Subject of this Privacy Policy
We appreciate your interest in our website and our offerings on our web pages.
The protection of your personal data (hereinafter referred to as "data") is a matter of great importance to us. Therefore, we would like to inform you in detail about which data is collected when you visit our website and use our offerings there, as well as how this data is processed or used by us in the following, as well as what accompanying protective measures we have taken, both technically and organizationally.
In accordance with Art. 13 GDPR, we inform you about the legal bases of our data processing. If the legal basis is not mentioned in the privacy policy, the following applies: The legal basis for obtaining consent is Art. 6 (1) lit. a and Art. 7 GDPR, the legal basis for processing to fulfill our services and perform contractual measures as well as respond to inquiries is Art. 6 (1) lit. b GDPR, the legal basis for processing to fulfill our legal obligations is Art. 6 (1) lit. c GDPR, and the legal basis for processing to safeguard our legitimate interests is Art. 6 (1) lit. f GDPR. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) lit. d GDPR serves as the legal basis.
Changes to the Privacy Policy
We ask you to regularly inform yourself about the content of our privacy policy. We adapt the privacy policy as soon as changes in the data processing carried out by us make this necessary. We will inform you as soon as the changes require your cooperation action (e.g. consent) or other individual notification.
Controller/Service Provider
The responsible party in accordance with the Federal Data Protection Act (BDSG) and the General Data Protection Regulation (GDPR) as well as the service provider in accordance with the Telemedia Act (TMG) is ODION GmbH, see our imprint for details.
Questions or comments about this Privacy Policy or data protection in general, please address to the following email address: [email protected]
Collection and Use of Your Data
The scope and nature of the collection and use of your data varies depending on the purpose of your visit to our website. You can visit our website solely to access information or use services offered by us.
Informational Use
For the purely informational use of our website, it is generally not necessary for you to provide personal data. Instead, we only collect and use those of your data that your internet browser automatically transmits to us, such as:
Date and time of access to one of our web pages
Your browser type
Browser settings
The operating system used
The page you visited last
The amount of data transmitted and the access status (file transmitted, file not found, etc.) as well as
Your IP address.
We collect and use this data during an informational visit exclusively in a non-personalized form. This is done to enable the use of the web pages you accessed, for statistical purposes, and to improve our internet offering. We only store the IP address for the duration of your visit; a personal evaluation does not take place.
Use of Services
If you wish to use services offered by us on our website, such as registering for a test system or the newsletter, it is necessary for you to provide additional data. These are the data required for the respective processing, such as your company information to set up the test system accordingly. You can voluntarily provide further information; these are marked accordingly by us.
The collection or use of your data is for the purpose of providing the service you requested, such as processing the system setup or sending you the newsletter you requested and tailored to you.
Your data will be passed on to third-party service providers for the purpose mentioned above, whom we have selected with care. These may be technical service providers or support service providers. If we disclose or transmit data to other individuals and companies (processors or third parties) within the scope of our processing, transfer it to them or otherwise grant them access to the data, this is only done on the basis of legal permission (e.g. if a transmission of the data to third parties, such as payment service providers, is necessary for the fulfillment of the contract pursuant to Art. 6 (1) lit. b GDPR), you have consented, a legal obligation provides for this, or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
If we commission third parties with the processing of data on the basis of a so-called "contract processing agreement", this is done on the basis of Art. 28 GDPR. If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or this is done within the scope of using third-party services or disclosing, or transferring data to third parties, this only takes place if it is necessary to fulfill our (pre)contractual obligations, based on your consent, a legal obligation, or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only if there are special requirements in accordance with Articles 44 et seq. GDPR. This means that processing takes place, for example, on the basis of special guarantees, such as the officially recognized determination of a level of data protection equivalent to that of the EU (e.g. for the USA through the "Privacy Shield") or compliance with officially recognized special contractual obligations (so-called "standard contractual clauses").
Contact and Interaction
When contacting us (via contact form or email), your details will be processed to handle the contact request and its processing in accordance with Art. 6 (1) lit. b) GDPR. We use the support and ticket system "Zendesk" provided by Zendesk, Inc. 1019 Market St, San Francisco, CA 94103 based on our legitimate interests (efficient and fast processing of user inquiries). You can view the data protection provisions of this provider here: https://www.zendesk.com/company/customers-partners/privacy-policy/.
We delete the requests as soon as they are no longer necessary. We regularly review the necessity; inquiries from customers who have a customer account are stored permanently and are referred to the information on the customer account for deletion. In the case of legal archiving obligations, deletion is carried out after their expiry (end of commercial (6 years) and tax (10 years) retention obligations).
Security Measures
In accordance with Art. 32 GDPR, we take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk, taking into account the state of the art, implementation costs, and the nature, scope, circumstances, and purposes of processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons; These measures include, in particular, ensuring the confidentiality, integrity, and availability of data by controlling physical access to the data, as well as the access, input, disclosure, ensuring availability, and separation of the data. Furthermore, we have established procedures to ensure the exercise of data subjects' rights, deletion of data, and response to data breaches. We also consider the protection of personal data during the development or selection of hardware, software, and procedures, in accordance with the principle of data protection by design and by default (Art. 25 GDPR).
Security measures include, in particular, the encrypted transmission of data between your browser and our server.
Data Protection Consent
Beyond the processing of the services you requested, we would like - naturally only if you explicitly consent to it at a separate location - to offer a website tailored to your interests and occasionally send you interesting news and information about our company or our goods and services by post or email (in the form of our newsletter) based on your data and use it for the necessary evaluation and for market research purposes.
For this purpose, it is technically necessary for us to aggregate and evaluate your accrued and provided data in user profiles and use them for the purposes mentioned above. This is done only internally and only for the aforementioned purposes.
You can give your consent separately. You can revoke it at any time with future effect.
Rights of Data Subjects
You have the right to request confirmation as to whether data concerning you is being processed and to obtain information about this data and further information and a copy of the data in accordance with Art. 15 GDPR. You have the right to demand the completion of data concerning you or the rectification of inaccurate data concerning you in accordance with Art. 16 GDPR. Furthermore, in accordance with Art. 17 GDPR, you have the right to demand that data concerning you be erased without undue delay, or alternatively, in accordance with Art. 18 GDPR, to demand a restriction of processing of the data.
In addition, you have the right, in accordance with Art. 20 GDPR, to receive the personal data concerning you that you have provided to us and to request their transmission to other controllers. You also have the right, pursuant to Art. 77 GDPR, to lodge a complaint with the competent supervisory authority.
Right of Withdrawal and Objection
You have the right to withdraw your consent pursuant to Art. 7 (3) GDPR with effect for the future. Furthermore, you can object to the future processing of data concerning you in accordance with Art. 21 GDPR at any time. The objection can be made, in particular, against processing for the purposes of direct marketing.
Data Deletion
The data processed by us will be deleted or its processing restricted in accordance with Art. 17 and 18 GDPR. Unless expressly stated otherwise in this privacy policy, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and there are no legal retention obligations preventing deletion. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax reasons.
We will delete personal data as soon as the purpose of collecting the data no longer applies and there is no further permissible purpose. Further permissible purposes may include granted consents, legitimate business interests, or a commercial or tax-related retention obligation. If the user data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted and the data subject will be informed accordingly. In accordance with legal requirements, storage takes place for 6 years in accordance with § 257 (1) HGB (commercial books, inventories, opening balances, annual financial statements, commercial letters, accounting records, etc.) and for 10 years in accordance with § 147 (1) AO (books, records, management reports, accounting documents, commercial and business letters, documents relevant for taxation, etc.).
For the deletion of data, internal deletion concepts exist, which can be requested free of charge upon request in accordance with the aforementioned right to information.
Deployment of Cookies
Cookies are pieces of information that are transferred from our web server or third-party web servers to the web browsers of users and stored there for later retrieval. Cookies can be small files or other types of information storage.
Use of Google Analytics
We use Google Analytics, a web analytics service provided by Google LLC ("Google"), on the basis of our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering within the meaning of Art. 6 (1) lit. f. GDPR). Google uses cookies. The information generated by the cookie about the use of the online offering by users is usually transmitted to a Google server in the USA and stored there.
Google is certified under the Privacy Shield agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Google will use this information on our behalf to evaluate the use of our online offering by users, to compile reports on the activities within this online offering, and to provide us with further services associated with the use of this online offering and the use of the Internet. Pseudonymous user profiles can be created from the processed data.
We only use Google Analytics with IP anonymization enabled. This means that the IP address of users is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
The IP address transmitted by the user's browser will not be merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly; users can also prevent Google from collecting the data generated by the cookie and relating to their use of the online offering and from processing this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Furthermore, users can prevent Google Analytics from collecting data by clicking on this link. An opt-out cookie will be set to prevent future collection of their data when they visit this website.
We may also use Google Tag Manager to integrate and manage Google Analytics and marketing services into our website.
For more information on how Google uses data, and how you can control or prevent the use of data, please visit Google's websites: https://www.google.com/intl/de/policies/privacy/partners ("Data use by Google when using our partners' websites or apps"), https://policies.google.com/technologies/ads ("Data use for advertising purposes"), https://adssettings.google.com/authenticated ("Manage the information Google uses to show you advertisements").
Social Media Presence
We maintain online presences within social networks and platforms in order to communicate with customers, interested parties, and users active there and to inform them about our services there. When accessing the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply.
Unless otherwise stated in our privacy policy, we process the data of users if they communicate with us within social networks and platforms, e.g. write posts on our online presences or send us messages.