Privacy policy
Name and contact details of the responsible party
The responsible entity for data processing is:
HiScout GmbH
Schloßstraße 1
12163 Berlin
Tel.: +49 30 33 00 888 0
Email: info@hiscout.com
Contact details of the Data Protection Officer
For questions regarding data protection, our Data Protection Officer is available to assist you:
HiScout GmbH
Datenschutzbeauftragter
Schloßstraße 1
12163 Berlin
Tel.: +49 30 33 00 888 0
E-Mail: datenschutz@hiscout.com
Purposes and legal bases
We generally only process personal data that is necessary to fulfil our contractual relationship with you or for any pre-contractual needs (e.g. in the application process). In certain cases—such as our newsletter—we base the processing on your explicit informed consent (see also under ‘Further information’ below). We strictly adhere to the principle that only data that is absolutely essential may be collected. Furthermore, the data will only be processed for the purposes for which it was collected.
Processing based on legitimate interests
Data is only processed in order to fulfil the contract to protect legitimate interests (Article 6(1)(f) GDPR).
Recipients of personal data
Personal data will only be shared with third parties if this is necessary to fulfil the contractual relationship with you or for any pre-contractual needs (e.g. in the application process).
In cases where we engage third parties to process personal data, we only work with processors that provide sufficient guarantees that the appropriate technical and organisational measures are in place to ensure that the processing complies with legal requirements and protects your rights.
Any third-party processing is based on a contract which is binding on the processor and which specifies the object, duration, nature and purpose of the processing, the type of personal data, the categories of data subjects, and the obligations and rights of the responsible party.
Transfers to third countries
There is no intention to transfer personal data to a third country or an international organisation.
Retention period
We process your personal data for only as long as we need to in order to fulfil our contractual and legal obligations. Once the data is no longer required for these purposes, it will be erased or its processing restricted, unless there are other reasons, such as legal retention obligations, that prevent this.
Right to data access, rectification and erasure
You can request information about any personal data we store about you at any time and you may demand that we rectify it, erase it or restrict its processing. To do so, please write to us by email or post at the address provided above.
Right to withdraw consent
In cases where the processing of your personal data is based on your consent, you can change or withdraw your consent at any time without providing any reasons, with effect for the future. The only costs involved will be any fees you may incur in notifying us, such as postage costs or any costs involved in emailing us. If you would like to withdraw your consent, please write to us by post or email to the address provided above.
Right to lodge a complaint with a supervisory authority
If you believe that the processing of your personal data violates legal provisions, you have the right to lodge a complaint with a competent data protection supervisory authority at any time.
Automated decision-making / profiling
There is no automated decision-making or profiling in accordance with Article 22(1) and (4) of the GDPR.
Data security
We have implemented technical and organisational security measures to protect your data. Our employees are required to comply with data confidentiality. Additionally, we use encryption methods. The information you provide is transmitted using TLS (Transport Layer Security). You can recognise the use of TLS when a padlock symbol appears in your browser’s status bar and the URL starts with ‘https://’. Our security measures are continuously reviewed and updated in line with technological developments.
Links
If you click on external links provided on our website, this privacy policy does not apply to the content of those links. While we strive to ensure that these links adhere to our data protection and security standards, we have no influence over the compliance of other providers with data protection and security regulations. Therefore, please refer to the privacy policies provided on the websites of those other providers.
Cookies
When you visit our website, we may store information in the form of cookies on your computer. Cookies are small text files that are stored on your computer’s hard drive. We do not use tracking cookies for marketing or advertising purposes and do not allow third-party cookies.
The information obtained through cookies is used to recognise you automatically on your next visit to our website and to facilitate navigation. No data other than your IP address is stored in a cookie.
Of course, you can also view our website without cookies. If you do not want us to recognise your computer, you can prevent cookies from being stored on your computer by instructing your browser to reject cookies in your browser settings. Please refer to your browser’s instructions for specific details on how to do this. However, if you do not accept cookies, this may affect the functionality of our website.
Contact Form
If you contact us via the contact form, your information from the form, including the contact details you provided, will be stored for processing your enquiry and for any follow-up questions. This data will not be shared or used for any other purposes.
Registration for webinars
We regularly offer webinars/webcasts or online meetings on various topics. Participation in a webinar/webcast or online meeting requires registration. To hold webinars/webcasts and online meetings, we use GoToWebinar and GoToMeeting from LogMeIn Ireland Ltd, Bloodstone Building Block C, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland. LogMeIn Ireland Ltd provides us with a registration link for the sign-up process.
The following data may be required and processed:
- User information: First name, surname, company, postal address, email address
- Meeting metadata: Subject, description (optional), participant IP addresses, device information
- Recordings (optional): MP4 file of all video, audio and presentation recordings, M4A file of all audio recordings, text file of the online meeting chat
- Text, audio and video data: You may have the opportunity to use the chat, ask question, or survey functions during an online meeting. If you use these functions, your text inputs will be processed to display them in the online meeting and potentially to log them. To enable video display and audio playback, data from your device’s microphone and any camera will be processed during the meeting. You can turn off your camera or mute your microphone at any time using the GoToMeeting functions.
We need your data to send the registration confirmation.
We use GoToMeeting to hold online meetings. If we intend to record online meetings, we will inform you in advance and, if necessary, request your consent. We may save the meeting chat log if we need to for documentation purposes. However, this will generally not be the case.
For webinars, we may also process questions from webinar participants for recording and follow-up purposes.
The legal basis for this data processing follows from Article 6(1)(b) GDPR and from any invoice. If no contractual relationship exists, the legal basis is Article 6(1)(f) GDPR, where our interest lies in hosting online meetings effectively.
Your data will be erased when it is no longer needed for the purposes for which it was collected.
If you visit the GoToMeeting or GoToWebinar website, the provider of these services is responsible for data processing. You only need to visit their website to download the required software.
You can also use GoToMeeting or GoToWebinar by entering the respective meeting ID and any additional access credentials directly in the GoToMeeting or GoToWebinar app.
If you do not wish to or cannot use the GoToMeeting or GoToWebinar app, basic functions are also available via the browser version, which can be found on the GoToMeeting or GoToWebinar website.
GoToMeeting and GoToWebinar are services of LogMeIn Ireland Ltd (Bloodstone Building Block C, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland), a subsidiary of LogMeIn Inc. (LogMeIn, 320 Summer Street, Boston, MA 02210, USA). This means that the processing of personal data occurs in a third country. We have entered into a data processing agreement with the provider of GoToMeeting and GoToWebinar, which meets the requirements of Article 28 GDPR.
An adequate level of data protection is ensured by the ‘Privacy Shield’ certification of LogMeIn, Inc., as well as by EU standard contractual clauses.
Newsletter
When you sign up for our newsletter, we store at least your title, name and email address. You may also provide additional information to help us tailor our communications to you. By signing up for the newsletter, you consent to the use of your data for this purpose.
The data you provide will be used solely for sending the newsletter. We do not share your data with third parties. The newsletter registration process uses a ‘double opt-in’ procedure, meaning you will first receive a confirmation email, and you must click the confirmation link within that email to complete your registration. This ensures that no one else can subscribe you by using your email address. You can withdraw your consent to receive the newsletter by unsubscribing at any time. Please use the unsubscribe link in the newsletter or email us at the address provided above.
We use Sendinblue GmbH to send our newsletters. Your data will therefore be transmitted to Sendinblue GmbH. They are prohibited from selling your data or using it for any purpose other than sending the newsletter. Sendinblue GmbH is a certified German provider selected in accordance with the requirements of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act.
For more information, please refer to Sendinblue’s privacy policy.
Event Photography and Filming
As part of our events, we or service providers engaged by us may take photographs and, where applicable, video recordings. To the extent that participants are identifiable in these recordings, this constitutes the processing of personal data.
We use these recordings for the following purposes: internal documentation of the event, as well as public relations and reporting on the event. The recordings may be published via the following channels:
- www.hiscout.com
- Social media channels (e.g. LinkedIn, YouTube)
- Print media and newsletters
- General press and media relations
The recordings will not be shared with third parties for any purposes other than those stated above.
The legal basis for this processing is your consent pursuant to Article 6(1)(a) of the General Data Protection Regulation (GDPR). You provide your consent actively prior to the event, and giving your consent is entirely voluntary. Your participation in the event is not conditional upon consenting to the taking and use of photographs or video recordings. You will not suffer any disadvantage if you choose not to give your consent or if you withdraw your consent at a later stage.
Online applications
Please note that applications sent via email are transmitted to us in unencrypted form. If no employment contract is entered into, the information you provided for the specific position and the documents you submitted will be deleted after the selection process is complete.
Customer Portal
To provide our HiScout Customer Portal, we process the personal data of users who are granted access to the portal.
Hosting
The HiScout Customer Portal is hosted on behalf of HiScout by the following service provider:
DEONT GmbH
Brandenburgische Str. 38
10707 Berlin, Germany
Phone: +49 30 7566 8636
Email: hello[at]deont.de
A Data Processing Agreement (DPA) pursuant to Article 28 of the General Data Protection Regulation (GDPR) has been concluded with DEONT GmbH.
Personal Data Processed
As part of the user management for the Customer Portal, we collect and process the following personal data:
- First and last name
- Email address
- Company
The data is collected exclusively from the information provided when a user account is created by the customer or by HiScout.
Purpose of Processing
The above-mentioned personal data is processed for the purpose of providing personalized access to the HiScout Customer Portal. Through the portal, customers receive access to product-related information, software releases, and other support-related content.
Legal Basis
The legal basis for this processing is Article 6(1)(b) GDPR (performance of a contract), as the use of the Customer Portal forms part of the maintenance agreement concluded with HiScout.
Retention Period
The personal data will be stored for the duration of the maintenance agreement. Upon termination of the agreement, the corresponding user accounts and the associated personal data will be deleted unless statutory retention obligations require otherwise.
Website Hosting
The HiScout.com website is based on WordPress and is hosted on behalf of HiScout by the following service provider:
DEONT GmbH
Brandenburgische Str. 38
10707 Berlin, Germany
A Data Processing Agreement (DPA) pursuant to Article 28 GDPR has been concluded with DEONT GmbH.
Personal Data Processed
As part of the hosting of our website, the following data is processed:
- Visitors’ IP addresses
- Log files and technical information (e.g. browser type and operating system)
- Website and database content
The processing of this data is based on our legitimate interest pursuant to Article 6(1)(f) GDPR in providing a functional and secure website.
Matomo
This website uses the open-source web analytics platform Matomo (formerly Piwik) to collect and store anonymised data for marketing and optimisation purposes.
You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.
If you opt out, an opt-out cookie will be placed on your device. If you delete your cookies, you will therefore need to opt out again.
For more information, please refer to Matomo’s privacy policy.
YouTube
We only use YouTube to embed videos with the YouTube ‘No-Cookies’ feature to enable enhanced privacy. YouTube has been a subsidiary of Google LLC since 2006, located in San Bruno, California. The service provider is Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland. For more information, please refer to YouTube’s privacy policy.
United News Network
Our website uses the pixel tracking technology of unn | UNITED NEWS NETWORK GmbH (https://www.unn-online.de) to recognise corporate visitors to our website. Only the IP address of a website visitor is processed. This processing is exclusively for the purpose of collecting information related to the visitor’s company, such as the company name. IP addresses of natural persons are excluded from further use (whitelist procedure). IP addresses are never stored in WebLeads. We prioritise the data privacy rights of natural persons in our data processing. Our interest is based on Article 6(1)(f) of the GDPR. The data we collect never allows for the identification of a person. At no point will data from the end user’s device be read and no cookies are placed.
Changes to our privacy policy
We reserve the right to change our security and privacy measures as necessary due to technical and/or legal developments. In such cases, we will also update our privacy notices accordingly. Please therefore refer to the current version of our privacy policy.
Last updated: June 2026