§ 1 Information about the collection of personal data
(2) “We” are Signavio GmbH, Kurfürstenstraße 111, 10787 Berlin, Germany (email: firstname.lastname@example.org (see also our imprint). In this context, we are the controller according to Art. 4 section 7 General Data Protection Regulation (GDPR) (EU).
Our Data Protection Officer can be reached at email@example.com or our postal address with the additional line “Attn: Data Protection Officer “.
§ 2 Your rights
(1) You have the following rights regarding your personal data:
- Right of access according to Art. 15 GDPR,
- Right to rectification or erasure to Art. 16 u. 17 GDPR,
- Right to restriction of processing according to Art. 18 GDPR,
- Right to data portability according to Art. 20 GDPR,
- Right to object to the processing according to Art. 21 GDPR.
(2) You also have the right to complain to a data protection supervisory authority about the unlawful processing of your personal data by us.
§ 3 Collection of personal data when visiting our website
(1) Informational use: Informational use means using our website to find out more about our products. Therefore, if you do not register for one of our free trials or webinars, or otherwise submit information to us, we will only collect the information your browser sends to our server. In that case, we will collect the following data, which is necessary for us to both display our website and to ensure its stability and security (legal basis is Art. 6 (1) sentence 1 lit. f GDPR):
- Browser type and version
- Operating system
- Referring URL
- Time of server request
- IP address
(2) Signavio Products: The use of our online applications, in particular “Signavio Process Manager SaaS”, “Signavio Collaboration Hub SaaS”, “Signavio Workflow Accelerator SaaS” and “Signavio Process Intelligence”, hereinafter referred to as “Signavio Products”, requires registration, which requires the entry of the following data: name, full address, email address, telephone number, company name. Additional entries are not mandatory and marked as such.
For continuous improvement of Signavio products, we use software from TrackJS, LLC ( ) for error analysis. As a result, it records what actions a user has performed in Signavio Products, but does not store IP addresses or other personal information. In addition, we create pseudonymised usage profiles for the purpose of customizing Signavio products.
If you use Signavio Products, which are offered online, the location of the server on which your data is being stored is based on the following criteria: (i) If your registration for the Signavio Products takes place under the URL or , your data is being stored within Germany; (ii) If your registration takes place under the URL or , your data is being stored within the United States of America; (iiii) If your registration takes place under the URL or , your data is being stored within Australia; (iv) After successful registration under any of the aforementioned URLs, your data will remain stored on the respective server in Germany or in the United States of America at any time. Any transfer of your data to a server in another country will take place exclusively upon your explicit request.
(3) Customer Portal: Your use of the Customer Portal is not mandatory for your use of the Signavio Products mentioned above. If you use the Signavio Customer Portal, additional data might be collected. Which data actually are collected in the course of this depends on the type of service you are using in the Customer Portal. Your data and user behaviour can be monitored by Signavio. Any data involved in the use of the Customer Portal will be processed on servers of Salesforce, Inc. As far as a service is provided by a third party other than Salesforce or Signavio, data may be transferred to such third party. The “Signavio Customer Portal – Terms and Conditions” which can be viewed within the Customer Portal will provide further information of such transfer. These Terms and Conditions also govern the use of the Customer Portal in general.
(5) Use of other offers: In addition to the purely informational use of our website and the use of Signavio products via our website, we offer various services that you can use if you are interested. These include registration for webinars, requests for contact or requests for downloads, among others. To use these services, you will usually need to provide additional personal information which we will use to provide the service and for marketing purposes. These include your name, email address, and/or telephone number.
This website uses the following types of cookies, the scope and operation of which are explained below: (i) Transient cookies: Transient cookies are automatically deleted when you close the browser. These include in particular session cookies which are used when you visit the website. These store a so-called session ID, with which various requests from your browser can be assigned to a common session. This will allow your computer to be recognized when you return to our website. Session cookies are deleted when you close the browser; (ii) Persistent cookies: Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You can delete these cookies in the security settings of your browser at any time.
(2) Used Cookies:
|_hssc||Hubspot||30 min||Persistent||This cookie is used to keep track of sessions, number of page views and timestamp.|
|_hssrc||Hubspot||Session duration||Transient||This cookie is set whenever a new session is started. This serves to determine if the user has started a new session.|
|_hstc||Hubspot||2 years||Persistent||This is the main HubSpot cookie. It contains information about the user (identified by an unique identifier). It stores domains, timestamps and numbers of sessions.|
|hs-messages-is-openHubspot||Hubspot||30 min||Persistent||This cookie is used to determine whether the chat widget is open for future visits.|
|hs-messages-hide-welcome-message||Hubspot||1 day||Persistent||This cookie prevents welcome message in chat widget from appearing again when dismissed.|
|messagesUtkHubspot||Hubspot||2 years||Persistent||This cookie is used to recognize visitors who chat with you via the message tool and it’s used to load conversation history when they return to the website.|
|hubspotutk||Hubspot||10 years||Persistent||This cookie contains a user unique identifier, its value gets checked on form submission to avoid duplication of contacts.|
|_sgnv_current_lang||Internal||1 year||Persistent||This cookie is used to store the language selected by the user. This cookie is updated every time the user selects a different language on the website.|
|_sgnv_detected_country_code||Internal||Session duration||Transient||This cookie is used to store the information related to the country user belongs to, this is made starting from user’s IP.|
|_sgnv_usr_lang||Internal||1 day||Persistent||This cookie is used to store first language initially chosen by the user according to browser language settings.|
|_sgnv_usr_loc||Internal||1 day||Persistent||This cookie stores information about the user’s location and it is used to serve content related to that.|
|_hjClosedSurveyInvites||Hotjar||1 year||Persistent||This cookie is set once a visitor interacts with a Survey invitation modal popup. It is used to ensure that the same invite does not re-appear if it has already been shown.|
|_hjDonePolls||Hotjar||1 year||Persistent||This cookie is set once a visitor completes a poll using the Feedback Poll widget. It is used to ensure that the same poll does not re-appear if it has already been filled in.|
|_hjMinimizedPolls||Hotjar||1 year||Persistent||This cookie is set once a visitor minimizes a Feedback Poll widget. It is used to ensure that the widget stays minimizes when the visitor navigates through your site.|
|_hjDoneTestersWidgets||Hotjar||1 year||Persistent||This cookie is set once a visitor submits their information in the Recruit User Testers widget. It is used to ensure that the same form does not re-appear if it has already been filled in.|
|_hjMinimizedTestersWidgets||Hotjar||1 year||Persistent||This cookie is set once a visitor minimizes a Recruit User Testers widget. It is used to ensure that the widget stays minimizes when the visitor navigates through your site.|
|_hjIncludedInSample||Hotjar||1 year||Persistent||This session cookie is set to let Hotjar know whether that visitor is included in the sample which is used to generate funnels.|
|_hjShownFeedbackMessage||Hotjar||1 year||Persistent||This cookie is set when a visitor minimizes or completes Incoming Feedback. This is done so that the Incoming Feedback will load as minimized immediately if they navigate to another page where it is set to show.|
|_hjid||Hotjar||1 year||Persistent||This cookie is set when the customer first lands on a page with the Hotjar script. It is used to persist the random user ID, unique to that site on the browser. This ensures that behavior in subsequent visits to the same site will be attributed to the same user ID.|
|_gat||Google Analytics||1 minute||Persistent||This cookie is used to throttle request rate.|
|_ga||Google Analytics||2 years||Persistent||This cookie is used Used to distinguish users.|
|_gid||Google Analytics||1 day||Persistent||This cookie is used Used to distinguish users.|
|_pk_id.2.cc16||Matomo||1 year||Persistent||This cookie is used to keep track of the user’s visits.|
|_pk_ses.2.cc16||Matomo||30 min||Persistent||This cookie is used to keep track of the user’s visits.|
|JSESSIONID||Jira||Session duration||Transient||This is Jira’s session cookie.|
|seraph.rememberme.cookie||Jira||14 days||Persistent||This cookie recognizes your login details when clicking the remember me box.|
|atlassian.xsrf.token||Jira||Session duration||Transient||Helps prevent XSRF attacks. Ensures that during a user’s session, browser requests sent to a Jira server originated from that Jira server.|
|_uetmsclkid||Bing||90 days||Persistent||This cookie saves the user ID and optimizes the Universal Event Trackings.|
|BrowserId||Customer Portal||60 days||Persistent||Used to collect metrics, such as the number of visitors to a community.|
|autocomplete||Customer Portal||Perpetual||Persistent||Used to determine whether the browser remembers a user’s login ID.|
|clientSrc||Customer Portal||Session duration||Transient||Used to authenticate a user.|
|inst||Customer Portal||Session duration||Transient||Used to redirect a user to the correct Salesforce server.|
|oid||Customer Portal||2 years||Persistent||Used to redirect a user to the correct Salesforce org and assist the user for the next login.|
|oinfo||Customer Portal||Perpetual||Persistent||Used to track the state of a customer’s org.|
|sid||Customer Portal||Session duration||Transient||Used to authenticate a user.|
|sid_Client||Customer Portal||Session duration||Transient||Used to authenticate a user.|
|force-stream||Customer Portal||3 hours||Persistent||Used to redirect server requests for sticky sessions.|
|renderCtx||Customer Portal||Session duration||Transient||Used to track community context.|
|webact||Customer Portal||Perpetual||Persistent||Used to collect metrics per page view for personalization.|
|directMessageInboxVisitTimestamp||Customer Portal||Perpetual||Persistent||Used by Direct Message to determine the last visit to the inbox.|
|<userId>feeds||Customer Portal||Perpetual||Persistent||Used to store a user’s feed settings selection.|
|RRetURL||Customer Portal||Session duration||Transient||Used to redirect user logins.|
|RSID||Customer Portal||Session duration||Transient||Used to redirect user logins.|
|pctrk||Customer Portal||Session duration||Transient||Used to track public page views by guest users.|
|mc||Quantcast||13 months||Persistent||Persistent A value of a third-party cookie set in the quantserve.com domain which is a domain managed by Quantcast; the third-party cookie appears in the browser as a cookie named “mc”.|
|d||Quantcast||13 months||Persistent||A value of a third-party cookie set in the quantserve.com domain. The value of this cookie is a compact encoding of the mc cookie’s membership in retargeting segments and information about third-party partners of Quantcast, such as advertising exchanges. The third-party cookie appears in the browser as a cookie named “d”.|
|_BUID||Bizible||1 year||Persistent||Universal user id to identity the same user across multiple clients’ domains.|
|_biz_uid||Bizible||1 year||Persistent||User id on the current domain.|
|_biz_sid||Bizible||30 minutes||Transient||Session id of the user.|
|_biz_flagsA||Bizible||1 year||Persistent||A single cookie that stores multiple information, such as whether or not the user has submitted a form, performed a crossdomain migration, sent a viewthrough pixel, opted out from tracking, etc.|
|_biz_nA||Bizible||1 year||Persistent||Sequence number that bizible includes for all requests, for internal diagnostics purpose.|
|_biz_dfsA||Bizible||1 year||Persistent||Temporarily stores form submission data that happens before bizible.js receives a configuration JS to determine whether or not tracking form on HTTPS is enabled.|
|_biz_pendingA||Bizible||1 year||Persistent||Temporarily stores analytics data that has not been successfully sent to bizible server yet.|
(3) When using Signavio Products more cookies will be stored to provide all functions of our software. To prevent the storage of such cookies please adjust your browser settings accordingly.
(4) Opt-out: You can prevent the third-party cookies mentioned in the table above from being stored in the future by placing an opt-out request. Click on the “Opt-out from all tracking” button at the following link:
In addition, you can configure your browser setting according to your wishes and decline acceptance of either third-party cookies or all cookies. You also have the option to delete previously stored cookies. Please be aware that in these cases you may not be able to use all features of this website or the Signavio Products. We point out, however, that in this case you may not be able to use all the functions of this website or the Signavio Products in full . Among other things, disabling cookies will prevent you from using the chat feature SnapEngage.
§ 5 Analysis and Marketing
(1) External service provider: We sometimes use external service providers to process your data. In accordance with legal requirements, these providers were carefully selected and commissioned by us, are bound by our instructions and are regularly inspected. Furthermore, we may pass on your personal data to third parties if we offer contracts, events or similar services together with our partners. In this case, you will receive further information regarding the processing of your data.
The following external service providers support us in processing your data:
(2) Google Analytics, Google Tag Manager and Google reCAPTCHA: This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files which are stored on your computer and which enable you to carry out an analysis of the use of the website. The information obtained through the cookie concerning your use of this website will be typically transmitted to Google’s servers in the US and stored there. Signavio has activated the option for IP address anonymization provided by Google. As a result, your IP address will be shortened to the last 8 bits within countries that are members of the European Union, or in other contracting countries of the European Economic Area (EEA). Only in exceptional cases will the full IP address be transmitted to Google’s servers in the US and shortened there.
On behalf of the website operator, Google will use this information in order to evaluate your use of the website so as to compile reports concerning website activities and in order to render further services associated with website and Internet use for the website operator. The IP address transmitted by your browser for the use of Google Analytics will not be used in connection with other Google data.
You may prevent storage of cookies through your browser settings or via the opt-out function provided above; nevertheless we want to draw your attention to the fact that in this case you may not be able to use all functions of this website to their full extent.
Additionally, you can prevent Google from capturing data on your use of this website (incl. your IP address) by downloading and installing the Browser plugin at the following link: .
We use Google Analytics with the extension “_anonymizeIp ()”. As a result, IP addresses are processed in their shortened form, meaning that personally identifying information will be excluded. Insofar as the data collected about you is assigned a personal reference, it will be immediately excluded and the personal data will be deleted immediately.
We use Google Analytics to analyze and regularly improve the use of our website. With these statistics we can improve our offerings and make them more interesting for you as a user. For the exceptional cases in which personal information is transferred to the US, Google has submitted to the EU-US Privacy Shield,. The legal basis for the use of Google Analytics is Art. 6 (1) sentence 1 lit. f GDPR.
Furthermore, the service “Google Tag Manager” is used for an improved administration of the other services listed herein. Neither does Google Tag Manager collect additional data, nor does it store additional cookies.
We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our websites. This service is provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”).
reCAPTCHA is used to check whether the data entered on our website (such as on a contact form) has been entered by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, how long the visitor has been on the website, or mouse movements made by the user). The data collected during the analysis will be forwarded to Google.
The reCAPTCHA analyses take place completely in the background. Website visitors are not advised that such an analysis is taking place.
Data processing is based on Art. 6 (1) (f) DSGVO. The website operator has a legitimate interest in protecting its site from abusive automated crawling and spam.
(3) Hubspot: Hubspot, Inc. (“HubSpot”) products and services (e.g. SiggyBot) are used on this website for marketing and optimization purposes. In turn, cookies are stored on your computer that allow us to analyze your use of this website. The information generated by cookies about your use of this website may also be transmitted to a HubSpot server outside the EU and stored there. Personal data will only be collected if you complete forms on this website. In this case, in addition to the data you enter yourself, your IP address will also be saved. HubSpot, Inc. has a Privacy Shield certification issued by the US Department of Commerce to ensure proper security arrangements for the transfer of personal data between the EU and the US.
The storage of cookies and the exchange of data with Hubspot can be prevented by enrolling in the opt-out option provided above.
(4) Matomo: Matomo is used for analysis purposes on this website. Through the statistics obtained from this service, we can improve our offerings and make them more interesting for you as a user. The legal basis for the use of Matomo is Art. 6 (1) sentence 1 lit. f GDPR.
We use Matomo with the extension “AnonymizeIP”. As a result, IP addresses are processed in their shortened form, meaning that personally identifying information will be excluded. The IP address transmitted by Matomo from your browser will not be merged with other data collected by us. For this evaluation, cookies (see above) are stored on your computer. The information collected in this way is stored exclusively on a server hosted by us in Germany not data is transferred to Matomo. You can adjust the amount of data we collect by deleting existing cookies and preventing the storage of cookies. If you prevent the storage of cookies, we point out that you may not be able to use this website to the fullest extent. You can prevent cookie storage by adjusting your browser settings.
(5) GoToWebinar: To provide webinars, we use GoToWebinar, a service of LogMeIn, Inc. When you register for one of our webinars, you submit your login information to LogMeIn, Inc. LogMeIn, Inc. is responsible for this service and associated data transfer. LogMeIn is headquartered in the US and maintains a global infrastructure. The data collected can be transferred to, stored, and processed on servers in the United States and other countries around the world. LogMeIn has also submitted to the EU-US Privacy Shield.
More information can be found at: . LogMeIn, Inc. 333 Summer Street, Boston, MA 02210 United States.
(7) Hotjar: For analysis purposes, we use Hotjar. Through this service, we can gather anonymous evaluations regarding user’s behaviour and therefore, we are able to improve our offerings.
For this evaluation, cookies (see above) are stored on your computer. The information collected in this way is stored by Hotjar exclusively on a server hosted within the EU.
The storage of cookies and the exchange of data with Hotjar can be prevented by enrolling in the opt-out option provided above.
(8) LinkedIn: In order to display individual advertisings on the networking portal LinkedIn’s websites and to get an analysis of user’s behaviour on our website, we use the service “LinkedIn Insight Tag”. Hereby, different types of data regarding type and duration of a website visit are collected, however only IP-addresses are personal data amongst the collected data. This service exclusively applies to users which are registered users of LinkedIn services.
(9) Bing: Bing Universal Event Tracking (UET) collects and uses data to create user profiles using pseudonymous. This service is provided by Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399, USA. With the Bing Universal Event Tracking we can track user activity on our website if such users were referred to our website using Bing ads. If you use such Bing Ads a cookie will be stored on your computer. Our website is using a Bing UET Tag which is a code that allows us in combination with the cookie to save non-personal information about your visit on our website. Among those are information about how long the user stayed on our website, what sections did a user visited and which referral ad was used to visit our website. Information about your identity will not be stored.
Microsoft might also track your user behaviour across multiple devices and could therefore offer personalized ads.
The storage of cookies and the exchange of data with Bing can be prevented by enrolling in the opt-out option provided above.
For more information about Bing Event Tracking (UET) please visit .
(10) Bizible: Bizible is a service provided by Bizible, Inc. It serves to evaluate and optimiz emarketing campaigns based on information collected from Signavio’s website. Bizible will collect and use personal information depending on your interaction with different services on Signavio’s website and also stores cookies on your computer as described above.
§ 6 Emails from Signavio
(1) Emails: With your consent, you can sign up to receive our newsletter with up-to-date contributions and offers, as well as other interesting emails regarding Signavio’s products.
(2) Double-Opt-In: To register for our newsletter, we use the so-called double-opt-in procedure. This means that after you have registered, we will send an email to the email address specified in which we ask you to confirm that you wish to receive the newsletter.
(3) Obligatory disclosures: To receive the newsletter, enter your email address, your name, and your country. After your confirmation, we will store this data for the purpose of sending you the newsletter. The legal basis is Art. 6 (1) sentence 1 lit. a GDPR.
(4) Revocation: You can revoke your consent to receiving our newsletter or unsubscribe from the newsletter at any time. You can make the cancellation as described in each newsletter, or by sending a message to .
(5) Note that we evaluate your user behavior when sending the newsletter. For this evaluation, the emails sent include so-called web beacons or tracking pixels that represent one-pixel image files stored on our website. For the evaluations, we link the data mentioned in § 3 and the web beacons with your email address and an individual ID. As part of this, we record when you read our newsletters, which links you click on and determine your personal interests. We then link this data with actions you have taken on our website.
You can object to this tracking at any time by informing us via the contact provided below.
§ 7 Opposition or revocation against the processing of your data
You can revoke your consent to having your data processed at any time. Likewise, you may object to our processing of your personal data for advertising and data analysis at any time. You can send us your concerns by sending an email to.
§ 8 Additional Provisions for Applicants
When you apply to a job at Signavio, the personal data contained in your application will be collected by Signavio GmbH (“Controller”), which is located at Kurfürstenstraße 111, 10787 Berlin, Germany, and can be contacted by emailing.
Controller’s data protection officer is Michael Möschl, who can be contacted at. Your personal data will be processed for the purposes of managing Controller’s recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results thereto, and as is otherwise needed in the recruitment and hiring processes. Such processing is legally permissible under Art. 6 (1) (f) of Regulation (EU) 2016/679 (General Data Protection Regulation) as necessary for the purposes of the legitimate interests pursued by the Controller, which are the solicitation, evaluation, and selection of applicants for employment.
Your personal data will be shared with Greenhouse Software, Inc., a cloud services provider located in the United States of America and engaged by Controller to help manage its recruitment and hiring process on Controller’s behalf. Accordingly, if you are located outside of the United States, your personal data will be transferred to the United States once you submit it through this site. Because the European Union Commission has determined that United States data privacy laws do not ensure an adequate level of protection for personal data collected from EU data subjects, the transfer will be subject to appropriate additional safeguards under the standard contractual clauses as well as the Privacy Shield.
Your personal data will be retained by Controller as long as Controller determines it is necessary to evaluate your application for employment. Under the GDPR, you have the right to request access to your personal data, to request that your personal data be rectified or erased, and to request that processing of your personal data be restricted. You also have the right to data portability. In addition, you may lodge a complaint with an EU supervisory authority.
Version: November 9th, 2020