Privacy Notice
1. Privacy Notice
This Privacy Policy informs you about the nature, scope, and purpose of the processing of personal data (hereinafter referred to as "data") within our online offer and the associated websites, functions, and contents as well as external online presences, such as our social media profiles (hereinafter collectively referred to as the "online offer"). The terms used, such as “processing” or “controller,” are as defined in Article 4 of the General Data Protection Regulation (GDPR). Furthermore, we inform you below about the third-party components we might use for optimization purposes and to enhance the quality of use, provided that third parties process data under their own responsibility.
2. Controller
The Controller within the meaning of the GDPR is:
Digitas GmbH Heidi-Kabel-Platz 2 20099 Hamburg
Managing Directors: Josephine Gerves, Karin Ross, Philippe Bordet
Contact for Data Protection Officer Yusuf Tuncay-Eberl: yusuf.tuncay-eberl@publicisresources.com
3. Categories of Affected Persons
Affected persons are visitors and users of our online services (hereinafter we collectively refer to the affected persons as "visitors" or "users").
4. Security Measures
We take appropriate technical and organizational measures in accordance with Article 32 of the GDPR, taking into account the state of the art, implementation costs, and the nature, scope, circumstances, and purposes of the processing, as well as the varying likelihood and severity of risks to the rights and freedoms of natural persons, to ensure a level of protection appropriate to the risk.
These measures include, in particular, safeguarding the confidentiality, integrity, and availability of data by controlling physical access to the data and their access, input, transfer, securing availability, and their separation. We have established procedures to guarantee the exercise of data subject rights, deletion of data, and response to data threats. Furthermore, we consider the protection of personal data already during the development or selection of hardware, software, and procedures according to the principle of data protection by design and by default (Article 25 GDPR).
5. Rights of Affected Persons
You have the right to request confirmation as to whether the relevant data is being processed and to access this data as well as further information and a copy of the data in accordance with Article 15 GDPR. For this and other questions regarding personal data, you may contact us at any time via the link provided herein.
You have the right in accordance with Article 16 GDPR to request the completion of data concerning you or the rectification of incorrect data concerning you.
You have the right to demand that the relevant data be deleted immediately according to Article 17 GDPR, or alternatively, request a restriction of the processing of the data in accordance with Article 18 GDPR.
You have the right to receive the data concerning you, which you have provided to us, in accordance with Article 20 GDPR and request their transmission to other responsible parties.
You also have the right to lodge a complaint with the competent supervisory authority pursuant to Article 77 GDPR.
Additionally, we as the Provider are obligated to inform all recipients to whom data has been disclosed of any correction, deletion, or restriction of processing according to Articles 16, 17 Paragraph 1, and 18 GDPR. This obligation does not exist if this notification is impossible or involves disproportionate effort. Notwithstanding this, the user has a right to information about these recipients.
6. Right of Withdrawal
You have the right to withdraw any given consent with future effect in accordance with Article 7 Paragraph 3 GDPR.
7. Right to Object
You can object to the future processing of data concerning you at any time according to Article 21 GDPR. The objection may particularly concern processing for direct marketing purposes.
8. Deletion of Data
The data processed by us are deleted or their processing is restricted in accordance with Articles 17 and 18 GDPR. Unless expressly stated in this Privacy Notice, the data stored by us will be deleted as soon as they are no longer necessary for their intended purposes and the deletion does not conflict with any statutory retention obligations. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. i.e., the data will be blocked and not processed for other purposes.
9. Online Presences on Social Media
We maintain online presences within social networks and platforms to communicate with the customers, prospects, and users active there and inform them about our services. When calling up the respective networks and platforms, the terms and conditions and the data processing policies of their respective operators apply.
Unless otherwise stated in our Privacy Notice, we process users' data if they communicate with us within social networks and platforms, such as writing posts on our online presences or sending us messages.
Our website may incorporate LinkedIn features and content (e.g., buttons for sharing content, images, or videos). The provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. If you are logged in to LinkedIn, LinkedIn can associate your visit to our website with your LinkedIn profile. If you do not want LinkedIn to associate this data with your profile, please log out of LinkedIn before using our website. For more information, please refer to LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy
LinkedIn & HubSpot – Marketing Attribution / Conversation Tracking
We use LinkedIn and HubSpot services on our website to evaluate marketing campaigns, measure conversions, and assign user interactions to individual marketing channels (“marketing attribution”). We also use conversation tracking features to track which channel a user came to our website through and how they interact with our forms, chats, or content. Processing is based on your consent in accordance with Art. 6 (1) (a) GDPR. HubSpot Privacy Policy: https://legal.hubspot.com/privacy-policy
Functions and content from Instagram may be integrated into our website (e.g., images, videos, or share buttons). The provider is Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. If you are logged in to Instagram, Instagram can associate your visit to our website with your Instagram profile. If you do not want Instagram to associate this data with your profile, please log out of Instagram before using our website. For more information, please see Instagram's privacy policy: https://www.instagram.com/about/legal/privacy/
10. Analytics
Sitebrunch
We use the Sitebrunch analysis service from Sitebrunch GmbH, Eifflerstraße 43, 22769 Hamburg, Germany, on our website. Sitebrunch enables us to evaluate usage behavior on our website in a privacy-friendly manner—without cookies, without tracking across websites, and without profiling. Sitebrunch's data-saving architecture contributes to a high level of data protection. Further information can be found in Sitebruch's privacy policy: https://sitebrunch.com/datenschutz
Google Analytics 4
We use Google Analytics 4, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, on our website. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is responsible for the European region.
The use of Google Analytics is based exclusively on your consent in accordance with Art. 6 (1) (a) GDPR. Google Analytics is only activated once you have given your consent in the cookie banner. You can revoke your consent at any time (see below).
Google Analytics 4 is used to analyze user behavior and can function without cookies or with reduced cookies. The following data may be processed:
• IP address (always anonymized in GA4)
• Usage data such as page views, clicks, scrolling behavior, dwell time
• Technical information: browser, device type, operating system
• Approximate location data
• Event data such as interactions on the website
Google LLC is certified under the EU–US Data Privacy Framework (DPF). This means that this US provider has adequate data protection that is recognized by the EU. You may withdraw your consent at any time:
• via the cookie banner (reopen settings)
• or use the Google Analytics opt-out: https://tools.google.com/dlpage/gaoptout/
Google TAG Manager
Google Tag Manager is a solution that allows us to manage website tags via an interface (and thus integrate Google Analytics and other Google marketing services into our online offering, for example). The Tag Manager itself (which implements the tags) does not process any personal data of users. With regard to the processing of users' personal data, please refer to the following information on Google services. Terms of Use: https://www.google.com/intl/de/tagmanager/use-policy.html.
For analysis purposes, a temporary identification number is generated, which remains linked to the IP address for a maximum of 14 days. This identifier is then automatically anonymized so that it can no longer be assigned to a specific user.
No cookies are set and no tracking across different websites takes place. The data is used exclusively for the anonymized and pseudonymized evaluation of the use of our website.
11. Content Management
Storyblok
We use the content management system Storyblok (Storyblok GmbH, Berlin) to provide the content of our website. Technically necessary data, such as your IP address, is processed by Storyblok's servers to ensure that the content is displayed correctly. Use is only made within the framework of the GDPR and in accordance with a contract for order processing (AVV/DPA); no data is passed on to third parties for advertising purposes. Further information can be found in Sitebruch's privacy policy: https://www.storyblok.com/legal/privacy-policy
Vercel
Our website is hosted on Vercel (Vercel Inc., USA). Technically necessary data such as your IP address is processed to ensure that content is delivered correctly. Vercel acts as a processor on behalf of our company. The data is not used for advertising purposes. For more information, please refer to Vercel's privacy policy: https://vercel.com/legal/privacy-policy
12. Privacy Notices in the Application Process
We process applicant data only for the purpose and within the scope of the application procedure in accordance with legal requirements. The processing of applicant data takes place to meet our (pre)contractual obligations within the framework of the application procedure as defined in Article 6 Paragraph 1 lit. b. GDPR Article 6 Paragraph 1 lit. f. GDPR, if the data processing becomes necessary for example in legal proceedings (in Germany, Section 26 of the German Federal Data Protection Act (BDSG) also applies).
The application process requires that applicants provide us with the applicant data. The necessary applicant data is marked if we offer an online form and otherwise results from the job descriptions. In general, this includes personal details, postal and contact addresses, and the application documents, such as cover letters, resumes, and certificates. In addition, applicants can voluntarily provide us with additional information.
By submitting the application to us, the applicants agree to the processing of their data for purposes of the application procedure in accordance with the nature and scope set out in this Privacy Policy and the respective platforms (application platforms).
Insofar as special categories of personal data within the meaning of Article 9 Paragraph 1 GDPR are voluntarily communicated within the framework of the application procedure, their processing is additionally carried out in accordance with Article 9 Paragraph 2 lit. b GDPR (e.g., health data like severe disability or ethnic origin). Insofar as special categories of personal data within the meaning of Article 9 Paragraph 1 GDPR are requested from applicants as part of the application procedure, their processing is additionally carried out in accordance with Article 9 Paragraph 2 lit. a GDPR (e.g., health data if these are required for the exercise of the profession).
Applicants can submit their applications to us via an online form on our website. The data will be transmitted to us in encrypted form according to the state of the art.
Furthermore, applicants can submit their applications to us via e-mail, but we advise that e-mails are generally not sent in encrypted form, and applicants must ensure encryption themselves. Therefore, we cannot assume responsibility for the transmission path of the application between the sender and our server and recommend using an online form or postal dispatch instead.
The deletion occurs subject to a justified revocation by the applicants after a period of six months so that we can answer any follow-up questions about the application and meet our obligations under the General Equal Treatment Act. Any invoices for reimbursement of travel expenses will be archived in accordance with tax regulations.
Your consent to join our applicant pool is voluntary and has no impact on the application process. You can withdraw your consent at any time.
iCIMS
We use iCIMS Talent Products. iCIMS, Inc. is a cloud-based human resources and recruitment software company based in New Jersey, USA. You can learn more about the data processed through the use of iCIMS in the privacy policy at https://www.icims.com/legal/privacy-notice-website/.
12. Cookie Consent Management Platform (General)
We use a Consent Management Platform (CMP) software on our website, which facilitates the correct and secure handling of scripts and cookies for both you and us. The software automatically generates a cookie popup, scans and controls all scripts and cookies, offers you the legally required cookie consent, and helps both you and us keep track of all cookies.
Within our cookie management tool, you can manage each individual cookie yourself and have complete control over the storage and processing of your data. Your consent declaration is stored so that we do not have to ask you again on each new visit to our website and to allow us to prove your consent if legally necessary.
You have the right and the opportunity to withdraw your consent to the use of cookies at any time. This can be done either via our cookie management tool or through other opt-out functions in the respective section of this privacy policy or in the browser you are using.
OneTrust (CMP)
We use OneTrust, a privacy management tool, on our website. The service provider is the U.S. company OneTrust, 1200 Abernathy Rd. Suite 700 Atlanta, Georgia 30328. You can find out more about the data processed through the use of OneTrust in the privacy policy at https://www.onetrust.com/privacy/.
Last updated from February 19, 2026