DATA PROTECTION

General data protection declaration of Emmet Software Labs and consent to data use by Emmet

 

1. General

Data protection is a matter of trust and trust is important to Emmet. We respect the privacy and personal sphere. We would now like to inform you which data Emmet collects and how it is used. You will also learn how to check the accuracy of this information and have Emmet delete it. The collection, processing and use of data is carried out in accordance with the legal data protection regulations of the country in which the body responsible for data processing is located.

This data protection information does not apply to websites on the Internet that you can visit via hyperlinks on the Emmet websites.

 

2. Name and address of the controller

Responsible within the meaning of the General Data Protection Regulation, other data protection laws applicable in the member states of the European Union and other provisions with data protection character is:

Emmet Software Labs GmbH & Co. KG

Hertzstrasse 6

32052 Herford

Germany

Email: info@emmet-software-labs.com

Website: www.emmet-software-labs.com

 

3. Use of cookies

The Emmet Software Labs GmbH & Co. KG website uses cookies. Cookies are data that are stored by the internet browser on the user’s computer system. The cookies can be transmitted to a page when it is called up and thus allow the user to be assigned. Cookies help simplifying the use of websites for users.

It is possible at any time to object to the setting of cookies by changing the settings in the Internet browser accordingly. Law cookies can be deleted. We would like to point out that if cookies are deactivated, not all functions of our website can be used to their full extent.

 

4. Creation of log files

Every time the website is accessed, Emmet Software Labs GmbH & Co. KG collects data and information through an automated system. These are saved in the server’s log files.

The following data can be collected:

  • Information about the browser type and the version used
  • The user’s operating system
  • The user’s Internet service provider
  • The user’s IP address
  • Date and time of access
  • Websites from which the user’s system reaches our website (referrer)
  • Websites that are accessed by the user’s system via our website

The processing of the data serves to deliver the content of our website, to ensure the functionality of our information technology systems and to optimize our website. The data of the log files are always stored separately from other personal data of the users.

 

5. Registration on our website

If the data subject uses the opportunity to register on the website of the person responsible for processing, stating personal data, the data in the respective input mask will be transmitted to the person responsible for processing. The data is stored solely for the purpose of internal use by the controller.

When registering, the user’s IP address and the date and time of registration are saved. This serves to prevent misuse of the services. The data will not be passed on to third parties. There is an exception if there is a legal obligation to pass it on.

Registration of the data is necessary for the provision of content or services. Registered persons can delete or change the stored data at any time. The data subject receives information about the personal data stored about them at any time.

 

6. Ways to contact us

There is a contact form on the website of Emmet Software Labs GmbH & Co. KG that can be used to contact us electronically. Alternatively, you can contact us via the email address provided. If the data subject contacts the data controller via one of these channels, the personal data transmitted by the data subject is automatically saved. The storage serves solely for the purposes of processing or contacting the data subject. A transfer of data to third parties does not take place.

 

7. Routine deletion and blocking of personal data

The data controller processes and stores personal data of the data subject only as long as is necessary to achieve the storage purpose. Storage can also take place insofar as this has been provided for by European or national legislators in Union law regulations, laws or other regulations to which the person responsible for processing is subject.

As soon as the storage purpose no longer applies or a storage period prescribed by the aforementioned regulations expires, the personal data will be routinely blocked or deleted.

 

8. Rights of the data subject

If your personal data is processed, you are the person concerned in the sense of GDPR and you have the following rights vis-à-vis the person responsible:

 

8.1 Right to information

You can request confirmation from the controller if personal data concerning you will be processed by us.

If such processing is available, you can request the following information from the person responsible:

  1. the purposes for which the personal data are processed;
  2. the categories of personal data that are processed;
  3. the recipients or the categories of recipients to whom the personal data concerning you have been or will be disclosed;
  4. the planned duration of storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period;
  5. the existence of a right to correction or deletion of your personal data, a right to restriction of processing by the person responsible or a right to object to this processing;
  6. the existence of a right to lodge a complaint with a supervisory authority;
  7. all available information about the origin of the data if the personal data is not collected from the data subject;
  8. the existence of automated decision-making, including profiling, in accordance with Art. 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information about the logic involved as well as the scope and intended effects of such processing for the data subject.

You have the right to request information as to whether the personal data relating to you are transferred to a third country or to an international organization. In this context, you can request information about the appropriate guarantees in accordance with Art. 46 GDPR to be informed in connection with the transmission.

This right to information can be limited insofar as it is likely to make the achievement of research or statistical purposes impossible or seriously impaired and the restriction is necessary for the fulfillment of the research or statistical purposes.

 

8.2 Right to rectification

You have the right to correction and / or completion vis-à-vis the person responsible if the processed personal data that concern you are incorrect or incomplete. The person responsible must make the correction immediately.

Your right to rectification may be limited to the extent that it is likely to make the achievement of the research or statistical purposes impossible or seriously impaired and the restriction is necessary for the fulfillment of the research or statistical purposes.

 

8.3 Right to restrict the processing

You can request that the processing of your personal data be restricted under the following conditions:

  1. if you contest the accuracy of your personal data for a period of time that enables the person responsible to check the accuracy of the personal data;
  2. the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;
  3. the controller no longer needs the personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, or
  4. If you have objected to processing in accordance with Art. 21 Para. 1 GDPR and it is not yet certain whether the legitimate reasons of the person responsible outweigh your reasons.

If the processing of your personal data has been restricted, this data – apart from its storage – may only be obtained with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest the Union or a Member State.

If the restriction of processing according to the above you will be informed by the person responsible before the restriction is lifted.

Your right to restriction of processing may be limited insofar as it is likely to render the research or statistical purposes impossible or seriously impaired, and the restriction is necessary for the fulfillment of the research or statistical purposes.

 

8.4 Right to delete

 

8.4.1. You can request the data controller to delete your personal data immediately, and the data controller is obliged to delete this data immediately if one of the following reasons applies:

  1. The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
  2. You revoke your consent on which the processing was based in accordance with Art. 6 para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR was based, and there is no other legal basis for the processing.
  3. According to Art. 21 para. 1 GDPR to object to the processing and there are no overriding legitimate reasons for the processing, or you submit them in accordance with. Art. 21 para. 2 GDPR to object to processing.
  4. The personal data concerning you have been unlawfully processed.
  5. The deletion of your personal data is necessary to fulfill a legal obligation under Union law or the law of the member states to which the controller is subject.
  6. The personal data concerning you was collected in relation to information society services offered in accordance with Art. 8 Para. 1 GDPR. 

 

8.4.2. If the person responsible has made your personal data public and is acc. 17 para. 1 GDPR to delete them, he takes appropriate measures, including technical ones, taking into account the available technology and the implementation costs, in order to inform those responsible for data processing who process the personal data that you as the data subject, has asked them to delete all links to this personal data or copies or replications of this personal data.

 

8.4.3. The right to deletion does not exist if the processing is necessary

  1. to exercise the right to freedom of expression and information;
  2. to fulfill a legal obligation that requires processing in accordance with the law of the Union or the Member States to which the controller is subject, or to perform a task that is in the public interest or in the exercise of official authority vested in the controller;
  3. for reasons of public interest in the area of ​​public health in accordance with Art. 9 Para. 2 lit. h and i as well as Art. 9 Para. 3 GDPR;
  4. for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes acc. Art. 89 Para. 1 GDPR, insofar as the right mentioned in Paragraph 1 is likely to make the achievement of the objectives of this processing impossible or seriously impair it, or
  5. to assert, exercise or defend legal claims.

 

8.5 Right to information

If you have asserted the right to correction, deletion or restriction of processing against the person responsible, he is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort.

You have the right towards the person responsible to be informed about these recipients.

 

8.6 Right to data portability

You have the right to receive the personal data concerning you, which you have provided to the person responsible, in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without hindrance from the controller to whom the personal data has been provided, provided that

  1. processing based on consent in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR or on a contract acc. Art. 6 para. 1 lit. b GDPR is based and
  2. The processing is carried out using automated procedures.

In exercising this right, you also have the right to have your personal data transmitted directly from one controller to another, as far as this is technically feasible. Freedoms and rights of other people may not be affected by this.

The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task that is in the public interest or in the exercise of official authority that has been transferred to the person responsible.

 

8.7 Right to object

You have the right, for reasons that arise from your particular situation, at any time against the processing of your personal data, which is based on Art. 6 Para. 1 lit. e or f DS-GVO takes place to object; this also applies to profiling based on these provisions.

The person responsible no longer processes the personal data relating to you, unless he can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is connected to such direct advertising.

If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

Regardless of Directive 2002/58 / EC, you have the option of exercising your right to object in connection with the use of information society services using automated procedures that use technical specifications.

You also have the right, for reasons that arise from your particular situation, to process personal data relating to you for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 Para. 1 GDPR takes place to contradict this.

Your right to object may be limited to the extent that it is likely to make the achievement of the research or statistical purposes impossible or seriously impaired and the restriction is necessary for the fulfillment of the research or statistical purposes.

 

8.8 Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your declaration of consent under data protection law at any time. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

 

8.9 Automated decision in individual cases including profiling

You have the right not to be subjected to a decision based solely on automated processing – including profiling – that has legal effect on you or similarly significantly affects it. This does not apply when making the decision

  1. is necessary for the conclusion or performance of a contract between you and the person responsible,
  2. is permissible on the basis of legal provisions of the Union or the member states to which the person responsible is subject and these legal provisions contain appropriate measures to safeguard your rights and freedoms as well as your legitimate interests or
  3. with your express consent.

However, these decisions may not be based on special categories of personal data according to Art. 9 Para. 1 GDPR, unless Art. 9 Para. 2 lit. a or g applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.

With regard to the in a. and c. mentioned cases, the person responsible takes appropriate measures to protect the rights and freedoms as well as your legitimate interests, which includes at least the right to obtain intervention from the person responsible, to state one’s own position and to contest the decision.

 

8.10 Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence, your place of work or the place of the alleged infringement, if you believe that the processing of your personal data violates the DS GMO violates.

The supervisory authority to which the complaint was submitted will inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy in accordance with Art. 78 GDPR.

 

9. Integration of Google Maps

We use the Google Maps service on this website. As a result, we are able to directly show you interactive maps within the website and make it easy for you to use the maps function.
The operating company is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

When visiting the website, Google will be informed that you have visited the corresponding sub-page on our website, and your IP address will be saved. This takes place regardless of whether Google provides a user account with which you are logged in, or whether no user account exists. If you are logged into Google, your data is directly allocated to your account. If you do not want this allocation to take place with your Google profile, then you must log out before activating the button. Google stores your data as a user profile and uses it for the purpose of advertising, market research and/or the requirement-oriented design of its website. Such an analysis takes place (even for users who are not logged in) in order to provide requirement-oriented advertising and to inform other users of the social network about your activities on our website, in particular. You are entitled to object to the creation of this user profile, whereby you are required to contact Google in order to exercise this right.

Further information about the purpose and scope of data collection and the processing of data by the plug-in provider can be found in the data privacy statements from the provider. There, you can also obtain additional information about your rights in respect of this and about the configuration options for the protection of your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has subscribed to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

 

10. Legal basis for processing

Insofar as we obtain the data subject’s consent for the processing of personal data, Article 6 paragraph 1 lit. a EU General Data Protection Regulation (GDPR) as the legal basis.

In the processing of personal data required to fulfill a contract to which the data subject is a party, Article 6 (1) lit. b GDPR as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

Insofar as processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6 paragraph 1 lit. c GDPR as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6 paragraph 1 lit. d GDPR serves as the legal basis.

If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Article 6 paragraph 1 lit. f GDPR as the legal basis for processing. Our company’s legitimate interest lies in the conduct of our business.

 

11. Duration of storage of personal data

Personal data is stored for the duration of the respective statutory retention period. After the deadline has expired, the data will be routinely deleted unless there is a need for initiating a contract or fulfilling the contract.