Data Privacy & Cookies

1.Tracking, processing and usage of your personal data

In principle using the webpage is possible without the need to share your private and personal data with us.

1.1 Contract conclusion via the website

1.1.1 Data for managing your contract

On this website personal data will be processed if you agree in entering a contract with Testbirds or if you apply for a job with Testbirds. In this case your contract data.
In this case, your specified contract data (for example, purchase item, name, postal address, e-mail address, delivery address, payment method and bank details) or applicant data will be processed on the website. As a customer, you can also log in to the customer area of the website via your user ID and password.

1.1.2 Prevention and recognition of abuse at the formation of a contract plus credit check

When the contract is concluded, Testbirds will automatically check whether there are indications of abuse. Testbirds will do so by the aid of a visitor ID that can contain the anonymous control data of your specific device (e.g. screen resolution, browser version, or the version of your operating system) and that can be used to recognize your device with a certain probability if you visit the website again. The visitor ID contains your specified contract data too. Testbirds does this to prevent users from providing incorrect data or data from third parties when concluding a contract. If a contract is rejected, we will inform you about this fact. You may object to the refusal by sending an email to fraud@testbirds.com. After that, a Testbirds employee will re-examine the decision.
In addition, Testbirds processes personal data for the purposes of credit checks and address verification.

1.1.3 Right of revocation

The customer has the right to information and a right to amend, to suspend or to delete his saved information. If deletion conflicts with a legal or contractual duty to save information, or other legal grounds, the information will be made inaccessible. send an email to data-privacy@testbirds.com

1.2 Cookies and other technology

When visiting the website cookies can be set. Cookies are small text files that are stored on the hard disk of your computer and allow the recognition, but do not allow personal identification of your person. Cookies are used to create the website on a pseudonymous basis for you. Cookies also facilitate your usage of the website.

1.2.1 Management of cookies and similar technology, website analysis and website optimization

1.2.1.1 Google Analytics

This website uses Google Analytics and Google Remarketing, a web analytics service provided by Google Inc. Google Analytics uses so-called “cookies”, i.e. text files that are stored on the computers of users and enable their website use to be analysed. By using our website, you agree that information about your use of our website, including your IP address, may be transmitted to and stored on a Google server in the USA. The data collected by Google Analytics is used to analyse how you use our website, to create reports about your web activity for the website provider and to provide further services connected to your use of our website or the internet in general. Also, Google may send this information to third parties if Google is legally obliged to do so or if they are working for Google. Third parties, including Google, advertise on websites on the internet. Third parties, including Google, use saved cookies to displayed advertisements on a website based on a user’s previous website activities. The IP address transferred from the user’s browser via Google Analytics will not be associated with any other data held by Google. Users can object to the collection and usage of their IP address through Google Analytics at any point.
Further information can be found here.
Furthermore, you can deactivate the use of Google’s cookies by going to Google‘s advertisement deactivation page. Also, you can deactivate the usage of cookies via third party tools by visiting the deactivation site of the Network Advertising Initiative.

You’ll find further information about Google’s policies here.
Please note that on this website the code ‘gat._anonymizeIp();’ has been added to Google Analytics in order to guarantee the anonymous collection of IP addresses. Should a user prevent the use of cookies, it might be possible that not all functions of this website can be used to their full extent. By using our website, you consent to the use of the collected data by Google in accordance with the terms of this policy.

1.2.1.2 GA Connector

Google Analytics data is integrated with our CRM and Marketing Automation systems, Salesforce and Pardot (Salesforce.com, Inc. Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, US), by the means of the GA Connector tool (Zuev Software LLC, Akademika Lebedeva Street 1/6, Kyiv, Ukraine).

The legal basis for the processing of said data lies with your consent, in accordance with Art. 6(1) Sentence 1(a) of GDPR. GA Connector does not store any personal information until the point when users start filling out forms on the website, where consent is then explicitly requested.

Google, Salesforce, and the GA Connector also partially process data in the US. The legal basis for the transfer of data to a third country or an international organisation lies with your consent, in accordance with Art. 49(1) Sentence 1(a) of GDPR.

The aforementioned consent can be revoked at any time upon request. GA Connector is compliant with the formal requirements of the EU’s General Data Protection Regulation (GDPR). You can find more information on the topic at: https://gaconnector.com/docs/gdpr-and-gaconnector/

1.2.1.3 Hotjar

This website uses Hotjar, an analysis software of Hotjar Ltd. („Hotjar“) (Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta, Europe). For the purposes of the services that Hotjar provides to Customer Websites, Hotjar acts as a Data Processor and solely processes all personal data in accordance with the instructions received from our data controllers, the owner and/or operator of the Customer Websites. Hotjar Enabled Sites insert a tracking code and cookies onto their respective website which is transmitted to servers of Hotjar based in Ireland (EU). The following information may be collected:

End User’s device and browser:

• device’s IP address (captured and stored in an anonymised format)
• device screen resolution
• device type (unique device identifiers), operating system, and browser type
• geographic location (country only)
• preferred language used to display the Hotjar Enabled Site.

User interactions

• Mouse events (movements, location and clicks)
• Keypresses (Excluded are sensitive information like application data or payment data)

Log data

For a sampling of visitors, servers of Hotjar automatically record information which is collected from Customer Websites and Hotjar Site. This data includes:

• referring URL and domain;
• pages visited;
• geographic location (country only);
• preferred language used to display the webpage;
• date and time when website pages were accessed.

Cookies

Cookies are used to collect non-personal information including standard internet log information and details of your behavioural patterns upon visiting a Hotjar Enabled Site. This is done to enable the operators of a Hotjar Enabled Site to provide you with a better experience, identify preferences, diagnose technical problems, analyse trends and generally help our customers improve their website.
Cookies are small data files transferred onto computers or devices by websites for record keeping purposes and to enhance functionality on the Hotjar Enabled Site.
Most browsers allow you to choose whether to accept cookies or not. If you do not wish to have cookies placed on your computer, please visit the opt-out page and click “disable Hotjar” to reject all cookies, before accessing any Hotjar Enabled Site.

1.2.1.4 Google Firebase

This website and our testing platform NEST use Firebase service from google. Google is generally a data processor and processes personal data on their behalf. Firebase terms include Data Processing and Security Terms for all Firebase services, effective May 25, 2018.

Certain Firebase services governed by the Google Cloud Platform (GCP) Terms of Service are already covered by associated data processing terms, the GCP Data Processing and Security Terms. A complete list of Firebase services currently governed by the GCP Terms of Service is available in the Terms of Service for Firebase Services.

Google Analytics for Firebase is covered under the Google Ads Data Processing Terms.

Firebase is certified under major privacy and security standards.
More details on how and what is processed by Google Firebase can be found here

1.2.1.5 IPStack

This website and our testing platform NEST use ipstack. If you visit our website, we process only personal data that your browser communicates to our server. We collect the following data, which is necessary for us in order to display the website correctly and guarantee the necessary stability and security.

• IP-address;
• date and time stamp, time difference to GMT;
• requested site, site from which the request was sent, transmitted data volume;
• access status/HTTP status code;
• browser, operating system, interface, language and version of the browser software.

1.2.1.6 Microsoft Advertising / Bing

Our websites use the Microsoft Advertising service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (“Microsoft”). This service allows us to create advertisements based on existing information about you and to target you again when you continue to use the Internet. For this purpose, cookies and web beacons (conversion tracking tool) from Microsoft are used on our website, which also store data from you. The tool is an advertising program from Microsoft that is based on a pay-per-click system. This means that advertisers can place ads via the Bing and Yahoo! search engines and only pay when a website visitor clicks on the ad.

The service processes the following data:

• Browser language
• Clicked ads
• Digital signature
• GUID generated by the UET tag
• IP address
• Microsoft click ID
• Microsoft cookie
• Page title
• Referrer URL
• Screen color depth
• Screen resolution
• UET ID tag
• Page load time
• Publisher/URL access

According to Microsoft Advertising, the data processed by Microsoft Advertising is stored on servers in the European Economic Area (“EEA”). According to Microsoft, there is no transfer of personal data to a third country, such as the USA.

The storage and reading of information on your end device by cookies or similar technologies (e.g. object storage, pixels, web beacons), which are not required to provide a telemedia service explicitly requested by you, is based on your consent pursuant to Section 25 (1) TTDSG. You can declare this by opting in via our CMP (Consent Management Program) in the cookie settings.

The further processing of your personal data after storage or readout is also based on your explicit consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR.

You can declare your consent according to § 25 para. 1 TTDSG and Art. 6 para. 1 p. 1 lit. a GDPR with a single click on the corresponding button (“Accept all”).

A later withdrawal has no effect on the permissibility of data processing until that time.

Microsoft will delete your data as soon as it is no longer needed for the processing purpose, but no later than after one year and 25 days.

Click here to read Microsoft’s privacy policy:
https://privacy.microsoft.com/de-de/privacystatement

Click here to read Microsoft’s Cookie Policy:
https://privacy.microsoft.com/de-de/privacystatement

Click here to opt-out on all Microsoft domains:
https://account.microsoft.com/privacy/ad-settings/signedout?ru=https:%2F%2Faccount.microsoft.com%2Fprivacy%2Fad-settings

1.2.2. Microsoft Forms

In certain cases we conduct surveys using Microsoft Forms. All entered data are governed by Microsoft’s Privacy Statement and Service Agreement.

1.2.3. Youtube

www.YouTube.com and can be played directly from our website. By simply visiting our website – before you click on an embedded video – YouTube processes personal data by setting cookies. Thus, the information is transmitted that you have called up a corresponding sub-page of our website. In addition, log files are transmitted. The following data are to be mentioned:

The following data are to be mentioned:

Device information

• IP address
• Referrer URL
• Videos viewed

This is done regardless of whether YouTube provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of personalized advertising, market research and/or needs-based design of its own website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

The data transmitted to Google LLC via the YouTube video is predominantly stored on servers managed by Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) in the European Economic Area (EEA).

For more information on the purpose and scope of data collection and processing by YouTube, please refer to Google’s privacy policy. There you will also find further information about your rights and settings options to protect your privacy:
https://www.google.de/intl/de/policies/privacy.

1.2.4. Pixel your Site

We may use Pixel Your Site to collect information about how visitors interact with our website. Any information collected will be used only for the purpose of providing our services and will never be shared with any third parties. For more information go to https://www.pixelyoursite.com/privacy-policy and https://www.pixelyoursite.com/terms-and-privacy.

1.2.5. Truendo – Cookie Consent Management (CMP)

We use the CMP of the company TRUENDO Technologies GmbH (truendo.com) on our websites. The CMP is used by us to document and manage your consent, declared by an opt-in, to the processing of your personal data through services that are not technically necessary. As a controller, we are required by law to account for the granting of consents as well. We must therefore be able to prove your consent, which constitutes a separate personal data. Consent data includes the date and time of your visit or your consent or refusal, as well as device information. We obtain this information by retrieving it from the local storage provided in your browser for this purpose.

Truendo acts as a processor for us on a contractual basis. The contractual agreement provides, among other things, that Truendo has undertaken to comply with data protection, which includes securing your personal data (consent data) by means of appropriate technical and organizational measures – in particular by means of encryption technologies.

The legal basis for storing your consent is Art. 6 para. 1 lit. c GDPR in conjunction with Art. 5 para. 1 lit. a, para. 2, Art. 7 para. 1 GDPR and Art. 6 para. 1 lit. f GDPR, whereby compelling reasons can be held against an objection on your part. Such a compelling reason arises, for example, from the above-mentioned accountability obligation to which we are subject by law. Consent pursuant to Section 25 (1) TTDSG is not required, as the exception of Section 25 (2) No. 2 TTDSG applies in this respect.

Your consent data will be stored on Google cloud servers located in the EU/EEA and stored for regulatory auditing purposes for a period of 3 years. Both the data transfer to the servers and the subsequent storage on the servers are encrypted. Truendo hosts the key relevant for decryption on its own servers in the EU, which are managed by Truendo itself. This prevents Google from disclosing the consent data to US authorities.

1.4 Remarketing

1.4.1 Google

This website uses Google AdWords’ remarketing service on third party web sites (including Google). Third party internet providers, including Google, use cookies to display relevant adverts based on a user’s previous visits to the Testbirds website. Click here to learn more about Google Adwords, and how to disable their cookies.
We do not sell or share any personal information with third parties without your explicit consent. By submitting information to us, you agree to receive communications from Testbirds GmbH. The information gathered is used to enhance your experience on the Testbirds websites. We also use this information to respond to your requests and may present you with advertising that we believe will be of interest or useful to you. The use of data may also be required by virtue of a legal obligation or an official or governmental ordinance, and to establish or protect legal claims or to defend legal actions.

1.4.2 LinkedIn Retargeting

On our website you will find plugins of the social network LinkedIn.com, which is operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (‘LinkedIn’). The LinkedIn plugins are indicated by the LinkedIn logo or the ‘Recommend’ button on our website. Please note that when you visit our website, the plugin connects your Internet browser with the LinkedIn server. LinkedIn is thus informed that our website has been visited by your IP address. If you click the LinkedIn ‘Recommend’ button while logged into your LinkedIn account, you can link content from our website to your LinkedIn profile. LinkedIn assigns your visit to our website to your user account. Please note that we receive no information about the content of the transmitted data or of the use of these by LinkedIn.
For more details on the collection of data and your legal rights and settings options, please see the LinkedIn privacy policy.
If you want to opt-out from this feature – please click here.

1.4.3 Facebook

Our Internet presence uses social plug-ins (“plug-ins”) for the social network, facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The plug-ins are recognisable by Facebook logos (a white “f” on a blue tile or a “thumbs-up” sign) or are identified by the endorsement, “Facebook Social Plug-in”. The list and the appearance of the Facebook Social Plug-ins can be viewed here
If you call up a website from our online platforms, which includes such a plug-in, your browser creates a direct link with Facebook’s servers. The content of the social plug-in is transmitted directly to your browser by Facebook and links into the website. We have no influence on the extent of data collected by Facebook by means of the social plug-in and thus we can only inform you to the state of our knowledge. The integration of the plug-in provides Facebook with the information that you have called up the corresponding page of our Internet presence. If you are logged onto Facebook, Facebook is able to assign the visit to your Facebook Account. If you interact with the social plug-ins, for example, if you activate the “Like” button or make a comment, the relevant information will be transmitted directly from your browser straight to Facebook. Even if you are not a Facebook member, it is nevertheless possible that Facebook may discover and store your IP address. The purpose and scope of data collection and the further processing and use of the data by Facebook as well as your rights in this regard and possible browser settings to protect your personal privacy can be found in the Facebook data protection instructions on
We may use data collected to deliver tailored advertisements to you on other websites, including via Facebook’s Custom Audience Feature or other similar Facebook tools. We will not share your email address with Facebook. Click here to learn about how you can control the ads you see on Facebook.

1.5 SALESFORCE PARDOT, SALESFORCE

1.5.1 Pardot Usage

Pardot is a Marketing Automation product. We use Pardot to gather insights and informations about website visitors. Personal information is only stored in Pardot when completing a form or a subscription for an event or email communication.
Non-personal information such as IP address, operating system, web browser, and pages visited is gathered by Pardot.
Pardot’s privacy policy is available here.

1.5.1 Pardot Newsletters / EMails

For the Sendout of our Newsletters we also use the marketing automation product Pardot from Salesforce..
After registration, Pardot sends you confirmation email where we ask you to confirm your email-address and the corresponding signup to the newsletter.
Pardot also offers analytics possibilities (e.g. Opening-Rates, Bounce, Unsubscriptions etc.) that we use to optimize our e-mail approach.

Pardot’s privacy policy is available here.

This privacy and cookies notice was last updated February 2019

Raffles & Sweepstakes

Conditions of participation to raffles/sweepstakes

Participation in raffles and their execution are determined by the following provisions: The execution of raffles/sweepstakes as well as the determination of the winners is the sole responsibility of Testbirds. In the event that a provision of the prices should not be possible or due to unforeseen high costs the winners will receive a replacement of equal value.

1. Participation

1.1 You must be 18 or over to participate in competitions. Minors are excluded from participation.
1.2 Persons excluded from participation are employees of Testbirds, the persons directly involved in the competition as well as their relatives and all persons who violate the conditions of participation or who want to obtain an advantage in an unauthorised way. Testbirds reserves the right to exclude people from raffles and competitions if that appears necessary for the sake of fairness and equal opportunity to other participants.
1.3 All participation takes place by telephone, SMS and / or online depending on the respective competition. We will get in touch with the winners directly after the contest has ended. Due to data security and privacy reasons Testbirds will not post information on participants or winners on our pages or channels.
1.4 To participate in the raffle it is absolutely necessary that all personal data is veridical and completed.

2. Implementation and execution

2.1 The winners will be determined through a random lottery process from all participants or in case of a competition question from all participants with the correct solution. Unless otherwise indicated, each participant is only entitled to one prize per competition.
2.2 Testbirds will notify winners by writing and / or by telephone. If winnings are not collected by the winner within a time limit set by Testbirds, the termination of the winnings will be at the discretion of Testbirds.
2.3 The winners are not entitled to change or supplement the respective prize. Follow-up costs which are triggered by the respective prize are to be paid by the winners themselves.
2.4 Claims for substitute cash payments do not exist.
2.4 Prize entitlements are not transferable.

3. Data protection

3.1 By registering to a competition, participants expressly agree that Testbirds is allowed to store the necessary data for the duration of the competition and process it for the purpose of processing the prize.
3.2 Testbirds commits itself to comply with the statutory provisions of data protection. Particularly in this context, Testbirds points out to the information of data protection.

4. Other

4.1 Any recourse to courts of law is excluded.
4.2 The law of the Federal Republic of Germany is the only applicable one.
4.3 Testbirds reserves the right to change these terms and conditions at any time without notice.

This raffles and sweepstakes notice was last updated late March 2018

Contact Request & Application

Contact Request and applications

The protection of your personal data throughout the entire process of getting in contact with us as well as for an application is a matter of great concern to us and we want you to feel secure when visiting our website. So, we are transparent how we manage your personal data on our platform.

1. Personal data

Personal data is specific information on the personal or material circumstances of a certain individual or an identifiable natural person. This includes information such as your name, your address, telephone number and your date of birth, for example.

2. Collection and processing of personal data

If you inform us of personal data within the application process, this data will be divided into the following data types and data categories for recording, processing and/or use:

2.1 In case of a contact request

Personal data (first and last name, date of birth, address, school leaving certificate)
Communication data (telephone number, mobile telephone number, fax number, e-mail address)
Data relating to your specific request

2.2 In case of an application

Personal data (first and last name, date of birth, address, school leaving certificate)
Communication data (telephone number, mobile telephone number, fax number, e-mail address)
Information provided by third parties (e.g. credit agencies or from public registers)
Data relating to the evaluation and assessment in the application process
Data relating to your education (school, vocational training, military/civilian service, degree, doctorate)
Data relating to your previous employment history, training course certificates and job references
Data relating to other qualifications (e.g. language skills, computer skills, voluntary work)
Application photo
Information on desired salary
Information on start date
Job application history

3. Use and dissemination of personal data

We will use the personal data you have transferred solely for processing your request or your application. Only individuals who are involved in the processes will be informed of your personal data. All employees entrusted with data processing are obliged to maintain the confidentiality of your data. We do not pass your personal data to third parties unless we are obliged to pass on data due to statutory provisions and/or official or judicial orders.

4. Talent Pool

You can join the Talent Pool by accepting an invitation from a recruiter. If you decide to join the Talent Pool, the entire company will have access to your personal data when filling vacant positions.

5. Security

We take all the necessary technical and organisational security measures to protect your personal data from loss and misuse. Your data is stored in a secure operating environment to which the public does not have access.

6. Right to disclosure and revocation

You have the right to demand information from us at any time about the data we have stored about you. You can revoke the usage of your personal data for the described purposes at any time with effect for the future, without incurring any charges other than the transmission costs calculated according to the base fee.
Please send all information requests, information enquiries or objections relating to data processing to us by email.

In case of a contact request: data-privacy@testbirds.com
In case of an application: jobs@testbirds.com

Last updated May 2018