Privacy policy

I. General information

(1) In the following, we provide information in accordance with Art. 13 GDPR on the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior.

(2) The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is

atares GmbH (renamed on 9.11.2023 from Proventis Partners GmbH)
Prinz-Ludwig-Str. 7
80333 Munich, Germany
+49 89 388881-0
(see our imprint).

You can reach our data protection officer at
Bugl & Kollegen Gesellschaft für Datenschutz und Informationssicherheit mbH
Eifelstraße 55
93057 Regensburg

(3) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, your name and telephone number if applicable) will be stored by us in order to answer your questions. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. We delete the data arising in this context after storage is no longer necessary or restrict processing if there are statutory retention obligations.

(4) If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail below about the respective processes. We will also state the specified criteria for the storage period.

II. Your rights

If your personal data is processed as a user, you are considered a data subject in accordance with the GDPR. Data subjects have the following rights vis-à-vis the controller:

  • Right to information (Art. 15 GDPR)
  • Right to rectification or erasure of personal data (Art. 16, 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to notification in connection with the rectification or erasure of your personal data or the restriction of processing (Art. 19 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to revoke declarations of consent. The legality of the data processing carried out until the revocation remains unaffected by the consent valid to date. (Art. 7 para. 3 GDPR)
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
  • Contact options for the supervisory authorities of the individual countries

III Accessing the website

(1) If you use the website for purely informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:

  • IP address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • amount of data transferred in each case
  • Website from which the request originates
  • browser
  • Operating system and its interface
  • Language and version of the browser software

We collect and store this data on the basis of our legitimate interest for a limited period of time in order to initiate a derivation of personal data in the event of unauthorized access or access attempts to local servers (Art. 6 para. 1 lit. f GDPR).

IV. Use of cookies

V. Integration of Google Maps

(1) We use the Google Maps service on this website. Google Maps is operated by Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently. You can find more information about data processing by Google in the Google data protection information. You can also change your personal data protection settings there in the data protection center.

(2) When you visit the website, Google receives the information that you have accessed the corresponding sub-page of our website. In addition, the data mentioned under III of this declaration is transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. The legal basis for the use of Google Maps is Art. 6 para. 1 lit. a GDPR.

(3) Information from the third-party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland. Further information on the purpose and scope of data collection and its processing by the provider can be found in the provider’s privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy:

VI. Newsletter

(1) With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.

(2) We use the so-called double opt-in procedure to subscribe to our newsletter. This means that after you have registered, we will send you an e-mail to the e-mail address you have provided in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration, your information will be blocked and automatically deleted after one month. We also store the IP addresses you use and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.

(3) After your confirmation, we store your data for the purpose of sending you the newsletter. The legal basis is your consent, Art. 6 para. 1 lit. a GDPR.

(4) You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare your revocation by clicking on the link provided in every newsletter email.

(5) The newsletter is sent by means of “MailChimp”, a newsletter distribution platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.

The email addresses of our newsletter recipients, as well as their other data described in this notice, are stored on MailChimp’s servers in the USA. MailChimp uses this information to send and analyze the newsletter on our behalf. Furthermore, MailChimp may, according to its own information, use this data to optimize or improve its own services, e.g. for the technical optimization of the dispatch and presentation of the newsletter or for economic purposes in order to determine from which countries the recipients come. However, MailChimp does not use the data of our newsletter recipients to write to them itself or to pass it on to third parties.

We trust in the reliability and IT and data security of MailChimp. We have concluded a “Data Processing Agreement” with MailChimp on data processing on the basis of the EU standard contractual clauses, so that Mailchimp undertakes to comply with EU data protection regulations. This is a contract in which MailChimp undertakes to protect the data of our users, to process it on our behalf in accordance with its data protection provisions and, in particular, not to pass it on to third parties. Further information on data protection at MailChimp can be found here.

(6) The newsletters contain a so-called “web-beacon”, i.e. a pixel-sized file that is retrieved from the MailChimp server when the newsletter is opened. As part of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and time of retrieval, is initially collected. This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined with the help of the IP address) or the access times.

The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor that of MailChimp to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

VII. Use of embedded Vimeo videos

Third-party content is integrated on this website. The Google Analytics tracking tool is automatically integrated into videos from Vimeo that are embedded on our site. We have no influence on the tracking settings and the analysis results collected via this tool, nor can we view them. In addition, web beacons are set for website visitors via the embedding of Vimeo videos. The purpose and scope of the data collection and the further processing and use of the data by the providers as well as your rights in this regard and setting options to protect your privacy can be found in Vimeo’s data protection information:

The content is provided by Vimeo LLC. Vimeo is operated by Vimeo LLC, 555 West 18th Street, New York 10011, USA. In order to guarantee the level of data protection in this third country, we have concluded the EU standard contractual clauses with Vimeo.

The legal basis for the integration of Vimeo is your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent to the storage of your personal data at any time with effect for the future.

VIII. Use of embedded YouTube videos

We embed YouTube videos on some of our websites. The operator of the corresponding plugins is YouTube, Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. When you visit a page with the YouTube plugin, a connection to YouTube servers is established. YouTube is informed which pages you visit. If you are logged into your YouTube account, YouTube can assign your surfing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand. If a YouTube video is started, the provider uses cookies that collect information about user behavior. Further information on the purpose and scope of data collection and its processing by YouTube can be found in the provider’s privacy policy, where you will also find further information on your rights in this regard and setting options to protect your privacy (

Processing may also take place outside the European Union (EU) or the European Economic Area (EEA). In order to guarantee the level of data protection in this third country, we have concluded the EU standard contractual clauses with Google.

The legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).

IX. Use of Leadfeeder

We use Leadfeeder, a web analytics platform, on our website. The service provider is the Finnish company Liidio Oy / Leadfeeder, Mikonkatu 17 C, 00100 Helsinki, Finland.

Leadfeeder is a tool for recognizing potential prospects for our services or information based on company visits to our website.
The script is delivered via the AWS Cloudfront Content Delivery Network. Once the script is inserted on the website, the tracker can collect visit data and set a visitor cookie. This data is collected in an Amazon Web Services infrastructure where all data is encrypted in transit and at rest. The following data is collected:

  • Time and date of visit
  • Source and medium
  • Number of pages visited
  • Pages visited (title, URL and time period)
  • Visitor ID number (set by the cookie)
  • Total duration of visit
  • Visitor’s IP address

Although the visitor’s IP address is collected, to determine the company and geographical location, the IP addresses are not visible and are not passed on.

Leadfeeder identifies companies based on their publicly registered IP addresses and our own IP address database. They are constantly improving their own database and company identification algorithms. Leadfeeder works with static and dynamic IP assignments and supports both IPv4 and IPv6 addresses. Leadfeeder only shows company visits; they automatically filter out all users visiting from private IP addresses and ISPs. All visit data is aggregated at company level. The tracker cookie is only set for the website domain and is used to set a unique identifier to distinguish different visitors. The “_lfa” cookie has an expiration date of two years from the time it was first set. Leadfeeder does not use third-party cookies.

The use of Leadfeeder is based on Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time.

X. Online presence in social media

We maintain online presences within social networks in order to inform the users active there about our services and to communicate directly via the platforms if there is interest. We are currently represented on the following networks:

  • LinkedIn (
  • Xing (
  • Instagram (

All of our social media channels can only be accessed by visitors to the website via an external link. We do not use any plugins or other interfaces on our website that the respective networks offer for embedding the offers on websites.
We have no influence on the collection of data and its further use by the social networks. For example, we have no knowledge of the extent to which, where and for how long the data is stored, to what extent the networks comply with existing deletion obligations, what evaluations and links are made with the data and to whom the data is passed on. We therefore expressly draw your attention to the fact that user data (e.g. personal information, IP address) is stored by the network operators in accordance with their data usage guidelines and used for business purposes.
We process the data of users in the social media presences insofar as they contact and communicate with us via comments or direct messages, for example.

The legal basis for the processing of the user’s data is Art. 6 para. 1 lit. b and f GDPR.

a) LinkedIn
No functions and content of the LinkedIn service offered by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, are integrated into our online offering. The LinkedIn channels are only accessible via an external link. If visitors to the website are members of the LinkedIn platform, LinkedIn can assign access to the social media channel to the user’s profile if they visit our LinkedIn profile when logged in. We would like to point out that we have no influence on the content and scope of use of the data collected by LinkedIn Ireland Unlimited Company. For further information in this regard, please refer to the LinkedIn Ireland Unlimited Company website at:

We would also like to point out that you can make appropriate changes to your LinkedIn account to protect your privacy.

b) Xing
No functions and content of the Xing service, offered by New Work SE, Dammtorstraße 29-32, 20354 Hamburg, Germany, are integrated into our online offering. The Xing channels are only accessible via an external link. If visitors to our website are members of the Xing platform, Xing can assign the access to the social media channel to the user’s profile there if the user visits the profile while logged in.

We would like to point out that we have no influence on the content and scope of use of the data collected by Xing. For further information in this regard, please refer to Xing’s privacy policy:

XI. Processing of your data in the context of automated decision-making / profiling

In principle, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. In particular, these decisions may not regularly be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR. We do not use any such decision-making processes within the scope of our website and the associated data processing.