Privacy Policy

1 Introduction and general information

Thank you for your interest in our website. The protection of your personal data is important to us. Below you will find information on how we handle your data that is collected through your use of our website. Your data will be processed in accordance with the GDPR. Insofar as links are provided to other websites, we have neither influence nor control over the linked contents and the data protection regulations there. We recommend checking the privacy policies on the linked websites to determine whether and to what extent personal data is collected, processed, used, or made available to third parties.

2 Controller (in the sense of the GDPR)

ndgit GmbH
Mies-van-der-Rohe-Str. 6
80807 Munich
info@ndgit.com
+49 89 1250155 60

3 Contact details of our Data Protection Officer

Proliance GmbH/ www.datenschutzexperte.de
Datenschutzbeauftragter
Leopoldstr. 21
80802 Munich
datenschutzbeauftragter@datenschutzexperte.de

4 Definitions

In principle, our privacy policy should be simple and understandable for everyone. For this reason, our privacy policy generally uses the official terms of the General Data Protection Regulation (GDPR). The official definitions are explained in Art. 4 GDPR.

5 Server-Logfiles

Once you visit our website, it is technically necessary that data is transmitted to our web server via your internet browser. The following data is recorded during an active connection for communication between your internet browser and our web server

  • Date and time of the request
  • Name of the requested file
  • Page from which the file was requested
  • Access status
  • Web browser used and operating system used
  • (Full) IP address of the requesting computer
  • Transmitted amount of data

We collect the listed data in order to guarantee a frictionless connection establishment and to enable a comfortable use of our website by the users. The log file also serves for evaluating system security and stability as well as administrative purposes. The legal basis for the temporary storage of data or log files is Art. 6 para. 1 lit. (f) GDPR.

For reasons of technical security, in particular to prevent attempts to attack our web server, we store these data temporarily.

6 Cookies

Our website uses cookies. We use cookies to personalise content and ads, to provide social media features and to analyse our traffic. We also share information about your use of our site with our social media, advertising and analytics partners who may combine it with other information that you’ve provided to them or that they’ve collected from your use of their services.

7 Web form for consultation

We offer a contact form on our website where you can get in touch with us for further information about our products, services and events. If you take this opportunity, the data entered in the input mask will be transmitted to us and stored. This includes first and last name, form of address, e-mail address, telephone number, company name and other data. This information is required to contact you and to provide you with personal and differentiated information. In this context, the data will not be passed on to third parties. The legal basis for the processing of data transmitted in the course of sending an e-mail is the implementation of pre-contractual measures or a contract in accordance with Art. 6 para. 1 lit. (b) GDPR or your consent granted to us in accordance with Art. 6 para. 1 sentence 1 lit. (a) GDPR.

Your personal data will generally be deleted as soon as they are no longer required for the purpose of their collection. Continued processing will only take place if it is necessary within the framework of a resulting initiation and processing of a contract or for the fulfilment of resulting contractual purposes.

You can withdraw your consent to the sending of information e-mails concerning our products, services and events at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. To withdraw, please use the unsubscribe link at the end of an e-mail or contact the person responsible by e-mail at privacy@ndgit.com. We will not contact you again and will delete your data for this purpose if you wish to do so.

8 Contact form and contact by e-mail

If you send us enquiries via contact form or e-mail, your provided details, including your stated first name, last name and salutation, will be stored for the purpose of processing the enquiry and in the event of follow-up questions. It is required to provide an e-mail address to contact us. Name and phone number are provided voluntarily. Under no circumstances will we transfer these data without your consent. The legal basis for the data processing is our legitimate interest in responding to your request pursuant to Art. 6 para. 1 lit. (f) GDPR and, if applicable, Art. 6 para. 1 lit. (b) GDPR, as far as your request is aimed at concluding a contract. Your data will be deleted after final processing, provided that there are no obligations to preserve records. You can object to the processing of your personal data at any time if Art. 6 para. 1 lit (f) GDPR is applicable. In case you have given us your consent to subsequently contact you for information about our products, services and events, the renewed contact is based on your consent according to Art. 6 para. 1 lit. (a) GDPR. You can withdraw your consent at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. To withdraw, please use the unsubscribe link at the end of an e-mail or contact the person responsible by e-mail at privacy@ndgit.com. If you have made use of your right of withdrawal, we will not contact you again for this purpose.

9 Documents download

On our website we offer the download of various information materials to give you a deeper insight into current topics related to our products and services. Before you can start the download, we ask for your name, your field of activity and your e-mail address. This information is required in order to be able to provide the requested information material to the appropriate trade audience.

The provision of your data for the purpose of downloading is in return for receiving the information material. After confirmation of your data, you will receive regular updates on our products and services as well as on events. If you do not wish to receive further contact from us, you can unsubscribe at any time by using the unsubscribe link at the end of an e-mail or send us an e-mail to privacy@ndgit.com with effect for the future.

10 Job application form

On our career page we offer you an application form which can be used for electronic applications.

The following personal data is transmitted to us via the input mask and stored:

  • First name, surname
  • Telephone/ mobile phone number
  • E-mail address
  • Data about your career and your person like curriculum vitae and certificates
  • Salary expectations
  • Date of joining

The data processing serves to initiate an employment relationship. The primary legal basis for this is Art. 6 para. 1 lit. (b) GDPR in conjunction with Art. 26 para. 1 BDSG. In addition, consents pursuant to Art. 6 para. 1 lit. (a), 7 GDPR in conjunction with Art. 26 para. 2 BDSG can be used as legal basis. If the processing of your data is based on your consent, you have the right to withdraw your consent at any time with effect for the future.

Within our company, only those persons and positions (e.g. human resources) have access to your personal data which they absolutely need to carry out the application procedure or to fulfil our legal obligations. If necessary, your application will be forwarded to the responsible person for examination.

The application form is provided by the recruiting page of the personnel and applicant management software Personio of Personio GmbH, Rundfunkplatz 4, 80335, Munich, Germany. In case of use, your data will be transmitted to Personio and stored. We have concluded a data processing agreement with the Personio GmbH. For more information please refer to the Personio privacy policy at https://www.personio.com/privacy-policy/.

11 Google Remarketing

We use the remarketing function of Google. This enables us to present you with ads based on your interests on other websites within the Google Ads network (so-called “Google ads” or ads on other websites). For this purpose, your interaction on our website is analyzed in order to be able to display targeted advertising to users on other websites even after they have visited our website. For this purpose, Google stores a number in your browser while visiting certain Google services or websites in the Google display network. This number, known as a “cookie,” is used to track the visits of those users. This number is used to uniquely identify a web browser on a particular computer, not to identify an individual. Personal data is not stored. The legal basis for data processing is Art. 6 para. 1 lit. (f) GDPR. For more specific information, please read the section “Google Ads”.

12 Google Ads (former Google AdWords)

We integrated Google Ads on our website. Google Ads is an internet advertising service that allows advertisers to display ads in Google’s search engine results as well as in the Google advertising network. Google Ads allows us to pre-define keywords that will cause an ad to appear in Google’s search results only when the user uses the search engine to retrieve a keyword relevant search result. In the Google advertising network, the ads are distributed to topic-relevant websites by means of an automatic algorithm and in accordance with the keywords previously defined. The operating company of the Google Ads services is Google Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of Google Ads is to promote our website by displaying interest-related advertisements on the websites of third-party companies and in the search engine results of the Google search engine.

If a person concerned reaches our website via a Google Ads, a so-called conversion cookie is stored on the information technology system of the person concerned by Google. A conversion cookie loses its validity after thirty days and does not serve to identify the person concerned. If the cookie has not expired, the conversion cookie is used to determine whether certain sub-pages, such as a page with a download confirmation, have been accessed on our website. The conversion cookie enables both us, and Google to track whether a person who has reached our website via an ad has triggered a conversion or aborted the process. The data and information collected by the conversion cookie is used by Google to create website traffic statistics. These website traffic statistics are in turn used by us to determine the total number of users who were referred to us via ads, i.e. to determine the success or failure of the respective ad and to optimize our ads for the future. Neither our company nor other Google Ads advertisers receive any information from Google that could be used to identify the person concerned. The processing is carried out in accordance with Art. 6 para. 1 lit. (a) GDPR based on your consent.

By means of the conversion cookie, personal information, for example the internet pages visited by you, is stored. Whenever our website is visited, personal data, including the IP address of the Internet connection used by the person concerned, is transmitted to Google. This personal data may be stored by Google in the USA as well.

You can prevent the setting of cookies by our website, as already described above, at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a conversion cookie on the information technology system of the person concerned. In addition, a cookie already set by Google Ads can be deleted at any time via the Internet browser or other software programs. Furthermore, you can object to interest-based advertising by Google. To do so, the person concerned must access https://adssettings.google.com/anonymous? from each of the Internet browsers he or she uses and make the desired settings there. Further information can be found in Google’s Privacy Policy https://policies.google.com/privacy?hl=en.

13 Google (Invisible) reCAPTCHA

We use “Google (Invisible) reCAPTCHA”, a service of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred as “Google”) on our website. Google (Invisible) reCAPTCHA processes information about your user behaviour on our website.

We use Google (Invisible) reCAPTCHA to check whether the input is made by a human being or abusively by automated, machine processing. The procedure thus serves to defend against spam, DDoS attacks and similar automated malicious accesses. The use of Google (Invisible) reCAPTCHA thus directly serves to ensure the integrity and functionality of our systems. This is also in our legitimate interest. The legal basis is Art. 6 para. 1 lit. (f) GDPR.

The IP address transmitted in the context of Google (Invisible) reCAPTCHA is not merged with other data from Google unless you are logged into your Google account at the time of using Google (Invisible) reCAPTCHA. If you wish to prevent this transmission and storage of data about you and your behaviour on our website by Google, you must log out of Google before you visit our website or use Google (Invisible) reCAPTCHA.

You can object to the collection and transfer of personal data or prevent the processing of this data by deactivating the execution of Java-Script in your browser. In addition, you can prevent the execution of Java-Script code by installing a Java-Script blocker. We would like to point out that in this case you may not be able to use all functions of our website to their full extent.

Further information from the third-party provider on data protection can be found on the following website https://policies.google.com/privacy?hl=en.

14 Google Analytics

We use Google Analytics on our website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. (“Google”). Google Analytics uses so-called cookies. These are text files which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. We only use Google Analytics with activated IP anonymization. This means that the IP address of the user is shortened by Google within member states of the European Union or in other states which are party to the Agreement on the European Economic Area, which means that it is not possible to identify the user. Google is certified for the US-European data protection agreement “Privacy Shield”, which guarantees compliance with the level of data protection applicable in the EU. Insofar as you have given your consent to this in accordance with Art. 6 para. 1 lit. (a) GDPR, the processing on this website is carried out for the purpose of analyzing it. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on the activities of the website and to provide further services to us in connection with the use of the website and related services. The IP address transmitted by your browser within the framework of Google Analytics is not combined with other data from Google. The terms of use of Google Analytics and information on data protection can be accessed via the following links: https://marketingplatform.google.com/about/analytics/terms/us/ and https://policies.google.com/?hl=en&gl=de. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the URL https://tools.google.com/dlpage/gaoptout?hl=en. A click on the link prevents the collection by Google Analytics by setting a so-called opt-out cookie. More information on the handling of user data at Google Analytics can be found in Google’s Privacy Policy https://policies.google.com/privacy?hl=en.

15 HubSpot

We use HubSpot for our online marketing activities. This is an integrated software solution with which we cover various aspects of our online marketing.

These include among others:

  • Content Management (website and blog)
  • E-mail marketing (newsletters and automated mailings, e.g. to provide downloads)
  • Social Media Publishing & Reporting
  • Reporting (e.g. traffic sources, accesses, etc. …)
  • Contact management (e.g. user segmentation & CRM)
  • Landing Pages and Contact Forms

Our registration service allows visitors to our website to learn more about our company, download content and provide your contact information and other demographic information.

This information, as well as the content of our website, is stored on servers of our software partner HubSpot. We may use this information to contact visitors to our site and to determine which of our services may be of interest to you.

All information collected by us is subject to this privacy policy. We use all collected information exclusively to optimize our marketing. Insofar as you have given your consent to this in accordance with Art. 6 para. 1 lit. (a) GDPR, the processing on this website is for the purpose of website analysis.

HubSpot is a software company from the USA with a branch in Ireland. (Ground Floor, Two Dockland Central Guild Street, Dublin 1, Ireland, telephone: +353 1 5187500.)

HubSpot is certified under the “EU – U.S. Privacy Shield Framework” and is subject to TRUSTe’s Privacy Seal and the “U.S. – Swiss Safe Harbor” framework.

You can permanently object to the collection of data by HubSpot and the setting of cookies by preventing the storage of cookies through your browser settings accordingly. You may object to the processing of your personal data at any time with effect for the future by sending an e-mail to privacy@ndgit.com.

16 Newsletter

You have the possibility to subscribe to the newsletter of our company on the website. Which personal data will be transmitted to us when you subscribe to the newsletter is determined by the input mask used for this purpose.

ndgit GmbH informs its customers and business partners about company offers in regular intervals by means of a newsletter. In principle, the newsletter of our company can only be received by the data subject if (1) the data subject has a valid e-mail address and (2) the data subject registers to receive the newsletter. For legal reasons, a confirmation e-mail will be sent to the e-mail address registered for the first time by a data subject for the purpose of receiving the newsletter using the double opt-in procedure. This confirmation mail is used to check whether the owner of the e-mail address has authorized the receipt of the newsletter as a data subject.

When signing up for the newsletter, we also save the IP address assigned by the Internet service provider (ISP) of the computer system used by the data subject at the time of registration, as well as the date and time of the registration. The collection of this data is necessary in order to be able to trace the (possible) misuse of a data subject’s e-mail address at a later date and therefore serves to provide legal protection for us.

The personal data collected during registration for the newsletter is used exclusively for sending our newsletter. In addition, subscribers to the newsletter could be informed by e-mail if this is necessary for the operation of the newsletter service or for registration, as might be the case if there are changes to the newsletter offer or if technical conditions change. The personal data collected within the scope of the newsletter service will not be passed on to third parties. The subscription to our newsletter can be withdrawn by the data subject at any time. The consent to the storage of personal data, which the data subject has given us for the newsletter service, can be withdrawn at any time. For the purpose of the withdrawal the consent, a corresponding link is included in every newsletter. It is also possible to inform us of the withdrawal of consent by e-mail to privacy@ndgit.com.

You can withdraw your consent to receive the newsletter at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. To do so, you must simply inform us of your withdrawal or click on the unsubscribe link contained in every newsletter.

Our e-mail newsletters are sent via the technical service provider HubSpot Ireland Limited, Ground Floor, Two Dockland Central Guild Street, Dublin 1, Ireland (“HubSpot”), to whom we pass on the data provided by you in the newsletter registration. This disclosure is in accordance with Art. 6 para. 1 lit. (f) GDPR and serves our legitimate interest in the use of an effective, secure and user-friendly newsletter system. The data you enter to subscribe to the newsletter (e.g. e-mail address) will be stored on the servers of HubSpot in Germany.

HubSpot uses this information to send and statistically evaluate the newsletter on our behalf. For evaluation purposes, the e-mails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. In this way it can be determined whether a newsletter message was opened, and which links were clicked on, if applicable. Conversion tracking can also be used to analyze whether a previously defined action (e.g. sending a consultation form on our website) was carried out after clicking on the link in the newsletter. Technical information is also collected (e.g. time of access, IP address, browser type and operating system). The data is only collected pseudonymously and is not linked to your other personal data, a direct personal reference is excluded. This data is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.

If you wish to object to the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.

We have concluded a contract with HubSpot in which we commit HubSpot to protect the data of our customers and not to disclose it to third parties.

If necessary, data may be transferred to HubSpot Inc. in the USA. HubSpot is certified for the US-European data protection agreement “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU. For more information, please see HubSpot’s privacy policy at https://legal.hubspot.com/privacy-policy.

17 YouTube

We use YouTube plugins on our website. YouTube is a service by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

When you call up a website on which a video from YouTube is integrated, data is transmitted to a Google server and stored there. If you have a Google user account and are registered, Google can thereby assign the visit to your user account. Google stores this data as user profiles and uses them for the purposes of advertising, market research and/ or needs-based design of its websites. Such an evaluation is carried out in particular (also for users who are not logged in) for the purpose of presenting needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. Please contact Google directly.

We integrate content from YouTube on the websites of our Internet presence in order to make this content immediately available to you without you having to call up the content separately on YouTube. This means that you can already use functions of the social media platform YouTube on our website. This allows us to improve our offer and the user experience for you and make it more interesting. The legal basis is your consent according to Art. 6 para. 1 lit. (a) GDPR.

If you want to prevent data transfer, you cannot use the functions of YouTube. Notwithstanding this, we recommend that you regularly log out of your user account after using a social network, but especially before activating integrated content, as you can then avoid an assignment to your profile with the respective provider.

Google is certified for the US-European data protection agreement “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU. Further information on data protection and data use by Google can be found on the following Google website: https://policies.google.com/privacy?hl=en.

18 External links

The social networks Twitter, XING, LinkedIn are only integrated as links to the corresponding services on our website. After clicking on the integrated image link, you will be redirected to the page of the respective provider. Only after this redirection user information will be transferred to the respective provider. For information on how your personal data is handled when using these websites, please refer to the respective Privacy Policy of the providers you use.

19 Business cards

If we receive business cards from you at trade fairs or other events, we will use your company data stated on these cards, including personal data such as name, first name, title, telephone number and e-mail address and store it in our system to be able to establish a contact. Under no circumstances will we pass on your data without your consent. The processing is based on our legitimate interest in maintaining business and customer contacts in accordance with Art. 6 para. 1 lit (f) GDPR as well as, if applicable, Art. 6 para. 1 lit (b) GDPR, if the presentation of the business card to us is aimed at the conclusion of a contract.

If your data has been processed due to our legitimate interest and no contact has been made for two years, we will delete your data after this period. If the processing is based on the conclusion of a contract or pre-contractual measures, we will delete your data, provided that you have not sent us any feedback after a reasonable period of time and no legal storage obligations prevent a deletion.

If the processing of your data is based on our legitimate interest in accordance with Art. 6 para. 1 lit (f) GDPR, you can object to the processing of your personal data at any time with effect for the future.

20 Data Transfer and Recipients

Your personal data is not transferred to third parties, unless

  • we have explicitly pointed this out in the description of the respective data processing.
  • you have given your explicit consent in accordance with Art. 6 para. 1 lit. (a) GDPR,
  • the transfer pursuant to Art. 6 para. 1 lit. (f) GDPR is necessary for the assertion, exercise or defense of legal claims and our legitimate interests are not overridden by your fundamental rights and freedoms,
  • there is a legal obligation to transfer data pursuant to Art. 6 para. 1 lit. (c) GDPR,
  • required by Art. 6 para. 1 lit. (b) GDPR for the execution of contractual relationships with you.

In addition, we use external service providers for the processing of our services, whom we have carefully selected and commissioned in writing. They are bound by our instructions and are regularly monitored by us. Required data processing agreements pursuant to Art. 28 GDPR are concluded before the commission. In particular these contracts concern web hosting services, the dispatch of e-mails and IT services and maintenance. Your personal data will not be transferred to third parties by our service providers.

21 Security of processing

Taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of data subjects, we take appropriate technical and organizational measures to ensure a level of security appropriate to the risk in accordance with Art. 32 GDPR. For reasons of security and to protect the transmission of confidential content, this website uses SSL encryption or the Transport Layer Security Standard.

22 Storage period

The period for which the personal data will be stored is determined by the relevant statutory storage periods (e.g. from commercial law and tax law). The corresponding data is deleted routinely upon expiry of the respective period. If data is required for the fulfilment of a contract or contract initiation, or if we have a legitimate interest in further storage, the data will be deleted if they are no longer required for these purposes or if you make use of your right to withdraw or object.

23 Your rights

Below you will find information on the rights the applicable data protection law grants you with regard to the processing of your personal data.

  • The right to request information about your personal data processed by us pursuant to Art. 15 GDPR. In particular, you can request information on the purpose of processing, the category of personal data being processed, the categories of recipients to whom your data has been disclosed, the planned retention period, the right to rectification or erasure of personal data, or restriction of processing of your data, the right to lodge a complaint, what the source of the data is, if it wasn’t collected by us, and if any automated decision-making, including profiling exists and, where appropriate, meaningful information about their details.
  • The right, in accordance with Art. 16 GDPR, to demand the correction of incorrect or completion of incomplete personal data stored by us without delay.
  • The right to demand the deletion of your personal data stored with us, according to Art. 17 GDPR, as far as the processing is not required for the right of freedom of expression and information, the compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims.
  • The right to demand the restriction of the processing of your personal data, in accordance with Art. 18 GDPR, as far as the accuracy of the data is disputed by you, the processing is unlawful, but you oppose the erasure and we no longer need the data, but they are required by you for the establishment, exercise or defense of legal claims or you have lodged an objection against the processing pursuant to Art. 21 GDPR.
  • The right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state of our above-named company domicile or, if applicable, your usual place of residence or workplace.
  • Right to withdraw granted consent pursuant to Art. 7 para. 3 GDPR: You have the right to withdraw the previously given consent in the processing of data at any time with effect for the future. In the case of withdrawal, we will delete the data concerned immediately, as far as further processing cannot be based on a legal basis where consent is not required for processing. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation;

24 Right to object

If your personal data is processed by us on the basis of legitimate interests pursuant to Art. 6 para. 1 lit. (f) GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, insofar as this is for reasons that arise from your particular situation. If you object to the processing of personal data for the purpose of direct marketing, you have a general right of objection without the requirement of specifying a particular situation.
If we process your personal data on the basis of your consent according to Article 6 para. 1 lit. (a) GDPR, you have the right according to Article 7 para. 3 GDPR to withdraw your consent to us at any time. As a result, we are no longer allowed to continue processing data based on this consent in the future.

If you wish to make use of your right of revocation or objection, an e-mail to privacy@ndgit.com is sufficient.

25 Versions, Modification of this Privacy Policy

We reserve the right to change this Privacy Policy at any time in accordance with the law. In this way, we can adapt it to current legal requirements and take changes in our services into account, e.g. when introducing new services. When we make changes to this Policy, we will inform users on our website, via app or via e-mail. The most current version applies to your visit.

This version of this policy is effective as of June 30, 2020