encoway – data protection

encoway GmbH appreciates your interest in our products and our company. It is particularly important to us to guarantee the highest possible level of protection for your personal data. We would therefore like to inform you about our commitment to protecting your privacy with this data protection declaration.

The protection of your privacy is of crucial importance, especially for future internet-based business and service models. We want to emphasise our commitment to protecting your privacy with this data protection declaration.

We take the protection of your personal data very seriously and operate our systems in accordance with the relevant rules and laws on data protection and data security. Where we use external companies to process your data, we ensure that our partners also comply with data protection regulations.

This privacy policy explains the type, scope and purpose of the processing of personal data within encoway GmbH. It is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR).

The controller responsible for data processing in connection with our website is

encoway GmbH
Konrad-Zuse-Str. 6
D-28359 Bremen

The data protection officer can be contacted by e-mail at and by post at encoway GmbH, Konrad-Zuse-Str. 6, D-28359 Bremen.

Personal data

Personal data is any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, an online identifier or an address.

Data subject

Data subject is any identified or identifiable natural person whose personal data is processed by the controller responsible for the processing.

Processing

Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Consent

Consent is any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or h

Customer/prospect relationship management

We will use personal data that you provide to us when contacting us as a customer or interested party (e.g. in person, at trade fairs, in surveys, by telephone, etc.) to maintain contact, provide information about products or the company, invite you to events, etc.

Data processing is carried out on the basis of Art. 6 para. 1 lit. a) “Consent, e.g. receipt of advertising”, lit. b) “Contract processing” and lit. f) “Legitimate interest in maintaining business relationships” GDPR.

Customer enquiry/order processing

Your personal data that you provide to us as part of the request for quotation, order processing, licence processing, configuration, etc. will be used to process the respective business transactions with you.

Data processing is carried out on the basis of Art. 6 para. 1 lit. b) “Contract processing” and lit. f) “Legitimate interest in maintaining business relationships” GDPR.

Your data will only be collected and processed for the purpose of filling vacancies within encoway GmbH. In the case of an application for a specific advertised position, the responsible body for data collection in this sense is the respective advertising company, whose address details you will find on the respective advertisement.

If you apply to encoway GmbH for a specific advertised position, your data will be automatically forwarded to the responsible personnel managers. You can revoke this consent at any time with effect for the future by sending an e-mail to the contact person named in the application.

If you send us an unsolicited application, your data will be automatically forwarded to the relevant personnel managers in accordance with your skills. In each case, the purpose is an assessment of your potential for employment by the relevant person responsible.

As part of your application, it is ensured that your data is automatically deleted from our systems after 6 months in the event of a negative decision, unless you have given us your consent to transfer this data to the applicant pool. In individual companies we use

Application process via Recruitee

We use the service Recruitee B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands (https://recruitee.com/de) to carry out our application process. If you apply for a job via our careers page, you will be redirected to the Recruitee platform. Your personal data will be processed there exclusively for the purpose of processing your application.

What data is processed?

Master data (name, contact details)
Application documents (CV, certificates, cover letter)
Communication data as part of the application process

Data processing is carried out on the basis of Art. 6 para. 1 lit. a) “Inclusion in applicant pools” and lit. b) “Application as a pre-contractual measure” GDPR.

Website

We provide information on encoway GmbH products and services via this website. We offer you as a user the opportunity to request additional data after registration or by passing on your contact details or to interact with us in the corresponding services via various functions.

We will inform you about the different processing purposes in the respective functions/forms and process data relevant to us on the basis of the respective requirements. Data that you make available to us via this website will only be processed by encoway GmbH and will not be sold to third parties.

In principle, we process log data as part of system operation to ensure system operation and to analyse errors or optimise the website or the connected services.

Data processing is carried out on the basis of Art. 6 para. 1 lit. a) “Consent to the processing of data for contact or advertising purposes by encoway GmbH companies” and lit. f) “Operation of web services, maintenance of business relationships with existing or new partners, further development of encoway GmbH’s business activities” GDPR.

HubSpot

We use HubSpot for our online marketing activities. This is an integrated software solution that we use to cover various aspects of our online marketing.

These include, among others:

Email marketing (newsletters and automated mailings, e.g. to provide downloads)
Social media publishing & reporting
Reporting (e.g. traffic sources, hits, etc. …)
Contact management (e.g. user segmentation & CRM)
Landing pages and contact forms
Chat function

Our registration service allows visitors to our website to learn more about our company, download content and provide their contact information and other demographic information.
We use your personal data collected as part of online marketing, in particular the areas of interest indicated, to provide you with personalised product and service offers. By providing your name, you enable us to address you personally and to manage your data easily. Your address data, in particular your postcode, also enables us to provide you with regionally tailored offers.

Furthermore, we are always endeavouring to improve our offer. This also includes analysing the newsletters sent, e.g. whether the e-mail address provided can be reached, which newsletters are opened, which links within the newsletter are clicked on and whether a response (automatic reply, error message, etc.) was generated. Consent given (use of the e-mail address, use of personal data) can be revoked at any time. The revocation does not affect the legality of the data processing until the revocation. Please use the unsubscribe page for this purpose. You will also find unsubscribe instructions in the footer of each newsletter.

Information and contextual additions by us are stored on the servers of our software partner HubSpot. It is used by us for the aforementioned services and may be used by HubSpot to enrich its own metadata on companies in order to improve its own tracking or information services.

HubSpot is a software company from the USA with a branch in Berlin.

HubSpot
Unter den Linden 26
10117 Berlin

Information on Hubspot data protection:

Data processing is carried out on the basis of Art. 6 para. 1 lit. a) “Consent to contact or advertising measures, if necessary transfer of data to HubSpot” and lit. f) “Maintenance of business relationships with existing or new partners, further development of the business activities of the Lenze Group” GDPR.

Leadfeeder

Our website uses technologies (Leadfeeder) from Dealfront Group GmbH) to analyse visitor behaviour. In this process, the IP address of a visitor is processed in order to understand which companies (B2B) visit our website.

As part of the processing, the IP address is enriched with associated information such as the company name or industry code. For this purpose, the IP address of the website visitor and the corresponding session data are compared with an extensive whitelist of known companies.

This data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to develop or optimise its own offers for existing customers or interested parties and to develop business relationships based on these offers.

Podcast

On our website, we provide you with podcasts that can be played via an embedded player. When the podcast is played, technically necessary data is processed in order to provide the audio content. This includes in particular

IP address of the end device
Date and time of access
Information about the browser and operating system

Cookies and third-party content
The podcast player may set cookies or similar technologies to enable playback and collect statistics (e.g. number of views). These cookies are only activated after you have given your consent via our consent banner (Usercentrics). You can revoke your consent at any time via the cookie settings.

Responsible third-party provider

The podcasts are provided by an external service. Further information on data processing by this provider can be found in their privacy policy Privacy Policy | LetsCast.fm.

Legal basis

Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest in the provision of audio content) and Art. 6 para. 1 lit. a GDPR (consent for cookies and tracking).

Your rights

You have the right to access, rectification, erasure and restriction of processing.

Cloudflare

We use the Cloudflare service from Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA) to optimise the security and loading speed of our website. Cloudflare operates a so-called Content Delivery Network (CDN) and provides security functions such as DDoS protection and web application firewall.

Processed data:

When you visit our website, personal data such as IP address, access time, requested content, browser information and operating system are transmitted to Cloudflare. This data is technically necessary to deliver the content of our website and to ensure security.

Legal basis:

Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest in the secure and efficient provision of our website).

Recipient:

Cloudflare acts as a processor for us. Personal data may be transferred to the USA. Cloudflare is certified according to the EU-US Data Privacy Framework, so that an appropriate level of data protection is guaranteed. There are also standard contractual clauses (SCCs).

Storage duration:

The data is only stored by Cloudflare for as long as is necessary for the purposes described (usually a maximum of 24 hours, up to 7 days for enterprise logs).

Further information:

Details on data processing by Cloudflare can be found in the provider’s privacy policy:
https://www.cloudflare.com/de-de/trust-hub/privacy-and-data-protection/

Cookies

To process your preferences and control individual services, we use cookies on our website that are stored as text files in the browser on the end device with which you use this website. Session cookies are deleted from your end device at the end of the browser session, while persistent cookies remain on it and enable this end device to be recognised on your next visit.

We inform you about the setting of specific cookies by means of a cookie banner or via information texts (if you have rejected certain services). By accepting or rejecting cookie processing, you decide whether you can only use this website with limited functionalities. We use etracker GmbH as a service provider to support cookie management.

This data processing is carried out in particular on the basis of the German § 5 DDG and Art. 6 para. 1 lit. f) “Legitimate interest in the operation and optimisation of the website” GDPR.

You can adjust or revoke your cookie settings at any time using the lock symbol at the bottom left of this website.

Social media in general

We also offer you extensive personal support and the opportunity to stay in contact with us via our social media pages (Facebook, YouTube, Kununu, Xing, LinkedIn, Instagram, Threads) on the basis of Art. 6 para. 1 lit. a) GDPR. These social media services themselves collect personal data, e.g. via your profile created there or via so-called social plug-ins that are implemented in third-party websites.

When you access a web page on our website that contains such a plugin, your browser establishes a direct connection with the servers of the respective companies. The content of the plugins is transmitted directly to your browser and integrated into the website.

We therefore have no influence on the scope of the data that the respective companies collect with the help of these plugins. We therefore inform you according to our level of knowledge:

By integrating the plugins, the respective companies receive the information that you have accessed the corresponding page of our website. If you are logged in to one of the above-mentioned companies, they can assign the visit to your account there. If you interact with the plugins, the corresponding information is transmitted directly from your browser to the respective company and stored there. If you do not have an account with one of the above-mentioned companies, it is still possible for them to find out and save your IP address.

It can therefore not be ruled out that every visitor to our website will be recorded by the company listed above on the basis of their IP address and the URL accessed, even if they do not click on the plugins and are not logged into a user account with the company.

The purpose and scope of the data collection and the further processing and use of the data by these companies, as well as your rights in this regard and setting options to protect your privacy, can be found in the data protection information of:

Facebook / Instagram / Threads

Our Facebook/Instagram/Threads infopages (hereinafter referred to as “infopages”) are provided by Facebook/Instagram and editorially managed by the aforementioned controllers (owner of the infopage, hereinafter referred to as “we”).

The joint controllers for the operation of our Infopages within the meaning of Article 26 GDPR and other data protection regulations are

Meta Platforms Irleland Ltd.

Merrion Road,
Dublin 4, D04 X2K54, Ireland
(hereinafter referred to as “Meta”)
and
encoway GmbH, Germany.

Data processing of personal data by Meta

Meta processes your personal data when you visit our Infopage. You can find out which personal data is processed by Meta and what data protection rights you have vis-à-vis Meta in the linked Facebook/Instagram/Threads privacy policies.

As the owner of the Infopage, we have no influence on data processing by Meta.

Setting options and access to statistical data

Meta gives the owner of the Infopage the following setting options and grants access to the following data:

We can set the target group to be reached for our Infopage or for individual posts published on the Infopage. The setting is based on general parameters (e.g. age group, language, region, interests), which can be used to target our content to specific groups. It is not possible for us to address or identify individual persons on the basis of the setting options granted to us.
Meta grants us access to statistical analyses that provide information about the use of our Infopage. The analyses visible to us do not allow us to analyse the usage behaviour of individual persons. We can only view aggregated data (e.g. number of hits, likes, followers, region of origin, age group, gender) that provide information about our audience and the use of our Infopage.

Further information on the statistics provided by Meta.

Beyond this, the owner of the Infopage cannot influence Meta’s data processing. We process this data to safeguard our legitimate interests in accordance with Art. 6 para. 1 lit. f) GDPR in order to better understand and optimise the use of our Infopage.

Data collection and processing when contacting us

If you send us messages via Facebook/ Instagram/ Threads, we receive the following data from Meta

Message entered
your name
Profile picture
Attachments
Voice messages

This personal data is used to process your enquiry.
If you contact us via email or other Facebook/Instagram/threads functions (e.g. comments) via the platform, the information you provide as well as your user name and other information about your usage behaviour will be stored by Meta. You can find out more about data processing by Meta in the privacy policy linked above. We process your personal data to process your enquiry within the group of companies. Your data will not be passed on to third parties unless your enquiry requires this. In case of doubt, we will explicitly point this out to you.

Data processing is carried out on the basis of Art. 6 para. 1 lit. f) “Legitimate interest in the economic use and needs-based design of advertising measures involving social media” GDPR.

LinkedIn

We use analysis and conversion tracking technologies from the provider LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”).
LinkedIn uses cookies and pixels to identify you, and the LinkedIn Insight tag is used to collect data about the use of our website (URL, referrer URL, IP address, device and browser properties). With the technologies used by LinkedIn, you can be shown relevant advertising based on your interests. We receive aggregated and anonymised reports from LinkedIn about display activities and how you interact with our website. The information collected as part of LinkedIn Conversion Tracking may also be processed on LinkedIn Inc. systems in the USA.

Data processing is carried out on the basis of Art. 6 para. 1 lit. a) “Consent to conversion tracking” and lit. f) “Legitimate interest in the economic use and needs-based design of advertising measures involving social media” GDPR.

Google Maps

Our website uses the Google Maps map service from Google (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) via an API. In this context, it is necessary to save your IP address. The information obtained in this way is usually transferred to a Google server in the USA and stored there. We have no influence on this data transfer. Further information can be found in Google’s privacy policy (https://www.google.de/intl/de/policies/privacy/).

Data processing is carried out on the basis of Art. 6 para. 1 lit. a) “Consent to use the plug-in” and lit. f) “Legitimate interest in offering simple mechanisms for route planning with regard to the accessibility of our locations” GDPR.

Virtual meetings / webinars / live webcasts

Registration for webinars or live webcasts takes place via contact forms that we have implemented as part of our HubSpot integration. Invitations to virtual meetings are sent directly by encoway employees, for example by e-mail.

We use the GoToWebinar service from the provider GoTo (LogMeIn, Inc. or GoTo Technologies Ireland Ltd.) to organise webinars and virtual meetings. In this context, participants’ personal data is processed and stored on the provider’s systems. The data may also be processed outside the European Union.

The processed data includes, in particular, registration and contact data and – if used or authorised – contributions by participants such as written or spoken content and shared screen content.

Further information on data processing by the provider can be found in GoTo’s privacy policy.

Data processing is carried out on the basis of Art. 6 para. 1 lit. a) GDPR (consent when registering for an event), lit. b) GDPR (implementation of pre-contractual or contractual measures) and lit. f) GDPR (legitimate interest in organising webinars and providing information about encoway GmbH products and services).

Organisation of appointments

We use the booking functions of MS-Bookings on a situational basis so that you can organise appointments with different contact persons at encoway independently.
You provide us with your personal data exclusively for the purpose of organising the booking of appointments with these contact persons. We collect this data primarily to make the coordination processes as simple as possible for both parties and to organise them.
For further information, please refer to the Microsoft data protection information and please also observe it.

Data processing is carried out on the basis of Art. 6 para. 1 lit. b) “Support for measures preliminary to or resulting in business transactions” and lit. f) “Legitimate interest in informing interested parties about products, services or encoway” GDPR.

encoway takes appropriate technical and organisational measures to protect your personal data from loss, destruction, falsification, manipulation, unauthorised access or unauthorised disclosure.

Insofar as external service providers are used in individual cases as part of the operation of our website or individual functions, personal data is processed exclusively in accordance with the legal requirements. In these cases, corresponding contractual agreements are concluded in accordance with Art. 28 GDPR.

Our technical and organisational security measures are continuously reviewed and adapted in line with technological developments.

Persons under the age of 18 should not transmit any personal data to us without the consent of their parents or legal guardians. We do not request personal data from children and young people. We do not knowingly collect such data and do not pass it on to third parties.

General information

In the course of the further development of our website, we will also continuously adapt this data protection information. We will announce any changes on this page in good time. We therefore recommend that you visit this page regularly to keep yourself informed of the current status.

If you have any questions about the processing of your personal data or suggestions on the subject of data protection, you can contact us at any time:

encoway GmbH
Konrad-Zuse-Str. 6
28359 Bremen
E-mail:

You have the right to receive information at any time as to whether and which personal data we have stored about you.

If your personal data is processed, you are a data subject within the meaning of the GDPR. You have the following rights vis-à-vis us as the controller:

Right to information

You can request information about whether and which of your personal data we process and for what purposes, for how long and to which recipients it has been passed on.

Right to rectification and completion

You have the right to have incorrect or incomplete personal data corrected or completed.

Right to restriction of processing

You can request the restriction of the processing of your personal data, in particular if there are statutory retention obligations.

Right to cancellation

You can request the erasure of your personal data, in particular if you withdraw your consent.

Right to data portability

You have the right to receive your personal data in a structured, commonly used and machine-readable format.

Right of objection, cancellation and complaint

You can object to the processing of your personal data at any time and revoke any consent you have given. You also have the right to lodge a complaint with a competent data protection supervisory authority.
Last change: 05/2026