| Subject | Nature and purpose of processing | Data types/categories | Categories of data subjects |
|---|---|---|---|
| Technical (further) development of the Salesforce customer instance, consulting, and project management | Read access to the Salesforce platform in order to provide advice based on the data and its structure | Access to all data stored in the Salesforce customer instance, e.g., communication data (e.g., telephone, e-mail, address), contract master data (contractual relationship, product or contract interest), customer history, order, billing, and payment data, planning and control data, information (from third parties, e.g., credit agencies, or from public directories), credit information, personal information, criminal records, and potentially any electronic communication. |
Subscribers Employees Prospective customers Suppliers Sales representatives Customers Competitors Partners Job applicants Consumers |
| Technical (further) development of the Salesforce customer instance, administration | Read and write access to the Salesforce platform in order to maintain the platform | Access to all data stored in the Salesforce customer instance, e.g., communication data (e.g., telephone, e-mail, address), contract master data (contractual relationship, product or contract interest), customer history, order, billing, and payment data, planning and control data, information (from third parties, e.g., credit agencies, or from public directories), credit information, personal information, criminal records, and potentially any electronic communication. |
Subscribers Employees Prospective customers Suppliers Sales representatives Customers Competitors Partners Job applicants Consumers |
| Technical (further) development of the Salesforce customer instance, programming | Read and write access to the Salesforce platform in order to further develop the platform | Access to all data stored in the Salesforce customer instance, e.g., communication data (e.g., telephone, e-mail, address), contract master data (contractual relationship, product or contract interest), customer history, order, billing, and payment data, planning and control data, information (from third parties, e.g., credit agencies, or from public directories), credit information, personal information, criminal records, and potentially any electronic communication. |
Subscribers Employees Prospective customers Suppliers Sales representatives Customers Competitors Partners Job applicants Consumers |
| Technical (further) development of the Salesforce customer instance, consulting on system architecture | Read access to the Salesforce platform in order to provide advice based on the data and its structure | Access to all data stored in the Salesforce customer instance, e.g., communication data (e.g., telephone, e-mail, address), contract master data (contractual relationship, product or contract interest), customer history, order, billing, and payment data, planning and control data, information (from third parties, e.g., credit agencies, or from public directories), credit information, personal information, criminal records, and potentially any electronic communication. |
Subscribers Employees Prospective customers Suppliers Sales representatives Customers Competitors Partners Job applicants Consumers |
| Technical (further) development of the Salesforce customer instance, evaluation of analysis results and mass data | Read and write access to the Salesforce platform in order to evaluate the data | Access to all data stored in the Salesforce customer instance, e.g., communication data (e.g., telephone, e-mail, address), contract master data (contractual relationship, product or contract interest), customer history, order, billing, and payment data, planning and control data, information (from third parties, e.g., credit agencies, or from public directories), credit information, personal information, criminal records, and potentially any electronic communication. |
Subscribers Employees Prospective customers Suppliers Sales representatives Customers Competitors Partners Job applicants Consumers |
| Technical development of mobile apps, programming | Read and write access to mobile apps, databases, and servers in order to further develop mobile applications | Access to all data stored in the Salesforce customer instance, e.g., communication data (e.g., telephone, e-mail, address), contract master data (contractual relationship, product or contract interest), customer history, order, billing, and payment data, planning and control data, information (from third parties, e.g., credit agencies, or from public directories), credit information, personal information, criminal records, and potentially any electronic communication. |
Subscribers Employees Prospective customers Suppliers Sales representatives Customers Competitors Partners Job applicants Consumers |
| Subject | Nature and purpose of processing | Data types/categories | Categories of data subjects |
|---|---|---|---|
| Technical work on the online presence | Access to content and user data stored in the content management system for technical processing and expansion of the platform. Access to log files for securing the server/website. |
Personal master data Communication data (e.g., telephone, email) Contract master data (contractual relationship, product or contract interest) Customer history Contract billing and payment data Planning and control data Information (from third parties, e.g., credit agencies, or from public directories) |
Customers Prospective customers Subscribers Employees Suppliers Sales representatives Contact persons |
| Editorial work on the online presence | Access to content stored in the content management system, such as contact details of contact persons. |
Personal master data Communication data (e.g., telephone, email) Contract master data (contractual relationship, product or contract interest) Customer history Contract billing and payment data Planning and control data Information (from third parties, e.g., credit agencies, or from public directories) |
Customers Prospective customers Subscribers Employees Suppliers Sales representatives Contact persons |
|
Digital strategy / strategic (further) development of online platforms / consulting |
If applicable, access to analysis data for evaluating user behavior. Access to content and user data stored in the content management system. |
Personal master data Communication data (e.g., telephone, email) Contract master data (contractual relationship, product or contract interest) Customer history Contract billing and payment data Planning and control data Information (from third parties, e.g., credit agencies, or from public directories) |
Customers Prospective customers Subscribers Employees Suppliers Sales representatives Contact persons |
| Development of an online presence including consulting, design, and programming |
If applicable, access to analysis data for evaluating user behavior. Access to content intended for the website, such as contact persons, in order to transfer this information to the website. |
Personal master data Communication data (e.g., telephone, email) Contract master data (contractual relationship, product or contract interest) Customer history Contract billing and payment data Planning and control data Information (from third parties, e.g., credit agencies, or from public directories) |
Customers Prospective customers Subscribers Employees Suppliers Sales representatives Contact persons |
| Subject | Nature and purpose of processing | Data types/categories | Categories of data subjects |
|---|---|---|---|
| Technical processing of the online shop |
Access to user data and content stored in the online shop for technical processing. Access to log files to secure the server / the online shop. |
Personal master data Communication data (e.g. telephone, email) Contract master data (contractual relationship, product or contract interest) Customer history Contract billing and payment data Planning and control data Information (from third parties, e.g. credit agencies, or from public directories) |
Customers Prospective customers Subscribers Employees Suppliers Sales representatives Contact persons |
| Editorial work on the online shops | Access to content of the online shop, such as contact persons. |
Personal master data Communication data (e.g. telephone, email) Contract master data (contractual relationship, product or contract interest) Customer history Contract billing and payment data Planning and control data Information (from third parties, e.g. credit agencies, or from public directories) |
Customers Prospective customers Subscribers Employees Suppliers Sales representatives Contact persons |
| Conceptualization and implementation of an online shop including consulting, design, and programming |
If applicable, access to analysis data for evaluating user behavior. Access to content intended for the web shop, such as contact persons, in order to transfer this information to the website. |
Personal master data Communication data (e.g. telephone, email) Contract master data (contractual relationship, product or contract interest) Customer history Contract billing and payment data Planning and control data Information (from third parties, e.g. credit agencies, or from public directories) |
Customers Prospective customers Subscribers Employees Suppliers Sales representatives Contact persons |
|
Digital strategy / strategic (further) development of the online shop |
If applicable, access to analysis data for evaluating user behavior. If applicable, access to user accounts for analyzing purchasing behavior and optimizing the shopping experience. |
Personal master data Communication data (e.g. telephone, email) Contract master data (contractual relationship, product or contract interest) Customer history Contract billing and payment data Planning and control data Information (from third parties, e.g. credit agencies, or from public directories) |
Customers Prospective customers Subscribers Employees Suppliers Sales representatives Contact persons |
| Technical further development of the online shop |
Access to user data and content stored in the online shop for technical administration. Access to log files to secure the server / the online shop. |
Personal master data Communication data (e.g. telephone, email) Contract master data (contractual relationship, product or contract interest) Customer history Contract billing and payment data Planning and control data Information (from third parties, e.g. credit agencies, or from public directories) |
Customers Prospective customers Subscribers Employees Suppliers Sales representatives Contact persons |
| Subject | Nature and purpose of processing | Data types/categories | Categories of data subjects |
|---|---|---|---|
| Hosting of the website |
By providing web space and databases, we may potentially have access to visitor data and website content. Access to log files. |
Personal master data Communication data (e.g. telephone, email) Contract master data (contractual relationship, product or contract interest) Customer history Contract billing and payment data Planning and control data Information (from third parties, e.g. credit agencies, or from public directories) |
Customers Prospective customers Subscribers Employees Suppliers Sales representatives Contact persons |
| Hosting of the online shop |
By providing web space and databases, we may potentially have access to customer data and website content. Access to log files. |
Personal master data Communication data (e.g. telephone, email) Contract master data (contractual relationship, product or contract interest) Customer history Contract billing and payment data Planning and control data Information (from third parties, e.g. credit agencies, or from public directories) |
Customers Prospective customers Subscribers Employees Suppliers Sales representatives Contact persons |
| Hosting of a development environment | By providing a development environment, we may potentially have access to data stored in the databases and on the web space. |
Personal master data Communication data (e.g. telephone, email) Contract master data (contractual relationship, product or contract interest) Customer history Contract billing and payment data Planning and control data Information (from third parties, e.g. credit agencies, or from public directories) |
Customers Prospective customers Subscribers Employees Suppliers Sales representatives Contact persons |
| Subject | Nature and purpose of processing | Data types/categories | Categories of data subjects |
|---|---|---|---|
| Management of online campaigns | Access to analysis tools / analysis results for evaluating user behavior. |
Personal master data Communication data (e.g. telephone, email) Contract master data (contractual relationship, product or contract interest) Customer history Contract billing and payment data Planning and control data Information (from third parties, e.g. credit agencies, or from public directories) |
Customers Prospective customers Subscribers Employees Suppliers Sales representatives Contact persons |
| Consulting on online marketing (including analysis of results) | Access to analysis tools / analysis results for evaluating user behavior. |
Personal master data Communication data (e.g. telephone, email) Contract master data (contractual relationship, product or contract interest) Customer history Contract billing and payment data Planning and control data Information (from third parties, e.g. credit agencies, or from public directories) |
Customers Prospective customers Subscribers Employees Suppliers Sales representatives Contact persons |
| Search engine optimization (on-page and off-page) |
Access to analysis tools / analysis results for evaluating user behavior. Access to website content. |
Personal master data Communication data (e.g. telephone, email) Contract master data (contractual relationship, product or contract interest) Customer history Contract billing and payment data Planning and control data Information (from third parties, e.g. credit agencies, or from public directories) |
Customers Prospective customers Subscribers Employees Suppliers Sales representatives Contact persons |
| Subject | Nature and purpose of processing | Data types/categories | Categories of data subjects |
|---|---|---|---|
| Management of email marketing campaigns |
Access to recipient information for managing email campaigns. Access to newsletter tracking. Access to newsletter content. |
Personal master data Communication data (e.g. telephone, email) Contract master data (contractual relationship, product or contract interest) Customer history Contract billing and payment data Planning and control data Information (from third parties, e.g. credit agencies, or from public directories) |
Customers Prospective customers Subscribers Employees Suppliers Sales representatives Contact persons |
| Creation of newsletters including consulting, design, programming, and testing | Access to newsletter content |
Personal master data Communication data (e.g. telephone, email) Contract master data (contractual relationship, product or contract interest) Customer history Contract billing and payment data Planning and control data Information (from third parties, e.g. credit agencies, or from public directories) |
Customers Prospective customers Subscribers Employees Suppliers Sales representatives Contact persons |
| Sending of newsletters |
Access to recipient information for sending newsletters. Access to newsletter content. |
Personal master data Communication data (e.g. telephone, email) Contract master data (contractual relationship, product or contract interest) Customer history Contract billing and payment data Planning and control data Information (from third parties, e.g. credit agencies, or from public directories) |
Customers Prospective customers Subscribers Employees Suppliers Sales representatives Contact persons |
| Management of newsletter recipients |
Access to recipient information for sending newsletters. Access to newsletter content. |
Personal master data Communication data (e.g. telephone, email) Contract master data (contractual relationship, product or contract interest) Customer history Contract billing and payment data Planning and control data Information (from third parties, e.g. credit agencies, or from public directories) |
Customers Prospective customers Subscribers Employees Suppliers Sales representatives Contact persons |
| Subject | Nature and purpose of processing | Data types/categories | Categories of data subjects |
|---|---|---|---|
| Creation of a marketing concept (with evaluation of analysis data) |
Access to analysis tools and analysis results, if applicable. Access to content for marketing measures. |
Personal master data Communication data (e.g., telephone, email) Contract master data (contractual relationship, product or contract interest) Customer history Planning and control data Information (from third parties, e.g., credit agencies, or from public sources) Verzeichnissen) |
Customers Prospective customers Subscribers Employees Suppliers Sales representatives Contact persons |
| Creation of print media | Access to content for print media. |
Personal master data Communication data (e.g., telephone, email) Contract master data (contractual relationship, product or contract interest) Customer history Contract billing and payment data Planning and control data Information (from third parties, e.g., credit agencies, or from public directories) |
Customers Prospective customers Subscribers Employees Suppliers Sales representatives Contact persons |
| Subcontractor (name, legal form, registered office of the company) | Processing site | Type of service |
|---|---|---|
| Amazon Web Services, Inc., USA | mixed | Hosting, IaaS, PaaS |
| Cloudflare, Inc, USA | mixed | Hosting, CDN |
| domainfactory GmbH, DE | DE, FR | Hosting |
| Google Cloud Platform (GCP) | mixed | IaaS, PaaS |
| Hetzner Online GmbH, DE | DE | Hosting |
| Host Europe GmbH, DE | FR | Hosting |
| maxcluster GmbH | DE | Hosting |
| Mittwald CM Service GmbH & Co. KG, DE | DE | Hosting |
| Subcontractor (name, legal form, registered office of the company) | Processing site | Type of service |
|---|---|---|
| CleverReach GmbH & Co. KG, DE | EU | Newslettersystem |
| Dotmailer Limited | UK | Marketing Automation |
| Inxmail GmbH, DE | DE | Newslettersystem |
| MailChimp, USA | US | Newslettersystem |
| Salesforce Marketing Cloud | EU | Marketing Automation |
| PARDOT EMEA, UK | UK | Marketing Automation |
| Vimeo.com, Inc. | USA | Streaming Software Platform |
| Subcontractor (name, legal form, registered office of the company) | Processing site | Type of service |
|---|---|---|
| VRP Consulting | NL | Development |
| Agile Networks Technologies GmbH | DE | Development |
| NICKLAS+NICKLAS | CH | Development |
| Omikron Data Solutions GmbH | DE | Development |
| AWESOME Software GmbH | DE | Development |
| KCS IT S.A | PT | Development |
| Subcontractor (name, legal form, registered office of the company) | Processing site | Type of service |
|---|---|---|
| Anastassia Khasinevich | PL | Development |
| Eduard Dehgraf | CH | Consulting |
| Thomas Wegener | DE | Consulting |
| Subcontractor (name, legal form, registered office of the company) | Processing site | Type of service |
|---|---|---|
| Google Ireland Limited, IRL | mixed | Tracking |
| etracker GMBH, DE | DE | Tracking |
| Subcontractor (name, legal form, registered office of the company) | Processing site | Type of service |
|---|---|---|
| DataValidation by Synapp.io | EU | |
| Facebook Ireland Limited, IRL | mixed | Werbeplattform |
| Google Ireland Limited, IRL | mixed | Werbeplattform |
| HubSpot Inc., USA | DE, US | Werbeplattform |
| LinkedIn Ireland Unlimited Company, IRL | mixed | Werbeplattform |
| Outbrain UK Limited, UK | mixed | Werbeplattform |
| Plista GmbH, DE | mixed | Werbeplattform |
| Taboola, Inc., USA | mixed | Werbeplattform |
| Xing, SE, DE | mixed | Werbeplattform |
| Subcontractor (name, legal form, registered office of the company) | Processing site | Type of service |
|---|---|---|
| salesforce.com Germany GmbH, DE | DE, FR | CRM-System, Auftragsverwaltung |
| Atlassian (JIRA,Confluence,Trello), USA | EU | Ticketsystem und Dokumentverwaltung des Auftragnehmers |
| Google LLC, USA | EU | Cloud-Basierte Office Applikationen und Dokumentenablage, Google G Suite |
| Slack Technologies, USA | EU | Software zur Teamkommunikation |
| Adobe Systems Software Ireland Limited, IRL | EU | Creative Cloud, Software as a Service, Cloud-Speicher |
| Apple Distribution International, IRL | EU | iCloud, Cloud Speicher |
| SiteLock , USA | EU | Website Security |
| AgileBits, Inc., CAN | EU | 1Password, Passwortverwaltung |
| Microsoft Corporation, USA | EU | Office365 |
| REISSWOLF Archivservice GmbH, DE | DE | Akten-, und Datenvernichtung |
| Sage GmbH | DE | Buchhaltung/Rechnungswesen |
| Robin | EU | Raumplanung |
| BMW Bank GmbH | DE | Fahrzeugleasing |
| Volkswagen Leasing | DE | Fahrzeugleasing |
| COFACE RATING GMBH | DE | Auskunftei/Forderungsversicherung |
| DATEV eG, Nürnberg | DE | Gehaltsabrechnung |
| Personio SE & Co. KG | DE | Personalprozesse |
DIA is your trusted advisor and partner in the Salesforce ecosystem, transforming customer experience into your competitive advantage.
Copyright ©2025 DIA Digital Consulting