To the website and social media
Status: January 15, 2025
AIMO takes the protection of customer data seriously. The protection of your individual privacy and personal sphere is of the utmost importance to us. For this reason, compliance with the statutory provisions on data protection is a matter of course for us. It is also important to us that you, as our customer, know at all times when we store which data and how we use it. Our principle is: “You decide what information you want to share - and with whom.”
On the one hand, this privacy policy informs visitors and users of our website about the data processing operations that take place online and in which personal data is processed. On the other hand, you will receive information about our processing operations that do not primarily take place online or via social media.
The privacy policies for the AIMO apps are listed separately and can be found under the following links:
In addition, the links to the privacy policy can be found within the corresponding app and on the website on the respective subpages „AIMO fit“ or „AIMO gesund bewegt“.
GDPR is the abbreviation for the European General Data Protection Regulation.
BDSG is the abbreviation for the Federal Data Protection Act in its current version.
Personal data are all individual details that allow conclusions to be drawn about a natural person (for definition see Art. 4 para. 1 GDPR). This includes, for example, names, email addresses, telephone numbers, but also data such as IP addresses or customer numbers.
The processing of personal data includes all operations, such as the collection, storage, transmission, archiving or deletion of personal data (definition Art. 4 para. 2 GDPR).
The data subject within the meaning of data protection law is any natural person whose personal data is processed.
Further definitions of terms can be found in the General Data Protection Regulation, which can be found in Art. 4 of the GDPR (Definitions).
Name and contact details of the controller
AIMO GmbH
Managing Director: Danny Dressler
Obere Gänsweide 5
73770 Denkendorf
E-mail: danny.dressler(at)aimo-fit.com
Name and contact details of the data protection officer
Fabian Henkel
Diplom-Betriebswirt (FH)
Certified data protection officer
DPO External Data Protection Officer Stuttgart
Kantstrasse 14
71277 Rutesheim
Phone: +49 7152 564 773
Fax: +49 7152 564 771
E-mail: info(at)externer-datenschutzbeauftragter-stuttgart.de
The following content gives you a brief overview of the processing of personal data; you will find more detailed information in the respective detailed passages.
Security on our website (SSL Secure Socket Layer)
Our website is equipped with an SSL certificate, which is used to encrypt data transmission processes. This happens, for example, when you send us a message via a form. However, as a precaution, we would like to point out that one hundred percent security in electronic data processing is not possible and that there is always a residual risk.
Data that you transmit to us
On this website, we process the data that you enter yourself, for example in a form. In this case, the purpose of the processing is determined by the type of form and also by this privacy policy. Even if you send us a message by e-mail, for example, or contact us in any other way, we will process your data in accordance with the purpose of the contact.
Automatic server log files
On the other hand, our server automatically records all accesses and therefore also IP addresses (log files). This serves to defend against attacks, analyze access figures and ensure smooth operation.
Use of cookies
Cookies help us to provide various services; you can find more information on this in this privacy policy.
Analysis and tracking tools
In addition to the pure server log files, which also provide us with information on page views, we use analysis tools. These tools give us detailed insights into the content visited on our site, the flow of behavior and, for example, the country from which access took place. For such services to work, cookies must be set for the site visitor or scripts must be executed.
Plugins and content delivery networks
We sometimes use plugins and content delivery networks; well-known examples of such services are the video service YouTube or the map service Google Maps. If such services are integrated via a website, access data is transmitted to the services. As a rule, this is your IP address and other metadata, such as the time and date of access. As a rule, this is provided by setting cookies.
Newsletter / Direct marketing
Direct marketing based on your consent
If you give us your consent (Art. 6 para. 1 lit. a GDPR), we will send you newsletters until you withdraw your consent. You can revoke your consent to us at any time with effect for the future.
Direct marketing in the legitimate interest
We reserve the right to send our customers newsletters on the basis of §7 para. 3 UWG in conjunction with Art. 6 para. 1 lit. f GDPR. You can of course object to receiving direct marketing information at any time.
Other data recipients
General information on deletion periods for personal data
We process the data for as long as this is necessary for the respective purpose. If necessary, we process your personal data for the duration of our business relationship, which also includes the initiation and execution of a contract; in addition, we are obliged to comply with statutory retention obligations. If the data processing is based on your consent, we will delete your data after your revocation.
Transfer of personal data to a third country
Where possible, we try to have all service providers and services provided by providers within the European Union. A transfer to a third country is possible if you have given us your consent and/or we have concluded a contract for order processing in accordance with Art. 28 GDPR, taking into account suitable guarantees. In individual cases, we may use plugins or tools that are hosted in third countries, but we use them on the basis of our legitimate interests. In these cases, we will point this out if necessary.
Obligation to provide personal data
As a rule, you can use our website without providing personal data. The provision of personal data is regularly required for the initiation, conclusion, execution and reversal of a contract. If you do not provide the required personal data, it will not be possible for us to conclude and fulfill a contract with you. We can also provide services, such as our newsletter, by providing personal data, but you are free to use them.
The legal bases for the processing of personal data are exceptional circumstances that permit the processing of personal data. The main legal bases are set out in particular in Art. 6 GDPR. The legal bases according to which we process personal data are described in the individual processing operations in this privacy policy.
Consent given (Art. 6 para. 1 lit. a GDPR)
Consent is one of these legal bases and requires that the person giving consent does so in an informed manner and on a voluntary basis. Consent on the basis of Art. 6 para. 1 lit. a GDPR can be revoked at any time without giving reasons.
Contract-related data processing (Art. 6 para. 1 lit. b GDPR)
The processing of personal data for the initiation or execution of contracts is also a legal basis and is defined in Art. 6 para. 1 lit. b GDPR.
Legal obligation (Art. 6 para. 1 lit. c GDPR)
The exceptional case of data processing due to a legal obligation can be found in Art. 6 para. 1 lit. c GDPR, for example, we are obliged to comply with certain retention periods under commercial and tax law.
Legitimate interests (Art. 6 para. 1 lit. f GDPR)
The processing of personal data on the basis of a balancing of interests pursuant to Art. 6 para. 1 lit. f GDPR allows the processing after careful consideration of financial or legal interests against the legitimate interests of the data subject.
Every natural person has certain rights, which are defined in particular in Articles 15 to 21 and 77 of the GDPR. In principle, you have the following rights that you can assert against us.
Right of revocation consent granted in accordance with Art. 7 GDPR
You can revoke your consent at any time without giving reasons with effect for the future.
Right to information according to Art. 15 GDPR (restrictions according to § 34 BDSG possible)
You have the right to request information about your processed data and the purposes of processing at any time.
Right to rectification according to Art. 16 GDPR
If you discover that we are processing incorrect or incomplete data about you, you have the right to rectification.
Right to erasure according to Art. 17 GDPR (restrictions according to § 35 BDSG possible)
You have the right to request the erasure of your personal data that we process at any time. If complete erasure is not possible, for example because we have to comply with statutory retention obligations or we can assert legitimate interests for other reasons, we will restrict your data until complete erasure is possible.
Right to restriction of processing according to Art. 18 GDPR
You have the right to request the restriction of the processing of your personal data. To do so, you can contact us at any time at the address given in the legal notice. The right to restriction of processing exists in the following cases:
If you dispute the accuracy of your personal data stored by us, we generally need time to check this. For the duration of the review, you have the right to request that the processing of your personal data be restricted.
If the processing of your personal data was/is carried out unlawfully, you can request the restriction of data processing instead of erasure.
If we no longer need your personal data, but you need it for the exercise, defense or assertion of legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
If you have lodged an objection in accordance with Art. 21 (1) GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, this data - apart from its storage - may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.
Right to data portability according to Art. 20 GDPR
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place if it is technically feasible.
Right to object to certain processing operations and direct marketing according to Art. 21 GDPR
a) If the data processing is carried out on the basis of Art. 6 para. 1 lit. e or f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defense of legal claims (objection pursuant to Art. 21 (1) GDPR).
Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR in conjunction with Section 19 BDSG
In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement. The right to lodge a complaint is without prejudice to other administrative or judicial remedies.
This website and the “AIMO Apps" are hosted by an external service provider (hoster). The personal data that is collected in the process is stored on the hoster's servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website. The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR). Our hoster will only process your data to the extent necessary to fulfill its performance obligations and follow our instructions with regard to this data.
We have commissioned the following hoster:
Amazon Web Services EMEA SARL,
38 Avenue John F. Kennedy,
L-1855, Luxembourg
In order to guarantee data protection-compliant processing, we have concluded an order processing contract with our hoster.
Our web server automatically logs all accesses and therefore also the IP addresses of visitors. This serves to defend against attacks, analyze access figures and ensure smooth operation. We have a legitimate interest in this (Art. 6 lit. f GDPR).
In addition to the IP address, the server log usually also records other metadata about the session; you will find this data below.
We only process this data for the above-mentioned purposes. We delete server log files after six months at the latest.
General information
When you visit our website, information is stored on your end device in the form of cookies. A cookie is a small data record in the form of a file in which data such as personal page settings and login information are stored. By using cookies, we make it easier for you to use our online offering through various service functions (such as recognizing previous visits) and can thus better tailor the Internet offering to your needs.
In addition, with your consent, we use cookies from third-party providers for analysis and marketing purposes to optimize our website and for interest-based marketing purposes. The stored surfing behavior is analyzed using an algorithm so that targeted interest-based product recommendations can then be displayed in the form of advertising banners or advertisements on third-party websites. The pseudonymized user profiles are not merged with personal data about the bearer of the pseudonym without the separate express consent of the data subject.
You can prevent cookies from being saved and delete existing cookies by making the appropriate settings in your browser. The help function of most browsers explains how you can make these settings. However, if you do not accept cookies, this may impair the service functions of the website.
Further information
You can find information about the cookies we use at https://aimo-fit.com/cookie-richtlinien. Here you can also make individual settings for your cookie preferences. A detailed description of cookies and their use can be found under point 4 of this privacy policy.
CookieLaw
We use the Cookielaw plugin to obtain consent for the use of cookies. Cookies are stored in your browser to save your preferences. The information generated by the Cookielaw cookies is not used to personally identify the visitor to this website and is not merged with personal data about the bearer of the pseudonym.
The following data is automatically logged by Cookielaw:
If you do not agree to the storage of this data, you can object to the storage at any time by clicking the mouse as described above. In this case, a so-called opt-out cookie will be stored in your browser, which means that Cookielaw will only provide cookies for the technically error-free and optimized provision of the website. Please note that the complete deletion of your cookies means that the opt-out cookie will also be deleted and may have to be reactivated by you.
We use Cookielaw in the legitimate interest of a functional and user-friendly solution and thus base the processing on Art. 6 para. 1 lit. f GDPR). In addition, the use of Cookielaw serves to fulfill a legal obligation within the meaning of Art. 6 para. 1 lit. c GDPR.
Communication by e-mail
If you send us an email, we will process your data in accordance with the content and purpose of the message. As a rule, processing is carried out on the basis of pre-contractual measures or in the context of the execution of a contractual relationship on the basis of Art. 6 para. 1 lit. b GDPR and Art. 6 para. 1 lit. f. GDPR. We have a legitimate interest in processing your request quickly and efficiently.
Insofar as it is a product or service-related message, we generally process your data on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR.
Please note that we store all incoming e-mails in accordance with the principles of proper accounting for a period of ten years, starting on the first day of the following year in which the message was received. If you ask us to delete the data, we will restrict the processing of your data from then on and only store it for the purpose of complying with retention periods in our legitimate interest.
Communication by telephone or fax
Even if you contact us by telephone or fax, we process your data either to initiate and execute contractual relationships (if the content is product- or service-related) and/or in our legitimate interest, analogous to contacting us by e-mail.
We do not record the content of conversations, but we may take notes to process your request. These are stored until the purpose of the data processing has been achieved and we no longer have any legitimate interests in the processing. If necessary, the content of the conversation will be stored anonymously for statistical purposes. You can of course request the deletion of your data at any time.
Newsletter Pre Sign-Up and Newsletter
You have the option of giving us your consent to receive direct marketing content. If you give your consent (Art. 6 para. 1 lit. a GDPR), for example to receive our email newsletter, we will process your data for the specific purpose of direct marketing measures by email.
As we are obliged to verify the accuracy of the e-mail address you provide when registering for the newsletter and want to ensure that it is correct, we use procedures that enable us to verify the ownership of the e-mail address. As a rule, this verification is carried out using the double opt-in procedure. After registering, you will receive an e-mail with a link that you must click to confirm. If the double opt-in procedure is not available due to temporary technical reasons, we will send you an e-mail to which you can reply without text to confirm your identity.
You can revoke your consent at any time with effect for the future. You will find an „Unsubscribe“ link in every newsletter. Alternatively, you can send us an e-mail with the subject „Unsubscribe from newsletter“. We will process your data until you withdraw your consent. Statutory retention periods remain unaffected.
Use of MailChimp
This website uses the services of MailChimp to send newsletters. The provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.
MailChimp is a service with which, among other things, the sending of newsletters can be organized and analyzed. If you enter data for the purpose of subscribing to the newsletter (e.g. email address), this data is stored on MailChimp's servers in the USA.
Standard contractual clauses have been concluded with MailChimp. These clauses ensure that compliance with European data protection standards is guaranteed in the USA.
With the help of MailChimp, we can analyze our newsletter campaigns. When you open an email sent with MailChimp, a file contained in the email (known as a web beacon) connects to MailChimp's servers in the USA. This makes it possible to determine whether a newsletter message has been opened and which links, if any, have been clicked on. Technical information is also collected (e.g. time of access, IP address, browser type and operating system). This information cannot be assigned to the respective newsletter recipient. It is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.
If you do not wish to be analyzed by MailChimp, you must unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message. You can also unsubscribe from the newsletter directly on the website.
The data processing takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the revocation.
The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of MailChimp after you unsubscribe from the newsletter. Data stored by us for other purposes remains unaffected by this.
You can find more details in MailChimp's privacy policy at:
https://mailchimp.com/legal/privacy/
Conclusion of a data processing agreement
We have concluded a so-called „Data Processing Agreement“ with MailChimp, in which we oblige MailChimp to protect the data of our customers and not to pass it on to third parties.
Use of LamaPoll
We use the survey tool LamaPoll in parts of this website. The provider of LamaPoll is the German company Lamano GmbH & Co. K, Frankfurter Allee 69, 10247 Berlin, Germany. LamaPoll is ISO certified and GDPR compliant. You can find more details about LamaPoll's data protection and IT security measures here.
The data you enter in the surveys is stored and processed by LamaPoll on German servers.
The data processing takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. To do so, send an email to support@aimo-fit.com. The legality of the data processing operations already carried out remains unaffected by the revocation.
Conclusion of a data processing agreement
We have concluded a so-called „Data Processing Agreement“ with LamaPoll, in which we oblige LamaPoll to protect our customers' data and not to pass it on to third parties.
Registration for the press mailing list
If you are interested in receiving press releases and information electronically, you can be added to our press mailing list. To do so, please send us a message to info@aimo-fit.com with your contact details. In this case, the processing of your data for inclusion in the press distribution list and the sending of press releases is based on your consent (Art. 6 para. 1 lit. a GDPR).
You can revoke your consent to receive our press releases at any time. Please send us a message with the subject „Revocation press mailing list“ and we will delete your data from our press mailing list. The legality of the data processing operations that have already taken place remains unaffected by the revocation.
The data you provide us with for the purpose of receiving press information will be stored by us until you unsubscribe from the press distribution list and deleted after you unsubscribe from the press distribution list. Data stored by us for other purposes will remain unaffected by this.
Data protection provisions Application procedure
If you apply to us, whether for an advertised position or on your own initiative, we will process your data to carry out the selection process. It is irrelevant to us whether you apply by post, by e-mail or, if available for the respective position, by online form.
As a matter of principle, we only process the data that you have sent us yourself as part of an application process. Other sources may be consulted after informing and consulting with you. For example, whether we may contact a former employer.
The legal basis for the implementation of an application procedure is § 26 BDSG in conjunction with Art. 6 para. 1 lit. b GDPR (initiation of an employment contract). If you give us your consent to store your data for a longer period of time, this is done on the legal basis of Art. 6 para. 1 lit. a GDPR.
Deletion periods for applicant data
We delete applicant data no later than 4 months after the end of the application process (once a candidate has been selected and all applicants have been informed of the outcome). The purpose of the data processing is generally no longer given with the end of the selection process, but we have a legitimate interest (Art. 6 para. 1 lit. f GDPR) in being able to defend ourselves against any claims by rejected applicants. If you have the impression that your interests in an immediate deletion outweigh ours, you have the possibility to request us to do so. We will then review your request and provide you with feedback.
After the above-mentioned period has expired, your data will be deleted, unless we have to defend ourselves in ongoing proceedings, for example due to a complaint under the General Equal Treatment Act. In this case, we will delete your data once the proceedings have been concluded, provided there are no statutory retention periods.
If we are allowed to store your data for a longer period of time on the basis of your consent, we will delete your data if you ask us to do so and revoke your consent. If necessary, we will also delete your data before you withdraw your consent if it is foreseeable that no position will be available.
Inclusion in our applicant pool
If we are unable to offer you a position at the present time, we may ask you for your consent to continue storing your data. The purpose of this is to offer you a suitable position at a later date. The legal basis for the processing of your data in our applicant pool is your consent (Art. 6 para. 1 lit. a GDPR). Of course, you can withdraw your consent at any time with effect for the future. If you do not revoke your consent yourself within a period of two years, we will delete your data from our applicant pool at the latest.
AIMO GmbH works together with Freshworks GmbH, Rauchstraße 9-11, 81679 Munich, Germany, to process support requests and revocations. Freshworks acts as a processor in accordance with Art. 28 GDPR.
Scope of data processing:
As part of the processing of support data by Freshworks GmbH, the following personal data is processed:
Purpose of data processing:
This data is processed exclusively for the following purposes:
Legal basis:
The processing of the aforementioned data is carried out in accordance with Art. 6 para. 1 lit. b GDPR (fulfillment of a contract) and Art. 6 para. 1 lit. f GDPR (legitimate interest in the efficient processing of support requests and revocations).
Disclosure and protective measures:
Freshworks GmbH has undertaken to process personal data only in accordance with our instructions and in compliance with the applicable data protection regulations. The data is protected by technical and organizational measures to prevent unauthorized access and data loss.
Duration of storage:
The support data is only stored for as long as is necessary for the stated purposes or as long as we are legally obliged to store it.
Rights of data subjects:
In accordance with Art. 15-22 GDPR, data subjects have the right to obtain information about the processing of their personal data, to have inaccurate data rectified, to request the restriction of processing or erasure of data and to object to processing.
Google Analytics
AIMO uses Google Analytics, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; „Google“). Google Analytics uses cookies, which enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. We only use Google Analytics with activated IP anonymization. This means that Google will truncate the IP address of users in member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted by the user's browser will not be merged with other Google data. Users can prevent the storage of cookies by adjusting the settings in their browser software accordingly. We have made data protection-friendly default settings.
The storage of Google Analytics cookies and the use of this analysis tool are based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the analysis of user behavior in order to optimize both its website and its advertising. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time. Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. Pseudonymous user profiles can be created from the processed data.
The legal basis for the use of Google Analytics is § 15 para. 3 TMG or Art. 6 para. 1 lit. f GDPR. Users can also prevent Google from collecting the data generated by the cookie and relating to their use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser add-on. Opt-out cookies prevent the future collection of your data when you visit this website. If you click here, the opt-out cookie will be set: Deactivate Google Analytics. As a guarantee according to Art. 44 ff. GDPR, Google has signed the EU standard contractual clauses. Further information on data processing by Google Analytics can be found in the provider's privacy policy.
If you no longer wish to be tracked by Google Analytics in the future, you can send an email to support@aimo-fit.com at any time.
Facebook Pixel
AIMO uses Facebook Pixel, a web analytics service provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Facebook Pixel uses cookies that enable your use of the website and the app to be analyzed. The information generated by the cookie about your use of this website and app is usually transferred to a Facebook server in the USA and stored there.
We only use Facebook Pixel with activated IP anonymization. This means that Facebook will truncate the IP address of users in member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Facebook server in the USA and truncated there. The IP address transmitted by the user's browser is not merged with other Facebook data. Users can prevent cookies from being saved by adjusting the settings in their browser software accordingly. We have made data protection-friendly default settings.
The legal basis for the use of Facebook Pixel is § 15 para. 3 TMG or Art. 6 para. 1 lit. f GDPR. Users can also prevent the collection of data generated by the cookie and related to their use of the website (including your IP address) to Facebook and the processing of this data by Facebook by downloading and installing the browser add-on. Opt-out cookies prevent the future collection of your data when you visit this website. If you click here, the opt-out cookie will be set: Deactivate Facebook Pixel.
If you no longer wish to be tracked by Facebook Pixel in the future, you can send an email to support@aimo-fit.com at any time.
We use n8n as an automation platform for the technical processing of data streams.
Personal data is processed exclusively temporarily passed through, to carry out defined processing steps.
One n8n does not permanently store personal data.
Legal basis:
Art. 6 para. 1 lit. a GDPR (consent) or Art. 6 para. 1 lit. f GDPR (legitimate interest in efficient process design).
As part of automated processes, the service OpenAI (ChatGPT) is used within n8n. The service is used exclusively to receive a message transmitted by the AIMO app. Name string technically divided into first and last name.
It takes place No independent storage of the data by us for this purpose.
Processing is used exclusively for the technical structuring of data.
Legal basis:
Art. 6 para. 1 lit. a GDPR (consent).
To the temporary caching For further processing we use Google Sheets.
The following data is processed:
Timestamp
IP address
First name, last name and e-mail address exclusively in hashed (cryptically unreadable) form
The data is used exclusively for technical processing in the context of advertising tracking and is not used for other purposes.
Legal basis:
Art. 6 para. 1 lit. a GDPR (consent).
The hashed data cached in Google Sheets is sent to Facebook (Meta Platforms Ireland Ltd.) transmitted in order to Assignment to Facebook advertising campaigns to make this possible.
Facebook uses this data to measure the success and optimization of Facebook Ads.
Processing only takes place for users who have consented to advertising tracking.
Legal basis:
Art. 6 para. 1 lit. a GDPR (consent).
We use Hyros to analyze and evaluate our advertising campaigns.
Hyros records website visits to the AIMO website and links these to purchase and activation events in the AIMO app.
Only data from users who have expressly consented to advertising tracking is collected, including
E-mail address
IP address
First and last name
visited subpages of the AIMO website
The aim is to evaluate which advertising campaigns are successful and how users interact with our offers.
Legal basis:
Art. 6 para. 1 lit. a GDPR (consent).
Profiling
With the help of the Google Analytics tracking tool, the behavior of visitors to the website can be evaluated and their interests analyzed. We create a pseudonymized user profile for this purpose.
IP anonymization
We have activated the IP anonymization function on this website. This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Objection to data collection
You can prevent the collection of your data by Google Analytics by clicking on the following button. An opt-out cookie will be set to prevent your data from being collected on future visits to this website:
Decline cookies
You can find more information on how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.
Order processing
We have concluded an order processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Storage duration
Data stored by Google at user and event level that is linked to cookies, user IDs or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) will be anonymized or deleted after 14 months. Details can be found at the following link: https://support.google.com/analytics/answer/7667196?hl=de
Google Ads and Google Conversion Tracking
This website uses Google Ads. Google Ads is an online advertising program of Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.
As part of Google Ads, we use what is known as conversion tracking. When you click on an ad placed by Google, a cookie is set for conversion tracking. These cookies lose their validity after 30 days and are not used to personally identify users. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page.
Each Google Ads customer receives a different cookie. The cookies cannot be tracked via the websites of Google Ads customers. The information collected using the conversion cookie is used to generate conversion statistics for Google Ads customers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. If you do not wish to participate in tracking, you can object to this use by deactivating the Google conversion tracking cookie via your Internet browser under user settings. You will then not be included in the conversion tracking statistics.
The storage of „conversion cookies“ and the use of this tracking tool are based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.
You can find more information about Google Ads and Google Conversion Tracking in Google's privacy policy: https://policies.google.com/privacy?hl=de.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.
Data processing by social networks
We maintain publicly accessible profiles in social networks. Social networks such as Facebook, Twitter etc. can generally analyze your user behavior comprehensively if you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media presences triggers numerous data protection-relevant processing operations.
In detail:
If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. In this case, data is collected, for example, via cookies that are stored on your end device or by recording your IP address.
With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside the respective social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are logged in or have been logged in.
Please also note that we cannot track all processing operations on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and privacy policies of the respective social media portals.
Legal basis
Our social media presences are intended to ensure the most comprehensive presence possible on the Internet and to enable effective user information and communication with users. This is a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. The analysis processes initiated by the social networks may be based on different legal bases, which must be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 para. 1 lit. a GDPR).
Responsible party and assertion of rights
If you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. You can assert your rights (information, rectification, erasure, restriction of processing, data portability and complaint) both against us and against the operator of the respective social media portal (e.g. Facebook).
Please note that despite our joint responsibility with the social media portal operators, we do not have full control over the data processing operations of the social media portals. Our options are largely determined by the corporate policy of the respective provider.
Storage duration
The data collected directly by us via the social media presence will be deleted from our systems as soon as the purpose for its storage no longer applies, you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies. Stored cookies remain on your end device until you delete them. Mandatory statutory provisions - in particular retention periods - remain unaffected. We have no influence on the storage period of your data that is stored by the operators of social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).
Social networks in detail
We maintain profiles in the following social networks:
The provider is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. We have concluded an agreement with Facebook on joint responsibility for the processing of data (Controller Addendum). This agreement specifies which data processing operations we or Facebook are responsible for when you visit our Facebook fan page. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum
You can adjust your advertising settings yourself in your user account. To do this, click on the following link and log in: https://www.facebook.com/settings?tab=ads
You can find more details in Facebook's privacy policy: https://www.facebook.com/about/privacy
Privacy policy specifically for pages: https://www.facebook.com/legal/terms/information_about_page_insights_data
Facebook is certified in accordance with the EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
The provider is Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Details on how they handle your personal data can be found in Instagram's privacy policy: https://help.instagram.com/519522125107875 or alternatively http://instagram.com/about/legal/privacy/
The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
LinkedIn uses advertising cookies. If you would like to deactivate LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Details on how they handle your personal data can be found in LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy
LinkedIn is certified in accordance with the EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active
The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany.
We have a profile on XING. Details on how they handle your personal data can be found in XING's privacy policy: https://privacy.xing.com/de/datenschutzerklaerung.
You can obtain information from us at any time about your stored personal data (Art. 15 GDPR), request its rectification (Art. 16 GDPR), erasure (Art. 17 GDPR) or restriction of processing (Art. 18 GDPR) and assert your right to data portability (Art. 20 GDPR). You can also change or revoke your declaration of consent at any time without giving reasons with effect for the future (Art. 21 GDPR). Please note that data processing that took place before the revocation is not affected by this. Your rights listed under a., b., d. and f. may be restricted if the exercise of the rights is likely to render impossible or seriously impair the achievement of the research or statistical purposes and the restriction is necessary for the fulfillment of the research or statistical purposes. For details, we have listed everything again below:
You can request information in accordance with Art. 15 GDPR about the personal data that we process.
If the information concerning you is not (or no longer) correct, you can request a correction in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.
You can request the deletion of your personal data in accordance with Art. 17 GDPR.
In accordance with Art. 18 GDPR, you have the right to request that the processing of your personal data be restricted.
In the event that the requirements of Art. 20 para. 1 GDPR are met, you have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to third parties.
You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (f) of Article 6(1) GDPR. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority of your choice in accordance with Art. 77 (1) GDPR. This also includes the data protection supervisory authority responsible for us State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, P.O. Box 10 29 32, 70025 Stuttgart, 0711/615541-0, Poststelle@lfd.bwl.de.
Right to revoke the declaration of consent under data protection law
You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
For the aforementioned purposes, please contact the data controller:
AIMO GmbH
Managing Director: Danny Dressler
Obere Gänsweide 5
73770 Denkendorf
E-mail: danny.dressler(at)aimo-fit.com
Name and contact details of the data protection officer
Fabian Henkel
Diplom-Betriebswirt (FH)
Certified data protection officer
DPO External Data Protection Officer Stuttgart
Kantstrasse 14
71277 Rutesheim
Phone: +49 7152 564 773
Fax: +49 7152 564 771
E-mail: info(at)externer-datenschutzbeauftragter-stuttgart.de
Data categories and purposes of processing
We process the personal data of our service providers and partners that we receive directly as part of our business relationship. If we have received data from you, we only process it for the purposes for which we received or collected it.
As a rule, we process the following categories of data from you:
As part of the business initiation phase and during the business relationship, in particular through personal, telephone or written contacts, initiated by you or by one of our employees, further personal data is collected, e.g. information about the contact channel, date, occasion and result; (electronic) copies of correspondence and information about participation in direct marketing measures.
On the other hand, we process personal data that we have legitimately obtained from publicly accessible sources (e.g. commercial and association registers, press, media, internet) and are permitted to process.
Data processing for other purposes will only be considered if the necessary legal requirements pursuant to Art. 6 (4) GDPR are met. In this case, we will of course comply with any information obligations pursuant to Art. 13 (3) GDPR and Art. 14 (4) GDPR.
Legal basis
On the basis of your consent (Art. 6 para. 1 lit. a GDPR)
We process personal data for one or more specific purposes if you have given us your consent to do so. If personal data is processed on the basis of your consent, you have the right to withdraw your consent from us at any time with effect for the future.
Data processing for the fulfillment of contracts (Art. 6 para. 1 lit. b GDPR)
We process personal data for the performance of contracts. The fulfillment of contracts includes, for example, the conclusion, execution and reversal of a contract. In addition, we process personal data that is necessary for the implementation of pre-contractual measures, such as the initiation of a contract, and is carried out at your request.
Data processing due to a legal obligation (Art. 6 para. 1 lit. c GDPR)
Like any company, we must comply with retention and other documentation obligations, which may include documents containing personal information. Insofar as we process data for these purposes, the processing is based on a legal obligation.
Data processing on the basis of legitimate interests (Art. 6 para. 1 lit. f ) GDPR)
If we process data on the basis of legitimate interests, you as the data subject have the right to object to the processing of personal data, taking into account the provisions of Art. 21 GDPR. If permitted by the specific purpose, we process your data in pseudonymized or anonymized form.
Other recipients of your data
Disclosure to processors within the scope of Art. 28 GDPR
Processors used by us (Art. 28 GDPR), in particular in the area of IT services, who process your data for us in accordance with our instructions. If we commission service providers to fulfill our tasks, we always observe the data protection regulations; in particular, data is only passed on after contracts for order processing have been concluded.
For the performance of a contractual relationship
If it is necessary for the execution of the contract with you, we will pass on your data to banks (you will find the relevant bank in the respective contract documents) or shipping service providers (usually Deutsche Post or DHL), for example.
Disclosure due to a legal obligation
If there is a legal or official obligation, we will pass on your data to public bodies or institutions (authorities, for example in the context of criminal prosecution).
In the legitimate interest of a legal representative
In the event of disputes, we reserve the right to engage a legal representative for clarification and will transmit your data for this purpose. Which legal representative we use depends on the specific case.
Other bodies, insofar as you have given us your consent
If you have given your explicit consent, we will also pass on your data to other parties. However, this takes place within the limits of your verifiable consent.
Information on relevant deletion periods for personal data
Principle of purpose limitation and compliance with statutory retention periods
We process the data for as long as this is necessary for the respective purpose. If necessary, we process your personal data for the duration of our business relationship, which also includes the initiation and execution of a contract.
In addition, like every company, we are obliged to comply with the statutory retention periods, for example the periods under commercial and tax law. Insofar as statutory retention obligations exist, the relevant personal data is stored for the duration of the retention obligation. The statutory retention period for the execution of legal transactions (in particular according to §257 HGB and §158 AO) is 10 years, beginning with the calendar year following a transaction. The storage period is also based on the statutory limitation periods, which are generally three years in accordance with sections 195 et seq. of the German Civil Code (BGB), for example.
After the retention period has expired, a check is carried out to determine whether there is any further need for processing. If it is no longer necessary, the data will be deleted.
Concrete example
If you provide us with your contact details, for example by e-mail, telephone or by handing over your business card, we store this data on the basis of pre-contractual measures within the meaning of Art. 6 para. 1 lit. b GDPR and in the legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. The legitimate interests lie in smooth and targeted communication. If no legal transaction is concluded, we will delete your data if you request us to do so or if there is no further contact within a period of 3 years. If you enter into a legal transaction with us (Art. 6 para. 1 lit. b GDPR), we will store your data for 10 years until the expiry of the commercial and tax law requirements. After this period, we check whether we can delete the data and, if necessary, send it for deletion.
Audit-proof e-mail archiving
We archive all our e-mail correspondence for 10 years in accordance with the principles for the proper management and storage of books, records and documents in electronic form and for data access. If you send us an email, your data and the entire content of the email will be stored for 10 years. Most emails count as business letters, and emails can also contain information relevant to tax law. In our opinion, the effort involved in checking every single email in this respect is disproportionate to the benefit and the sender's legitimate interests. However, you can of course ask us to delete them at any time and we will carry out a case-by-case review. We will inform you of the result. This may lead to erasure or restriction of processing, depending on the content of the correspondence.
Revocation of your consent
If we process your data on the basis of your consent (Art. 6 para. 1 lit. a GDPR), we will delete it after your revocation. Unless there are legitimate interests that prevent complete erasure. For example, we generally retain declarations of consent for up to three years after receipt of your revocation in the legitimate interest (Art. 6 para. 1 lit. f GDPR). We retain the consent exclusively and with restriction of processing in order to be able to defend ourselves in the event of a dispute.
Your rights
You have the right to information, rectification, restriction, erasure, objection and the right to lodge a complaint with the competent state data protection authority at any time. You can also withdraw your consent at any time. You can find detailed information under the heading „Your rights under the General Data Protection Regulation“ in this privacy policy.
Legal or contractual obligation to provide personal data
The provision of personal data is regularly required for the initiation, conclusion, execution and reversal of a contract. In the event that you do not provide the necessary personal data, we will not be able to conclude and fulfill a contract with you.
Transfer to a third country
Your personal data will generally be processed by us in data centers in the Federal Republic of Germany or the European Union. A transfer to a third country is only possible if you have given us your consent or if we have concluded a contract for order processing in accordance with Art. 28 GDPR, taking into account suitable guarantees or other suitable guarantees.