Privacy policy

With the following information, we inform visitors to this website about the processing of data, and in particular about the collection and processing of personal data, meaning data that can be attributed to a specific individual, and the rights connected with it.

1. Controller

The controller as defined in Art. 4(7) of the EU General Data Protection Regulation (“GDPR”) for the operation of the website at https://www.loginventory.de and the associated data processing is

Schmidt’s LOGIN GmbH
Stefan-George-Ring 19,
81929 München
Germany
Email: info@loginventory.de

(see our legal notice).

For questions about data protection and to exercise your data subject rights, you can reach us at datenschutz@loginventory.de.

2. Informational access to the website

When you access this website for informational purposes, the following data is processed, automatically transmitted by the requesting browser to the server used for our website:

• IP address of the requesting computer
• Date and time of the request
• Name and URL of the file accessed
• The website from which access occurs (the so-called referrer URL)
• The browser used and, if applicable, the operating system of the requesting computer, as well as the name of the access provider

The purpose of this data processing is to ensure a smooth connection setup, convenient use of the website, and evaluation of system security and stability. Insofar as personal data is affected, the legal basis for this data processing is Art. 6(1)(f) GDPR, with our legitimate interest arising from the aforementioned purposes of data collection. Log files are stored for a maximum of 7 days and then automatically deleted, unless specific evidence of a security incident requires longer storage.

3. Getting in touch and inquiries via our contact forms

Our website offers you several ways to contact us: by email, via the contact form, and via specific inquiry forms for a trial license (/en/free-trial/), a price quote (/en/pricing/), or other product-related matters. In all cases, we process the data you provide us, typically your first and last name, company email address, company name, optionally a phone number, and the content of your inquiry, in order to handle your specific request.

Depending on the individual case, the legal basis is:
– Art. 6(1)(b) GDPR (taking pre-contractual steps or performing a contract), in particular for requests for trial licenses or price quotes;
– Art. 6(1)(a) GDPR (consent), insofar as you have checked additional boxes for newsletter subscriptions or comparable processing;
– Art. 6(1)(f) GDPR (legitimate interest) for the follow-up information on product-related topics described below.

Product information for prospects:
If you contact us as a prospect through one of our forms, whether to request a trial license, a price quote, or other product-related information, we reserve the right, after handling your immediate request, to inform you by email about topics that are factually related to your inquiry (for example, guidance on setting up the trial version, licensing information, pointers to suitable add-ons within the requested product area, invitations to product-related webinars). The legal basis is our legitimate interest in informing our prospects about the requested product and related topics pursuant to Art. 6(1)(f) GDPR.

You can object to this use of your email address at any time with effect for the future, either via the unsubscribe link included in each of these emails or by
message to datenschutz@loginventory.de. This is free of charge for you. Once we receive your objection, we will no longer use your email address for the stated purposes.

We delete the data collected for your inquiry as soon as processing is complete and no statutory retention obligations (in particular § 257 HGB, § 147 AO) or legitimate interests preclude deletion. In the latter case, processing is restricted to the extent necessary, and the data is deleted once the reason for retention no longer applies.

4. Use of cookies and similar technologies

Our website uses cookies and similar technologies to store and read information on your device. We distinguish between processing that is technically necessary and processing that requires your consent:

a) Technically necessary cookies are set without your consent. The legal basis is § 25 Abs. 2 Nr. 2 TDDDG (technical necessity) in conjunction with Art. 6(1)(f) GDPR
(legitimate interest in operating the website). These include, in particular, our consent management system Borlabs Cookie, our language switcher (WPML), the tag manager for
the consent-based delivery of further services, and the spam protection service Google reCAPTCHA v3 for our forms.

b) We use all other storage and read operations on your device, in particular the services described in sections 4a through 4j below in the Borlabs categories “Statistics”, “Marketing”, and “External Media”, only after you have given your explicit consent pursuant to § 25 Abs. 1 TDDDG. The legal basis for the subsequent processing of personal data is Art. 6(1)(a) GDPR.

We manage your consent with the consent management system “Borlabs Cookie” by Borlabs GmbH, Rübenkamp 32, 22305 Hamburg. Borlabs Cookie stores your consent decision locally on your device and enables us to demonstrate consent pursuant to Art. 7(1) GDPR. The legal basis for using Borlabs Cookie is Art. 6(1)(c) GDPR (legal obligation to document consent) in conjunction with § 25 Abs. 2 Nr. 2 TDDDG.

You can change or withdraw your consent decisions at any time with effect for the future by opening the “Your cookie settings” section at the bottom of this page. The lawfulness of processing carried out before your withdrawal remains unaffected.

4a. Use of Google Analytics 4

With your consent (§ 25 Abs. 1 TDDDG, Art. 6(1)(a) GDPR), we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies and similar technologies to analyze your use of our website and generate reports on website activity.

During collection, IP addresses are shortened before processing by Google (IP anonymization). Your data is combined with other Google data only if you give separate consent for this. The recipient of the data is Google Ireland Limited. The data is transferred to Google LLC in the USA. This transfer is based on the European Commission’s adequacy decision of July 10, 2023 on the EU-US Data Privacy Framework (Google LLC is certified under the DPF), supplemented by standard contractual clauses pursuant to Art. 46(2)(c) GDPR.

We have entered into a data processing agreement with Google pursuant to Art. 28 GDPR.

Retention period: 14 months

You can withdraw your consent at any time via our cookie settings. More information on data processing by Google: https://policies.google.com/privacy

4b. Google reCAPTCHA

On our form pages, we use Google reCAPTCHA v3, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). reCAPTCHA protects our forms against automated requests and spam.

In the v3 variant, the analysis runs in the background, without requiring you to solve a task. For this purpose, technical information (for example, IP address, browser data, mouse movements, time on page) is transmitted to Google and evaluated.

Because reCAPTCHA is essential for the abuse-free operation of our forms, we treat the service as technically necessary within the meaning of § 25 Abs. 2 Nr. 2 TDDDG. The legal basis for the subsequent processing of personal data is Art. 6(1)(f) GDPR; our legitimate interest lies in protection against automated attacks and spam.

The data is transferred to Google LLC in the USA. This transfer is based on the European Commission’s adequacy decision of July 10, 2023 on the EU-US Data Privacy Framework (Google LLC is certified under the DPF), supplemented by standard contractual clauses pursuant to Art. 46(2)(c) GDPR.

More information: https://policies.google.com/privacy

4c. Meta Pixel (Facebook / Instagram)

With your consent (§ 25 Abs. 1 TDDDG, Art. 6(1)(a) GDPR), we use the Meta Pixel provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland (“Meta”). The pixel allows us to measure the performance of our ads on Facebook and Instagram and to re-target users with ads based on this data (retargeting).

For this purpose, the pixel transmits information such as IP address, browser data, and actions on our website to Meta and links it to your Facebook account, provided you are logged in to Facebook.

The controller for processing in the EU is Meta Platforms Ireland Limited. Processing in the USA by Meta Platforms, Inc. is covered by certification under the EU-US Data Privacy Framework. Standard contractual clauses pursuant to Art. 46 GDPR apply in addition.

You can withdraw your consent at any time via our consent banner. You can manage your ad settings on Meta itself at https://www.facebook.com/settings?tab=ads. More information: https://www.facebook.com/privacy/policy/

4d. Hotjar (analytics tool)

With your consent (§ 25 Abs. 1 TDDDG, Art. 6(1)(a) GDPR), we use Hotjar, an analytics service provided by Hotjar Ltd., Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta (“Hotjar”). Hotjar helps us better understand user behavior on our website, for example which pages are visited, how long visitors stay there, and which content they click on, so that we can derive improvements to our offering.

For this purpose, Hotjar uses cookies and similar technologies and processes, in particular, the following information: the IP address of your device, stored in de-identified form, screen size and device type, browser information, geographic location (country level only), and your preferred language. Hotjar stores this information in a pseudonymous user profile on our behalf. You are not identified as an individual in the process.

We have entered into a data processing agreement with Hotjar pursuant to Art. 28 GDPR. Hotjar is headquartered in the EU (Malta); insofar as data is transferred to Hotjar group companies outside the EEA, this transfer is safeguarded by standard contractual clauses pursuant to Art. 46(2)(c) GDPR.

You can withdraw your consent at any time via our cookie settings. More information on Hotjar and the data processed there is available at:
https://www.hotjar.com/legal/policies/privacy/

4e. Google Ads conversion tracking

With your consent (§ 25 Abs. 1 TDDDG, Art. 6(1)(a) GDPR), we use Google Ads conversion tracking, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

If you click on one of our Google ads and land on our website, a cookie is stored on your device. If you reach a specific page (for example, “Thank you for your inquiry”), Google and we recognize that a conversion has taken place. We receive only aggregated statistics from Google; we cannot identify you as an individual.

The data is transferred to Google LLC in the USA. This transfer is based on the adequacy decision on the EU-US Data Privacy Framework (Google LLC is DPF certified), supplemented by standard contractual clauses pursuant to Art. 46 GDPR.

You can withdraw your consent at any time via our cookie settings.

4f. LinkedIn Insight Tag

With your consent (§ 25 Abs. 1 TDDDG, Art. 6(1)(a) GDPR), we embed the LinkedIn Insight Tag provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”) on our website. The Insight Tag lets us measure the effectiveness of our LinkedIn ads, evaluate conversions, and build audiences for future ads.

For this purpose, information such as URL, referrer URL, IP address, device and browser characteristics, and an encrypted LinkedIn member token is transmitted to LinkedIn. If you are logged in to LinkedIn at that time, LinkedIn can match the data to your profile.

The controller for processing in the EU is LinkedIn Ireland Unlimited Company. Data is transferred to LinkedIn Corporation (USA); the legal basis is the adequacy decision on the EU-US Data Privacy Framework (LinkedIn is DPF certified), supplemented by standard contractual clauses pursuant to Art. 46 GDPR.

More information is available in LinkedIn’s privacy notice at: https://www.linkedin.com/legal/privacy-policy
You can manage your ad settings at https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

You can withdraw your consent at any time via our cookie settings.

4g. Jetpack Stats (WordPress.com Stats)

With your consent (§ 25 Abs. 1 TDDDG, Art. 6(1)(a) GDPR), we use the statistics module of the WordPress plugin “Jetpack” by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. Jetpack collects aggregated visitor data for our website (for example, pages viewed, time on page, referral source) and stores this information in a cookie as well as on Automattic’s servers (“stats.wp.com”).

Data is transferred to Automattic Inc. in the USA; the legal basis is the adequacy decision on the EU-US Data Privacy Framework (Automattic is DPF certified), supplemented by standard contractual clauses pursuant to Art. 46 GDPR.

More information is available in Automattic’s privacy notice: https://automattic.com/privacy/

You can withdraw your consent at any time via our cookie settings.

4h. Google Fonts

Our website uses fonts from Google Fonts, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you access our pages, your browser loads the required font files directly from Google’s servers. In doing so, your IP address is transmitted to Google.

We use Google Fonts to present our content consistently and legibly. The legal basis is our legitimate interest in a consistent presentation of our website pursuant to Art. 6(1)(f) GDPR.

A transfer to Google LLC in the USA is based on the adequacy decision on the EU-US Data Privacy Framework, supplemented by standard contractual clauses pursuant to Art. 46 GDPR.

More information: https://policies.google.com/privacy

4i. Embedded YouTube videos

On individual pages of our website, we embed videos from the YouTube platform, a service provided by Google Ireland Limited. YouTube videos are not loaded on our website by default. Instead, you first see a placeholder from our consent management system Borlabs Cookie, informing you that playing the video requires a
connection to YouTube. Only once you actively agree to this notice does your browser load the video from YouTube. In doing so, information such as IP address, URL of the page visited, device and browser characteristics, and, if you are logged in to YouTube, your account information is transmitted to Google. We have no influence over the subsequent processing of this data by Google.

The legal basis for the embedding, following your consent, is Art. 6(1)(a) GDPR in conjunction with § 25 Abs. 1 TDDDG. A transfer to Google LLC in the USA is based on the adequacy decision on the EU-US Data Privacy Framework, supplemented by standard contractual clauses pursuant to Art. 46 GDPR.

More information: https://policies.google.com/privacy

4j. Google Maps

On our contact page, we embed maps from the Google Maps service provided by Google Ireland Limited. Here too, we use the content blocker from Borlabs Cookie: the map is loaded only after you have actively given your consent.

After you give your consent, Google processes, in particular, your IP address in order to display the map on your device, as well as further technical information. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with § 25 Abs. 1 TDDDG. The transfer to Google LLC in the USA is based on the adequacy decision on the EU-US Data Privacy Framework, supplemented by standard contractual clauses pursuant to Art. 46 GDPR.

5. Registration on our website

When you register to use our personalized services, we collect certain personal data such as name, address, contact and communication details, phone number, and email address. Once registered with us, you can access content and services that we offer only to registered users. Registered users can also change or delete the data provided at registration at any time, as needed. Of course, we will also provide you with information about the personal data we hold about you at any time. We are happy to correct or delete this data at your request, insofar as no statutory retention obligations preclude it. To get in touch about this, please contact us electronically at info@loginventory.de or write to us at Schmidt’s LOGIN GmbH, Stefan-George-Ring 19, 81929 München.

5.1 Newsletter

You can subscribe to various newsletters on our website (product updates, support information, special offers). You actively give your consent to receive them by checking the relevant box in the signup form.

The legal basis for processing your data for newsletter delivery is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with § 7 Abs. 2 Nr. 3 UWG. You can withdraw your consent at any time with effect for the future, either via the unsubscribe link in every newsletter or by email to datenschutz@loginventory.de.

To ensure that the signup is actually made by the holder of the email address, we use the double opt-in procedure. We log the signup, the sending of the confirmation email, and the receipt of the confirmation. This logging serves as evidence of consent (legal basis: Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR).

Delivery service provider: Delivery is handled via the “Mailchimp” platform, a service provided by Intuit Mailchimp (The Rocket Science Group LLC, 405 N Angier Ave NE, Atlanta, GA 30308, USA), a subsidiary of Intuit Inc. We have entered into a data processing agreement with Mailchimp pursuant to Art. 28 GDPR.

Transfer to the USA: The transfer to Mailchimp in the USA is based on the European Commission’s adequacy decision of July 10, 2023 on the EU-US Data Privacy Framework (EU-US DPF). Intuit (with Mailchimp as a covered entity) is certified under the EU-US DPF. The certification can be viewed at https://www.dataprivacyframework.gov/list. Standard contractual clauses pursuant to Art. 46(2)(c) GDPR also apply in addition, as a safeguard mechanism in case the DPF ceases to apply.

Mailchimp analyzes the open and click-through rates of the newsletters (a “tracking pixel”) so that we can measure the performance of our newsletters. This analysis is based on your consent (Art. 6(1)(a) GDPR), which you give when signing up for the newsletter. You can object to this tracking at any time by unsubscribing from the newsletter or by contacting us.

6. Recipients and processors

Recipients of the data processed when you use our website are, first of all, the processors we engage, with each of whom we have entered into agreements pursuant to Art. 28 GDPR:

– Web hosting: raidboxes GmbH, Hafenstraße 32, 48153 Münster (hosted within the European Union)
– Consent management: Borlabs GmbH, Rübenkamp 32, 22305 Hamburg
– Newsletter delivery: Intuit Mailchimp / The Rocket Science Group LLC, Atlanta, USA (see section 5.1)
– Web analytics: Google Ireland Limited, Dublin, Ireland (see section 4a), and Hotjar Ltd., Malta (see section 4d)
– Spam protection: Google Ireland Limited, Dublin (see section 4b)
– Marketing tracking: Meta Platforms Ireland Limited, Dublin (see section 4c), and Google Ireland Limited, Dublin (Google Ads, see section 4e), LinkedIn Ireland Unlimited
Company, Dublin (see section 4f), Automattic Inc., San Francisco, USA (Jetpack Stats, see section 4g)

Beyond this, personal data is disclosed to third parties only if we have your explicit consent to do so (Art. 6(1)(a) GDPR), if disclosure is necessary to assert, exercise, or defend legal claims (Art. 6(1)(f) GDPR), if a legal obligation exists (Art. 6(1)(c) GDPR), or if it is necessary to perform a contractual relationship (Art. 6(1)(b) GDPR).

7. Application process

You can also apply to our company electronically. We use your information exclusively to process your application. The legal basis is § 26 Abs. 1 BDSG (initiating an employment relationship).

If the application process does not result in an employment relationship, we delete your application documents no later than six months after the process is concluded, unless you expressly consent to longer storage (for example, inclusion in our candidate pool). Statutory retention obligations (in particular the AGG claim period) remain unaffected.

Please note that emails sent unencrypted are not protected against access during transmission. For the secure transmission of application documents, we recommend sending encrypted attachments.

8. General data subject rights

With regard to our processing of personal data, data subjects have the following general rights:

• Right of access pursuant to Art. 15 GDPR: data subjects can request information about the purposes of processing, the category of personal data processed, the recipients or categories of recipients to whom their data has been or will be disclosed, the planned retention period, the existence of a right to rectification, erasure, restriction of processing, or objection, the existence of a right to lodge a complaint, the origin of their data if it was not collected from us, and the existence of automated decision-making, including profiling, and, where applicable, meaningful information about its details.
• Right to rectification pursuant to Art. 16 GDPR: data subjects can request the immediate rectification of inaccurate personal data or the completion of personal data we hold about them.
• Right to erasure (“right to be forgotten”) pursuant to Art. 17 GDPR: data subjects have the right to request that we erase their personal data, unless processing is necessary to exercise the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to assert, exercise, or defend legal claims.
• Right to restriction of processing pursuant to Art. 18 GDPR: data subjects can request the restriction of the processing of their personal data insofar as they contest the accuracy of the data, the processing is unlawful but they oppose its erasure and we no longer need the data, though the data subjects need it to assert, exercise, or defend legal claims, or they have objected to the processing pursuant to Art. 21 GDPR (see item 8 above).
• Right to data portability pursuant to Art. 20 GDPR: data subjects have the right to receive the personal data they have provided to us in a structured, commonly used, and machine-readable format, or to request that it be transmitted to another controller.
• Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR: data subjects have the right to lodge a complaint with a supervisory authority. As a rule, they can contact the supervisory authority of their habitual residence, place of work, or the location of our registered office.

The competent supervisory authority for Schmidt’s LOGIN GmbH is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
https://www.lda.bayern.de

9. Right to withdraw consent

Pursuant to Art. 7(3) GDPR, data subjects have the right to withdraw their consent to the processing of their personal data at any time with effect for the future. An email to datenschutz@loginventory.de is sufficient for this.

10. Right to object

Pursuant to Art. 21 GDPR, data subjects have the right, for reasons arising from their particular situation, to object at any time to the processing of their personal data where that processing is based on legitimate interests pursuant to Art. 6(1)(f) GDPR; this would also apply to any profiling based on these provisions, although profiling is not used on this website. If data subjects wish to exercise their right to object, an email to datenschutz@loginventory.de is sufficient.

The further procedure then follows from Art. 21 GDPR. In the case of direct marketing, which we do not use, personal data would no longer be used for this purpose in the event of an objection. In other cases, following an objection, we will continue to process the data only if we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.

11. Data security measures

We use appropriate technical and organizational measures to protect personal data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. We continuously improve our security measures in line with technological developments.
Data sent via our contact form is transmitted with TLS encryption. However, we have no influence over the security of data transmission over the internet.

12. Currency and changes to this privacy notice

This privacy notice is current as of June 2026. As this website and the offerings on it continue to develop, or as legal or regulatory requirements change, it may become necessary to update this privacy notice. The current version of this privacy notice can be accessed and printed at any time on this website at /en/privacy-policy/.