Privacy Policy for Inpsyde GmbH

In this privacy policy, we inform you about the scope of processing of your personal data (hereinafter referred to only as “Data”) by Inpsyde GmbH.
The controller for the processing of personal data in the context of this website (B.) and our general business operation (C.) according to the provisions of the General Data Protection Regulation (GDPR) is:

Inpsyde GmbH
Mutzer Heide 3
51467 Bergisch Gladbach, Germany
Phone: 02202 940760
Website: https://inpsyde.com
Email: info@inpsyde.com

Our data protection officer:
IITR Datenschutz GmbH, Dr Sebastian Kraska, Marienplatz 2, 80331 Munich, email@iitr.de

General information concerning data processing

We process data in the context of running our website and our general business operations. This data processing also includes disclosure in the form of transmission.
For the transmission of data to the USA, the EU Commission has passed an adequacy decision, the EU-US Privacy Shield. With this decision, the Commission has certified that guarantees for the transmission of data to the USA based on the EU-US Privacy Shield agreement comply with the data protection standards in the EU. Insofar as we transfer data to the USA, we have indicated the participation of our service providers in the EU-US Privacy Shield agreement.

A detailed description of the data, purposes of processing, legal bases, recipients and transfer to third States is provided in the following list.

B.) Data processing for our website

I.) Log file

We record your visit to our website. In this context, the following data is processed: Name of each website visited, date and time of visit, quantity of data transferred, browser type and version, the operating system you use, the referrer URL (previously visited website), your IP address and the requesting provider. This is necessary in order to guarantee the security of the website. We process the data accordingly based on our legitimate interests pursuant to Art. 6 (1)(f) GDPR. The log file will be deleted after seven days unless it is required to resolve or demonstrate specific legal violations that have become known during the retention period.

II.) Hosting

Hosting involves the storage of all data processed in connection with the operation of this website. This is necessary in order to enable operation of the website. We process the data accordingly based on our legitimate interests pursuant to Art. 6 (1)(f) GDPR. To provide our website, we use the services of web hosting providers to whom we transfer the data outlined above.

III.) Establishing contact

If you establish contact with us, we will exclusively process your data (name, contact details if you provide them) and your message (including date and time) for the purpose of processing and handling your enquiry. We process this data on the basis of Art. 6 (1)(b) GDPR or Art. 6 (1)(f) GDPR to handle your enquiry.

IV.) Newsletter

To provide you with regular information about our company and our services, we offer a newsletter mailing. If you subscribe to the newsletter, we will process the data you provide (email address along with other voluntary information). Newsletter mailing by subscription occurs on the basis of your consent pursuant to Art. 6 (1)(a) GDPR.
Subscription to the newsletter uses the so-called double opt-in method. To prevent misuse, we will send you an email after registration asking you to confirm your registration. To retain evidence of the registration process in line with the legal requirements, your registration will be recorded. This includes storing the date and time of registration and confirmation as well as your IP address. To mail the newsletter, we use service providers to whom we transfer the data outlined above.

V.) Job applications

If you establish contact with us in order to submit your job application via email or using our application form, we will process your data (e.g. name, email address, desired place of employment if you provide these), your message and the application documents you submit exclusively for the purpose of processing and handling your job application. The legal basis for data processing is primarily Section 26 BDSG. According to this provision, data processing is permitted if it is necessary in the context of deciding whether to establish an employment relationship.
If the data is required after the end of the application process for the purposes of prosecution, data processing may occur to pursue our legitimate interests pursuant to Art. 6 (1)(f) GDPR, namely the exercise or defence of legal claims.

VI.) Website analysis and marketing

To enable the use of certain features, we use so-called cookies. These are short data packets that are stored on your device and exchanged with other providers. Some of the cookies we use are erased directly after you close your browser (so-called session cookies). Other cookies remain on your device and make it possible to recognise your browser the next time you visit (persistent cookies). Data processing on the basis of cookies solely to establish the functionality of our website is carried out on the basis of our legitimate interests pursuant to Art. 6 (1)(f) GDPR.

You can delete all cookies stored on your device and change the settings for common browsers to prevent the storage of cookies.

In this case, you may have to change certain settings again each time you visit the website and accept the restriction of some features.

We use cookies in connection with the following features:

1.) Google Analytics

We use Google Analytics, a service of Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043 USA. Google uses certain cookies for this service. The information generated by the cookie about your use of this website (including your IP address) is transferred to a Google server in the USA and stored there. We use the stored information to analyse your use of the website, to compile reports about website activity for the website operator and to perform other services associated with website use. We process the data obtained in this way based on our overriding interest in optimal marketing for our website pursuant to Art. 6 (1)(f) GDPR. Google will not link your IP address with other data held by Google under any circumstances.
We hereby note that this website uses Google Analytics with the extension “_anonymizeIp()”. This means that IP addresses will be truncated before their transfer to a server in the USA. Direct personal identification is not generally possible using the stored data. Only in exceptional cases, the full IP address will be transferred to a server in the USA and truncated there.

You may object to the collection of data at any time with future effect by using the deactivation browser add-on for Google Analytics at http://tools.google.com/dlpage/gaoptout?hl=de. You can also prevent collection by Google Universal Analytics by clicking the following link. An opt-out cookie will be set to prevent the future collection of your data when you visit this website.

Please also note the policies for the use of Google data in the Google partner network at:
http://www.google.com/intl/de/policies/privacy/partners/
www.google.de/privacy_ads.html

Google is certified under:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
You can find more information about data protection at: https://policies.google.com/privacy?hl=de&gl=de

2.) VG Wort

We use session cookies from VG Wort, Munich to measure access to texts in order to determine the probability of copying. Session cookies are small units of information that a provider stores in the working memory of the visitor’s computer. A session cookie contains a randomly generated unique identification number known as a session ID. A cookie also contains information about its origin and duration of storage. Session cookies cannot store other data. These measurements are carried out by INFOnline GmbH using the Scaleable Centralised Measuring System. They help to determine the probability that individual texts are copied in order to compensate the legal claims of authors and publishers. We do not collect any personal data using cookies.

Many of our pages have JavaScript functions through which we report instances of access to Verwertungsgesellschaft Wort (VG Wort). This makes it possible for our authors to participate in the disbursements made by VG Wort to guarantee legal remuneration for copyrighted worked pursuant to Section 53 UrhG.
The use of our services is also possible without cookies. Most browsers are configured to accept cookies automatically. However, you can deactivate the storage of cookies or change your browser settings to be informed whenever cookies are sent.

Our website and our mobile website using the “Scaleable Centralised Measuring System” of INFOnline GmbH (​https://www.infonline.de​) to determine statistical parameters for identifying the probability that texts have been copied.

Anonymous measured values are collected in the process. To recognise computer systems, either a session cookie or a signature created from various information automatically transmitted by your browser is used for access figure measurement. IP addresses are only used in anonymised form.

  • This method was developed in compliance with data protection regulations. The sole aim of the method is to determine the probability that individual texts have been copied.
    Individual users are not identified at any time. Your identity always remains protected. You will not receive any advertising from the system.
    Data processing occurs on the basis of our overriding legitimate interest in determining the legal claims of authors and publishers pursuant to Art. 6 (1)(f) GDPR.

VII.) Embedding external content

We use external dynamic content to optimise the display and services on our website. When visiting the website, a query is automatically relayed to the server of the relevant content provider via API to transmit certain log data (e.g. the user’s IP address). The dynamic content is then transmitted to our website and displayed there.
We use external content in connection with the following features:

Embedding Vimeo videos
On our website, we have embedded videos from the portal Vimeo of Vimeo, Inc., 555 West 18th Street, New York, New York 10011, USA. When playing the videos, log data is transmitted to the servers of Vimeo in the USA. This processing occurs on the basis of our overriding legitimate interest in the optimal marketing of our services pursuant to Art. 6 (1)(f) GDPR.

You can find more information at: https://vimeo.com/privacy

Data processing for our general business operation

I.) Processing of data concerning our suppliers and providers

1.) Procurement and purchasing

During the procurement and purchasing of products and services for our company, we process the following data of our suppliers and providers: Contact details for the contact person, company, name, address, phone number, fax number, e-mail address, IBAN, tax number, creditor number.

Data processing occurs to perform the contract on the basis of Art. 6 (1)(b) GDPR.

In the context of payment handling and tax claims, we transfer the data required in the individual case to the payment provider engaged with settlement, our accounting service and our tax advisor.

In connection with our internal company processes, we use various programs and providers to whom we transfer the data outlined above.
If data is transferred to the USA in this context, preservation of an appropriate level of data protection is guaranteed by recipient participation in the EU-US Privacy Shield agreement.

2.) Provider support

When placing orders with external providers or collaborating with external providers, we process the following data of the provider or its employees: Contact details for the provider’s contact person, contact details for the provider’s employees, company, name, address, phone number, fax number, e-mail addresses, IBAN, tax number and scope of services ordered.

Data processing occurs to perform the contract on the basis of Art. 6 (1)(b) GDPR.

In the context of payment handling and tax claims, we transfer the data required in the individual case to the payment provider engaged with settlement, our accounting service and our tax advisor.

In connection with our internal company processes, we use various programs and providers to whom we transfer the data outlined above.
If data is transferred to the USA in this context, preservation of an appropriate level of data protection is guaranteed by recipient participation in the EU-US Privacy Shield agreement.

If data is transferred to the USA in this context, preservation of an appropriate level of data protection is guaranteed by recipient participation in the EU-US Privacy Shield agreement.

II.) Data processing concerning interested parties and employees

1.) Applicant management

In association with our applicant management, we process the following data concerning applicants: Name, address, date of birth, phone number, e-mail address, religious affiliation, photo if relevant, marital status, number of children, professional qualifications, schooling and school certificates and job references.

We process your data exclusively for the purposes of processing and handling your application. The legal basis for data processing is primarily Section 26 BDSG. According to this provision, data processing is permitted if it is necessary in the context of deciding whether to establish an employment relationship.

If your application is successful, your data will be transferred to your personnel file.

We will retain the data of unsuccessful applicants for a period of no more than six months after the end of the application process and then delete it.

The reason for data processing after the conclusion of the application process is the need for comprehensive documentation of the application process for the exercise and/or defence of labour law claims by former applicants. The legal basis for this data processing is our overriding legitimate interest in full legal defence pursuant to Art. 6 (1)(f) GDPR.

If you expressly consent to be included in our applicant pool during the application process, data processing will occur after the outlined period. This data processing occurs on the basis of your consent pursuant to Art. 6 (1)(a) GDPR. The data will be deleted after 12 months at the latest.

2.) Employee data

During the course of employment and to establish the employment relationship, we process the following data concerning you:

  • Master data: Name, address, gender, date of birth, place of birth, phone number, e-mail address, photo were relevant, personnel number;
  • Marital status, children, religious affiliation, nationality;
  • Contract data: Start/end of employment, type of position, level of employment
  • Organisation data: Job description, supervisor, location
  • Business contact data and communication data
  • Profile data: professional qualifications and schooling, school certificates and job references, other qualifications, work permit, Wage and wage payment data: Salary, variable wage components, bonuses, tax class, tax ID, health insurance, bank details, social security number, wage garnishment, supporting documents relevant for remuneration, private retirement provisions, Working hours, absence periods and reasons for absence (holiday, illness etc.), releases;
  • Access rights to IT systems and data processing operations, log data concerning use of communications and data processing systems, photos for the company website, video recordings of training videos and joint meetings
  • Where relevant, data about health and integration management: severe disability status, occupational health examinations
    Organisation data and administrative data about your position in the company and job as well as log data collected and processed about the operation and use of data processing facilities and data processing methods.
  • T-shirt and shoe size

In the context of payment handling and tax claims, we transfer the data required in the individual case to the payment provider engaged with settlement, our accounting service and our tax advisor.

In connection with our internal company processes, we use various programs and providers to whom we transfer the data outlined above.
If data is transferred to the USA in this context, preservation of an appropriate level of data protection is guaranteed by recipient participation in the EU-US Privacy Shield agreement.

The legal basis for data processing in connection with your employment relationship is Art. 88 GDPR in conjunction with Section 26 BDSG.
Insofar as data is collected that is not directly required for the performance of the employment relationship, this data processing occurs based on our overriding legitimate interest in a properly functional organisational and administrative structure pursuant to Art. 6 (1)(f) GDPR.

III.) Data processing concerning customers and partners

1. Agency services

Our services include customer advisory, workshops, training, website, interface and web shop creation, migration, security and auditing as well as maintenance by our agency.

As part of these services, we process the following data concerning our customers and their external providers where necessary for the purpose of customer acquisition, order execution and customer support: Company, address, phone number, fax number, e-mail address, first name and last name of employees and their business contact details, data about the services rendered, data about order execution, customer feedback, payment data and content data for payment specification.

In the context of payment handling and tax claims, we transfer the data required in the individual case to the payment provider engaged with settlement, our accounting service and our tax advisor.

In connection with our internal company processes, we use various programs and providers to whom we transfer the data outlined above.

If data is transferred to the USA in this context, preservation of an appropriate level of data protection is guaranteed by recipient participation in the EU-US Privacy Shield agreement.

Data processing occurs to perform the contract on the basis of Art. 6 (1)(b) GDPR.

2. Product sales

We offer the following services to our customers: Shop support, product marketing, sale of products including pre-sales, sales, support and return handling.

During order execution and subsequent support, we process the following data concerning our customers: Company, address, IP address, e-mail address, data concerning the product purchased, first name and last name of employees and their business contact details, support data, customer feedback, payment data and content data for payment specification.

In the context of payment handling and tax claims, we transfer the data required in the individual case to the payment provider engaged with settlement, our accounting service and our tax advisor.

In connection with our internal company processes, we use various programs and providers to whom we transfer the data outlined above.

If data is transferred to the USA in this context, preservation of an appropriate level of data protection is guaranteed by recipient participation in the EU-US Privacy Shield agreement.
Data processing occurs to perform the contract on the basis of Art. 6 (1)(b) GDPR.

3. Product support

We offer various support services. These services cover products that our customers purchased in our shop, products that we manage in collaboration with other companies and free products that we provide for marketing purposes.

When providing our support services, we process the following data concerning our customers: Name, email address and other contact details provided by the user, information about the product, payment data and content data for payment specification where relevant, access data provided for the user’s website, personal data from the user’s shop that can be accessed in this manner where relevant, log files of visitors to the customer’s website.

In connection with our internal company processes, we use various programs and providers to whom we transfer the data outlined above.

If data is transferred to the USA in this context, preservation of an appropriate level of data protection is guaranteed by recipient participation in the EU-US Privacy Shield agreement.
This data processing occurs on the basis of your consent pursuant to Art. 6 (1)(a) GDPR.

4. Product creation and maintenance

We create and maintain proprietary products in partnerships with external providers, or contribute to the ongoing development of such products or offer technical support.

To perform these services, we process the data of our partners, and when providing support we may also process the data of our partners’ customers. We process the following data concerning our partners: Company, last name, first name, address, IP address, e-mail address, data concerning the product, feedback, payment data and content data for payment specification.

When providing support, we process the following data concerning our partners’ customers: E-mail address, name, contact details, access data provided by the customer for the customer’s website and personal data from the customer’s website that can be accessed in this manner where relevant.

In connection with our internal company processes, we use various programs and providers to whom we transfer the data outlined above.

If data is transferred to the USA in this context, preservation of an appropriate level of data protection is guaranteed by recipient participation in the EU-US Privacy Shield agreement.

Data processing occurs to perform the contract on the basis of Art. 6 (1)(b) GDPR.

D.) Duration of data storage

We only store personal data as long as this is required for the purposes of processing or until you withdraw your consent. If statutory retention obligations must be observed, the storage period before erasing certain data may be up to 12 years regardless of the purpose of processing, depending on the date of the relevant tax assessment. (counting from the end of the relevant procedure in each case)

E.) Your rights as a data subject

I.) Access to information

On request, you can obtain access to information concerning all personal data we have stored concerning you at any time.

II.) Rectification, erasure, restriction of processing (blocking), objection

If you no longer agree with the storage of your personal data or if this data has become inaccurate, we will act according to your instructions to erase or block your data or undertake the necessary corrections (insofar as this is possible according to the applicable law). The same applies for restrictions to our future processing of data.

III.) Data portability

On request, we will provide you with your data in a structured, commonly used and machine-readable format so that you can transmit the data to another controller if you wish.

IV.) Right to lodge a complaint

You have the right to lodge a complaint with the responsible supervisory authority: (​https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html).

After granting consent, you can withdraw your consent at any time with future effect. Withdrawing your consent does not affect the legality of processing carried out before it is withdrawn.

VI.) Restrictions

Data which does not allow us to personally identify the data subject, for instance data that is anonymised for analytical purposes, are not covered by the rights listed above. Access to information, erasure, blocking, rectification or transfer to another company are possible for this data if you provide us with additional information that enable us to carry out identification.

VII.) Exercising your rights as a data subject

For questions concerning the processing of your personal data, for access to information, rectification, blocking, objection or erasure of data or to request transfer of data to a different company, please contact info@inpsyde.com.