Privacy Policy

Data protection notice in accordance with Art. 13 GDPR

Overview of data protection

This data protection declaration serves to comply with the information obligations within the meaning of Art. 13 GDPR. The following explanations are intended to provide an overview of the various types of processing of personal data on this website. Personal data means any information relating to an identified or identifiable person.
The data protection terms used in this declaration are based on the definitions of the GDPR (General Data Protection Regulation – Regulation (EU) 2016/679).
The person responsible for data processing on this website can be found in the imprint of the website.

IDENTsmart GmbH
Carl-von-Ossietzky-Str. 3
83043 Bad Aibling
Germany
Telephone: +49 8104 899 90 40
Email: info@identsmart.com

IDENTsmart GmbH
Data Protection Officer
Carl-von-Ossietzky-Str. 3
83043 Bad Aibling
Germany
Email: datenschutz@identsmart.com

As the operator of this website, the protection of the personal data of website users is very important to us. We therefore process your personal data in accordance with this data protection explain which personal data we process and why we do it.
According to the GDPR, the processing of personal data must always be based on a purpose (principle of purpose limitation). On this website we comply with this principle by processing personal data exclusively for a specific purpose. An example of such a purpose would be that we want to make our website available to the users of our website in the most user-friendly way possible. The respective purposes are explained further with the respective recipients.

According to the principle of lawfulness, any processing of personal data requires a legal basis. We comply with this principle by basing every processing of personal data on at least one legal basis within the meaning of Article 6 (1) GDPR. In particular, the following reasons for legality come into question for our website:

  • The data subject has consented to the processing of personal data (Art 6 Para 1 lit a GDPR)
  • The processing of personal data is necessary to fulfill a contract to which the data subject is a party or to carry out pre-contractual measures (Article 6 (1 ) ( b) GDPR )
  • The processing of personal data is necessary to protect the legitimate interests of the person responsible or a third party (Art 6 Para 1 lit f GDPR)

The relevant legal basis(s) are listed again below for the respective processing.

The GDPR also prescribes the principle of storage limitation. This states that personal data may only be processed until the purpose for which it was collected has been achieved. In the event that no specific storage period has been specified, this depends on the fulfillment of the purpose.

Personal data is collected from users on our website. This is done by the relevant user sending us the data themselves, or by the data being collected by us automatically or after prior consent has been obtained.

Data subject rights
You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request that the processing of your personal data be restricted. You also have the right to lodge a complaint with the competent supervisory authority.
You can contact us at any time if you have any further questions on the subject of data protection. The contact options can be found in the imprint.
As a data subject within the meaning of the GDPR, you have the opportunity to assert various rights. The data subject rights arising from the GDPR are the right to information (Article 15), the right to rectification (Article 16), the right to erasure (Article 17), the right to restriction of processing (Article 18), the right to object (Article 21) , the right to lodge a complaint with a supervisory authority and the right to data portability (Article 20).

Right of withdrawal:
Some data processing can only take place with your express consent. You have the option to revoke your consent at any time. However, the lawfulness of the data processing up to the point of revocation is not affected by this.

Right to object:
If the processing is based on Article 6 paragraph 1 lit e or f GDPR, you as the data subject can object to the processing of your personal data at any time for reasons arising from your particular situation. You also have this right in the case of profiling based on these provisions . Unless we can demonstrate any compelling reasons for processing worthy of protection which outweigh yourinterests, rights and freedoms or processing serves to assert, exercise or defend legal claims, we will no longer process the relevant data after an objection.
If the processing of personal data serves to operate direct advertising, you also have the right to raise an objection at any time. The same applies to profiling , which is related to direct advertising. Here, too, we will no longer process personal data as soon as you raise an objection.

Right of appeal:
If there is a violation of data protection law, you have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority, in particular with the member state of your habitual residence, your place of work or the place of the alleged violation.

Right to data portability:
Insofar as your data is processed automatically on the basis of consent or the fulfillment of a contract, you have the right to receive this data in a structured, common and machine-readableformat. You also have the right to request the transfer and provision of the data to another personresponsible, insofar as this is technically feasible.

Right to information, correction and deletion:
You have the right to receive information about your processed personal data with regard to the purpose of the data processing, the categories, the recipients and the duration of the storage. Furthermore, you have the right to know whether there is a right to correction, deletion or restriction of the personal data concerning you. If you have any questions on this topic or on other topics relating to personal data, you can of course contact us using the contact options given in the imprint.

Right to restriction of processing:
You can assert the restriction of the processing of your personal data at any time. To do this, you must meet one of the following requirements:
You contest the accuracy of the personal data. For the duration of the verification of the correctness, you have the right to demand a restriction of the processing.

  • If processing is unlawful, you can request the restriction of the use of the data as an alternative to deletion.
  • If we no longer need your personal data for the purposes of processing, but you need the data to assert, exercise or defend legal claims, you can request the restriction of processing as an alternative to deletion.
  • If you object to the processing in accordance with Art. 21 Para. 1 GDPR, your interests and ours will be weighed up. Until this consideration has been made, you have the right to request the restriction of processing.

A restriction of processing means that the personal data, apart from storage, is only used with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest Union or a Member State may be processed.

Provision of the website web host
Our website is provided by an external hoster. Naturally, this involves the transmission and storage of personal data on the hoster’s servers. In particular, the IP addresses, meta and communication data of the users and data on website access are processed.
The data processed by the web host are:

  • IP address of the website visitor’s device
  • Device used
  • Visitor’s operating system
  • Browser type
  • Name of retrieved file
  • Temporal information of the retrieval (date and time)
  • Amount of data
  • Information whether the retrieval of the data was successful

In order for our website to be displayed, it must be hosted by a web host. When a website visitor accesses the site, a connection to the web host’s servers is established. Inevitably, the IP address and other information of the website visitor must be processed.

The processing of personal data by our web host is based on the justification of legitimate interest (Art 6 Para 1 lit f GDPR ). We have a legitimate interest in ensuring that our website can be displayed and visited by individual users of the site.

Use of cookies
We use cookies on our websites. These are text files that are stored on your end device via the browser either for the duration of the visit to the website (session cookies) or permanently. Persistent cookies remain stored until they are deleted by the browser or the user himself.

Without the use of certain cookies, it is not possible for the website to function correctly. The basis for storing these technically necessary and functional cookies is Art. 6 Para. 1 lit. f GDPR. We have a legitimate interest in storing these technically necessary and functional cookies in order to be able to ensure the necessary technical functions of our website.

Insofar as processing by cookies takes place in the course of contract initiation or contract execution, Art. 6 Para. 1 lit. b GDPR basis for processing.

For all other cookies, consent is obtained before they are stored. The storage of these cookies and the resulting processing of personal data is therefore based on Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time. This does not affect the lawfulness of the processing that took place up to the point of revocation. These cookies are stored for various purposes, such as analyzing user behavior or displaying advertising.

The settings in your browser enable you to prevent or restrict the setting of cookies. The processing of so-called flash cookies has to be done via the settings of the flash player and cannot be prevented via the browser. You can also delete cookies that have already been set in your browser. If the appropriate settings have been made in the browser, it may not be possible to use all the functions of our website.

Use of External Services
External services are used on our website. External services are services provided by third parties that are used on our website. This can be done for a variety of reasons, such as embedding videos or for website security. When using these services, personal data is also passed on to the respective provider. If we do not have a legitimate interest in using these services, we will obtain consent prior to use.

Analytics
The processing of the personal data of our website visitors enables us to analyze the surfing behavior of our website visitors. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to constantly improve our website and its user-friendliness.

The analysis tools used could be used, for example, to create user profiles for the display of targeted or interest-related advertising messages, to recognize our website visitors the next time they visit our website, to measure their click/ scroll behavior and downloads, to create heat maps, to recognize page views, but to measure the duration of the visit or the bounce rates As a further example, the origin of the website visitors (city, country, from which site the visitor comes) can also be recognized. With the help of the analysis tools, our market research and marketing activities can be improved.

The processing of the data is based on the legal basis of consent (Art. 6 Para. 1 lit. A GDPR). The data subject has allowed the processing of their personal data with their free, explicit and prior consent. Without separate consent, the personal data will not be processed by us in the manner described above, provided that there is no other justification within the meaning of Art. 6 Para.1 GDPR on which we base the processing. We proceed in the same way if data subjects revoke their consent. This does not affect the lawfulness of the processing that took place up to the point of revocation.

Google Analytics
We use the Google Analytics service on our website. The service provider is Google Ireland Limited. This has its office at Gordon House, Barrow Street Dublin 4, Ireland. Using the service may result in data being transferred to a third country (USA). Further information can be found in the manufacturer’s data protection information at the following URL: https://policies.google.com/privacy

segment
We use the segment service on our website. The service provider is Twilio Ireland Limited. Its office is at 25-28 North Wall Quay, Dublin 1, Ireland.

Using the service may result in data being transferred to a third country (USA).

Further information can be found in the manufacturer’s data protection information at the following URL: https://www.twilio.com/gdpr

Content Delivery Network (CDN)
We use a Content Delivery Network (CDN) to optimize the performance and availability of our website. For this purpose, your IP address and the information on when you visited our website will be processed by this service provider who makes this network available . All further information on data processing by this service provider can be found in their data protection information.

We base this processing on a legitimate interest (Article 6 (1 ) (f) GDPR ).

Our legitimate interest in using a content delivery network is to be able to display our website as quickly, securely and reliably as possible.

Google Statics
We use the Google Static service on our website. The service provider is Google Ireland Limited. This has its office at Gordon House, Barrow Street Dublin 4, Ireland.

Using the service may result in data being transferred to a third country (USA).

Further information can be found in the manufacturer’s data protection information at the following URL: https://policies.google.com/privacy

Gravatar
Gravatar service on our website . The service provider is Automattic Inc. . This has its office at 60 29th Street # 343, 94110 San Francisco (CA), USA.

Using the service may result in data being transferred to a third country (USA).

Further information can be found in the manufacturer’s data protection information at the following URL: https://automattic.com/privacy/

Display optimization
We use tools that serve to optimize the presentation of our website. These tools help to display the website in other languages or to make it more accessible.

The processing of the data is based on the legal basis of consent (Article 6 (1 ) (a) GDPR ). The data subject has allowed the processing of their personal data with their free, explicit and prior consent. Without separate consent, the personal data will not be processed by us in the manner described above, provided that there is no other justification within the meaning of Art. 6 Para.1 GDPR on which we base the processing. We proceed in the same way if data subjects revoke their consent. This does not affect the lawfulness of the processing that took place up to the point of revocation.

polylang
Polylang service on our website . The service provider is WP Syntex . This office is located at 28, rue Jean Sebastien Bach, 38090 Villefontaine , France.

Further information can be found in the manufacturer’s data protection information at the following URL: https://polylang.pro/privacy-policy/

Newsletter tools
As part of our marketing, we offer you the option of subscribing to our newsletter via our website. To order the newsletter, you go through a registration process during which we check whether you are the owner of the specified e-mail address and whether you agree to receive our newsletter. The data remain with us or with the newsletter service commissioned by us from your voluntary registration until you unsubscribe from the newsletter, e.g. via the “unsubscribe” link in the newsletter . If you unsubscribe from the newsletter, you will be deleted from the distribution list. It is possible that we or our newsletter service will place your e-mail address in a so-called block list for an unlimited period of time so that you will not receive any further newsletters. This list is not merged with other data. However, deleting the subscription to the newsletter does not mean that data stored for other purposes (e.g. customer accounts) are also deleted.

The processing of the data is based on the legal basis of consent (Article 6 (1 ) (a) GDPR ). The data subject has allowed the processing of their personal data with their free, explicit and prior consent. Without separate consent, the personal data will not be processed by us in the manner described above, provided that there is no other justification within the meaning of Art. 6 Para.1 GDPR on which we base the processing. We proceed in the same way if data subjects revoke their consent. This does not affect the lawfulness of the processing that took place up to the point of revocation.

sendinblue
sendinblue service on our website . The service provider is Sendinblue GmbH. This has its branch at Köpenicker Straße 126, 10179 Berlin, Germany.
Further information can be found in the manufacturer’s data protection information at the following URL: https://de.sendinblue.com/legal/privacypolicy/

interface software
Business processes run more cheaply, faster and with fewer errors if they are automated using software via interfaces. In this way, they can be efficiently integrated into company processes via their own website or via social networks. We use interface software on our website to link different applications with one another and to transfer personal data securely from one application to another.

The processing of the data is based on the legal basis of consent (Article 6 (1 ) (a) GDPR ). The data subject has allowed the processing of their personal data with their free, explicit and prior consent. Without separate consent, the personal data will not be processed by us in the manner described above, provided that there is no other justification within the meaning of Art. 6 Para.1 GDPR on which we base the processing. We proceed in the same way if data subjects revoke their consent. This does not affect the lawfulness of the processing that took place up to the point of revocation.

Google Tag Manager
We use the Google Tag Manager service on our website. The service provider is Google Ireland Limited. This has its office at Gordon House, Barrow Street Dublin 4, Ireland.

Using the service may result in data being transferred to a third country (USA).

Further information can be found in the manufacturer’s data protection information at the following URL: https://policies.google.com/privacy

Search engines
In order to increase reading comfort, we have installed a search engine with several functions for your search on our website. This makes it easier or easier for you to find content again.

The processing of the data is based on the legal basis of consent (Art. 6 Para. 1 lit. A GDPR). The data subject has allowed the processing of their personal data with their free, explicit and prior consent. Without separate consent, the personal data will not be processed by us in the manner described above, provided that there is no other justification within the meaning of Art. 6 Para.1 GDPR on which we base the processing. We proceed in the same way if data subjects revoke their consent. This does not affect the lawfulness of the processing that took place up to the point of revocation.

Google
We use the Google service on our website. The service provider is Google Ireland Limited. This has its office at Gordon House, Barrow Street Dublin 4, Ireland.
Using the service may result in data being transferred to a third country (USA).

Further information can be found in the manufacturer’s data protection information at the following URL: https://policies.google.com/privacy

Social media
Our company uses publicly accessible profiles in social networks in order to get in touch with customers or potential customers and to increase our level of awareness. As soon as If social media accounts are entered, personal data of the users will be processed. Users are also recognized by the operators of the social networks when they visit websites on which like buttons or advertising banners of the social media platforms are integrated, especially if they are logged into their social media accounts. The plugins process personal data of website users, establish a connection to the social networks and forward data to them. This transmission occurs as soon as the website is accessed. Processed data are, for example: names, addresses, e-mail addresses , telephone numbers, access times, device information, IP addresses. The aim is usually to process user data for market research and advertising purposes. User behavior and interests can be derived and user profiles can be created from the social media accounts and websites that users visit. These, in turn, serve to show you interest-based advertising via cookies on your end devices, on your social media accounts and on the websites you visit. If users are logged into their social media accounts, they can also be identified independently of their end devices.

Data processing usually takes place under joint responsibility between us and the operators of the social media networks. Please note that as the provider of social media accounts, we cannot trace all of the processing operations of the respective operators of the portals relating to your personal data .

The processing of the data is based on the legal basis of consent (Article 6 (1 ) (a) GDPR ). The data subject has allowed the processing of their personal data with their free, explicit and prior consent. Without separate consent, the personal data will not be processed by us in the manner described above, provided that there is no other justification within the meaning of Art. 6 Para.1 GDPR on which we base the processing. We proceed in the same way if data subjects revoke their consent. This does not affect the lawfulness of the processing that took place up to the point of revocation.

Meta Connect
Meta Connect service on our website . The service provider is Meta Platform Ireland Limited (Marketplace). Its office is at 4 Grand Canal Square Grand Canal Harbor Dublin 2, Ireland.

Using the service may result in data being transferred to a third country (USA).

Further information can be found in the manufacturer’s data protection information at the following URL: https://de-de.facebook.com/policy.php

web font
web fonts for the uniform display of fonts , which are provided by an external provider and loaded by the browser when the website is accessed. The provider of the web font is informed that our website was accessed from your IP address because your browser establishes a direct connection to the provider of the web font .

The processing of the data is based on the legal basis of consent (Article 6 (1 ) (a) GDPR ). The data subject has allowed the processing of their personal data with their free, explicit and prior consent. Without separate consent, the personal data will not be processed by us in the manner described above, provided that there is no other justification within the meaning of Art. 6 Para.1 GDPR on which we base the processing. We proceed in the same way if data subjects revoke their consent. This does not affect the lawfulness of the processing that took place up to the point of revocation.

Google Fonts
We use the Google Fonts service on our website. The service provider is Google Ireland Limited. This has its office at Gordon House, Barrow Street Dublin 4, Ireland.
Using the service may result in data being transferred to a third country (USA).

Further information can be found in the manufacturer’s data protection information at the following URL: https://policies.google.com/privacy

web security
We use tools on our website that protect us from unauthorized access, spam and other attacks. This serves on the one hand for our security, but also on the other hand for the security of our website visitors.

We base this processing on a legitimate interest (Article 6 (1 ) (f) GDPR ).
Our legitimate interest is to be able to guarantee the security of our website and to protect ourselves from unauthorized access, spam and other attacks.

Google recaptcha
Recaptcha service on our website . The service provider is Google Ireland Limited. This has its office at Gordon House, Barrow Street Dublin 4, Ireland.
Using the service may result in data being transferred to a third country (USA).

Further information can be found in the manufacturer’s data protection information at the following URL: https://policies.google.com/privacy

Advertising
Tools are used on our website that enable the placement of advertising and the evaluation of the Enable the success of served ads. Advertising represents a source of income via our website. Personal data that is processed in this way is, for example, the IP address, access times and device information.

The processing of the data is based on the legal basis of consent (Article 6 (1 ) (a) GDPR ). The data subject has allowed the processing of their personal data with their free, explicit and prior consent. Without separate consent, the personal data will not be processed by us in the manner described above, provided that there is no other justification within the meaning of Art. 6 Para.1 GDPR on which we base the processing. We proceed in the same way if data subjects revoke their consent. This does not affect the lawfulness of the processing carried out until the revocation .

Google Ad Services
AdServices service on our website . The service provider is Google Ireland Limited. This has its office at Gordon House, Barrow Street Dublin 4, Ireland.

Using the service may result in data being transferred to a third country (USA).

Further information can be found in the manufacturer’s data protection information at the following URL: https://policies.google.com/privacy

Google AdWords conversion
Conversion service on our website . The service provider is Google Ireland Limited (GV). This has its office at Gordon House, Barrow Street Dublin 4, Ireland.
Using the service may result in data being transferred to a third country (USA).

Further information can be found in the manufacturer’s data protection information at the following URL: https://policies.google.com/privacy?hl=de&gl=de

Google double click
We use the Google Double Click service on our website. The service provider is Google Ireland Limited. This has its office at Gordon House, Barrow Street Dublin 4, Ireland.

Using the service may result in data being transferred to a third country (USA).

Further information can be found in the manufacturer’s data protection information at the following URL: https://policies.google.com/privacy

Payment service provider
We integrate payment services from a company specializing in these services on our website. If you make a purchase from us, your payment details (e.g. name, payment amount, account details, credit card number) will be transmitted to our payment service provider and processed by them for the purpose of payment processing. The contractual and data protection provisions of the provider selected by us apply to these transactions.

The processing of the data is based on the legal basis of consent (Article 6 (1 ) (a) GDPR ). The data subject has allowed the processing of their personal data with their free, explicit and prior consent. Without separate consent, the personal data will not be processed by us in the manner described above, provided that there is no other justification within the meaning of Art. 6 Para.1 GDPR on which we base the processing. We proceed in the same way if data subjects revoke their consent. This does not affect the lawfulness of the processing that took place up to the point of revocation.

stripes
Stripe service on our website . The service provider is Stripe Inc.. Its office is at 510 Townsend Street, San Francisco, CA 94103, USA.
Using the service may result in data being transferred to a third country (USA).

Further information can be found in the manufacturer’s data protection information at the following URL: https://stripe.com/at/privacy

Contact form
On our website there is the possibility to notify us via a contact form. In order to contact you via this form, we ask for certain information. In particular, the request must be described and a contact option must be provided. At least this information is mandatory and must be provided to use the contact form. Before you can contact us via the contact form, you will be asked to consent to the processing of the data provided via a checkbox.

Contact via the contact form serves pre-contractual or contractual purposes and the processing of personal data in this context is based on the legal basis of Article 6 Paragraph 1 lit. b GDPR..

E-mail correspondence and contact via telephone
In accordance with legal requirements, we have provided a telephone number and e-mail address on our website. The data transmitted by telephone or e-mail is automatically stored by us in order to be able to process corresponding inquiries or to be able to contact the person concerned. Data that we obtain in this way will not be passed on to third parties without your consent.

The e-mail traffic and contact via telephone serve pre-contractual or contractual purposes and the processing of personal data in this context is therefore based on the legal basis of Art. 6 Para. 1 lit. b GDPR supported.

Handling applicant data
It is possible to send us an application ( e.g. by post, online application form or by e-mail). The personal data obtained in this way will be stored and processed by us to decide whether an employment relationship should be entered into.

The basis for processing is Art. 6 Para . 1 lit. b GDPR and Art. 6 Para. 1 lit. a GDPR, provided consent has been given. As far as German law is applicable, § 26 BDSG is also the legal basis for the processing (initiation of an employment relationship). You can revoke your consent at any time. This does not affect the lawfulness of the processing that took place up to the point of revocation.

If the application results in an employment relationship, the data collected will be used to process the employment relationship on the basis of Art. 6 Para. 1 lit. b GDPR saved. Insofar as there is no employment relationship, the data will be processed on the basis of Art. 6 Para.1 lit. f GDPR stored for up to 6 months after the end of the application process. We have a legitimate interest in the storage in order to be able to defend ourselves against any lawsuits or allegations. If consent has been given, the data will be processed on the basis of Art. 6 Para. 1 lit. a GDPR stored longer. You can revoke your consent at any time. This does not affect the lawfulness of the processing that took place up to the point of revocation.

Applicant pool
If there is no employment relationship, the applicant can be included in our applicant pool. All the details of the application are saved in order to be able to contact the relevant person in the event of suitable job advertisements.

The data is only stored in the applicant pool after consent has been given on the basis of Article 6(1 )( a) GDPR . This consent can be revoked at any time, after which the corresponding data will be deleted, provided there are no legal reasons for retention. Deletion takes place no later than two years after consent has been given. This does not affect the lawfulness of the processing that took place up to the point of revocation.

notice
This data protection notice was created by the service ” ALFRIGHT – and your site fulfills all rights ” created: https://www.alfright.eu