1 Introduction and general information
Thank you for your interest in our website. The protection of your personal data is important to us. Below you will find information on how we handle your data that is collected through your use of our website. Your data will be processed in accordance with the GDPR. Insofar as links are provided to other websites, we have neither influence nor control over the linked contents and the data protection regulations there. We recommend checking the privacy policies on the linked websites to determine whether and to what extent personal data is collected, processed, used, or made available to third parties.
2 Controller (in the sense of the GDPR)
+49 89 1250155 60
3 Contact details of our Data Protection Officer
Once you visit our website, it is technically necessary that data is transmitted to our web server via your internet browser. The following data is recorded during an active connection for communication between your internet browser and our web server
- Date and time of the request
- Name of the requested file
- Page from which the file was requested
- Access status
- Web browser used and operating system used
- (Full) IP address of the requesting computer
- Transmitted amount of data
We collect the listed data in order to guarantee a frictionless connection establishment and to enable a comfortable use of our website by the users. The log file also serves for evaluating system security and stability as well as administrative purposes. The legal basis for the temporary storage of data or log files is Art. 6 para. 1 lit. (f) GDPR.
For reasons of technical security, in particular to prevent attempts to attack our web server, we store these data temporarily.
7 Web form for consultation
We offer a contact form on our website where you can get in touch with us for further information about our products, services and events. If you take this opportunity, the data entered in the input mask will be transmitted to us and stored. This includes first and last name, form of address, e-mail address, telephone number, company name and other data. This information is required to contact you and to provide you with personal and differentiated information. In this context, the data will not be passed on to third parties. The legal basis for the processing of data transmitted in the course of sending an e-mail is the implementation of pre-contractual measures or a contract in accordance with Art. 6 para. 1 lit. (b) GDPR or your consent granted to us in accordance with Art. 6 para. 1 sentence 1 lit. (a) GDPR.
Your personal data will generally be deleted as soon as they are no longer required for the purpose of their collection. Continued processing will only take place if it is necessary within the framework of a resulting initiation and processing of a contract or for the fulfilment of resulting contractual purposes.
You can withdraw your consent to the sending of information e-mails concerning our products, services and events at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. To withdraw, please use the unsubscribe link at the end of an e-mail or contact the person responsible by e-mail at email@example.com. We will not contact you again and will delete your data for this purpose if you wish to do so.
8 Contact form and contact by e-mail
If you send us enquiries via contact form or e-mail, your provided details, including your stated first name, last name and salutation, will be stored for the purpose of processing the enquiry and in the event of follow-up questions. It is required to provide an e-mail address to contact us. Name and phone number are provided voluntarily. Under no circumstances will we transfer these data without your consent. The legal basis for the data processing is our legitimate interest in responding to your request pursuant to Art. 6 para. 1 lit. (f) GDPR and, if applicable, Art. 6 para. 1 lit. (b) GDPR, as far as your request is aimed at concluding a contract. Your data will be deleted after final processing, provided that there are no obligations to preserve records. You can object to the processing of your personal data at any time if Art. 6 para. 1 lit (f) GDPR is applicable. In case you have given us your consent to subsequently contact you for information about our products, services and events, the renewed contact is based on your consent according to Art. 6 para. 1 lit. (a) GDPR. You can withdraw your consent at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. To withdraw, please use the unsubscribe link at the end of an e-mail or contact the person responsible by e-mail at firstname.lastname@example.org. If you have made use of your right of withdrawal, we will not contact you again for this purpose.
9 Documents download
On our website we offer the download of various information materials to give you a deeper insight into current topics related to our products and services. Before you can start the download, we ask for your name, your field of activity and your e-mail address. This information is required in order to be able to provide the requested information material to the appropriate trade audience.
The provision of your data for the purpose of downloading is in return for receiving the information material. After confirmation of your data, you will receive regular updates on our products and services as well as on events. If you do not wish to receive further contact from us, you can unsubscribe at any time by using the unsubscribe link at the end of an e-mail or send us an e-mail to email@example.com with effect for the future.
10 Job application form
On our career page we offer you an application form which can be used for electronic applications.
The following personal data is transmitted to us via the input mask and stored:
- First name, surname
- Telephone/ mobile phone number
- E-mail address
- Data about your career and your person like curriculum vitae and certificates
- Salary expectations
- Date of joining
The data processing serves to initiate an employment relationship. The primary legal basis for this is Art. 6 para. 1 lit. (b) GDPR in conjunction with Art. 26 para. 1 BDSG. In addition, consents pursuant to Art. 6 para. 1 lit. (a), 7 GDPR in conjunction with Art. 26 para. 2 BDSG can be used as legal basis. If the processing of your data is based on your consent, you have the right to withdraw your consent at any time with effect for the future.
Within our company, only those persons and positions (e.g. human resources) have access to your personal data which they absolutely need to carry out the application procedure or to fulfil our legal obligations. If necessary, your application will be forwarded to the responsible person for examination.
11 Google Remarketing
We use the remarketing function of Google. This enables us to present you with ads based on your interests on other websites within the Google Ads network (so-called “Google ads” or ads on other websites). For this purpose, your interaction on our website is analyzed in order to be able to display targeted advertising to users on other websites even after they have visited our website. For this purpose, Google stores a number in your browser while visiting certain Google services or websites in the Google display network. This number, known as a “cookie,” is used to track the visits of those users. This number is used to uniquely identify a web browser on a particular computer, not to identify an individual. Personal data is not stored. The legal basis for data processing is Art. 6 para. 1 lit. (f) GDPR. For more specific information, please read the section “Google Ads”.
12 Google Ads (former Google AdWords)
We integrated Google Ads on our website. Google Ads is an internet advertising service that allows advertisers to display ads in Google’s search engine results as well as in the Google advertising network. Google Ads allows us to pre-define keywords that will cause an ad to appear in Google’s search results only when the user uses the search engine to retrieve a keyword relevant search result. In the Google advertising network, the ads are distributed to topic-relevant websites by means of an automatic algorithm and in accordance with the keywords previously defined. The operating company of the Google Ads services is Google Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The purpose of Google Ads is to promote our website by displaying interest-related advertisements on the websites of third-party companies and in the search engine results of the Google search engine.
If a person concerned reaches our website via a Google Ads, a so-called conversion cookie is stored on the information technology system of the person concerned by Google. A conversion cookie loses its validity after thirty days and does not serve to identify the person concerned. If the cookie has not expired, the conversion cookie is used to determine whether certain sub-pages, such as a page with a download confirmation, have been accessed on our website. The conversion cookie enables both us, and Google to track whether a person who has reached our website via an ad has triggered a conversion or aborted the process. The data and information collected by the conversion cookie is used by Google to create website traffic statistics. These website traffic statistics are in turn used by us to determine the total number of users who were referred to us via ads, i.e. to determine the success or failure of the respective ad and to optimize our ads for the future. Neither our company nor other Google Ads advertisers receive any information from Google that could be used to identify the person concerned. The processing is carried out in accordance with Art. 6 para. 1 lit. (a) GDPR based on your consent.
By means of the conversion cookie, personal information, for example the internet pages visited by you, is stored. Whenever our website is visited, personal data, including the IP address of the Internet connection used by the person concerned, is transmitted to Google. This personal data may be stored by Google in the USA as well.
13 Google (Invisible) reCAPTCHA
We use “Google (Invisible) reCAPTCHA”, a service of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred as “Google”) on our website. Google (Invisible) reCAPTCHA processes information about your user behaviour on our website.
We use Google (Invisible) reCAPTCHA to check whether the input is made by a human being or abusively by automated, machine processing. The procedure thus serves to defend against spam, DDoS attacks and similar automated malicious accesses. The use of Google (Invisible) reCAPTCHA thus directly serves to ensure the integrity and functionality of our systems. This is also in our legitimate interest. The legal basis is Art. 6 para. 1 lit. (f) GDPR.
The IP address transmitted in the context of Google (Invisible) reCAPTCHA is not merged with other data from Google unless you are logged into your Google account at the time of using Google (Invisible) reCAPTCHA. If you wish to prevent this transmission and storage of data about you and your behaviour on our website by Google, you must log out of Google before you visit our website or use Google (Invisible) reCAPTCHA.
You can object to the collection and transfer of personal data or prevent the processing of this data by deactivating the execution of Java-Script in your browser. In addition, you can prevent the execution of Java-Script code by installing a Java-Script blocker. We would like to point out that in this case you may not be able to use all functions of our website to their full extent.
Further information from the third-party provider on data protection can be found on the following website https://policies.google.com/privacy?hl=en.
14 Google Analytics
We use HubSpot for our online marketing activities. This is an integrated software solution with which we cover various aspects of our online marketing.
These include among others:
- Content Management (website and blog)
- E-mail marketing (newsletters and automated mailings, e.g. to provide downloads)
- Social Media Publishing & Reporting
- Reporting (e.g. traffic sources, accesses, etc. …)
- Contact management (e.g. user segmentation & CRM)
- Landing Pages and Contact Forms
Our registration service allows visitors to our website to learn more about our company, download content and provide your contact information and other demographic information.
This information, as well as the content of our website, is stored on servers of our software partner HubSpot. We may use this information to contact visitors to our site and to determine which of our services may be of interest to you.
HubSpot is a software company from the USA with a branch in Ireland. (Ground Floor, Two Dockland Central Guild Street, Dublin 1, Ireland, telephone: +353 1 5187500.)
HubSpot is certified under the “EU – U.S. Privacy Shield Framework” and is subject to TRUSTe’s Privacy Seal and the “U.S. – Swiss Safe Harbor” framework.
You can permanently object to the collection of data by HubSpot and the setting of cookies by preventing the storage of cookies through your browser settings accordingly. You may object to the processing of your personal data at any time with effect for the future by sending an e-mail to firstname.lastname@example.org.
You have the possibility to subscribe to the newsletter of our company on the website. Which personal data will be transmitted to us when you subscribe to the newsletter is determined by the input mask used for this purpose.
ndgit GmbH informs its customers and business partners about company offers in regular intervals by means of a newsletter. In principle, the newsletter of our company can only be received by the data subject if (1) the data subject has a valid e-mail address and (2) the data subject registers to receive the newsletter. For legal reasons, a confirmation e-mail will be sent to the e-mail address registered for the first time by a data subject for the purpose of receiving the newsletter using the double opt-in procedure. This confirmation mail is used to check whether the owner of the e-mail address has authorized the receipt of the newsletter as a data subject.
When signing up for the newsletter, we also save the IP address assigned by the Internet service provider (ISP) of the computer system used by the data subject at the time of registration, as well as the date and time of the registration. The collection of this data is necessary in order to be able to trace the (possible) misuse of a data subject’s e-mail address at a later date and therefore serves to provide legal protection for us.
The personal data collected during registration for the newsletter is used exclusively for sending our newsletter. In addition, subscribers to the newsletter could be informed by e-mail if this is necessary for the operation of the newsletter service or for registration, as might be the case if there are changes to the newsletter offer or if technical conditions change. The personal data collected within the scope of the newsletter service will not be passed on to third parties. The subscription to our newsletter can be withdrawn by the data subject at any time. The consent to the storage of personal data, which the data subject has given us for the newsletter service, can be withdrawn at any time. For the purpose of the withdrawal the consent, a corresponding link is included in every newsletter. It is also possible to inform us of the withdrawal of consent by e-mail to email@example.com.
You can withdraw your consent to receive the newsletter at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. To do so, you must simply inform us of your withdrawal or click on the unsubscribe link contained in every newsletter.
Our e-mail newsletters are sent via the technical service provider HubSpot Ireland Limited, Ground Floor, Two Dockland Central Guild Street, Dublin 1, Ireland (“HubSpot”), to whom we pass on the data provided by you in the newsletter registration. This disclosure is in accordance with Art. 6 para. 1 lit. (f) GDPR and serves our legitimate interest in the use of an effective, secure and user-friendly newsletter system. The data you enter to subscribe to the newsletter (e.g. e-mail address) will be stored on the servers of HubSpot in Germany.
HubSpot uses this information to send and statistically evaluate the newsletter on our behalf. For evaluation purposes, the e-mails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. In this way it can be determined whether a newsletter message was opened, and which links were clicked on, if applicable. Conversion tracking can also be used to analyze whether a previously defined action (e.g. sending a consultation form on our website) was carried out after clicking on the link in the newsletter. Technical information is also collected (e.g. time of access, IP address, browser type and operating system). The data is only collected pseudonymously and is not linked to your other personal data, a direct personal reference is excluded. This data is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.
If you wish to object to the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.
We have concluded a contract with HubSpot in which we commit HubSpot to protect the data of our customers and not to disclose it to third parties.
We use YouTube plugins on our website. YouTube is a service by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
When you call up a website on which a video from YouTube is integrated, data is transmitted to a Google server and stored there. If you have a Google user account and are registered, Google can thereby assign the visit to your user account. Google stores this data as user profiles and uses them for the purposes of advertising, market research and/ or needs-based design of its websites. Such an evaluation is carried out in particular (also for users who are not logged in) for the purpose of presenting needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. Please contact Google directly.
We integrate content from YouTube on the websites of our Internet presence in order to make this content immediately available to you without you having to call up the content separately on YouTube. This means that you can already use functions of the social media platform YouTube on our website. This allows us to improve our offer and the user experience for you and make it more interesting. The legal basis is your consent according to Art. 6 para. 1 lit. (a) GDPR.
If you want to prevent data transfer, you cannot use the functions of YouTube. Notwithstanding this, we recommend that you regularly log out of your user account after using a social network, but especially before activating integrated content, as you can then avoid an assignment to your profile with the respective provider.
Google is certified for the US-European data protection agreement “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU. Further information on data protection and data use by Google can be found on the following Google website: https://policies.google.com/privacy?hl=en.
18 External links
19 Business cards
If we receive business cards from you at trade fairs or other events, we will use your company data stated on these cards, including personal data such as name, first name, title, telephone number and e-mail address and store it in our system to be able to establish a contact. Under no circumstances will we pass on your data without your consent. The processing is based on our legitimate interest in maintaining business and customer contacts in accordance with Art. 6 para. 1 lit (f) GDPR as well as, if applicable, Art. 6 para. 1 lit (b) GDPR, if the presentation of the business card to us is aimed at the conclusion of a contract.
If your data has been processed due to our legitimate interest and no contact has been made for two years, we will delete your data after this period. If the processing is based on the conclusion of a contract or pre-contractual measures, we will delete your data, provided that you have not sent us any feedback after a reasonable period of time and no legal storage obligations prevent a deletion.
If the processing of your data is based on our legitimate interest in accordance with Art. 6 para. 1 lit (f) GDPR, you can object to the processing of your personal data at any time with effect for the future.
20 Data Transfer and Recipients
Your personal data is not transferred to third parties, unless
- we have explicitly pointed this out in the description of the respective data processing.
- you have given your explicit consent in accordance with Art. 6 para. 1 lit. (a) GDPR,
- the transfer pursuant to Art. 6 para. 1 lit. (f) GDPR is necessary for the assertion, exercise or defense of legal claims and our legitimate interests are not overridden by your fundamental rights and freedoms,
- there is a legal obligation to transfer data pursuant to Art. 6 para. 1 lit. (c) GDPR,
- required by Art. 6 para. 1 lit. (b) GDPR for the execution of contractual relationships with you.
In addition, we use external service providers for the processing of our services, whom we have carefully selected and commissioned in writing. They are bound by our instructions and are regularly monitored by us. Required data processing agreements pursuant to Art. 28 GDPR are concluded before the commission. In particular these contracts concern web hosting services, the dispatch of e-mails and IT services and maintenance. Your personal data will not be transferred to third parties by our service providers.
21 Security of processing
Taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of data subjects, we take appropriate technical and organizational measures to ensure a level of security appropriate to the risk in accordance with Art. 32 GDPR. For reasons of security and to protect the transmission of confidential content, this website uses SSL encryption or the Transport Layer Security Standard.
22 Storage period
The period for which the personal data will be stored is determined by the relevant statutory storage periods (e.g. from commercial law and tax law). The corresponding data is deleted routinely upon expiry of the respective period. If data is required for the fulfilment of a contract or contract initiation, or if we have a legitimate interest in further storage, the data will be deleted if they are no longer required for these purposes or if you make use of your right to withdraw or object.
23 Your rights
Below you will find information on the rights the applicable data protection law grants you with regard to the processing of your personal data.
- The right to request information about your personal data processed by us pursuant to Art. 15 GDPR. In particular, you can request information on the purpose of processing, the category of personal data being processed, the categories of recipients to whom your data has been disclosed, the planned retention period, the right to rectification or erasure of personal data, or restriction of processing of your data, the right to lodge a complaint, what the source of the data is, if it wasn’t collected by us, and if any automated decision-making, including profiling exists and, where appropriate, meaningful information about their details.
- The right, in accordance with Art. 16 GDPR, to demand the correction of incorrect or completion of incomplete personal data stored by us without delay.
- The right to demand the deletion of your personal data stored with us, according to Art. 17 GDPR, as far as the processing is not required for the right of freedom of expression and information, the compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims.
- The right to demand the restriction of the processing of your personal data, in accordance with Art. 18 GDPR, as far as the accuracy of the data is disputed by you, the processing is unlawful, but you oppose the erasure and we no longer need the data, but they are required by you for the establishment, exercise or defense of legal claims or you have lodged an objection against the processing pursuant to Art. 21 GDPR.
- The right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state of our above-named company domicile or, if applicable, your usual place of residence or workplace.
- Right to withdraw granted consent pursuant to Art. 7 para. 3 GDPR: You have the right to withdraw the previously given consent in the processing of data at any time with effect for the future. In the case of withdrawal, we will delete the data concerned immediately, as far as further processing cannot be based on a legal basis where consent is not required for processing. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation;
24 Right to object
If your personal data is processed by us on the basis of legitimate interests pursuant to Art. 6 para. 1 lit. (f) GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, insofar as this is for reasons that arise from your particular situation. If you object to the processing of personal data for the purpose of direct marketing, you have a general right of objection without the requirement of specifying a particular situation.
If we process your personal data on the basis of your consent according to Article 6 para. 1 lit. (a) GDPR, you have the right according to Article 7 para. 3 GDPR to withdraw your consent to us at any time. As a result, we are no longer allowed to continue processing data based on this consent in the future.
If you wish to make use of your right of revocation or objection, an e-mail to firstname.lastname@example.org is sufficient.
This version of this policy is effective as of June 30, 2020