Privacy Policy

Effective Date: 1. Mar. 2025

General Information

Data Sharing

We do not sell your personal information. However, we may share your information with third parties to provide services, comply with legal obligations, or protect our rights. For more information what we share you can inform yourself in the cookie section.

Server Data and Abuse Prevention

Like virtually every website, our servers process the IP address of your device to deliver the requested pages and to keep our services secure (legal basis: legitimate interest, Art. 6(1)(f) GDPR).

When you submit a company suggestion, we additionally store your IP address for up to 7 days, solely to limit the number of submissions per person and to protect the feature from abuse. It is deleted automatically afterwards and is not used for any other purpose.

Data Retention

We retain personal information only as long as necessary for the purposes described in this Privacy Policy or as required by law.

Data Security

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Contact us if you have questions or concerns about this Privacy Policy or our practices. For contact information you can visit our imprint:
Imprint

Changes to This Policy

We may update this Privacy Policy from time to time. The updated policy will be posted with the “Effective Date” at the top.

Cookies

We use third party cookies to protect ourselves from harm or any other unintended use of our website

The following cookies are being used:

Cookie: hmt_id
Function: hCaptcha: Used to create anonymized service-related statistics and supports technical functions such as accessibility.
Duration: 30 days
Cookie: hc_accessibility
Function: hCaptcha: Enables the user to use accessibility functions.
Duration: 30 days
Cookie: INGRESSCOOKIE, __cfduid, __cflb, session, sessionid
Function: hCaptcha: Are used for absolutely necessary technical purposes such as load balancing and routing.
Duration: Various, up to 30 days
Cookie: JSESSIONID
Function: Core Innovation GmbH: Will only be set when you use the login. Connects the login form with the login process (HttpOnly cookie).
Duration: 30 minutes
Cookie: accessToken, refreshToken, pendingAuthorization
Function: Core Innovation GmbH: Browser storage, only set when you log in. Holds your login tokens and the state of a running login.
Duration: The refresh token keeps you logged in for 60 days after your last visit, at most 120 days. Removed when you log out.
Cookie: cookieProperties
Function: Core Innovation GmbH: Will be set for european users for gdpr compliance.
Duration: Persistent if you are a european user.
Cookie: _ga
Function: Google Analytics 4: Used to distinguish users.
Duration: 2 years
Cookie: _ga_<container-id>
Function: Google Analytics 4: Used to persist session state.
Duration: 2 years