Privacy policy

Company: Equitania Software GmbH, Weiherstraße 13, 75173 Pforzheim, Germany

Telefon: +49 7231 166 040

Fax: +49 7231 166 04 200

E-Mail:  info@equitania.de

Managing directors: Martin Schmid, Hannes Bischoff

Register court: Mannheim

Register number. HRB 511803

Sales tax identification number according to § 27a sales tax law: DE814544688

Data protection officer: Laura Zerwas, zerwas@cmc.de

 

The use of our site is possible without providing personal data. For the use of individual services on our site, different regulations may apply, which in this case will be explained separately below. Your personal data (e.g. name, address, e-mail, telephone number, etc.) will only be processed by us in accordance with the provisions of German data protection law. Data is personal if it can be clearly assigned to a specific natural person. The legal basis for data protection can be found in the Basic Data Protection Regulation (DSGVO). The following regulations inform you about the type, scope and purpose of the collection, use and processing of personal data by the provider. 

1. Grundsätzliche Angaben zur Datenverarbeitung und Rechtsgrundlagen

1.1 This data protection declaration informs you about the type, scope and purpose of the processing of personal data within our online offer and the websites, functions and contents connected with it (hereinafter jointly referred to as "online offer" or "website"). The data protection declaration applies regardless of the domains, systems, platforms and devices (e.g. desktop or mobile) on which the online offer is executed.

1.2. Die verwendeten Begrifflichkeiten, wie z.B. „personenbezogene Daten“ oder deren „Verarbeitung“ verweisen wir auf die Definitionen im Art. 4 der Datenschutzgrundverordnung (DSGVO).

1.3 The personal data of users processed within the scope of this online offer includes inventory data (e.g., names and addresses of customers), contract data (e.g., services used, names of clerks, payment information), usage data (e.g., the web pages of our online offer visited, interest in our products) and content data (e.g., entries in the contact form).

1.4 The term 'users' covers all categories of data subjects. These include our business partners, customers, interested parties and other visitors to our online offer. The terms used, e.g. "user", are to be understood in a gender-neutral way.

1.5 We process personal data of users only in compliance with the relevant data protection regulations. This means that user data will only be processed if a legal permission is available. This means, in particular, if the data processing is necessary for the provision of our contractual services (e.g. processing of orders) as well as online services, or is required by law, the consent of the users is present, as well as on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation and security of our online offer in the sense of Art. 6 para. 1 lit. f. DSGVO, in particular in the measurement of reach, the creation of profiles for advertising and marketing purposes as well as the collection of access data and the use of third-party services.

1.6 We would like to point out that the legal basis of the consents is Art. 6 para. 1 lit. a. and Art. 7 DSGVO, the legal basis for processing for the purpose of fulfilling our services and implementing contractual measures is Art. 6 para. 1 lit. b. DSGVO, the legal basis for processing for the fulfilment of our legal obligations Art. 6 para. 1 lit. c. DSGVO, and the legal basis for processing to safeguard our legitimate interests Art. 6 para. 1 lit. f. DSGVO is.

2. Sicherheitsmaßnahmen

2.1 We take organisational, contractual and technical security measures in accordance with the state of the art to ensure that the provisions of the data protection laws are complied with and to protect the data processed by us against accidental or intentional manipulation, loss, destruction or access by unauthorised persons.

2.2. Zu den Sicherheitsmaßnahmen gehört insbesondere die verschlüsselte Übertragung von Daten zwischen Ihrem Browser und unserem Server.

Our website uses SSL encryption when transmitting confidential or personal content of our users. This encryption is activated, for example, during the processing of payment transactions as well as for inquiries that you make to us via our website. Please make sure that SSL encryption is activated for corresponding activities from your side. The use of encryption is easy to recognize: The display in your browser line changes from "http://" to "https://". Data encrypted via SSL cannot be read by third parties. Please transmit your confidential information only if SSL encryption is activated and contact us if in doubt.

3. Weitergabe von Daten an Dritte und Drittanbieter

3.1. Ihre Daten werden von uns lediglich innerhalb der   Equitania Software GmbH und deren verbundenen Unternehmen innerhalb der   CMC Gruppe verwendet. An sonstige Dritte geben wir ihre Daten ausschließlich in dem im Folgenden beschrieben Umfang weiter.

3.2 Data will only be passed on to third parties within the framework of the legal requirements. We will only pass on user data to third parties if this is necessary for contractual purposes, e.g. on the basis of Art. 6 Para. 1 lit. b) DSGVO, or on the basis of justified interests in accordance with Art. 6 Para. 1 lit. f. DSGVO in the economic and effective operation of our business operations.

3.3. Sofern wir Subunternehmer einsetzen, um unsere Leistungen bereitzustellen, ergreifen wir geeignete rechtliche Vorkehrungen sowie entsprechende technische und organisatorische Maßnahmen, um für den Schutz der personenbezogenen Daten gemäß den einschlägigen gesetzlichen Vorschriften zu sorgen.

3.4 If content, tools or other means from other providers (hereinafter collectively referred to as "Third Party Providers") are used within the scope of this privacy policy and their registered office is located in a third country, it is to be assumed that a data transfer to the registered offices of the Third Party Providers will take place. Third countries are countries in which the DSGVO is not directly applicable law, i.e. countries outside the EU or the European Economic Area. Data is transferred to third countries either if there is an appropriate level of data protection, user consent or other legal permission.

4. Erbringung vertraglicher Leistungen

4.1 We process inventory data (e.g., names and addresses as well as contact data of users), contract data (e.g., services used, names of contact persons, payment information) for the purpose of fulfilling our contractual obligations and services in accordance with Art. 6 para. 1 lit b. DSGVO.

4.2 If you wish to use the paid services offered on our website, we may need to collect further data from you for billing purposes and for security reasons. This regularly involves your name, a valid e-mail address and, if necessary, your address and telephone number, as well as further information depending on the individual case. This may also involve content that allows us to check the data provided, such as your ownership of the e-mail address provided. For legal reasons, we must ensure that you actually wish to receive the services offered and that we are able to invoice you for the services properly. We use the SSL encryption standard, recognizable by the browser line "https://", to secure your data in payment transactions.

4.3 Users can optionally create a user account, in particular by viewing their orders. During the registration process, the required mandatory data will be provided to the users. The user accounts are not public and cannot be indexed by search engines. If users have terminated their user account, their data will be deleted with regard to the user account, subject to their safekeeping is necessary for reasons of commercial or tax law in accordance with Art. 6 para. 1 lit. c DSGVO. It is the users' responsibility to back up their data before the end of the contract if they have terminated it. We are entitled to irretrievably delete all user data stored during the term of the contract.

4.4 Within the scope of registration and renewed logins and use of our online services, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests, as well as the user's protection against misuse and other unauthorized use. As a matter of principle, this data is not passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so in accordance with Art. 6 Para. 1 lit. c DSGVO.

4.5 We process usage data (e.g., the visited web pages of our online offer, interest in our products) and content data (e.g., entries in the contact form or user profile) for advertising purposes in a user profile, in order to show the user e.g., product information based on their previously used services.

5. Kontaktaufnahme

5.1 When contacting us (via contact form or e-mail), the user's details will be processed for the purpose of handling the contact request and its processing in accordance with Art. 6 para. 1 lit. b) DSGVO.

5.2. Die Angaben der Nutzer können in unserem Customer-Relationship-Management System ("CRM System") oder vergleichbarer Anfragenorganisation gespeichert werden.

6. Erhebung von Zugriffsdaten und Logfiles

6.1 On the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f DSGVO data about every access to the server on which this service is located (so-called server log files). The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited site), IP address and the requesting provider.

6.2 For security reasons (e.g. for the investigation of abuse or fraud) log file information is stored for a maximum of seven days and then deleted. Data whose further storage is required for evidential purposes is excluded from deletion until final clarification of the respective incident.

7. Cookies & Reichweitenmessung

7.1 Cookies are information that is transferred from our web server or web servers of third parties to the web browsers of the users and stored there for later retrieval. Cookies can be small files or other types of information storage.

7.2 We use "session cookies", which are only stored for the duration of the current visit to our online presence (e.g. to enable the storage of your login status or the shopping basket function and thus the use of our online offer at all). A randomly generated unique identification number, a so-called session ID, is stored in a session cookie. In addition, a cookie contains information about its origin and the storage period. These cookies cannot store any other data. Session cookies are deleted when you have finished using our website and, for example, log out or close the browser.

7.3. Über den Einsatz von Cookies im Rahmen pseudonymer Reichweitenmessung werden die Nutzer im Rahmen dieser Datenschutzerklärung informiert.

7.4 If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional limitations of this online offer.

7.5. Sie können dem Einsatz von Cookies, die der Reichweitenmessung und Werbezwecken dienen, über die Deaktivierungsseite der Netzwerkwerbeinitiative ( http://optout.networkadvertising.org/ ) und zusätzlich die US-amerikanische Webseite ( http://www.aboutads.info/choices ) oder die europäische Webseite ( http://www.youronlinechoices.com/uk/your-ad-choices/ ) widersprechen.

8. Einbindung von Diensten und Inhalten Dritter

8.1 Within our online offer, we set the following priorities on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO), we use content or service offers from third parties in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as "content"). This always presupposes that the third-party providers of such content are aware of the IP address of the users, as without the IP address they would not be able to send the content to their browsers. The IP address is therefore required to display this content. We make every effort to use only such content whose respective providers use the IP address only to deliver the content. Third party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. Pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may contain, among other things, technical information on the browser and operating system, referring web pages, visiting time and other details on the use of our online offer, as well as being able to be linked to such information from other sources.

8.2 The following lists offer an overview of third party providers and their contents, as well as links to their data protection declarations, which contain further information on the processing of data and, in some cases already mentioned here, possibilities for objection (so-called opt-out):

9. Google Analytics mit Anonymisierungsfunktion

9.1 On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO) Google Analytics, a web analysis service of Google Inc. ("Google"). Google uses cookies. The information generated by the cookie about the use of the website by the user is usually transferred to a Google server in the USA and stored there.

9.2. Google ist unter dem Privacy-Shield-Abkommen zertifiziert und bietet hierdurch eine Garantie, das europäische Datenschutzrecht einzuhalten ( https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active ).

9.3 Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with further services associated with the use of this online offer and the use of the Internet. The processed data can be used to create pseudonymous user profiles of the users.

9.4 We use Google Analytics in order to display the advertisements placed within the advertising services of Google and its partners only to those users who have also shown an interest in our online offer or who show certain characteristics (e.g. interests in certain topics or products determined by the websites visited) which we transmit to Google (so-called "remarketing" or "Google Analytics Audiences"). With the help of remarketing audiences, we also want to ensure that our advertisements correspond to the potential interest of the users and do not appear annoying.

9.5. Wir setzen Google Analytics nur   mit aktivierter IP-Anonymisierung ein. Das bedeutet, die IP-Adresse der Nutzer wird von Google innerhalb von Mitgliedstaaten der Europäischen Union oder in anderen Vertragsstaaten des Abkommens über den Europäischen Wirtschaftsraum gekürzt. Nur in Ausnahmefällen wird die volle IP-Adresse an einen Server von Google in den USA übertragen und dort gekürzt.

9.6 The IP address transmitted by the user's browser is not merged with other data from Google. Users can prevent the storage of cookies by adjusting their browser software accordingly; users can also prevent the collection of data generated by the cookie and related to their use of the online offer to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link:  http://tools.google.com/dlpage/gaoptout?hl=de .

9.7. Weitere Informationen zur Datennutzung durch Google, Einstellungs- und Widerspruchsmöglichkeiten erfahren Sie auf den Webseiten von Google:  https://www.google.com/intl/de/policies/privacy/partners  („Datennutzung durch Google bei Ihrer Nutzung von Websites oder Apps unserer Partner“),  http://www.google.com/policies/technologies/ads  („Datennutzung zu Werbezwecken“),  http://www.google.de/settings/ads  („Informationen verwalten, die Google verwendet, um Ihnen Werbung einzublenden“).

10. Google-Re/Marketing-Services

10.1 On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO) the marketing and remarketing services (in short "Google Marketing Services") of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, ("Google").

10.2. Google ist unter dem Privacy-Shield-Abkommen zertifiziert und bietet hierdurch eine Garantie, das europäische Datenschutzrecht einzuhalten ( https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active ).

10.3 Google's marketing services allow us to display ads for and on our website in a more targeted manner so that we only show users ads that potentially match their interests. For example, if a user is shown ads for products that he or she has been interested in on other websites, this is called "remarketing". For these purposes, when you visit our website and other websites where Google marketing services are active, Google will execute code directly from Google and (re)marketing tags (invisible graphics or code, also known as "web beacons") will be embedded in the website. With their help, an individual cookie, i.e. a small file, is stored on the user's device (comparable technologies can also be used instead of cookies). The cookies can be set by various domains, including  google.com doubleclick.net invitemedia.com admeld.com googlesyndication.com  oder  googleadservices.com . This file records which websites the user has visited, what content he is interested in and which offers he has clicked on, as well as technical information on the browser and operating system, referring websites, visiting time and other information on the use of the online offer. The IP address of the user is also recorded, whereby we inform within the framework of Google Analytics that the IP address is shortened within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and only in exceptional cases is it transferred in full to a Google server in the USA and shortened there. The IP address will not be merged with data of the user within other offers of Google. Google may also combine the above-mentioned information with information from other sources. If the user subsequently visits other websites, advertisements tailored to the user's interests may be displayed.

10.4 The data of the users are processed pseudonymously within the framework of the Google marketing services. This means that Google does not store and process, for example, the name or e-mail address of the user, but processes the relevant data in a cookie-based manner within pseudonymous user profiles. This means that from Google's point of view, the ads are not managed and displayed for a specifically identified person, but for the cookie holder, regardless of who that cookie holder is. This does not apply if a user has expressly permitted Google to process the data without this pseudonymisation. The information collected by Google marketing services about users is transmitted to Google and stored on Google's servers in the USA.

10.5. Ferner können wir den   "Google Tag Manager" einsetzen, um die Google Analyse- und Marketing-Dienste in unsere Website einzubinden und zu verwalten.

10.6. Weitere Informationen zur Datennutzung zu Marketingzwecken durch Google, erfahren Sie auf der Übersichtsseite:  https://www.google.com/policies/technologies/ads , die Datenschutzerklärung von Google ist unter  https://www.google.com/policies/privacy  abrufbar.

10.7 If you wish to opt-out of interest-based advertising through Google marketing services, you may use the setting and opt-out options provided by Google:   http://www.google.com/ads/preferences.

11. Einsatz von PayPal als Zahlungsart

If you decide to pay with the online payment service PayPal during the order process, your contact details will be transmitted to PayPal in the course of the order process. PayPal is an offer from PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal assumes the function of an online payment service provider and a trustee and offers buyer protection services.

Personal information submitted to PayPal is usually first name, last name, address, phone number, IP address, email address, or other information necessary to process the order, as well as information related to the order, such as the number of items, item number, invoice amount and taxes in percent, billing information, etc.

This transmission is necessary to process your order with the payment method you have chosen, in particular to confirm your identity, to administer your payment and the customer relationship.

However, please note: PayPal may also disclose personal data to service providers, subcontractors or other associated companies if this is necessary to fulfil the contractual obligations arising from your order or if the personal data is to be processed on behalf of PayPal.

Depending on the payment method selected via PayPal, e.g. invoice or direct debit, the personal data transmitted to PayPal is transmitted by PayPal to credit agencies. This transmission is used to verify your identity and creditworthiness with regard to the order you have placed. To find out which credit agencies are involved and which data is generally collected, processed, stored and passed on by PayPal, please refer to PayPal's privacy policy at             https://www.paypal.com/de/webapps/mpp/ua/privacy-full 

12. Einsatz von Google-Maps

Wir setzen auf unserer Seite die Komponente "Google Maps" der Firma Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, nachfolgend „Google“, ein.

Each time the "Google Maps" component is called up, Google sets a cookie in order to process user settings and data when displaying the page on which the "Google Maps" component is integrated. This cookie is usually not deleted when the browser is closed, but expires after a certain time, unless you delete it manually beforehand.

If you do not agree with this processing of your data, there is the possibility to deactivate the service of "Google Maps" and thus prevent the transmission of data to Google. To do this, you must deactivate the Java-Script function in your browser. We would like to point out, however, that in this case you will not be able to use "Google Maps", or only to a limited extent.

Die Nutzung von "Google Maps" und der über "Google Maps" erlangten Informationen erfolgt gemäß den Google-Nutzungsbedingungen

http://www.google.de/intl/de/policies/terms/regional.html

sowie der zusätzlichen Geschäftsbedingungen für „Google Maps“

https://www.google.com/intl/de_de/help/terms_maps.html.

13. Einsatz von reCAPTCHA

In order to protect input forms on our site, we use the service "reCAPTCHA" of the company Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter "Google". The use of this service makes it possible to distinguish whether the corresponding input is of human origin or whether it is misused by automated machine processing.

To our knowledge, the referrer URL, the IP address, the behaviour of website visitors, information on the operating system, browser and length of stay, cookies, display instructions and scripts, the user's input behaviour and mouse movements in the "reCAPTCHA" checkbox area are transmitted to "Google".

Google uses the information obtained in this way to digitise books and other printed matter and to optimise services such as Google Street View and Google Maps (e.g. house number and street name recognition).

The IP address transmitted in the context of "reCAPTCHA" is not merged with other data from Google, unless you are logged in to your Google account at the time of using the "reCAPTCHA" plug-in. If you wish to prevent this transmission and storage of data about you and your behaviour on our website by "Google", you must log out of "Google" before you visit our site or use the reCAPTCHA plug-in.

Die Nutzung des Dienstes „reCAPTCHA“ erlangten Informationen erfolgt gemäß den Google-Nutzungsbedingungen:

https://www.google.com/intl/de/policies/privacy/

14. Einsatz von YouTube-Komponenten mit erweitertem Datenschutzmodus

On our website we use components (videos) from YouTube, LLC 901 Cherry Ave., 94066 San Bruno, CA, USA, a company of Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA.

Hierbei nutzen wir die von YouTube zur Verfügung gestellte Option " - erweiterter Datenschutzmodus - ".

When you visit a page that has embedded video, a connection to the YouTube servers is established and the content is displayed on the website by notifying your browser.

According to YouTube, in " - extended data protection mode -" only data is transmitted to the YouTube server, in particular which of our websites you have visited when you watch the video. If you are logged in to YouTube at the same time, this information is associated with your YouTube account. You can prevent this by logging out of your member account before visiting our website.

Weitere Informationen zum Datenschutz von YouTube werden von Google unter dem folgenden Link bereitgestellt:

https://www.google.de/intl/de/policies/privacy/

15. Einsatz von Twitter

Within our online offer functions of the service Twitter can be integrated. These functions are offered by Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the "Re-Tweet" function, the websites you visit are linked to your Twitter account and made known to other users. Data is also transferred to Twitter. We would like to point out that we, as the provider of the sites, have no knowledge of the content of the transmitted data or its use by Twitter. Privacy policy of Twitter under   http://twitter.com/privacy. Ihre Datenschutzeinstellungen bei Twitter können Sie in den Konto-Einstellungen unter   https://twitter.com/settings/account ändern.

16. jQuery

Externer Code des JavaScript-Frameworks “jQuery”, bereitgestellt durch den Dritt-Anbieter jQuery Foundation,   https://jquery.org.

17. Rechte der Nutzer  

17.1. Nutzer haben das Recht, auf Antrag unentgeltlich Auskunft zu erhalten über die personenbezogenen Daten, die von uns über sie gespeichert wurden.

17.2 In addition, users have the right to correct inaccurate data, restrict the processing and delete their personal data, if applicable, to assert their rights to data portability and, in case of suspected unlawful data processing, to lodge a complaint with the competent supervisory authority.17.3 Similarly, users may revoke consents, in principle with consequences for the future.

18. Deletion of data 

18.1 The data stored with us will be deleted as soon as they are no longer required for their intended purpose and no legal obligations to retain data conflict with the deletion. If the user data is not deleted because it is required for other and legally permissible purposes, its processing is restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to user data that must be retained for commercial or tax law reasons. 

18.2 In accordance with legal requirements, the storage is for 6 years in accordance with § 257 para. 1 HGB (commercial books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting vouchers, etc.) and for 10 years in accordance with § 147 para. 1 AO (books, records, management reports, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.). 

19. Right of objection 

Users can object to the future processing of their personal data in accordance with the legal requirements at any time. The objection may in particular be made against processing for the purposes of direct advertising. 

20. Changes to the privacy policy 

20.1 We reserve the right to amend the Privacy Policy in order to adapt it to changes in the law, or in the event of changes to the Service and data processing. However, this only applies with regard to declarations on data processing. Insofar as the consent of the users is required or components of the data protection declaration contain regulations of the contractual relationship with the users, the changes are only made with the consent of the users.

20.2. Die Nutzer werden gebeten sich regelmäßig über den Inhalt der Datenschutzerklärung zu informieren.