Please note: This is the English translation of our orginal German privacy policy. This translation is provided as a courtesy. Only the German text is legally binding.
The following information will give you an overview of what happens to your personal data when you visit our website. Personal data are all data by which you can be personally identified. Following this overview, you will find detailed information on data protection in our data protection declaration, see section "Information on the collection of personal data" and following.
How do we collect your personal data? We do so in two ways:
For detailed information, please see section "Information on the collection of personal data", section "Collection of personal data when you visit our website" and following.
What do we use your data for? We collect some of your data in order to ensure error-free provision of the website. We may use other data to analyze your user behaviour or for other purposes. You will find detailed information on this in our data protection declaration, starting with section "Information about the collection of personal data".
Which rights do you have regarding your data? You have the right to access, free of charge, to your personal data and receive information regarding the purpose, recipients and sources of your stored personal data. You also have the right to request rectification, restriction, or erasure of these data. You have the right to complain to supervisory authority about us. See section "Your rights" for detailed information on your rights.
When you visit our website, we may statistically evaluate your surfing behaviour. This is done primarily with cookies and so-called analysis programs. You may object to this analysis or prevent it by not using certain tools. For more detailed information, please see the following sections. Please pay special attention to section "Revocation and objection".
In this data protection declaration, we inform you about the collection of personal data when using our website. Personal data are all data that are personally relating to you, e.g., your name, your street address, your e-mail addresses, your IP address, or your user behaviour.
In principle, we only store your personal data for as long as is necessary for the purpose for which we have collected or received them. If that purpose no longer applies or if you exercise your right of erasure, we will usually delete the data within 30 days. In deviation from this, we store your data over a longer period of time, if legal obligations, the fulfilment of a contract, or other important reasons force us to do so. The same applies if you successfully objected to processing on the basis of article 6 paragraph 1 point f GDPR, see section "Objection to processing based legitimate interests".
Controller pursuant to article 4 paragraph 7 of the General Data Protection Regulation (GDPR) is (see our imprint):
itemis AG
Am Brambusch 15
44536 Lünen
You can contact our data protection officer by e-mail at datenschutzbeauftragter@itemis.de. If you want to send an encrypted e-mail, you can find the public OpenPGP key associated with this e-mail address on OpenPGP keyservers or on our website. The fingerprint of the OpenPGP public key is: B4DD BDB6 203E 0B20 2B5D 5C0D 0196 4716 74C8 26EC. Please send letters by post to the above-mentioned postal address with the addition "The Data Protection Officer".
If you contact us by e-mail or via a form, we store the data you provide (your e-mail address, and – if applicable – your name, your telephone number, your message, etc.). We do so in order to be able to reply to you. We erase the data arising in this context after storage is no longer necessary, or we limit processing if statutory retention obligations exist.
If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processing and your rights below. We will also specify the defined criteria for the storage period.
We have commissioned HubSpot Inc, 25 First Street, Cambridge, MA 02141, USA, to operate our website (HubSpot). HubSpot has submitted itself to the EU-US Privacy Shield Framework, which is supposed to ensure the protection of your personal data at a level that complies with European standards.
Since the software used by HubSpot offers further functionalities in addition to the operation of the website, we have summarized the information in a separate section (see "HubSpot").
From time to time, changes to this privacy policy may be necessary. We therefore reserve the right to make appropriate adjustments. If the respective contents of your declarations of consent are affected, we will draw your attention to this. Please always note the current version of our privacy policy!
You have the following rights towards us regarding your personal data:
To exercise your rights, please contact us using the following contact details:
You also have the right to complain to a data protection supervisory authority regarding our processing of your personal data. The supervisory authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.
If you do not register on our website or otherwise provide us with information, you are using our website for information purposes only. In this case, we only collect the personal data that your browser transmits to our server. If you are visiting our website, we collect the following data, which are technically necessary for us to display our website to you and to guarantee stability and security (legal basis is article 6 paragraph 1 point f GDPR):
When you use our website, we store cookies on your computer. Cookies are small text files that your browser stores on your hard drive. If you visit other pages of our website or the same page again, we will receive certain pieces of information. Cookies cannot run programs or transmit viruses to your computer. They serve to make our Internet offer more user-friendly and effective overall.
We process cookies on the basis of Article 6 paragraph 1 point f GDPR. We have a legitimate interest in analysing user behaviour so that we can optimise both our website and our advertising.
You can object to this processing by deleting the cookies stored by us in your browser and choosing the security settings of your browser so that it does not accept cookies from us.
We process your personal data using the Hubspot tool in the USA. In order to adequately protect your personal data, we have concluded a contract using standard data protection clauses with the provider. The contact details of the processor are as follows: HubSpot Inc, 25 First Street, Cambridge, MA 02141, USA. Further information on the processing of your data can be found in the data protection regulations of the provider: https://legal.hubspot.com/dpa.
To prevent unauthorized access to your personal data by third parties during transmission, all data communication between your browser and our website is encrypted. For this we use TLS resp. HTTPS.
In addition to the purely informational use of our website, we offer various services that you can use if you are interested. Generally, you must provide further personal data that we use to provide the respective service and to which the aforementioned data processing principles apply.
In some cases we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly checked.
Furthermore, we may pass on your personal data to third parties if we offer participation in promotions, conclusion of contracts, competitions or similar services together with partners. We will give you more information when you are about to provide your personal data, or please see the description of the respective offer below.
If our service providers or partners are based in a country outside of the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the respective offer.
If you have given us your consent to process your data, you can revoke this at any time. Such a revocation influences the lawfulness of processing your personal data only for the time after you have revoked your consent. Processing prior to the withdrawal of your consent remains lawful.
If we base the processing of your personal data on the balancing of interests pursuant to Article 6 paragraph 1 point f GDPR, you may object to the processing. This is the case if processing is not necessary to fulfill a contract with you, which we outline in the respective description of the function. When exercising such objection, we ask you to explain the reasons that arise from your particular situation, and explain why we should not process your personal data as carried out by us. In the event of your substantiated objection, we will examine the situation and either stop or adjust the data processing or point out to you our compelling legitimate reasons, on the basis of which we will continue processing.
Of course you can object to the processing of your personal data for purposes of advertising and data analysis at any time. You can inform us about your advertising objection using the following contact data:
E-mail:
betroffenenrechte@itemis.de
If you want to send an encrypted e-mail, you can find the public OpenPGP key associated with this e-mail address on OpenPGP keyservers or on our website. The fingerprint of the OpenPGP public key is: 8482 9CC1 2F7A 5037 5785 4E4B 895C A97E 9D12 9411.
Post:
itemis AG
Betroffenenrechte
Am Brambusch 15
44536 Lünen
With the chat function, we offer you the opportunity at various places on our website to get in direct touch with contact persons of itemis AG and to communicate textually with them. In doing so, we collect the texts entered by you in the chat window, in addition to the data mentioned in section “Collection of personal data when you visit our website”. We process them with your consent, which we ask you to provide before the chat starts.
The chat function is provided by our website operator and processor HubSpot Inc. under the domain usemessages.com. The legal basis for processing your data by the chat is your consent in accordance with article 6 paragraph 1 point a GDPR. We will delete chat recordings that have not been changed for at least 6 years. We will also delete your chat recordings if you withdraw your consent.
With your consent, you can subscribe to our newsletter, which we use to inform you about topics concerning our activities and our offers. The newsletter contains the published articles of the itemis blog.
For registration with our newsletter, we use the so-called double opt-in procedure. This means that after your registration, we will send you an e-mail to the specified e-mail address. In this e-mail, we ask you to confirm that you would like the newsletter to be sent to you. If you do not confirm your registration within 7 days, your information will be erased within one month. In addition to your e-mail address, we store your IP addresses and the time of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.
The only mandatory information for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary. We use them to address you personally and to better tailor the information contained in the newsletter to your presumed interests. After your confirmation we will save your e-mail address for the purpose of sending the newsletter to you. The legal basis is Article 6 paragraph 1 point a GDPR.
You can revoke your consent in receiving the newsletter and unsubscribe from the newsletter at any time. You can declare your revocation by clicking on the link provided in every newsletter e-mail or by sending a message to the contact details given in the imprint. As soon as you have withdrawn your consent, you will no longer receive the newsletter. We will then delete your data stored for sending the newsletter after one month at the latest, unless we still need it for another lawful purpose described in this privacy policy.
We would like to point out that we evaluate your user behaviour when sending the newsletter. For this evaluation, the e-mails sent contain so-called web beacons or tracking pixels. These are single-pixel image files stored on our website. For such evaluations, we link the data mentioned in section "Collection of personal data when you visit our website" and the web beacons with your e-mail address and an individual ID. Links in the newsletter also contain this ID. With the data obtained in this way, we create a user profile to tailor the newsletter to your individual interests. We record when you read our newsletters, which links you click on in them and deduce your personal interests. We link this data to actions taken by you on our website.
You can object to this tracking at any time by unsubscribing from the newsletter and by not clicking on any links in newsletter e-mails you already received. Such tracking is also not possible if you have deactivated the displaying of images in your e-mail program. In this case, the newsletter will not be displayed in full and you may not be able to use all functions. If you display the images manually, the above tracking takes place.
The legal basis for processing your data for sending the newsletter is Article 6 paragraph 1 point f GDPR.
In our blog, where we publish various articles on topics related to our activities, you can make public comments. We will publish your comment with the user name you have entered at the corresponding post. We recommend that you use a pseudonym instead of your real name. User name and e-mail address are required, all other information is voluntary. When you make a comment, we also store your IP address. This storage is necessary for us to be able to defend ourselves against liability claims in cases of possible publication of illegal content. We need your e-mail address in order to be able to contact you if a third party should object to your comment as unlawful.
Please note that we store your comment permanently. We have a legitimate interest in the complete, permanent and comprehensible display of discussions resulting from comments on our website. We do not check comments before publication. We reserve the right to erase comments if they are objected to as being unlawful by a third party. The legal basis for the commentary function on our website is Article 6 paragraph 1 point f GDPR.
When writing your comment, you can check our e-mail service. It will send you a notification when other users leave a comment on the same blog post. For this service we use the so-called double opt-in procedure. This means that after your registration, we will send you an e-mail to the specified e-mail address. In this e-mail, we ask you to confirm that you wish notifications to be sent. You can unsubscribe from these notifications at any time by clicking on the link contained in the e-mail. We will store your personal data, including your e-mail address, your time of registration for the service, and your IP address until you unsubscribe from the notification service.
Our website may contain links to other websites. We are not responsible for the content and operation of those websites nor for any processing of personal data taking place there, but rather the operator of the respective website is. Please read the privacy policy of the relevant website or contact its controller for further information.
Please note: If you follow a link on our website that leads to another website, your browser sends the address of the page containing the mentioned link to the other website ("HTTP referer"), as well as other data.
We use various third-party services on our website, which we present to you below. We explain in each case,
We use the Google AdWords online advertising program on our website to display advertising for our products and services to users when they visit other websites.
Provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google). Google has submitted itself to the EU-US Privacy Shield Framework, which is supposed to ensure the protection of your personal data at a level that complies with European standards.
In the context of Google AdWords we use the so-called conversion tracking. When you click on a Google ad we have placed somewhere on the Internet, you receive a cookie for conversion tracking. This cookie expires after 30 days. It is not used for the personal identification of the user. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page.
If you click on multiple ads placed by different Google Adwords customers, you will receive a different cookie for each of these advertisers. An advertiser's cookie cannot be traced by the websites of other advertisers. We receive anonymous statistics from Google showing us how successful individual ads are or how many users have clicked on which ad.
The data collected is anonymous to us as the operator of this website; we cannot draw any conclusions regarding the identity of users. However, the collected data will be transferred to Google, i.e., to the USA or to other countries, and will be processed there, so that Google may be able to relate them to you. We cannot influence how Google uses the data.
We process your data on the basis of Article 6 paragraph 1 point f GDPR. We have a legitimate interest in being able to display advertising for our products and services to users when they visit other websites and to measure the success of this advertising.
If you do not wish to participate in tracking, you can object to this use by blocking the Google Conversion Tracking cookie in your browser settings. You will no longer be included in the conversion tracking statistics.
For more information, please see Google's privacy policy (https://www.google.de/policies/privacy/).
On our website, we use Google Analytics to analyse the number of visitors to find out which pages were visited how often, which operating systems, browsers and resolutions were used, and to use these data to adapt our online offering and to better support our website visitors.
Provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google). Google has submitted itself to the EU-US Privacy Shield Framework, which is supposed to ensure the protection of your personal data at a level that complies with European standards.
Google Analytics uses cookies. The information contained in the cookies about your use of our website is usually transmitted to Google in the USA or in another country.
We have activated the "IP anonymisation" function on our website. By this, we instruct Google to truncate your IP address – within the member states of the European Union (EU) or in other signatory states to the European Economic Area (EEA) – and to transmit it only in abbreviated form to third countries. Only in exceptional cases the full IP address is transferred to a third country and shortened there. Google uses this information on our behalf to evaluate your use of our website, to compile reports on website activity and to provide us with other services relating to website and Internet use.
The collected data is anonymous to us as the operator of this website; we cannot draw any conclusions regarding the identity of the users. However, the collected data will be transferred to Google, i.e., to the USA or to other countries, and will be processed there, so that Google may be able to relate them to you. We cannot influence how Google uses the data. Google does not link the IP address transmitted by your browser in the Google Analytics framework to other data.
We process your data on the basis of Article 6 paragraph 1 point f GDPR. We have a legitimate interest in adapting our online offering and to better support our website visitors.
You can object to this processing of your data by preventing the setting of cookies using appropriate browser settings. However, we would like to point out that in this case you may not be able to use all functions of our website to their full extent.
You may also disable Google Analytics using a browser add-on provided by Google, and thus prevent Google Analytics from using your data. You can download this add-on from https://tools.google.com/dlpage/gaoptout.
You can prevent Google Analytics from collecting your data by clicking the following link: Disable Google Analytics. This is an opt-out cookie that prevents us from collecting your information when you visit our site in the future. Please note: This function is only available if your browser has accepted and stored this cookie.
You will find further information in the Google Analytics privacy policy (https://support.google.com/analytics/answer/6004245).
To visualize the locations of our offices and other geographic locations on our website using maps, we use the Google Maps APIs map service.
Provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google). Google has submitted itself to the EU-US Privacy Shield Framework, which is supposed to ensure the protection of your personal data at a level that complies with European standards.
To enable you to use this service, your browser transmits your IP address to Google when integrating map material into the website to be displayed. The collected data is anonymous to us as the operator of this website; we cannot draw any conclusions regarding the identity of the users. However, the collected data will be transferred to Google, i.e., to the USA or to other countries, and will be processed there, so that Google may be able to relate them to you.
Processing is carried out on the basis of Article 6 paragraph 1 point f GDPR. We have a justified interest in an appealing presentation of our online offers and that places indicated by us on the website can be found easily.
You can object to this processing of your personal data by blocking the execution of Google Maps APIs in your browser. Please install an appropriate add-on, for example uBlock Origin for Firefox (https://addons.mozilla.org/de/firefox/addon/ublock-origin/) and Chrome (https://chrome.google.com/webstore/detail/ublock-origin/cjpalhdlnbpafiamejdnhcphjbkeiagm). Select the settings so that scripts from the domain maps.googleapis.com are not executed.
Please see Google's privacy policy (https://policies.google.com/privacy), the Google Maps APIs Terms of Service (https://developers.google.com/maps/terms) and the Google Maps Controller Data Protection Terms (https://privacy.google.com/businesses/mapscontrollerterms/) for more information.
To protect our website from abusive automated spying or abusive automated input ("spam"), we use Google reCAPTCHA on our website.
Provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google). Google has submitted itself to the EU-US Privacy Shield Framework, which is supposed to ensure the protection of your personal data at a level that complies with European standards.
Google reCAPTCHA checks whether data input on our website (e.g., in a contact form) is done by a person or by an automated program. For this, Google reCAPTCHA analyzes the behavior of the website visitor on the basis of various characteristics. This analysis starts automatically as soon as the website visitor enters the website. To do its analysis, Google reCAPTCHA evaluates various information, e.g., IP address, duration of stay of the website visitor on the website, or mouse movements made by the user.
The collected data is anonymous to us as the operator of this website; we cannot draw any conclusions regarding the identity of the users. However, the collected data will be transferred to Google, i.e., to the USA or to other countries, and will be processed there, so that Google may be able to relate them to you. We cannot influence how Google uses the data.
We process your data on the basis of Article 6 paragraph 1 point f GDPR. We have a legitimate interest in protecting our website from abusive automated spying or abusive automated submissions ("spam").
Further information can be found in Google’s privacy policy (https://policies.google.com/privacy) and in the hints on Google reCAPTCHA (https://www.google.com/recaptcha/intro/).
To implement our online activities according to the “inbound“ marketing method, we use the marketing software HubSpot. This software includes the following components:
The provider is HubSpot Inc, 25 First Street, Cambridge, MA 02141, USA. HubSpot has submitted itself to the EU-US Privacy Shield Framework, which is supposed to ensure the protection of your personal data at a level that complies with European standards.
Since HubSpot is also responsible for the operation of our website, HubSpot collects all data specified under "Data collection on informational use of our website". Your browser transfers them to us when you visit our website. This includes cookies, input forms you have completed and submitted, your preferred language and geographic information.
We use the collected information exclusively for our marketing and to generate leads. In particular, we will not pass on your personal data to third parties, with the exception of the cases mentioned in section "Other functions and offers on our website".
We process your data on the basis of Article 6 paragraph 1 point f GDPR. We have legitimate interests in presenting information about our portfolio and our company to our visitors, in measuring the success of these measures, and in optimising our marketing activities on the basis of these results.
You can object to this processing by not visiting our website.
For more information, please refer to HubSpot’s privacy policy.
If you consent to it, we use the LinkedIn Insight Tag for marketing purposes. The service provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn").
The LinkedIn Insight Tag is a JavaScript code that LinkedIn uses to record and analyze visits by their members to websites. For this purpose, the Insight Tag stores a cookie in the user’s web browser. With its help, LinkedIn collects personal data such as URL, referrer URL, device properties, browser properties, IP address (shortened or hashed) or the time of the page view.
As the website host, we do not receive any data from LinkedIn about individual LinkedIn members, but only statistical information about the demographics of our target group (industry, job title, company size, career level, location) and the performance of our ads. LinkedIn anonymizes the data within 7 days and deletes it within 90 days.
The transmission of your data to LinkedIn is based on Article 6(1)(a) GDPR (consent). You have the option to revoke your consent to data processing at any time. A revocation does not affect the validity of past data processing operations.
LinkedIn provides further information on the Insight Tag in an FAQ. Please also refer to LinkedIn’s privacy policy.
To conduct various surveys, we use the SurveyMonkey survey software.
The provider is SurveyMonkey Europe UC, 2nd Floor, 2 Shelbourne Buildings, Shelbourne Road, Dublin, Ireland (SurveyMonkey). SurveyMonkey will transmit your personal data to the third country USA and possibly to other countries. SurveyMonkey is committed to the EU-US Privacy Shield Framework, which is supposed to ensure the protection of your personal data at a level that complies with European standards.
You can participate in our surveys on a voluntary basis. We process your data with your consent on the basis of Article 6 paragraph 1 point a GDPR.
When you participate in a survey, your web browser retrieves survey forms from SurveyMonkey's web servers. Your browser transmits the information you have entered into survey forms, such as by clicking or filling them out, to SurveyMonkey's servers. SurveyMonkey not only processes the survey responses but also a number of further categories of personal data. SurveyMonkey's privacy policy explains which these categories are, for what they are used, and what else you should know.
Even if the responses you enter into survey forms are stored on SurveyMonkey servers, we are still responsible for such processing. If you wish to exercise your rights with respect to these data, please contact us.
To conduct surveys, SurveyMonkey stores cookies in your web browser. SurveyMonkey explains which cookies are used and for what purposes in its privacy policy and in its cookie policy. Please familiarize yourself with these information.
To show you content in the form of videos, we use the YouTube service operated by Google.
The provider is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube resp. Google has submitted itself to the EU-US Privacy Shield Framework, which is supposed to ensure the protection of your personal data at a level that complies with European standards.
When you visit one of our pages that has a YouTube plug-in, your browser connects to YouTube's servers. It transmits your IP address, the information which of our pages you have visited and possibly further data to the YouTube server.
If you are logged into your YouTube account, you allow YouTube to associate your surfing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.
We process your data on the basis of Article 6 paragraph 1 point f GDPR. We have a legitimate interest in incorporating videos into our website.
For more information on how we handle user data, please see YouTube's privacy policy (https://www.google.de/intl/de/policies/privacy).