VisLogic GmbH: Data Privacy Statement (GDPR)

25th of May, 2018

Overview


01. Name and contact data of the guarantor
02. Contact address for questions about data security and privacy
03. Data processing by VisLogic / general
04. Data collection when you register and log in on vislogic.de
05. Newsletter
06. Data collection when you visit the website
07. Use of cookies
08. Contact form and email contact
09. Data transfer when the user activates or deactivates a product
10. Data transfer when the user activates a blank license
11. Data transfer – check for update/retrieval of maintenance agreements
12. Privacy policy regarding Google Analytics
13. Privacy policy regarding web fonts (Google Fonts)
14. Closing the account/erasing your registration
15. Rights of the data subjects / Your rights





1. Name and contact data of the guarantor

Responsible:

VisLogic GmbH
Rehstieg 8
25335 Elmshorn
Germany
Managing director: Maxim Szenessy

Tel.: +49-(0)4121 - 789 10 76
email: info[at]vislogic[dot]de


2. Contact address for questions about data security and privacy

Please send your questions about data security and privacy to: email: datenschutz[at]vislogic[dot]de


3. Data processing by VisLogic / general

We collect, store and process data on rented servers provided by 1&1 Internet AG, Eldendorfer Str. 57, 56410 Montabaur, and on servers in our offices (VisLogic GmbH, 25335 Elmshorn, Germany). The storage of the data at 1&1 complies with statutory data protection regulations and the principles of data protection of 1&1 Internet AG. Any exchange of data via the Internet takes place solely by SSL or TLS-secured channels.

Our system collects a set of general data and information each time a person or automated system accesses a website. We store this general data and information in the log files of the web server. The information collected may include the types and versions of browsers used, the operating system used by the accessing system, the website from which an accessing system reaches our website (the “referrer”), the sub-websites controlled on our website by an accessing system, the date and time of access to the website, an Internet Protocol (IP) address, the Internet service provider of the accessing system and other similar data and information used for security purposes in the event of attacks on our information technology (IT) systems.

When we use this general data and information, we do not draw any conclusions about the data subject. Rather, we require this information to be able to correctly deliver the contents of our website, to optimize the contents of the website as well as the advertising for the website, to ensure the permanent functionality of our IT systems and the technology of our website, and to provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber-attack. We therefore evaluate this anonymously collected data and information statistically, also with the aim of increasing data protection and data security within the company in order to ultimately ensure an optimal level of protection for the personal data we process. We store the anonymous data of the server log files separately from all the personal data provided by a data subject.

Scope of the processing of personal data

We only collect and use our users’ personal data insofar as we require it to be able to provide a functional website and to provide our content and services. We collect and use our users' personal data with the users’ consent if the processing of the data is not permitted by legal regulations.

Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.

When we process the personal data required for fulfilling a contract to which the data subject is a party, Article 6 (1) (b) GDPR serves as the legal basis. The same also applies to processing operations that are necessary for the implementation of pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6 (1) (c) GDPR serves as the legal basis.

If the processing is necessary in order to safeguard a legitimate interest of our company or of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Article 6 (1) (f) GDPR serves as the legal basis for the processing.

Data erasure and storage period

Die personenbezogenen Daten der betroffenen Person werden gelöscht oder gesperrt, sobald der Zweck der Speicherung entfällt. Eine Speicherung kann darüber hinaus dann erfolgen, wenn dies durch den europäischen oder nationalen Gesetzgeber in unionsrechtlichen Verordnungen, Gesetzen oder sonstigen Vorschriften, denen der Verantwortliche unterliegt, vorgesehen wurde. Eine Sperrung oder Löschung der Daten erfolgt auch dann, wenn eine durch die genannten Normen vorgeschriebene Speicherfrist abläuft, es sei denn, dass eine Erforderlichkeit zur weiteren Speicherung der Daten für einen Vertragsabschluss oder eine Vertragserfüllung besteht.


4. Datenerhebung bei Registrierung und Login auf vislogic.de

Umfang der Datenerhebung

In order to activate and operate VisLogic products on their own computer systems, customers need to obtain an online account by registering on our website. The registration of the account involves the collection and storage of the following data:

In the course of the registration process, we obtain your consent for the processing of the data and refer you to this Privacy Policy.

  • Desired login name
  • Personal login password
  • Ms./Mr.
  • First name, last name
  • Telephone number
  • Email
  • Address (usually company/customer)
  • Company size (optional, estimated figure)

We also collect the following data when you log in:

  • IP address of the referring computer
  • Date and time of the login

Purpose of the data collection:

We use and process the data in order to technically allocate the licenses used to the customer, as well as to activate the installation on the customer’s computer systems. The data is also used to create commercial accounts.

Legal basis:

The legal basis for the fulfillment of a contract to which the data subject is a party, or for the implementation of pre-contractual measures taken at the request of the data subject, is Article 6 (1) (b) GDPR.

If the processing is necessary in order for us, as the controller, to fulfill a legal obligation, we do so on the basis of Article 6 (1) (c) GDPR. In all other cases, the right to safeguard the legitimate interests of the controller or of a third party follows from Article 6 (1) (f) GDPR, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail.

Duration of storage:

We erase or block the data subject’s personal data as soon as the purpose of its storage is no longer applicable. Furthermore, we may store data if such has been provided for by European or national law in EU regulations, laws or other provisions to which we, as the controller, are subject.


5. Newsletter

As part of the registration process, or later on as a registered user, the user has the option to subscribe to a newsletter.

In the course of the registration process, we obtain your consent for the processing of the data and refer you to this Privacy Policy. We send out the newsletter on the basis of the consent granted by the user and thus on the basis of the legal basis of Article 6 (1) (a).

If you purchase goods or services on our website, we may subsequently use your email address to send a newsletter. In such a case, we will only use the newsletter to send direct advertising for our own similar goods or services.

In connection with our processing of data for sending newsletters, we do not pass the data on to third parties. We may also send out newsletters can also be sent by way of a service provider with whom we have concluded a contract for commissioned processing. We use the data solely to send the newsletter; it is stored until you unsubscribe, unless there is a legal obligation for us to continue storing it.


6. Data collection when you visit the website

Visiting the website without logging in as a registered user

When you visit our website without logging in as a registered user, we collect data as described in section 3.

Visiting the website and logging in as a registered user

When you visit the website and log in as a registered user, we log the IP address and the time and, if applicable, duration of the login, as well as whether logout has taken place.


7. Use of cookies

Our websites use cookies. Cookies are text files that an Internet browser places and stores on a computer system.

Numerous websites and servers use cookies. Many cookies include what is called a cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters with which websites and servers can be assigned to the specific Internet browser storing the cookie. This enables the websites and servers visited to distinguish between the individual browser of the data subject and other Internet browsers that contain other cookies. A particular Internet browser can be recognized and identified by means of its unique cookie ID.

By using cookies, we are able to provide users with more user-friendly services that would not be possible if we did not use cookies.

Description, scope and purpose of data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For you to be able to use all the functions, it is necessary for us to recognize your browser also after you move to another webpage.

We require cookies for the following applications:

  • Providing the secured login area
  • Accepting language settings

We do not use the user data collected by technically necessary cookies to create user profiles. We also use cookies on our website that enable us to analyze our users’ surfing behavior. This way we are able to receive the following data:

  • Frequency of webpage access
  • Use of website functions

We use analysis cookies to improve the quality of our website and its content. The analysis cookies enable us to learn how the website is used and thus to continuously optimize our offer.

We also use analysis cookies to analyze how and to what extent services are used and to further optimize our service offering – for example in our “response suggestion system”, which website visitors are offered as they enter an enquiry in the contact form.

The user data collected in this manner for analysis purposes is pseudonymized by means of technical precautions. We are therefore no longer able to allocate the data to the accessing user. We do not store the data together with our users’ other personal data.

These purposes also reflect our legitimate interest in the processing of personal data in accordance with Article 6 (1) (f) GDPR.

Duration of storage, options to object to and delete cookies

Cookies are stored on the user’s computer, which sends the data to our website. As a user, therefore, you also have the full control of our use of cookies. You can disable or restrict the placement of cookies by changing the settings in your Internet browser. Cookies that have already been stored can be deleted at any time. You can also delete cookies automatically. If you have disabled cookies for our website, you may no longer be able to use all the functions of the website in full. With this Privacy Policy, we wish to inform you about the use of cookies for analytical purposes and refer you to this Privacy Policy. We also wish to point out how you can prevent the storage of cookies in the browser settings.


8. Contact form and email contact

Description and scope of data processing

Our website includes a contact form that can be used for electronic contact. If a user takes advantage of this possibility, the data entered in the input mask will be sent to us, and we will store it. Such data includes:

  • Subject
  • Name
  • Company
  • EmMail response address
  • Your message

Alternatively, you can contact us using the email address provided. In this case, we store the user’s personal data that is sent by email.

In this context, we do not pass the data on to third parties. We use the data solely for processing the conversation.

Legal basis for data processing

The legal basis for the processing of the data transferred in the contact form or when an email is sent is Article 6 (1) (f) GDPR. If the email contact serves the purpose of concluding a contract, then the additional legal basis for the processing is Article 6 (1) (b) GDPR.

Purpose of data processing

Our sole purpose in processing the personal data from the input mask is to process the contact. If a user contacts us by email, this also constitutes our necessary legitimate interest in processing the data.

The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our IT systems.

Duration of storage

We erase the data as soon as it is no longer necessary for achieving the purpose for which it was collected. With regard to the personal data from the input mask of the contact form and the personal data that is sent by email, this is the case when the respective conversation with the user is concluded. The conversation is deemed concluded if it can be inferred from the circumstances that the facts in question have been finally clarified. If the data in question involves invoice-relevant facts sent to us by registered users, the retention period is ten years.

The data we store due to legal obligations or official orders is subject to other purposes; we only erase it once the applicable deadlines expire.

Options to object and erase

The user has the option to withdraw their consent to the processing of personal data at any time. If the user contacts us by email, the user can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

The user can exercise the option to object by means of an email to datenschutz[at]vislogic[dot]de.

In this case, we will erase all a user’s personal data stored in the course of contacting us unless we store the data for other reasons.


9. Data transfer when the user activates or deactivates a product

Description, purpose and scope of data processing

Our products must be activated in order for us to ensure technically that they are used in a license-compliant manner. Activation takes place in encrypted form, if possible via the Internet or with encrypted codes communicated by one of our employees by telephone. The collection of the data enables us to compare the data and thus ensure the implementation of the license agreement. If the product is activated, we store only the hardware signature of the host system.

The activation options involve the transfer of the following data:

  • Unique software and hardware signature of the host system
  • Login name of the online account to be used
  • Login passweord of the online account to be used
  • IP address of the host system
  • Date and time

Legal basis for data processing

The processing and transfer of data to VisLogic GmbH serves the purpose of fulfilling a contract; the legal basis is Article 6 (1) (b) GDPR.

Duration of storage

We erase the hardware signature as soon as the software is properly deactivated on the host system (in the case of uninstallation). To ensure the functionality and proper use according to the license agreement, we store the hardware signature indefinitely.


10. Data transfer when the user activates a blank license

Description, purpose and scope of data processing

To make full use of some of our products, you can enhance them by means of license keys. These license keys must also be assigned to the customer’s installation. This helps to prevent license keys from being used illegally. In order to activate license keys to the customer’s installation, we collect activation data in a Contact form on our website for comparison with master data.

In the customer’s data record, we store only the blank license key entered.

When a license key is activated, we receive the following data:

  • Lani serial number
  • Name and email of the contact person
  • Address (of the company)
  • IP address of the host system
  • Blank license keys
  • Date and time

Legal basis for data processing

The processing and transfer of data to VisLogic GmbH serves the purpose of fulfilling a contract; the legal basis is Article 6 (1) (b) GDPR.

Duration of storage

In the case of purchase licenses created for customers, we provide indefinite storage until the customer withdraws their consent.


11. Data transfer – check for update/retrieval of maintenance agreements

Description, purpose and scope of data processing

Some of our products include an update function. When you call the update-specific functions, encrypted information is transferred to our servers via the Internet to retrieve the corresponding customer data.

The following data is transferred by the update functions:

  • Unique software and hardware signature of the host system
  • IP address of the host system
  • Customer’s serial number
  • Version number of the installation
  • Date and time

Legal basis for data processing

The processing and transfer of data to VisLogic GmbH serves the purpose of fulfilling a contract; the legal basis is Article 6 (1) (b) GDPR.

Duration of storage

Once the update function is complete, we discard the data thus transferred; we do not store it, except for the entries in log files mentioned above as contextless access to servers on the Internet.


12. Privacy policy regarding Google Analytics (with anonymization function)

We, as the controller, have integrated Google Analytics (with anonymization function) as a component on this website. Google Analytics is a web analysis service. Web analysis is the collection and evaluation of data regarding the behavior of visitors to websites. A web analysis service collects, for example, data regarding the website which a data subject leaves in order to go to a website (the “referrer”), which subpages of the website are accessed, or how often and for how long a data subject views a subpage. Web analysis primarily enables us to optimize a website and to analyze the costs and benefits of Internet advertising.

The Google Analytics component is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043-1351, USA.

We, as the controller, use the suffix “gat.anonymizeIp” for the web analysis via Google Analytics. This suffix enables Google to shorten and anonymize the IP address of the Internet connection of the data subject who accesses our website from a member state of the European Union or from another state party to the Agreement on the European Economic Area.

The purpose of the Google Analytics component is to analyze visitor flows on our website. Google uses the data and information collected to evaluate the use of our website, for example, as well as to compile online reports for us that show the activities on our websites, and to provide other services in connection with the use of our website.

Google Analytics places a cookie, explained above, on the IT system of the data subject. By using the cookie, Google is able to analyze the use of our website. Each time one of the individual pages of this website, which we operate as the controller and on which a Google Analytics component has been integrated, is called, the Internet browser on the IT system of the data subject is automatically prompted by the respective Google Analytics component to transfer data to Google for the purpose of online analysis. As part of this technical process, Google obtains knowledge of personal data, such as the IP address of the data subject; this knowledge allows Google, among other things, to trace the origins of visitors and clicks and, subsequently, to perform commission calculations.

The cookie makes it possible for us to store personal information, such as the time of access, the location where access originates, and the frequency of the data subject’s visits to our website. Whenever you visit our website, this personal data, including the IP address of the Internet connection used by the data subject, is transferred to Google in the United States, where it is also stored by Google. Google may pass on the personal data collected by the technical procedure to third parties.

The person/data subject can prevent cookies from being used by our website, as depicted above, by making the necessary settings on the Internet browser used and thus permanently object to the use of cookies. By means of this setting for the Internet browser, the data subject would also prevent Google from placing a cookie on their IT system. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.

Furthermore, the data subject has the option to object to and prevent the collection of data generated by Google Analytics relating to the use of this website and the processing of this data by Google. To do so, the data subject must download and install a browser add-on from the link https://tools.google.com/dlpage/gaoptout. This browser add-on notifies Google Analytics via JavaScript that no data or information about the visits to websites can be sent to Google Analytics. Google deems the installation of the browser add-on an objection. If the data subject’s IT system is erased, formatted or reinstalled at a later time, the data subject must reinstall the browser add-on to disable Google Analytics. If the data subject or another person within the control of the data subject uninstalls or deactivates the browser add-on, it will be possible to reinstall or reactivate the browser add-on.

For more information and the current Google privacy policy, please visit https://policies.google.com/privacy?hl=en&gl=en and http://www.google.com/analytics/terms/us.html Google Analytics is explained in more detail at https://www.google.com/intl/en_us/analytics/.

As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on the following link: Deactivate Google Analytics. You will thus set an opt-out cookie to prevent the future collection of your data when you visit this website. The opt-out cookie, stored on your device, is valid only in this browser and only for our website. If you delete the cookies in this browser, you must reset the opt-out cookie.


13. Privacy policy regarding web fonts (Google Fonts)

Our website pages use external fonts provided by Google Fonts. Google Fonts is a service offering of Google Inc. (“Google”). These web fonts are integrated by means of a server call, usually a Google server in the United States. This way, information is communicated to the server about which of our website pages you have visited. Google also stores the IP address of the browser used by our website visitor’s terminal device. For more information, please see Google’s privacy policy, available here:

https://www.google.com/fonts#AboutPlace:about
https://www.google.com/policies/privacy/


14. Closing the account/erasing your registration

You can close your registration account on the VisLogic website or have us delete your data. As a result, you will no longer be able to use the software installation within your network for rental agreements. However, current rental agreements will not be terminated as a result. Rental agreements must be properly terminated in accordance with our General Terms and Conditions.

Without an account, you will no longer be able to reinstall on other hardware. If you wish to reopen your account afterwards in order to continue using your license, please contact our customer service. If you have had your account erased, it must be manually reconstructed. In both cases, manual intervention on the part of VisLogic is associated with costs, which we can provide on request. If you close your online account, we will deactivate your account in our database and give it “closed” status. If you wish to have us erase your data, we will do so


15. Rights of the data subjects / Your rights

Data subjects have the right to obtain confirmation as to whether or not we process their data and to access such data in accordance with Article 15 GDPR.

Data subjects have the right to the rectification of their data which we process (Article 16 GDPR).

Data subjects have the right under Article 17 GDPR to obtain the erasure of their personal data without delay or, alternatively, that the processing should be restricted in accordance with Article 18 GDPR.

Data subjects have the right to receive their data pursuant to Article 20 GDPR which we process automatically on the basis of their consent or in order to fulfill a contract, or to transfer such data to a third party, in a standard, machine-readable format. Insofar as the data subject requests the direct transfer of data to another controller, the data will be transferred only insofar as such is technically feasible.

Data subjects have the right pursuant to Article 77 GDPR to lodge a complaint with the competent supervisory authority. For a list of data protection officers and their contact information, please see: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Right to withdraw consent

Betroffene haben das Recht, erteilte Einwilligungen gemäß Art. 7 Abs 3 DSGVO für die Zukunft zu widerrufen.

Right to object

Data subjects have the right to withdraw their consent granted pursuant to Article 7 (3) GDPR, with effect for the future.

Information regarding the rights to object and to withdraw consent

We have tailored our data collection and processing operations to fit the products and services offered. The data processing described is a necessary component of the license agreement. If the customer withdraws their consent or objects to the processing of data, it is possible that our services and products can no longer be used. After objecting to the processing of data, the customer will not be entitled to a refund of any fees already paid.

VisLogic processes data in order to provide its products, its services and the information on this web site. You can read how we process data in our privacy policy that you accept if you continue browsing this web site. Further information is available also in our imprint.
OK