Note on the responsible body:
We attach particular importance to the protection of your personal data. Your personal data will be processed in accordance with data protection regulations, in particular the European Data Protection Basic Regulation (EU DS-GVO) and the Federal Data Protection Act (BDSG-neu).
General information on data processing
The information below gives an overview of the type, extent and purpose of collection, processing and disclosure of personal data, as well as the security precautions taken to protect this data.
Personal data refers to individual information about the personal or material circumstances of a specific or identifiable natural person, such as name, address, telephone number, date of birth, as well as your email and IP address.
Legal basis for the processing of personal data
- Where we obtain the consent of the data subject for processing operations involving personal data, Art. 6 (1) lit. a EU DS-GVO serves as the legal basis. You can revoke this processing at any time in the future in accordance with Article 7 (3) EU DS-GVO.
- Article 6 (1) lit. b EU DS-GVO serves as the legal basis for the processing of personal data that is necessary for the performance of a contract or for the implementation of pre-contractual measures.
- Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation to which our company is subject, Art. 6 (1) lit. c EU DS-GVO serves as the legal basis.
- If the processing is necessary to safeguard a legitimate interest of our company or of a third party and does not outweigh the interests, fundamental rights and freedoms of the data subject, Article 6 (1) lit. f EU DS-GVO serves as the legal basis for the processing. In this case, you have a right of objection under Article 21 EU DS-GVO.
Data deletion and storage period
Personal data will be deleted as soon as the purpose for which it was stored no longer applies. Furthermore, data may be stored if this was provided for by legally prescribed storage obligations to which our company is subject.
Provision of the website
Use of hosting service providers
Our website is hosted on servers of a hosting service provider located in the EU on the basis of an order processing according to Art. 28 EU DS-GVO. Within the scope of its services, the hosting service provider may have access to personal data of our users, in particular to technical data that is generated in the course of technical communication between you and our website (e.g. server log files). He may not use these for his own purposes. The use of a hosting service provider is based on our legitimate interests in the provision of infrastructure and platform services, computing capacity, e-mail dispatch and security services in accordance with Art. 6 Para. 1 letter f EU DS-GVO.
Server log files
When you visit our website or use its services, the device with which you access the site automatically transmits log data (connection data) to our server. The corresponding information consists of:
- Type and version of the browser you are using,
- Type and version of the operating system you use,
- Referrer URL of the page from which you reached our website,
- Date and time of access to our website,
- Name of the subpages you have called up,
- IP address of your computer system,
- Amount of data transferred in each case.
The collected data is used exclusively for statistical evaluations for the purpose of operation, security and optimization of the offer. For security reasons, however, we reserve the right to subsequently check the log data if there is a justified suspicion of illegal use based on concrete evidence. The data will not be stored longer than necessary for this purpose. This collection is based on our legitimate interests in accordance with Art. 6 para. 1 lit. f EU DS-GVO.
Cookies are small text files that your browser automatically creates and stores on your device when you visit our website. Cookies do not damage your computer and do not contain viruses. Most of the cookies we use are deleted after the browser session ends (so-called session cookies). Other cookies remain on your computer and enable us to recognize your computer during your next visit (so-called permanent or session-spanning cookies). Thanks to these files, it is possible, for example, that you will be shown information on the site that is specifically tailored to your interests.
Security of your data
We use technical and organizational security measures to protect the data you provide us from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. We therefore use SSL encryption for the transmission of confidential content, such as requests that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If the SSL encryption is activated, the data that you send to us cannot be read by third parties. Our security measures are developed further in accordance with the state of the art.
If you contact us (e.g. via contact form, e-mail, telephone, social media), your personal data will be stored and processed by us for the purpose of processing your enquiry and, if applicable, any related follow-up questions in accordance with Art. 6 Para. 1 letter b EU DS-GVO (in the context of pre-/contractual measures) or in accordance with Art. 6 Para. 1 letter f EU DS-GVO (general enquiries). We will not pass on this data without your respective consent.
The data provided by you will remain with us until you request us to delete it, object to its storage or until the purpose for which it was stored ceases to apply (i.e. after processing of your enquiry has been completed), unless this is contrary to any statutory storage obligations.
Dealing with business cards
In the context of accepting business cards, your personal data will be stored and processed by us for the purpose of contacting you at a later date in accordance with Art. 6 para. 1 lit. b EU DS-GVO (in the context of pre-/contractual measures) or in accordance with Art. 6 para. 1 lit. f EU DS-GVO (general communication). We will not pass on this data without your consent.
The data provided by you on your business card will remain with us until you request us to delete it or object to its storage, unless this is contrary to any legal storage obligations.
Dealing with photo and video recordings
If you have given us your consent to create and publish photographs or video recordings of yourself, this is done for the purpose of representing the company. The publication refers to our corporate communications in the press, on our website and on our company's own social media pages as well as in print media (flyers, brochures, etc.). The information is passed on within the company, to commissioned printing service providers and advertising agencies as well as publication on the Internet. No additional forwarding takes place without your consent. Your data will be deleted after revocation of your consent.
In accordance with Art. 7 Para. 3 EU DS-GVO, you have the possibility at any time to revoke your consent in writing without any disadvantageous consequences for you and with effect for the future. Please contact the central data protection contact address given below in this regard.
Registration for the "GoToWebinar" webinar
If you register for a webinar on our website, personal data will be collected. This includes the name, address, company, industry, telephone number and e-mail address as contact and communication data.
Your data will be used for the registration process, interest analysis and communication regarding the webinar and other topics. For this purpose we use "GoToWebinar", a service provided by LogMeIn Ireland Limited, Bloodstone Building Block C, 70 Sir John Rogerson's Quay, Dublin 2, Ireland. LogMeIn processes your information on our behalf. We will only share your information with third parties if they participate in the webinar. The processing of your personal data is carried out on the basis of the execution of the contract (according to article 6 paragraph 1 lit. b EU DS-GVO). This data will be deleted in accordance with the statutory storage obligations.
If you register on our website in order to order goods, services and information in our online portal, personal data is collected. Registration enables access to services and contents that are only available to registered users. If necessary, registered users have the possibility to change or delete the data provided during registration at any time. Your data may be passed on to shipping and payment service providers commissioned by us to process your order. Any further transfer to third parties will not take place. The processing of your personal data is carried out on the basis of contract processing (in accordance with Art. 6 Par. 1 lit. b EU DS-GVO). These data are deleted in accordance with the statutory storage obligations.
Dialogue marketing for existing customers
As an existing customer you will receive regular information about our software products and services. This processing is based on our legitimate interest in informing our customers about current topics and offers of our company. You can revoke the use of your data for sending information at any time without giving reasons. You will find a link for revocation at the end of each newsletter.
The data transmitted in the context of the application procedure will be used for the purposes of application processing. The processing is based on Art. 88 EU DS-GVO in conjunction with § 26 BDSG-neu. During the application process, employees of the Human Resources Department and the position named in the advertisement will have access to the data you have provided. The parties involved have been expressly obliged to maintain confidentiality. Your data will be treated as strictly confidential and will not be passed on to third parties without your respective consent. Your application data will be deleted 180 days after the position has been filled. If you are also interested in positions advertised in the future, we need your written consent to store your application documents for a longer period of time. You can revoke this consent at any time for the future in accordance with Art. 7 Para. 3 EU DS-GVO. To do so, please send an e-mail with a corresponding note to the contact address given below.
If special categories of personal data within the meaning of Art. 9 (1) EU DS-GVO are voluntarily communicated as part of the application procedure, they will also be processed in accordance with Art. 9 (2) b EU DS-GVO.
The analysis measures listed below and used by us are carried out on the basis of Art. 6 para. 1 lit. a EU DS-GVO (consent). With the use of these analysis measures, we want to ensure that our website is designed to meet your needs and is continuously optimised. By means of the analysis tools we record the use of our website pseudonymously and evaluate it for the purpose of optimising our offer.
You can withdraw your consent at any time with effect for the future.
Google Tag Manager
On our website we use the Google Tag Manager. The Google Tag Manager is a solution from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Ireland that allows us to manage website tags through one interface. The tool itself (which implements the tags) is a cookie-free domain that does not collect any personal information. The Google Tag Manager will trigger other tags that may collect data. The Google Tag Manager does not access this data. If a user has disabled it at the domain or cookie level, it will persist for all tracking tags implemented with Google Tag Manager. The tags used are named separately below and can be customized by you in your privacy settings, such as disabling cookies for these items.
For more information, please visit http://www.google.de/tagmanager/use-policy.html. Google is also certified under the Privacy Shield Agreement, which is a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Ireland. Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable an analysis of your use of the website. User and event data is automatically deleted after 14 months.
We have activated the IP anonymization function on this website. This means that your IP address is abbreviated by Google within the Member States of the European Union or in other contracting parties to the Agreement on the European Economic Area, before transmission to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and abbreviated there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports about website activities and to provide the website operator with other services associated with website and internet use. Google will not associate with other data the IP address transmitted by your browser in the context of Google Analytics.
You can prevent cookies from being saved by making the appropriate setting in your browser software. However, we would like to point out that, by preventing cookies from being saved, you will not be able to use all of the functions of this website. You can also prevent Google from recording and processing the data generated by the cookie, relating to your use of the website (incl. your IP address), by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en
Contract data processing
We have concluded a contract with Google for commissioned data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Demographic characteristics in Google Analytics
This website uses the "demographic features" function of Google Analytics. This allows reports to be generated that contain information about the age, gender and interests of the site visitors. This data comes from interest-based advertising by Google as well as from visitor data from third parties. This data cannot be attributed to any specific person. You can disable this feature at any time by changing the ad settings in your Google Account, or generally prohibit Google Analytics from collecting your information as described in the "Opting out of data collection" section.
Our website uses the online advertising program "Google Ads". The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Ireland. Google Ads enables us to draw attention to our attractive offers by means of advertising on external websites. This enables us to determine how successful individual advertising measures are. For this purpose, Google stores a cookie in your browser when you visit Google services or websites in the Google advertising network.
These cookies enable Google to recognize your internet browser. If a user visits certain pages of an ads client's website and the cookie stored on their computer has not expired, Google and the client may recognize that the user clicked on the ad and was redirected to that page. A different cookie is associated with each ad client. As a result, cookies cannot be tracked through the websites of ad clients. We ourselves do not collect and process any personal data in the advertising measures mentioned above. We only receive statistical evaluations from Google. By means of these evaluations we can recognize which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material, in particular we cannot identify the users on the basis of this information.
Third Party Content and Services
On the basis of our legitimate interest in accordance with Art. 6 Para. 1 lit. f EU DS-GVO, content, services and performances of other providers that supplement our offer are integrated within our online offer. With the use of the services listed below, we want to ensure that our website is designed to meet your needs and is continuously optimised.
On our website we use the map service Google Maps to display maps. Google Maps is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Ireland. In doing so, information about the use of our website is transmitted to the Google server. The use of Google Maps is in the interest of an attractive presentation of our online offers and an easy findability of the places indicated by us on the website.
You can find detailed information in the google.de data protection centre: Transparency and options https://policies.google.com/privacy?hl=en and data protection regulations https://www.google.de/intl/de/privacy/privacy-policy.html. Google is also certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Ireland. In order to ensure sufficient data security when submitting forms, we use in certain cases the reCAPTCHA service of the company Google. This is mainly used to distinguish whether the input is made by a natural person or abusively by machine and automated processing. For this purpose, reCAPTCHA analyses the behaviour of the website visitor on the basis of various characteristics. This analysis starts automatically as soon as you visit the website. For analysis purposes, reCAPTCHA evaluates various information (e.g. IP address, duration of the website visitor's visit to the website or mouse movements made by the user).
However, in the event that IP anonymisation is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other states which are party to the Agreement on the European Economic Area. Google uses this information to evaluate your use of this service. The IP address transmitted by your browser in the context of reCAPTCHA is not combined with other data from Google. For these data the deviating data protection regulations of the company Google apply. The processing is based on our legitimate interest to protect our web offers from abusive automated spying and from SPAM.
Google Web Fonts
This website uses so-called web fonts for the uniform representation of fonts. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Ireland. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.
To do this, the browser you are using must connect to Google's servers. This enables Google to know that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and attractive presentation of our online offers. If your browser does not support web fonts, a standard font is used by your computer.
Links to third party websites
We maintain publicly accessible online presences in social networks to communicate with the customers and interested parties active there and to present our services.
The processing of users' personal data is based on our legitimate interest in effective information of users and communication with users in accordance with Art. 6 para. 1 lit. f. EU DS-GVO. If the users are asked by the respective platform providers for their consent to data processing or if the user voluntarily sends information to our online presences, the legal basis for processing is Art. 6 Para. 1 lit. a EU DS-GVO in conjunction with Art. 7 EU DS-GVO. If the information contains contractually relevant content, the legal basis is Art. 6 Paragraph 1 lit. b EU DS-GVO.
For a detailed presentation of the respective processing and the possibilities of objection (opt-out), we refer to the following linked information provided by the providers.
Also in the case of requests for information and the assertion of user rights, we would like to point out that these can most effectively be asserted with the providers. Only the providers have access to the data of the users and can directly take appropriate measures and provide information. Should you nevertheless require assistance, you can contact us.
Facebook fan page
When you interact with our Facebook fan page (make a comment, link to a post or send us a message) your data is stored by us.
The operation of a fan page is a joint responsibility under data protection law according to Art. 26 EU DS-GVO between Facebook Ireland Ltd. and our company. Accordingly, we have concluded an agreement with Facebook Ireland, in which the respective obligations under the EU DS-GVO are regulated: https://www.facebook.com/legal/terms/page_controller_addendum.
The legal basis for the processing of the data are:
- If you "link" to a contribution from us, comment on it or upload content to our Facebook page, Art. 6 para. 1 lit. a EU DS-GVO serves as the legal basis. You can revoke this processing for the future at any time in accordance with Art. 7 para. 3 EU DS-GVO by deleting the comment or content.
- If you send us an enquiry relevant to the contract, Art. 6 (1) lit. b EU DS-GVO serves as the legal basis.
Facebook provides the fan page operators with statistics and insights into the types of actions of our fan page visitors ("page insights"). We have no influence on Facebook collecting this data. According to Facebook, this data is only provided to us in anonymised form, so that the user cannot be identified from the information.
Personal data will be deleted as soon as the purpose of storage no longer applies. Storage may also take place if this was provided for by legally prescribed storage obligations to which our company is subject.
Our online offer is basically aimed at persons of full age. Personal information of persons who have not yet reached the age of 16 may only be made available to us if the express consent of a parent or guardian has been obtained (Art. 8 EU DS-GVO). Processing without the consent of a parent or guardian is not permitted. We therefore reserve the right to delete all data relating to minors, unless we have the consent of a parent or guardian.
Upon written request, we will inform you in accordance with Art. 15 EU DS-GVO and our legal obligation under Art. 12 EU DS-GVO whether and which of your personal data is processed or stored by us. Furthermore, you have the right to correct incorrect data in accordance with Art. 16 EU DS-GVO, data transferability in accordance with Art. 20 EU DS-GVO, blocking and deletion of your personal data in accordance with Art. 17 EU DS-GVO - provided there are no legal obligations to retain data - and the right to restrict processing in accordance with Art. 18 EU DS-GVO. You also have the right to contact the competent supervisory authority in accordance with Art. 77 EU DS-GVO.
You also have the right to object in accordance with Art. 21 EU DS-GVO.
Of course, you can revoke your consent for the future at any time in accordance with Art. 7 para. 3 EU DS-GVO. To do so, please contact us at the contact address given below.
If you have any questions regarding the processing of your personal data, you can contact our data protection officer, who is also available to you in the event of requests for information, suggestions or complaints.
Data protection officer of ORGADATA AG
In order to ensure that our data protection declaration always complies with the current legal requirements, we reserve the right to make changes at any time. This also applies in the event that the data protection declaration has to be adapted due to new or revised services, for example new services.
Status: April 2020