Thank you for visiting our website and for your interest in our company. The protection and security of our customers’ and users’ data are important to us. We have therefore designed our website and our business processes in such a way that as little personal data as possible is collected or processed. The following privacy policy explains what information we collect during your visit to our website. This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., inquiries to the person responsible). You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser line. Responsible party in the sense of data protection law

doks. innovation GmbH
Ludwig-Erhard-Str. 10
34131 Kassel
Germany

Contact details of the data protection officer: Our external data protection officer is Stefan Pietsch, who can be contacted via Pietsch IT GmbH, Wilhelmshöher Straße 1, 34590 Wabern, telephone: +49 5683 92344-0, fax: +49 5683 92344-19, datenschutz@pietsch-it.de, www.pietsch-it.de.

Definitions

Our privacy policy should be simple and understandable for our customers and visitors. In this privacy policy, the official terms of the General Data Protection Regulation (GDPR) are generally used. You can read the official definitions in Art. 4 DSGVO.

What data do we collect from you? We process so-called access data (in particular your IP address) on our website for statistical evaluations for the purpose of the operation, security and technical optimization of our website. This enables us to present our website to you more effectively and to identify errors. We collect access data when you call up our website and store it in a log file (so-called log file). Collected data includes the name of the website called up, the file called up, the date and time of the call, the amount of data transferred and notification of successful call, the browser type and version, the operating system, the so-called referrer URL (the previously visited page) as well as the requesting provider and your IP address. You are not identifiable to us from this data. Log data is regularly deleted by us in a timely manner. The legal basis for this data processing is our legitimate interest according to Art. 6 para. 1 lit. f) DSGVO.

How do we collect your data? When you access our website, the access data is logged automatically. Otherwise, all other data is collected through your input.

What do we use your data for? We use your data to provide our services and to optimize and protect our website. With your consent, we use your input to respond to your contact request. We use your data only for the purposes listed.

Contact form If you use our contact form, the information you provide in the form, including the contact data you enter there, will be stored by us for the purpose of processing the request and in case of follow-up questions. We do not pass on this data without your consent.

The processing of this data is based on Art. 6 (1) lit. b DSGVO, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of requests addressed to us (Art. 6 para. 1 lit. f DSGVO) or on your consent (Art. 6 para. 1 lit. a DSGVO) if this was requested.

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (usually after we have completed processing your request). Mandatory legal provisions – in particular retention periods – remain unaffected.

Cookies So-called “cookies” are used on our site. Cookies are small text files used by websites. They simplify and accelerate the control of your visit to our website or are necessary to enable you to use our website. If you do not want our website to use cookies on your computer, you can disable cookies in your browser settings or adjust the settings so that you are informed when cookies are used on a website.

Depending on where a cookie comes from, it can be categorized into so-called first-party cookies and third-party cookies.

First-party cookies Cookies that are generated and stored locally by the website operator, as the controller, or by a processor commissioned by the operator. Only the operator has access to these cookies.

Third-party cookies Cookies that are generated, set and accessed by third-party providers that are not acting as processors on behalf of the website operator.

Depending on the validity period, a distinction can also be made between so-called transient and persistent cookies:

Transient cookies Cookies that are automatically deleted when you close the browser. These include in particular the session cookies.

Persistent cookies Cookies that remain stored on your terminal device for a specified period of time after you close the browser.

Depending on their nature and purpose, the use of certain cookies may require the consent of the user. In this respect, cookies can be differentiated according to whether the user’s consent is mandatory for their use:

Non-consent cookies Cookies that are strictly necessary for the website operator, expressly requested by the subscriber or user, to provide that service (“Strictly Necessary Cookies”).

Cookies requiring consent, which are used for all purposes other than those mentioned above.

Technically necessary cookies

The cookies we use are so-called “technically necessary cookies”. Technically necessary cookies help to make a website usable by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies. These cookies are set automatically when you access our website or a particular feature unless you have prevented cookies from being set through settings in your browser.

Our cookies are only needed for the duration of your current service call or session and are deleted again or lose their validity as soon as you leave our website or your current session expires (so-called “session cookies”).

We also use tracking technology on our website to measure and evaluate our website and optimize our content. To protect our users and partners, we can also detect and prevent fraud and security risks.

Google Analytics

We use Google Analytics, a web analytics service provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4. Ireland (“Google”).

Google Analytics enables the website operator to analyze the behavior of website visitors. In doing so, the website operator receives various usage data, such as page views, duration of visit, operating systems used and origin of the user. This data may be summarized by Google in a profile that is assigned to the respective user or their end device.

Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there.

The use of this analysis tool is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. If corresponding consent has been requested (e.g. consent to store cookies), the processing is based exclusively on Art. 6 (1) a DSGVO; the consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission.

Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

IP anonymization We have activated the IP anonymization function on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

Browser Plugin You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

For more information on how Google Analytics handles user data, please see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Storage period Data stored by Google at user and event level that is linked to cookies, user identifiers (e.g. user ID) or advertising IDs (e.g. double click cookies, Android advertising ID) is anonymized or deleted after 14 months. For details, please see the following link: https://support.google.com/analytics/answer/7667196?hl=en

Google reCAPTCHA

We use “Google reCAPTCHA” on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of reCAPTCHA is to check whether the data input on this website (e.g. in a contact form) is made by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run completely in the background. Website visitors are not notified that an analysis is taking place.

The storage and analysis of the data is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in protecting its web offers from abusive automated spying and from SPAM. If a corresponding consent was requested, the processing is based exclusively on Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.

For more information about Google reCAPTCHA, please see the Google Privacy Policy and the Google Terms of Service at the following links: https://policies.google.com/privacy?hl=en and https://policies.google.com/terms?hl=en.

Social media links

The social network LinkedIn is only integrated on our website as a link to the corresponding service. After clicking on the embedded text/image link, you will be redirected to the page of the respective provider. User information will only be transferred to the respective provider after the forwarding. For information on the handling of your personal data when using these websites, please refer to the respective privacy policy of the provider used.

Data transfer and recipients Your personal data will not be transferred to third parties, unless

• • if we have explicitly referred to this in the description of the respective data processing,
• • if you have given your express consent to this in accordance with Art. 6 Para. 1 S. 1 lit. a DSGVO,
• • the disclosure is necessary for the assertion, exercise or defense of legal claims pursuant to Art. 6 (1) p. 1 lit. f DSGVO and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,
• • in the event that there is a legal obligation for disclosure pursuant to Art. 6 (1) p. 1 lit. c DSGVO, and
• • insofar as this is necessary for the processing of contractual relationships with you according to Art. 6 para. 1 p. 1 lit. b DSGVO.
• We have concluded order processing agreements pursuant to Art. 28 DSGVO with our service providers, who are responsible for web hosting, sending e-mails, and maintenance and care of our IT systems, etc. The service providers will not share this data with third parties.

Your data subject rights With regard to the data processing listed here, you are entitled to various data subject rights that are regulated in the GDPR.

Right of access You first have the right to obtain information about the data you have provided to us and which we have processed (Art. 15 DSGVO).

Right to rectification, erasure and restriction In addition, you can request the rectification (Art. 16 GDPR), erasure (Art. 17 GDPR) and restriction (Art. 18 GDPR) of your data.

Right to data portability and right to object You also have a right to data portability (Art. 20 GDPR) and a right to object (Art. 21 GDPR).

Right to complain You have the right to complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of the federal state of our registered office or, if applicable, that of your usual place of residence or workplace.

Without prejudice to any other administrative or judicial remedy, you also have the right to lodge a complaint with a data protection supervisory authority. For this purpose, you can contact the data protection supervisory authority of your usual place of residence or our company headquarters. The address of the supervisory authority responsible for us is:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestrasse 2 – 4, 40213 Düsseldorf, Germany

Final provisions We reserve the right to adapt this data protection declaration at any time so that it always complies with the current legal requirements or in order to implement changes to the services in the data protection declaration, e. g. when introducing new services or changes to the website. The new data protection declaration will then apply to a renewed call-up of this website.

Status of this privacy policy: February 2021