Privacy Policy / Data processing information

Hereby we inform you about the processing of your personal data by the disy Informationssysteme GmbH and your entitled rights.

1. Who is responsible for the data processing and how do I contact the data security officer?

Responsible according to Art. 4 Nr. 7 GDPR for the data processing is:

disy Informationssysteme GmbH

Ludwig-Erhard-Allee 6, 76131 Karlsruhe

+49 (0)721 16006000, +49 (0)721 1600605

datenschutz@disy.net

Represented by: Claus Hofmann

You can contact our data security officer at the contact details above or by mail: datenschutz@disy.net

2. What is the purpose of the processing of my personal data and on which legal basis does it take place?

We process your personal data respecting the stipulations of the General Data Protection Regulation (GDPR), the new national privacy law (BDSG-neu) as well as all other relevant laws only as far as it is necessary for the information and services on this website.

In case of a strictly informational use of the website, e.g. when you don’t sign up or register for the use of the website, we do not collect personal data from you, except your browser passes data to enable your visit on our website. These are:

• IP-Adresse
• Date and time of the request
• Difference of time zones to Greenwich Mean Time (GMT)
• Content of the request (concrete page)
• Status of access/HTTP-Statuscode
• Respectively passed amount of data
• Website of origin of the request
• Browser
• Operating system and surface
• Language and Version of browser software.

To ensure the functionality of the website, we save the logfiles. Additionally, this data helps to ensure the safety of our IT-systems and to optimize the website.

Art. 6 Abs. 1 lit. f GDPR provides the legal basis of the temporary saving of the data and logfiles.

If the processing of personal data is justified by an consent of the affected, the legal basis is Art. 6 Abs. 1 lit. a GDPR.

In case our company is subject to a commitment, whereas its execution requires the processing of personal data, Art. 6 Abs. 1 lit. c GDPR is the legal basis.

Art. 6 Abs. 1 lit. d GDPR is also the legal basis, if vitally important interests of the affected persons or another individual requires the processing of the personal data.

If personal Data is processed in order to maintain the company’s or a third party’s interests, the interests, fundamental rights and freedoms of the affected persons are subordinated. Art. 6 Abs. 1 lit. f GDPR is the legal basis of this processing.

Personal Data can be passed to our IT-service provider in order to facilitate this website.

3. Data security

We maintain current technical measures to ensure data security, in particular to protect your personal data from dangers while transferring data as well as acquaintance of third parties. These will be modified according to the most recent technical standards.

4. Disy-News 

You can subscribe to news-mailings that inform you regularly about certain topics (events, instructions, news about products and services, customer’s references, information about Disy) in the format of regular newsletters or mails due to a certain event by giving your consent.

We use the so-called “double-opt-in-process” for the registration to our newsflashes. This means, that we’ll send a confirmation e-mail to the given e-mail address, where we ask for your consent to receive newsletters. Not confirmed registrations will be deleted after two workdays at latest. If you confirm the wish to receive the newsletters after having received our news-mailings, we will save your e-mail address, as well as all the data you have provided. The storage serves the only purpose to send newsletters to you. Furthermore, we will save the date when you are logging in and confirming your IP-address, in order to prevent the misuse of your personal data.

The declaration of the e-mail address is obligatory for the reception of news. The declaration of further, explicitly marked information columns is optional and will be used for a personalization or clustering of the news-mailings.

Sent e-mails use so-called “Web-Beacons” or “Tracking-Pixels” for this evaluation. These are one-pixel picture files, that allow us to evaluate your user behaviour. This happens by processing the respective data and web-beacons, that are assigned to your e-mail-address and are linked to an own personal ID. Links contained in the news-mails also contain this ID.

We’d like to point out, that we use your personal data explicitly for shipment and aggregated for a statistical analysis of user behaviour (click-rate, opening-rate, type of e-mail-client, frequency of clicks on links in the e-mails). This serves the purpose of improving our offering for you. There are no conclusions being made regarding the user’s behaviour of single persons.

Your consent regarding the reception of news can be withdrawn at any time. The withdrawal can be declared by clicking on a link provided in every news-mail, per e-mail to disy-news@disy.net or by message to the address given in the imprint. Your provided Data will be explicitly passed on to the used service provider for the sending of the newsletter.

The consent of the user according to Art. 6 para. 1 lit. a GDPR is the legal basis for the processing of data after the news-registration by the user. As soon as data isn’t necessary anymore for the purpose it was collected for, the data will be deleted from the subscriber’s portfolio. Accordingly, data from newsletter’s subscribers will only be saved in the subscriber’s portfolio for the duration of the subscription.

5. Moosend

Moosend is used for newsletter distribution. Your data will be transmitted to Moosend Ltd. Moosend is prohibited from selling your data and using it for purposes other than sending our news. Moosend is a European certified provider, which has been selected according to the requirements of the General Data Protection Regulation. You can find more information here: www.moosend.com/trust. In addition, there is a more detailed explanation of the tracking functionality included there. It is beyond my knowledge whether this is currently technically accurate. The software Moosend used by Disy contains its own tracking system. This is used to measure how many of the recipients who received the news also opened it and how many clicked on the individual links. Moosend integrates an image (approx. 1 x 1 pixel) into each e-mail. As soon as this image is displayed to the opener and thus retrieved from one of the servers, it can be traced that and when the image was retrieved. This information is stored and aggregated to indicate a unique open rate. By registering and storing every single click on a link, it is possible to measure the click rate. This is realized by rewriting every single link in the news into a unique link. These URLs (also called "tracking domains") belong to Moosend and are structured according to the scheme n2g01.com, n2g02.com, n2g03.com, and so on. This information is anonymized and aggregated so that numbers are available, but they are not attributed to individuals. The information is used to evaluate the use of the News, to compile reports on recipient activity, to tailor the News to requirements and to provide interesting content.

6. Contact via e-mail

Contact can be established through the provided e-mail address. The personal data of the user transferred in the e-mail will be saved by us.

Legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR in the case of a given consent. Given the case, that the purpose of the established contact is to conclude a contract, the legal basis is Art. 6 para. 1 lit. b GDPR.

The personal data collected by us will be deleted upon request. Further communication can not be entertained in that case, as all personal data that has been saved in the course of the approach will be deleted.

7. Use of Matamo

This website uses the web analytics service Matomo (formerly: Piwik) to evaluate user access to this website. No cookies are used for tracking.

If you call up individual pages of our website, the following data is processed:

1. two bytes of the IP address of the user's calling system
2. the website called up
3. the website from which the user reached the accessed website (referrer)
4. the subpages accessed from the accessed web page
5. the time spent on the website
6. the frequency with which the web page is accessed
7. user interactions with content blocks (e.g. forms), but not their content
8. date and time
9. main language of the browser
10. user agent of the browser
11. screen resolution
12. files downloaded from the website

The aforementioned analysis software runs exclusively on the servers of our website. A processing of the personal data of the users takes place exclusively there. There is no transmission of data to third parties.

If you have activated the "Do-not-track default setting" in your web browser, this will be respected and taken into account by Matomo.

The software is configured in such a way that your IP address is only processed in a shortened form, i.e. 2 bytes of the IP address are masked (e.g. 192.168.xxx.xxx). Therefore, an assignment of the shortened IP address to the calling computer and thus your location is no longer possible.

The tracking is done via a so-called Java Script. If you do not wish this, you must stop the execution via a so-called "No-Script Plug-In". You can find more information about this on the provider page of your web browser.

The legal basis for the processing of the users' personal data is Art. 6 para. 1 cl.1 lit. f GDPR. The processing of the users' personal data enables us to analyze the surfing behavior of our users. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness. In these purposes also lies our legitimate interest in the processing of data in accordance with Art. 6 para. 1 cl. lit. f GDPR. By anonymizing the IP address, the interest of users in their personal data protection is sufficiently taken into account.

The data is deleted as soon as it is no longer required for our recording purposes. This is the case after 180 days. For more information on the privacy settings of the Matomo software, please see the following link: matomo.org/docs/privacy/.

8. Inclusion of YouTube-Videos

We included YouTube-Videos in our online range of products, which are saved on www.YouTube.com and are directly playable from our Website. These are all included in the “extended data-protection-mode”, which means, that no data about you as a user will be given to YouTube, if you don’t play the videos. The two types of data mentioned above will only be transmitted when playing the video. We don’t have any influence on this process.

By visiting the website YouTube receives the information, that you have accessed the sub-website on our website. Additionally, the Data mentioned in “2.” of this declaration will be transmitted. This happens independent of the circumstance, if this third-party provider provides a user account, where you are logged in to, or if there isn’t any user account. If you are logged in to your Google account, data will be directly referred to your account. If you do not wish the reference to your profile at YouTube, you need to log out before clicking on the button.

YouTube saves the data as user’s profiles und uses these for the purpose of advertisement, market research and/or the at-scale composition of its website. An evaluation like this takes place (also for users, that are not logged in) in order to generate scaled advertisement und to inform other users of the social network about the activities on our website. They have a right of objection against the composition of these user’s profiles. They have to address their objection to YouTube.

Legal basis for the processing of the personal data of the users is Art. 6 Abs. 1 lit. f GDPR. We offer you the possibility to interact with social networks and other users in order to improve our products and to be more attractive to you as a user.

Contact details of the third-party provider: YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, : policies.google.com/technologies/product-privacy and www.google.de/intl/de/policies/privacy. Google processes your personal data in the U.S.A.

9. Click Meeting

If you would like to register for a live webinar offered by us, we need an e-mail address as well as first name, last name, company, division, business address. We will ask for this information in the registration form so that we can register you for the respective webinar. To conduct live webinars over the Internet, we use the ClickMeeting software. ClickMeeting is responsible for the provision of the service and the associated data processing. Therefore, in order to conduct a webinar, your registration data (company, first name, last name, e-mail address) is transmitted to ClickMeeting. In order to protect your data from unlawful transmission, we have concluded a contract with ClickMeeting for order processing according to GDPR. During registration and participation in a webinar the following data is collected and stored at ClickMeeting: e-mail address, first name, last name, company, date and time of registration, browser and system data, IP address, language, time zone. In addition, data that you may provide in the chat history as well as usage data resulting from registration and participation in the webinar. The webinar content transmitted during the webinar is recorded and stored in the ClickMeeting solution. The following data can be stored: - Audio and/or video of the speaker - Audio and/or video display of the participants - Chat Information of the participants transmitted via the chat function is neither recorded nor stored. We use the opportunity to offer webinars to communicate the functions of our software solutions to our interested parties and customers and to explain the advantages of using our software. In the above-mentioned data processing operations and the stated purposes of processing, our legitimate interest is based on the legal basis of Art. 6 para. 1 S.1 lit. f) GDPR. For the recording, we require your consent in accordance with Art. 6 para. 1 S.1 lit. a) GDPR.

10. Inclusion of Google Maps

We use the service of Google Maps on this website. We can hereby show interactive maps directly on the website and facilitate the comfortable use of the maps application.

By visiting the website YouTube receives the information, that you have accessed the sub-website on our website. Additionally, the Data mentioned in “2.” of this declaration will be transmitted. This happens independent of the circumstance, if this third-party provider provides a user account, where you are logged in to, or if there isn’t any user account. If you are logged in to your Google account, data will be directly referred to your account. If you do not wish the reference to your profile at Google, you need to log out before clicking on the button.

Google saves the data as user’s profiles und uses these for the purpose of advertisement, market research and/or the at-scale composition of its website. An evaluation like this takes place (also for users, that are not logged in) in order to generate scaled advertisement und to inform other users of the social network about the activities on our website. They have a right of objection against the composition of these user’s profiles. They have to address their objection to Google.

Contact details of the third-party provider: Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; www.google.de/intl/de/policies/privacy and policies.google.com/technologies/product-privacy. Google processes your personal data in the U.S.A.

11. What rights am I entitled with in regard of data protection?

As far as no opposing professional code of practice is given, you are entitled to/with:

- Withdraw the consent you gave to us at any time, according to Art. 7 Abs. 3 GDPR. We will not be able to proceed processing the kind of data that was legitimated by the withdrawn consent. 

- Demand information about the processed personal data by us at any time according to Art. 15 GDPR. You can demand Information especially about processing purposes, the category of personal data, as well as its origin, the categories of addressees, where the personal data has been revealed to or will be revealed, as well as the purpose and the planned time of storage, the right of correction, deletion, constriction of processing or objection, the existence of a right of complaint, the origin of your data, as far as they haven’t been collected by us, as well as the existence of an automated decision finding, profiling and if necessary significant information about details included; 

- Demand the correction or completion of incorrect or incomplete of your personal data saved by us according to Art. 16 GDPR; 

- Demand the deletion of your personal data saved by us according to Art. 17 GDPR, if the processing is not necessary to execute one’s freedom of speech and information, to fulfil legal commitments, to claim, execute of defend legal rights or if no reasons of public interest justify the processing; 

- Demand to limit the processing of your personal data according to Art. 18 GDPR, if the accuracy of the data is denied by you, the processing is not authorised, you however decline the deletion and we have no further use for the personal data and you need the personal data to claim or defend legal rights or you file an objection against the processing according to Art. 21GDPR; 

- Demand to receive yourself or to pass on your personal data to another responsible, which you have supplied, in a structured and machine-readable format according to Art. 20 GDPR and 

- File a complaint to a surveying administration according to Art. 77 GDPR. Usually this is the surveying administration at your private or professional location or the location of our office. 

Please address all requests or objections regarding the data processing via e-mail to datenschutz@disy.net or to the address mentioned in the legal details.

12. Minors

We don’t collect personal information of minors. If this still happens to be by accident, we will delete the personal data without further delay.

13. Can I object the processing of my personal data?

You have the right to object a processing of your personal data, which is used for direct advertising purposes without explanation. If we process your personal data to preserve justified interests, you can object the processing, if you state a reason, which origins from your special personal situation. We will cease to process your personal data, if we don’t state a coercible reason that requires protection, that prevails your interests, rights and freedoms or is needed to claim or defend legal rights.

The collection of personal data and its storage in logfiles is essential to facilitate the website for users and in order to assure its operation. Because of this circumstance, there is no possibility to object for the user.

If logfiles will be saved, they are deleted within 30 days. A further going processing will not take place.

14. Do I have the possibility of complaint? 

If you think, that the processing of your personal data by us is unrightfully or violates the data protection laws in another way, you can file your complaint at a responsible survey administration:

The county’s agent for data protection and freedom of information in Baden-Württemberg

Königstraße 10a

70173 Stuttgart