Data Privacy

Data Privacy

Last Update: December 2019

Website data protection statement and information for data subjects pursuant to Article 13 and Article 14 of the EU General Data Protection Regulation.

This Privacy Policy (“Privacy Policy”) describes how we collect, use, protect, and discloses information and information associated with a natural person (“Personal Data”), and what choices you have with respect to the Personal Data. This Privacy Policy Applies when you install our software, access our website or other digital properties and when you otherwise interact with us (collectively, the “Services”).

We may change this Privacy Policy at any time or substitute this Privacy Policy at our sole discretion. You should check regularly for the most up-to-date version of this Privacy Policy whenever you access our Services.

 

 

1. General data processing information

Data Collected
The Personal Data that we collect directly from you may include the following: if you express an interest in obtaining additional information about our services, request customer support, use our any or similar features, register to use our website, sign up for an event or webinar, or download certain content, we generally require you to provide us with your contact information, such as your name, job title, company name, address, phone number, email address, or username and password; if you use and interact with our website, we automatically collect log files and other information about your device and your usage of our website through cookies, web beacons or similar technologies, such as IP-addresses or other identifiers, which may qualify as Personal Data (view section 2&3 below). We may also obtain Personal Data from third parties. Any processing of your personal data that goes beyond the scope of the statutory permission is only possible on the basis of your express consent, or, where permitted by local laws, on the basis of our legitimate interests.

Processing Purpose
We process Personal Data for the purpose of providing the services to customers. To fulfil these purposes, we may access data to provide the services, to prevent or address service or technical problems, to respond
to customer support matters, to follow the instructions of our customer who submitted the data, or in response to contractual requirements with our customers. Personal Data will be used by nebumind in accordance with your instructions, for contract execution and as further described section
2 & 3 below. We may also process Personal Data for marketing purposes.

Who we share data with
We use a limited number of third-party providers to assist us in providing
the services to our customers, as further described in section 2&3. These third parties may access, process or store personal data in the course of providing these services, but based on our instructions only. Further we share data with the following categories:

  • Public authorities in the event of priority legislation.
  • External service providers or other contractors.
  • Other external bodies in so far as the data subject has given his consent or a transmission is permitted due to a prevailing interest.

If we receive Personal Data subject to our certification under the Privacy Shield and then transfer it to a third-party service provider acting as an agent on our behalf, we have certain liability under the Privacy Shield if both (i) the agent processes the personal data in a manner inconsistent with the Privacy Shield and (ii) we are responsible for the event giving rise to the damage.

Duration of data storage
The duration of data storage depends on the statutory storage requirements and is usually 10 years.

 

 

2. How we use, process, and disclose your information on the website

Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies,” text files that are stored on your computer and that allow an analysis of your use of the website. Google Analytics also creates a remarketing tag to retarget a user via Google Ads. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the US and stored there. However, in the event IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other signatory states to the Treaty on the European Economic Area. The full IP address will be transmitted to a Google server in the USA and shortened there only on an exceptional basis. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators, and providing other services to website operators relating to website activity and internet usage. Google will not associate the IP address transmitted under Google Analytics by your browser with other data held by Google. You may prevent the storage of cookies by selecting the appropriate settings on your browser software; however, we should inform you in this case that you might not be able to enjoy all of the functionality of this website to its full extent. You may additionally prevent the recording of the data (including your IP address) to Google that is generated by the cookie and that pertains to your use of the website, or the processing of these data, by downloading and installing the following browser plug-in available through the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

LinkedIn
Our online presence uses the so-called “LinkedIn Insight Tag” of the network LinkedIn. Provider is the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. We use the LinkedIn Insight Tag to track conversions, retarget website visitors, and unlock additional insights about members interacting with our LinkedIn adverts. The LinkedIn Insight Tag enables the collection of metadata such as IP address information, timestamp, and events such as page views. All data is encrypted. The LinkedIn browser cookie is stored in a visitor’s browser until they delete the cookie or the cookie expires. With the help of the LinkedIn Insight Tag we are able to analyse the success of our campaigns within the LinkedIn platform or determine target groups for them based on the interaction of the users with our website. If you are registered with LinkedIn, it is possible for LinkedIn to associate your interaction with our online services with your user account.

LinkedIn is certified under the Privacy Shield Agreement and therefore guarantees compliance with European data protection legislation. You can permanently opt out on this link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. For more information on the LinkedIn Privacy Policy, go to: https://www.linkedin.com/legal/privacy-policy. LinkedIn advertising cookie is used on the basis of Art. 6 (1) (f) GDPR. We have a legitimate interest in analysing user behaviour to optimize our website and advertising.

Use of cookies
We use “cookies” and similar technologies to increase user-friendliness (“cookies” are text files sent by the web server to the user’s browser and stored there for later retrieval). You can prevent the use of “cookies” in general if you set your browser to disallow the storage of “cookies.”

 

 

3. How we use, process, and disclose your information on specific activities

Specific information about the application process

Affected data:
Application information

Processing Purpose:
Implementation of application process

Categories of recipients:
Public authorities in the event of priority legislation. External service providers or other contractors.Other external bodies in so far as the data subject has given his consent or a transmission is permitted due to a prevailing interest.

Third-country transfers:
As part of contractual execution, processors could also be used outside the European Union.

Duration of data storage:
Application data will generally be deleted within four months after communication of the decision, unless consent has been given for a longer period of data storage.

 

Specific information for the processing of customer data/prospective parties’ data

Affected data:
Data communicated for contract execution; if necessary, additional data for processing on the basis of your express consent. Data required for processing in relation to marketing activities on the basis of your express consent or, where permitted by local laws, our legitimate business interest.

Processing Purpose:
Contract execution. Marketing our products and services to you.

Categories of recipients:
Public authorities in the event of priority legislation. External service providers or other contractors.Other external bodies in so far as the data subject has given his consent or a transmission is permitted due to a prevailing interest.

Third-country transfers:
As part of contractual execution, processors could also be used outside the European Union.

Duration of data storage:
The duration of data storage depends on the statutory storage requirements and is usually 10 years.

 

Specific information on the processing of employee data

Affected data:
Data communicated for contract execution; if necessary, additional data for processing on the basis of your express consent.

Processing Purpose:
Contract execution.

Categories of recipients:
Public authorities in the event of priority legislation. External service providers or other contractors.Other external bodies in so far as the data subject has given his consent or a transmission is permitted due to a prevailing interest.

Third-country transfers:
As part of contractual execution, processors could also be used outside the European Union.

Duration of data storage:
The duration of data storage depends on the statutory storage requirements and is usually 10 years.

 

Specific information for the processing of supplier data

Affected data:
Data communicated for contract execution; if necessary, additional data for processing on the basis of your express consent.

Processing Purpose:
Contract execution.

Categories of recipients:
Public authorities in the event of priority legislation. External service providers or other contractors.Other external bodies in so far as the data subject has given his consent or a transmission is permitted due to a prevailing interest.

Third-country transfers:
As part of contractual execution, processors could also be used outside the European Union.

Duration of data storage:
The duration of data storage depends on the statutory storage requirements and is usually 10 years.

 

 

4. Identifying the Data Controller and DPO

Controller for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in Member states of the European Union and other provisions related to data protection is:

nebumind GmbH
Willy-Messerschmitt-Straße 1
82024 Taufkirchen
Germany
Phone: +49 89 21537996

Contact details of the data protection officer:
DataCo GmbH
Dachauer Straße 65
80335 München
Deutschland
+49 89 7400 45840
www.dataguard.de

 

 

5. Your rights

According to the General Data Protection Regulation 2016/679 of the European parliament and of the council of 27 April 2016 (the “Regulation”), you have – at any time – a right of access, correction, and deletion of your data. In certain circumstances you also have the right to request the restriction of processing your Personal Data, to object to processing of your Personal Data, as well as the right to define guidelines related to the fate of your Personal Data after your death.

You have the right to object to your Personal Data being processed by us on the basis of our legitimate interests.

Where we are relying on consent to process your Personal Data you may withdraw your consent at any time. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.

You also have the right to receive Personal Data which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller under conditions and in accordance with the regulation.

Get in touch.

 

Phone

+49 89 21537996

Mail

info@nebumind.com