Imprint

Information according to § 5 TMG

troodi GmbH
Lichtstr. 25
50825 Köln

Represented by:
Philip Klasen-Schwidetzki

Register entry:
Entry in the Commercial Register
Register court: Mannheim
Registration number: HRB 735746

VAT-ID:
VAT identification number according to §27a sales tax law: DE328400665

Regulatory Authority:
AG Mannheim

Responsible for the content according to § 18 Abs. 2 MStV:
Philip Klasen-Schwidetzki
Lichtstr. 25
50825 Köln

Disclaimer:

Liability for contents

The contents of our pages have been created with the utmost care. However, we cannot guarantee the accuracy, completeness and timeliness of the content. As a service provider, we are responsible for our own content on these pages in accordance with the general laws pursuant to § 7 Para.1 TMG. According to §§ 8 to 10 TMG, however, we are not obligated as a service provider to monitor transmitted or stored third-party information or to investigate circumstances that indicate illegal activity. Obligations to remove or block the use of information under the general laws remain unaffected. However, liability in this regard is only possible from the point in time at which a concrete infringement of the law becomes known. If we become aware of any such infringements, we will remove this content immediately.

Liability for links

Our offer contains links to external websites of third parties, on whose content we have no influence. Therefore, we cannot assume any liability for these external content. The respective provider or operator of the pages is always responsible for the content of the linked pages. The linked pages were checked for possible legal violations at the time of linking. Illegal contents were not recognizable at the time of linking. However, a permanent control of the contents of the linked pages is not reasonable without concrete evidence of a violation of the law. If we become aware of any infringements, we will remove such links immediately.

Copyright

The content and works created by the site operators on these pages are subject to German copyright law. Duplication, processing, distribution, or any form of commercialization of such material beyond the scope of the copyright law shall require the prior written consent of its respective author or creator. Downloads and copies of this site are only permitted for private, non-commercial use. If the content on this site was not created by the operator, the copyrights of third parties are respected. Third-party content is marked as such. Should you become aware of a copyright infringement, please inform us accordingly. If we become aware of any infringements, we will remove such content immediately.

Data protection

The use of our website is generally possible without providing personal data. The collection of personal data (such as name, address, or e-mail addresses) on our side is always on a voluntary basis for the user. This data will not be passed on to third parties without express consent of the user.
We point out that data transmission over the internet (e.g. communication via e-mail) can have security gaps. A complete protection of data against access by third parties is not possible. We hereby expressly object against the use of contact data published within the framework of the imprint obligation by third parties for the purpose of sending unsolicited advertising and information materials. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited advertising information, such as spam e-mails.

1 Responsible

Responsible within the meaning of Art. 24 GDPR for the processing is:

troodi GmbH
Lichtstr. 25
50825 Cologne

E-mail: info@troodi.de

Phone: +49 221 56095669​

Disclaimer: The English version is provided for informational purposes only; in the event of any discrepancies or inconsistencies, the German version shall prevail and be legally binding.

2 Your rights

You have the following rights with regard to your personal data:

  • Right of access and to receive a copy of your data,
  • Right to rectification,
  • Right to erasure and the “right to be forgotten”,
  • Right to restriction of processing,
  • Right to object to processing,
  • Right to data portability.

You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.

3 Website troodi.de

3.1 Provision of our website

3.1.1 Purposes

This processing serves to present our company externally.

3.1.2 Types of data

We process your connection data (access data and end-device data) as categories of data relating to you.

3.1.3 Legal basis

The legal basis for processing the above categories of data is the implementation of necessary pre-contractual measures and the performance of contracts pursuant to Art. 6(1) sentence 1 lit. b GDPR.

3.1.4 Necessity

Processing the above data is necessary for you to contact us. If you do not provide the above data, we cannot display our website to you.

3.1.5 Storage period

The storage period for the above data is the duration of the browser session.

Vimeo’s storage period is, if you are logged into a Vimeo account, until you delete the data within your account or delete the entire Vimeo account, and up to two years for technically necessary cookies. Without a Vimeo account, temporary connection data is deleted after the browser session ends; technically necessary cookies to provide the video player are stored for up to two years. By embedding videos using the “Do-Not-Track” function, Vimeo also refrains from setting analytics and tracking cookies.

3.1.6 Recipients

The above data is transmitted to our website host: HOSTINGER operations, UAB, Švitrigailos str. 34, Vilnius 03230, Lithuania. The above data is transferred to the USA and Canada as third countries with an adequacy decision pursuant to Art. 45 GDPR.

We embed videos on our website via Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York, NY 10001, USA. The above data is transferred to the USA as a third country with an adequacy decision pursuant to Art. 45 GDPR.

We embed images on our website via ShortPixel, ID SCOUT SRL, Bucuresti, Str. Transilvaniei nr. 2, Camera 5, Bl. 5, Ap. 19, Sector 1, 010798, Romania.

3.2 Website security

3.2.1 Purposes

This processing serves to ensure the uninterrupted operation of the website.

3.2.2. Types of data

We process your connection data (access data and end-device data) and your system information as categories of data relating to you.

3.2.3 Legal basis

The legal basis is Art. 6(1) sentence 1 lit. c GDPR in conjunction with Art. 24 and 32 GDPR.

3.2.4 Storage period

We store the above mentioned data for 7 days.

3.2.5 Recipients

The above data is transmitted to our website host: HOSTINGER operations, UAB, Švitrigailos str. 34, Vilnius 03230, Lithuania. The above data is transferred to the USA and Canada as third countries with an adequacy decision pursuant to Art. 45 GDPR.

3.3. Consent management

3.3.1 Purposes

This processing serves to manage and document your consents.

3.3.2. Types of data

We process your consent data as a category of data relating to you.

3.3.3 Legal basis

The legal basis is our obligation to demonstrate compliance pursuant to Art. 6(1) sentence 1 lit. c GDPR in conjunction with Art. 5(2) and Art. 7(1) GDPR.

The storage of a technically necessary cookie on your device for managing and documenting your consent is based on Art. 5(2) GDPR in conjunction with Art. 6(1) sentence 1 lit. c GDPR in conjunction with Section 25(2) No. 2 TTDSG.

3.3.4 Necessity

Processing is necessary to fulfill our legal obligations.

3.3.5 Storage period

We store the above data until you withdraw your consent. We retain a deletion log for three years.

3.3.6 Recipients

The above data is transmitted to our website host: HOSTINGER operations, UAB, Švitrigailos str. 34, Vilnius 03230, Lithuania. The above data is transferred to the USA and Canada as third countries with an adequacy decision pursuant to Art. 45 GDPR.

The above data is transmitted to our consent banner provider: Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg, Germany.

3.4. Contact by phone, e-mail, and post

3.4.1 Purposes

Processing of contact via phone, e-mail, and post serves to answer inquiries as well as customer acquisition, contract processing, and responding to press and data protection inquiries.

3.4.2. Types of data

We process your contact data and the content of your inquiry as categories of data relating to you.

3.4.3 Legal basis

The legal basis is the implementation of necessary pre-contractual measures and the performance of contracts pursuant to Art. 6(1) sentence 1 lit. b GDPR.

3.4.4 Necessity

Processing is necessary to handle your inquiry. If you do not provide the above data, we cannot process your inquiry.

3.4.5 Storage period

We store the above data for six months, unless a contract is concluded. Contract-relevant data is then retained in accordance with the applicable statutory requirements.

3.4.6 Recipients

The above data is transmitted to our email provider: STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany.

The above data is transferred to Switzerland and the USA as third countries with an adequacy decision pursuant to Art. 45 GDPR. The above data is transferred to Singapore as a third country without an adequacy decision. The legal basis for transfers to third countries without an adequacy decision is the use of standard contractual clauses pursuant to Art. 46 GDPR. The company provides appropriate safeguards, which you can request at info@troodi.de.

3.5 Contact via contact form

3.5.1 Purposes

Processing via the contact form serves to answer inquiries and for customer acquisition.

3.5.2 Types of data

We process your name, email address, company name, telephone number, and content of the inquiry as categories of data relating to you.

3.5.3 Legal basis

The legal basis is the implementation of necessary pre-contractual measures and the performance of contracts pursuant to Art. 6(1) sentence 1 lit. b GDPR.

3.5.4 Necessity

Processing is necessary to handle your inquiry. If you do not provide the above data, we cannot process your inquiry.

3.5.5 Storage period

We store the above data for six months, unless a contract is concluded. Contract-relevant data is then retained in accordance with the applicable statutory requirements.

3.5.6 Recipients

The above data is transmitted to our email provider: STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. The above data is transferred to Switzerland and the USA as third countries with an adequacy decision pursuant to Art. 45 GDPR, and to Singapore as a third country without an adequacy decision. The legal basis for these transfers is standard contractual clauses pursuant to Art. 46 GDPR. Suitable safeguards can be requested at info@troodi.de.

The above data is also transmitted to our website host: HOSTINGER operations, UAB, Švitrigailos str. 34, Vilnius 03230, Lithuania. The above data is transferred to the USA and Canada as third countries with an adequacy decision pursuant to Art. 45 GDPR.

3.6 Booking a meeting/demo

3.6.1 Purposes

This processing serves the booking of a demo of the troodi platform and/or a meeting with troodi.

3.6.2 Types of data

We process the appointment time and your email address as categories of data relating to you.

3.6.3 Legal basis

The legal basis is the implementation of necessary pre-contractual measures and the performance of contracts pursuant to Art. 6(1) sentence 1 lit. b GDPR.

3.6.4 Necessity

Processing is necessary to handle your inquiry. If you do not provide the above data, we cannot process your inquiry.

3.6.5 Storage period

We store the above data for six months, unless a contract is concluded. Contract-relevant data is then retained in accordance with the applicable statutory requirements.

3.6.6 Recipients

The above data is transmitted to our email provider: STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. The above data is transferred to Switzerland and the USA as third countries with an adequacy decision pursuant to Art. 45 GDPR; to Singapore as a third country without an adequacy decision (legal basis: standard contractual clauses, Art. 46 GDPR; safeguards available on request at info@troodi.de).

We use Calendly, LLC, 115 E Main St Ste A1B PMB 123, Buford, GA 30518, USA as appointment scheduling provider. The above data is transferred to the USA as a third country with an adequacy decision pursuant to Art. 45 GDPR.

3.7 Marketing tracking

3.7.1 Purposes

This processing serves user behavior analysis for conversion tracking.

3.7.2 Types of data

We process your connection data (access and end-device data), usage data, data about your interaction with our advertisements, and your demographic data as categories of data relating to you.

3.7.3 Legal basis

The legal basis is your explicit consent to marketing analysis pursuant to Art. 6(1) sentence 1 lit. a GDPR.

3.7.4 Storage period

Storage periods are:

  • Google Analytics: 14 months (demographic data: 2 months)
  • Google Ads tracking: 24 months
  • Matomo: session cookies until the end of the browser session; persistent cookies 12 months
  • LinkedIn Insight Tag: 180 days

3.7.5 Recipients

The above data is transmitted to:

  • Google LLC, 1600 Amphitheatre Pkwy., Mountain View, CA 94043, USA
  • Matomo (InnoCraft Ltd), 7 Waterloo Quay, PO Box 625, 6140 Wellington, New Zealand
  • LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, and LinkedIn Corporation, 1000 West Maude Avenue, Sunnyvale, CA 94085, USA

The above data is transferred to the USA and New Zealand as third countries with an adequacy decision pursuant to Art. 45 GDPR.

3.7.6 Your right to withdraw consent

You have the right to withdraw your consent at any time with effect for the future. The lawfulness of processing carried out on the basis of your consent until withdrawal is not affected.

You may withdraw your consent at any time by removing the checkmark for marketing analysis within the cookie banner.

You may also withdraw your consent by email to info@troodi.de.

3.8 Newsletter signup and analysis of user behavior

3.8.1 Purposes

This processing serves marketing and user behavior analysis.

3.8.2 Types of data

We process your email address, access data, email user behavior data, end-device data, connection data, and consent data as categories of data relating to you.

3.8.3 Legal basis

The legal basis for newsletter subscription is your explicit consent pursuant to Art. 6(1) sentence 1 lit. a GDPR.

The legal basis for user behavior analysis is Art. 6(1) sentence 1 lit. f GDPR; our legitimate interest is marketing analysis.

3.8.4 Storage period

We store the above data until you withdraw your consent. We retain a deletion log for three years.

3.8.5 Recipients

The above data is transmitted to our website host: HOSTINGER operations, UAB, Švitrigailos str. 34, Vilnius 03230, Lithuania. The above data is transferred to the USA and Canada as third countries with an adequacy decision pursuant to Art. 45 GDPR.

The above data is transmitted to our newsletter provider: Maileon (XQueue GmbH), Christian-Pleß-Str. 11–13, 63069 Offenbach am Main, Germany.

3.8.6 Your right to withdraw consent

You may withdraw your consent at any time with effect for the future. The lawfulness of processing carried out until withdrawal is not affected.

You can withdraw your consent using the unsubscribe link at the end of each newsletter, or by email to info@troodi.de.

3.8.7 Your right to object (user behavior analysis)

Pursuant to Art. 21 GDPR, you have the right to object to the processing described above if there are grounds relating to your particular situation or if your objection is directed against direct marketing.

You can exercise your right to object at any time by emailing info@troodi.de.

3.9 Topic suggestions for the troodi blog

3.9.1 Purposes

This processing serves to submit suggested topics to be covered on the troodi blog.

3.9.2 Categories of data

We process your name, email address, and the suggested topic as categories of data relating to you.

3.9.3 Legal basis

The legal basis is your explicit consent to submit your topic suggestion pursuant to Art. 6(1) sentence 1 lit. a GDPR.

3.9.4 Storage period

We store the above data until you withdraw your consent. We retain a deletion log for three years.

3.9.5 Recipients

The above data is transmitted to our email provider: STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. The above data is transferred to Switzerland and the USA as third countries with an adequacy decision pursuant to Art. 45 GDPR, and to Singapore as a third country without an adequacy decision (legal basis: standard contractual clauses, Art. 46 GDPR; safeguards available on request at info@troodi.de).

The above data is transmitted to our website host: HOSTINGER operations, UAB, Švitrigailos str. 34, Vilnius 03230, Lithuania. The above data is transferred to the USA and Canada as third countries with an adequacy decision pursuant to Art. 45 GDPR.

3.9.6 Your right to withdraw consent

You may withdraw your consent at any time with effect for the future. The lawfulness of processing until withdrawal is not affected. You can withdraw by emailing info@troodi.de.

3.10 LinkedIn presence

3.10.1 Purposes

This processing serves to present our company externally.

3.10.2 Types of data

We process the inquiry content you provide, your user data, and the communication date as categories of data relating to you.

3.10.3 Legal basis

The legal basis is the implementation of necessary pre-contractual measures and the performance of contracts pursuant to Art. 6(1) sentence 1 lit. b GDPR.

3.10.4 Necessity

Processing is necessary to handle your inquiry. If you do not provide the above data, we cannot process your inquiry.

3.10.5 Storage period

If you have a logged-in account: until you delete the entire account, plus technically necessary cookies until deleted by you or your browser. Without a logged-in account, technically necessary cookies are stored until deleted in the browser.

3.10.6 Recipients

The above data is transmitted to LinkedIn Ireland Unlimited Company, Gardner House, Wilton Plaza, Wilton Place, Dublin 2, Ireland and LinkedIn Corporation, 1000 West Maude Avenue, Sunnyvale, CA 94085, USA.

The above data is transferred to the USA as a third country with an adequacy decision pursuant to Art. 45 GDPR.

3.10.7 Further information on joint responsibility

We have concluded a joint controllership agreement with LinkedIn Ireland Unlimited Company:
https://legal.linkedin.com/pages-joint-controller-addendum

Under this agreement, LinkedIn fulfils transparency obligations and you can find information about the processing of your personal data here:
https://legal.linkedin.com/pages-joint-controller-addendum

3.11 Embedding von YouTube videos

3.11.1 Purposes

This processing serves to display video content for the external presentation of our company and to provide information about our products and services on our website.

3.11.2 Types of data

We process your connection data (access and end-device data) and your usage data as categories of data relating to you.

3.11.3 Legal basis

The legal basis is your explicit consent pursuant to Art. 6(1) sentence 1 lit. a GDPR.

3.11.4 Storage period

If you are logged into a Google account: until you delete the data within the account or delete the entire Google account, plus up to two years for technically necessary cookies. Without a Google account, temporary connection data is deleted after the browser session ends.

We embed YouTube videos in privacy-enhanced mode (youtube-nocookie.com). Cookies are only set by YouTube once you actively play the video.

3.11.5 Recipients

The above data is transmitted to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, 1600 Amphitheatre Pkwy., Mountain View, CA 94043, USA. The above data is transferred to the USA as a third country with an adequacy decision pursuant to Art. 45 GDPR.

3.12 Learning culture analysis

3.12.1 Purposes

This processing serves to carry out our free learning culture analysis. Interested parties can use a form embedded on our website to provide assessments of their organization’s learning culture and then receive an individual report with recommendations for action. The processing also serves to initiate a business relationship.

3.12.2 Types of data

We process your email address and your answers to questions about your organization’s learning culture (Likert scale assessments on individual learning mindset, collective learning behavior, and structural learning conditions) as categories of data relating to you.

3.12.3 Legal basis

The legal basis is the implementation of necessary pre-contractual measures pursuant to Art. 6(1) sentence 1 lit. b GDPR.

The storage of a technically necessary cookie on your device for embedding the form is based on your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR in conjunction with Section 25(1) TTDSG.

3.12.4 Necessity

Processing is necessary to create and send your personal learning culture analysis. If you do not provide your email address, we cannot send you the report.

3.12.5 Storage period

We store the above data for six months unless a contract is concluded; contract-relevant data is then retained in accordance with statutory requirements.

3.12.6 Recipients

The above data is transmitted to our form provider: Typeform S.L., Carrer de Bac de Roda 163, 08018 Barcelona, Spain. The above data remains within the European Union.

3.12.7 Your right to withdraw consent (cookie embedding)

You may withdraw your consent to cookie setting at any time with effect for the future. The lawfulness of processing until withdrawal is not affected.

You can withdraw your consent by removing the checkmark for the “Functional” category within the cookie banner.

4 Platform grow.troodi.de

4.1 Provision of our platform

4.1.1 Purposes

This processing serves to establish the connection between our server and your end device for your use of our platform.

4.1.2 Types of data

We process your connection data (access data and end-device data) as categories of data relating to you.

4.1.3 Legal basis

The legal basis is your consent to the platform usage agreement pursuant to Art. 6(1) sentence 1 lit. b GDPR.

4.1.4 Necessity

Processing is necessary for you to use our platform. If you do not provide the above data, we cannot process your request.

4.1.5 Storage period

The storage period is the duration of the browser session.

Vimeo’s storage period is, if you are logged into a Vimeo account, until you delete the data within your account or delete the entire Vimeo account, and up to two years for technically necessary cookies. Without a Vimeo account, temporary connection data is deleted after the browser session ends; technically necessary cookies to provide the video player are stored for up to two years. By embedding videos using the “Do-Not-Track” function, Vimeo also refrains from setting analytics and tracking cookies.

4.1.6 Recipients

The above data is transmitted to our platform host: STACKIT Schwarz IT KG, Stiftsbergstraße 1, 74172 Neckarsulm, Germany.

We embed videos within our platform via Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York, NY 10001, USA. The above data is transferred to the USA as a third country with an adequacy decision pursuant to Art. 45 GDPR.

4.2 Ensuring uninterrupted operation of the platform

4.2.1 Purposes

This processing serves to ensure uninterrupted operation of the platform.

4.2.2 Types of data

We process your connection data (access data and end-device data) and your system information as categories of data relating to you.

4.2.3 Legal basis

The legal basis is our legal duty to ensure secure processing of personal data pursuant to Art. 6(1) sentence 1 lit. c GDPR in conjunction with Art. 24 and 32 GDPR.

4.2.4 Storage period

The storage period is 30 days for logging access to the interface between platform and server, and two months for the transmission of system crashes.

4.2.5 Recipients

The above data is transmitted to our platform host: STACKIT Schwarz IT KG, Stiftsbergstraße 1, 74172 Neckarsulm, Germany.

For platform security, the above data is transmitted to bunny.net, BunnyWay d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia, and AppSignal B.V., Rietwaard 4, ’s-Hertogenbosch, Netherlands.

4.3 Consent management

4.3.1 Purposes

This processing serves to manage and document your consents.

4.3.2 Types of data

We process your consent data as a category of data relating to you.

4.3.3 Legal basis

The legal basis is our obligation to provide proof pursuant to Art. 6(1) sentence 1 lit. c GDPR in conjunction with Art. 7(1) GDPR.

4.3.4 Necessity

Processing is necessary to fulfill our legal obligations.

4.3.5 Storage period

We store the above data until you withdraw your consent. We retain a deletion log for three years to safeguard our obligation to provide proof.

4.3.6 Recipients

The above data is transmitted to our platform host: STACKIT Schwarz IT KG, Stiftsbergstraße 1, 74172 Neckarsulm, Germany.

4.4 User management

4.4.1 Purposes

This processing serves the security of user management.

4.4.2 Types of data

We process account data, session data, and logging data as types of data relating to you.

4.4.3 Legal basis

The legal basis is our legal duty to ensure secure processing of personal data pursuant to Art. 6(1) sentence 1 lit. c GDPR in conjunction with Art. 24 and 32 GDPR.

4.4.4 Storage period

We store account data until you withdraw your consent to use our platform. We retain a deletion log for three years.

4.4.5 Recipients

The above data is transmitted to our platform host: STACKIT Schwarz IT KG, Stiftsbergstraße 1, 74172 Neckarsulm, Germany.

4.5 Organizational and content-related messages to users

4.5.1 Purposes

This processing serves to activate the account or a module, to suggest content of the educational offering, and to request voluntary feedback.

4.5.2 Types of data

We process email address, first name and last name as types of data relating to you.

4.5.3 Legal basis

The legal basis is your consent to the platform usage agreement pursuant to Art. 6(1) sentence 1 lit. b GDPR.

4.5.4 Necessity

Processing is necessary for you to use our platform. If you do not provide the above data, we cannot process your request.

4.5.5 Storage period

We store the above data until you withdraw your consent. We retain a deletion log for three years.

4.5.6 Recipients

The above data is transmitted to our platform host: STACKIT Schwarz IT KG, Stiftsbergstraße 1, 74172 Neckarsulm, Germany.

The above data is transmitted to our newsletter provider: Maileon (XQueue GmbH), Christian-Pleß-Str. 11–13, 63069 Offenbach am Main, Germany.

4.6 Provision of quizzes

4.6.1 Purposes

This processing serves to provide learning program quizzes within the platform as part of the learning programs in order to deepen learned knowledge.

4.6.2 Types of data

We process connection data and learning progress data as types of data relating to you.

4.6.3 Legal basis

The legal basis is your consent to the platform usage agreement pursuant to Art. 6(1) sentence 1 lit. b GDPR.

4.6.4 Necessity

Processing is necessary for you to use our platform. If you do not provide the above data, we cannot process your request.

4.6.5 Storage period

We store the above data until you withdraw your consent. We retain a deletion log for three years.

4.6.6 Recipients

The above data is transmitted to our platform host: STACKIT Schwarz IT KG, Stiftsbergstraße 1, 74172 Neckarsulm, Germany.

The above data is transmitted to our quiz provider: Typeform S.L., Calle de Pallars 108 (Aticco), 08018 Barcelona, Spain. The above data is transferred to the USA as a third country with an adequacy decision pursuant to Art. 45 GDPR.

4.6.7 Your right to withdraw consent

You may withdraw your consent at any time with effect for the future. The lawfulness of processing until withdrawal is not affected.

You can withdraw your consent by emailing info@troodi.de.

4.7 User feedback

4.7.1 Purposes

This processing serves the voluntary submission of feedback evaluations by platform users.

4.7.2 Types of data

We process connection data as well as the feedback data you provide as types of data relating to you.

4.7.3 Legal basis

The legal basis is your explicit consent to provide feedback pursuant to Art. 6(1) sentence 1 lit. a GDPR.

4.7.4 Storage period

We store the above data until you withdraw your consent. We retain a deletion log for three years.

4.7.5 Recipients

The above data is transmitted to our platform host: STACKIT Schwarz IT KG, Stiftsbergstraße 1, 74172 Neckarsulm, Germany.

The above data is transmitted to our questionnaire provider: Typeform S.L., Calle de Pallars 108 (Aticco), 08018 Barcelona, Spain. The above data is transferred to the USA as a third country with an adequacy decision pursuant to Art. 45 GDPR.

4.7.6 Your right to withdraw consent

You may withdraw your consent at any time with effect for the future. The lawfulness of processing until withdrawal is not affected.

You can withdraw your consent by emailing info@troodi.de.

5 Data subject rights management

5.1 Purposes

This processing serves the GDPR-compliant handling of data subject rights.

5.2 Types of data

We process all categories of data relating to you mentioned above insofar as necessary.

5.3 Legal basis

The legal basis is Art. 6(1) sentence 1 lit. c GDPR in conjunction with Chapter III GDPR.

5.4 Storage period

The storage period is three years.

5.5 Recipients

We use HOSTINGER operations, UAB, Švitrigailos str. 34, Vilnius 03230, Lithuania as website host. The above data is transferred to the USA and Canada as third countries with an adequacy decision pursuant to Art. 45 GDPR.

We use STACKIT Schwarz IT KG, Stiftsbergstraße 1, 74172 Neckarsulm, Germany as platform host.