian, Inc., 350 Bush Street, Floor 13, San Francisco, CA 94104, USA (privacy policy: https://www.atlassian.com/legal/privacy-policy) for project management. The provider is a recipient of personal data within the scope of the processing mentioned. Data subjects are prospects, users, employees, third parties, customers.

The provider processes personal data in the EU. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

We use a service from the provider RealtimeBoard, Inc., 3651 Lindell Road Suite D1134 Las Vegas, NV 89103, USA (privacy policy: https://miro.com/legal/privacy-policy/) for project management and for collaboration at work. The provider is a recipient of personal data within the scope of the processing mentioned. Data subjects are employees, third parties.

The provider processes personal data in the USA. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

We use a service from the provider Skribble AG, Förrlibuckstrasse 190, CH-8005 Zurich, Switzerland (privacy policy: https://www.skribble.com/de-de/datenschutz/) for electronic signatures. The provider is a recipient of personal data within the scope of the processing mentioned. Data subjects are employees, prospects.

We use a service from the provider IGS GmbH, Geltenwilenstrasse 16, CH-9000 St. Gallen (privacy policy: https://www.ahveasy.ch/datenschutz/) for employee management and for insurance management. The provider is a recipient of personal data within the scope of the processing mentioned. Data subjects are employees.

We use a service from the provider Abacus Business Solutions GmbH, Mies-van-der-Rohe-Straße 6, 80807 Munich (privacy policy: https://www.abacus-solutions.de/datenschutz/) for accounting and for employee management. The provider is a recipient of personal data within the scope of the processing mentioned. Data subjects are employees, prospects.

The provider processes personal data in the EU. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

We use a service from the provider Swiss Life Lebensversicherung SE, General-Guisan-Quai 40, P.O. Box, CH-8022 Zurich (privacy policy: https://www.swisslife.ch/de/ueber-uns/footer/privacy.html) for insurance management. The provider is a recipient of personal data within the scope of the processing mentioned. Data subjects are employees.

The provider processes personal data in the EU. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

We use a service from the provider HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin (privacy policy: https://legal.hubspot.com/privacy-policy) for analytics, for lead generation and for marketing automation. The provider is a recipient of personal data within the scope of the processing mentioned. Data subjects are prospects.

The provider processes personal data in the EU. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

We use a service from the provider HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin (privacy policy: https://legal.hubspot.com/privacy-policy) for customer relationship management. The provider is a recipient of personal data within the scope of the processing mentioned. Data subjects are customers.

The provider processes personal data in the EU. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

We use a service from the provider DocuSign Germany GmbH, Neue Rothofstrasse 13-19, 60313 Frankfurt (privacy policy: https://www.docusign.de/unternehmen/datenschutz) for electronic signatures. The provider is a recipient of personal data within the scope of the processing mentioned. Data subjects are customers, prospects.

The provider processes personal data in the EU. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

We use a service from the provider MongoDB, Inc., 1633 Broadway, 38th Floor, New York, NY 10019, USA (privacy policy: https://www.mongodb.com/legal/privacy-policy) as database as a service. The provider is a recipient of personal data within the scope of the processing mentioned. Data subjects are users.

The provider processes personal data in the EU. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

We use a service from the provider DocuSign Germany GmbH, Neue Rothofstrasse 13-19, 60313 Frankfurt (privacy policy: https://www.docusign.de/unternehmen/datenschutz) for electronic signatures. The provider is a recipient of personal data within the scope of the processing mentioned. Data subjects are employees, third parties, customers.

The provider processes personal data in the EU. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

We use a service from the provider Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (privacy policy: https://business.safety.google/privacy/) for analytics. The provider is a recipient of personal data within the scope of the processing mentioned. Data subjects are users.

The provider processes personal data in the USA. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

We use a service from the provider Twilio Ireland Limited, 70 Sir John Rogerson’s Quay, Dublin 2, D02 R296, Ireland (privacy policy: https://www.twilio.com/legal/privacy) for telephone calls and for sending emails. The provider is a recipient of personal data within the scope of the processing mentioned. Data subjects are prospects, users, customers.

The provider processes personal data in the EU. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

We use a service from the provider Microsoft Ireland Operations, Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland (privacy policy: https://privacy.microsoft.com/en-gb/privacystatement) for artificial intelligence functions. The provider is a recipient of personal data within the scope of the processing mentioned. Data subjects are users.

The provider processes personal data in the EU. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

We use a service from the provider Mailjet GmbH, Friedrichstraße 68, 10117 Berlin (privacy policy: https://www.mailjet.de/privacy-policy/) for sending emails. The provider is a recipient of personal data within the scope of the processing mentioned. Data subjects are customers, employees.

The provider processes personal data in the EU. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

We use a service from the provider OpenAI Ireland Limited, at 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland (privacy policy: https://openai.com/policies/privacy-policy) for artificial intelligence functions and for API development. The provider is a recipient of personal data within the scope of the processing mentioned. Data subjects are users.

The provider processes personal data in the USA. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

We use a service from the provider Anthropic PBC, 548 Market St, PMB 90375, San Francisco, CA 94104, USA (privacy policy: https://www.anthropic.com/legal/privacy) for application development and for artificial intelligence functions. The provider is a recipient of personal data within the scope of the processing mentioned. Data subjects are users.

The provider processes personal data in the USA. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

We use a service from the provider HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin (privacy policy: https://legal.hubspot.com/privacy-policy) for workflow automation. The provider is a recipient of personal data within the scope of the processing mentioned. Data subjects are customers, third parties.

The provider processes personal data in the EU. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

We use a service from the provider Anthropic PBC, 548 Market St, PMB 90375, San Francisco, CA 94104, USA (privacy policy: https://www.anthropic.com/legal/privacy) for artificial intelligence functions. The provider is a recipient of personal data within the scope of the processing mentioned. Data subjects are users.

The provider processes personal data in the USA. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

We use a service from the provider Swiss21.org AG, Weissbadstrasse 8b, 9050 Appenzell (privacy policy: https://swiss21.org/datenschutzerklarung/) for cloud storage and for accounting. The provider is a recipient of personal data within the scope of the processing mentioned. Data subjects are employees, customers.

The provider processes personal data in Switzerland. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

We use a service from the provider Abacus Business Solutions GmbH, Mies-van-der-Rohe-Straße 6, 80807 Munich (privacy policy: https://www.abacus-solutions.de/datenschutz/) for accounting. The provider is a recipient of personal data within the scope of the processing mentioned. Data subjects are employees, customers.

The provider processes personal data in the EU. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

We use a service from the provider Okta, Inc., 100 First Street, San Francisco, California 94105, USA (privacy policy: https://www.okta.com/privacy-policy/) for authentication management. The provider is a recipient of personal data within the scope of the processing mentioned. Data subjects are users.

The provider processes personal data in the EU. Information on guarantees under Article 16 paragraph 2 can be found in the section "Disclosure abroad".

We reserve the right to amend this privacy policy with effect for the future. The current version is always available here.

If you have any questions or comments regarding this privacy policy, please feel free to contact us using the contact details provided above.