Source: https://www.dspace.com/en/pub/home/privacypolicy.cfm
Timestamp: 2019-04-24 22:45:06+00:00

Document:
dSPACE is aware of the importance of personal data, such as names, addresses, and e-mail addresses, which can reveal the identities of website visitors. You can access most pages on the dSPACE website without having to provide any personal data.
For each visit of our website, we collect and use only the data listed under ‘Providing the Website and Creating Log Files’. Furthermore, we process personal data only if this is required to provide a functioning website as well as our content and services. Personal data is regularly collected and used only after the data subject explicitly agrees to this. An exception applies if it is not possible for factual reasons to obtain agreement and if processing of the data is permitted by legal regulations.
If personal data is processed to fulfill the duties of a contract to which the data subject is a party, Art. 6 Section 1 point (b) of the GDPR legally applies. This also applies to processing processes that are required to implement pre-contractual measures.
If personal data is processed to comply with legal obligations that dSPACE is subject to, Art. 6 Section 1 point (c) of the GDPR is the legal basis.
If data is processed to protect legitimate interests of dSPACE or a third party, and if these interests are not overridden by the interests, fundamental rights and freedoms of the data subject, Art. 6 Section 1 point (f) of the GDPR is the legal basis for data processing.
The personal data of the data subject is deleted and access to it is restricted as soon as the reason for storing the data no longer applies. Data may also be stored if this is required by European or national legislation in regulations, laws, or other provisions according to Union law to which dSPACE is subject. Access to data is also restricted and data is deleted if a storage duration prescribed by one of the above-mentioned regulations expires, unless a continued storage of the data is required to close a contract or meet contractual obligations.
The log files contain IP addresses and other data that make it possible to associate them with data subject. This can apply if the link to the website from which the data subject accesses our website, or the link to the website to which the data subject switches contains personal data.
The data is also stored in the log files of our system. This data is not stored together with other personal data.
To analyze trends, manage our website, track visitor movement, evaluate demographic information, and compile statistics on the daily number of visitors and daily inquiries about particular files, we also collect technical data including IP addresses. However, these are anonymous and are not linked to personal data.
Personal data is requested in forms for various purposes, depending on the type of form, for example, to process support inquiries, to sign up for events, or to provide information materials. It is your decision whether to use such a form to contact us.
Inquiries from countries that have a local dSPACE company or a distributor (see www.dspace.com) are forwarded to that company/distributor if this is considered the faster, more efficient method to process the inquiry.
Data that is stored in log files is deleted after seven days at the latest. Data may be stored for a longer period of time. In this case, the IP addresses of the data subjects’ PCs are deleted or changed so they can no longer be associated with the calling client.
Data collection is required to provide the website. Storing data to log files is compulsory to operate the website. Therefore, the data subject cannot object to data collection.
The personal data that is collected due to technically required cookies is not used to create profiles for the data subjects.
The legal basis for the processing of personal data when using technically required cookies is Art. 6 section 1 point (f) of the GDPR.
The legal basis for the processing of personal data when using cookies for analysis purposes is Art. 6 section 1 point (a) of the GDPR.
Newsletters are sent to data subjects who subscribed to them on our website.
Our website lets you subscribe to our newsletter free of charge. When you subscribe to the newsletter, the data you enter in the subscription form is sent to us. The minimum required data is the data subject’s e-mail address, their last name, first name, company, and complete address.
When you subscribe to the newsletter, we request your consent to process the data and point to this data protection regulation.
We do not disclose any of the data processed for sending the newsletter to third parties. The data is used exclusively for sending the newsletter.
The legal basis for processing the data after the data subject subscribed to the newsletter and if data subject’s consent exists is Art. 6 section 1 point (a) of the GDPR.
The data is deleted as soon as it is no longer necessary in relation to the purposes for which it was collected. This means the data subject’s e-mail address is stored for as long as the newsletter subscription is active.
Other personal data collected for the subscription process are usually deleted after seven days.
The data subject can unsubscribe from the newsletter at any time. Each newsletter contains a link for this.
This also makes it possible to revoke the consent to data storage given when the data subject subscribed to the newsletter.
The personal data in the contact form is processed only to process the contact request.
Other personal data that is processed during the transfer is used to prevent any misuse of the contact form and to ensure the security of our information technology systems.
You can also contact us via e-mail. In this case, the personal user data transferred with the e-mail is stored. If you contact us via e-mail, we also process the data to process the contact request.
The legal basis for processing the data if the data subject’s consent exists is Art. 6 section 1 point (a) of the GDPR.
The data is deleted as soon as it is no longer necessary in relation to the purposes for which it was collected. For the personal data entered in the contact form and the data transferred via e-mail, this is the case only if the conversation with the data subject has ended. A conversation has ended if the circumstances indicate that the relevant subject has been clarified.
The data subjects can revoke their consent to the processing of the data at any time. If data subjects contact us via e-mail, they can object to the storing of personal data at any time. In this case, the conversation cannot be continued.
All personal data that was stored in relation to the contact request is deleted.
mydSPACE is the Internet portal for dSPACE customers. You can use it to call up additional information on your products, make settings for receiving newsletters and other information, modify your contact data, and so on.
Registration with mydSPACE is completely voluntary. However, it might be necessary to register in order to use some areas of the dSPACE website such as the Known Problem Reports and download specific PDFs or patches.
dSPACE would like to keep your data up-to-date and correct so that we can give you the best possible service. dSPACE, or the local dSPACE company in your country (see www.dspace.com), will therefore store your information in a dSPACE database. The information will also be linked to other dSPACE databases, including ones outside of the dSPACE website, if this is necessary in order to fulfill your orders or provide the services you request.
If the dSPACE representatives in your country (see www.dspace.com) require any of your data in order to fulfill your orders or provide the services you request, dSPACE will make the required data available to them to use, provided an appropriate level of privacy is guaranteed.
This means that your data will be sent to a country that is neither a member state of the European Union nor a signatory state of the Treaty on the European Economic Area, if that is where you are located.
dSPACE, or the dSPACE company in your country, or the dSPACE representatives in your country, will also provide your data to third parties for use, unless this would obviously conflict with your protectable interests. However, advertising materials, e.g., e-mails, will not be sent to any persons who are not customers of dSPACE or of the responsible dSPACE company or of the local dSPACE representatives, except to the extent that you request and with your consent, which you can give electronically by stating your e-mail address in the registration form and then sending confirmation via e-mail.
You can withdraw your consent to the above-mentioned use of any or all of your data at any time by clicking Delete mydSPACE Account in your mydSPACE account or by clicking the link provided in an e-mail that you receive from us.
When you access mydSPACE, cookies might also be saved to or read from your computer if you accept cookies via your browser settings (see above for further details on cookies).
If your personal data is processed, you are the “data subject” in the sense of the GDPR and you have the following rights vis-a-vis the Operator, dSPACE. You can enforce your rights by contacting our data protection supervisor with your concern.
Data subjects have the right to obtain from the Operator without undue delay the rectification of inaccurate personal data concerning them. Taking into account the purposes of the processing, the data subjects have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
The data subject has the right to obtain from the Operator restriction of processing if one of the prerequisites stated in Art. 18 section 1 of the GDPR applies.
The data subject has the right to obtain from the Operator the erasure of personal data without undue delay if one of the reasons stated in Art 17 section 1 of the GDPR applies.
The data subject has the right to receive the personal data concerning them, which they have provided to an Operator, in a structured, commonly used and machine-readable format. The data subject also has the right to transmit this data to another controller without hindrance from the dSPACE to which the personal data has been provided if the processing is based on consent pursuant to Art. 6 section 1 point (a) GDPR or Art. 9 section 2 point (a) GDPR, or if the processing is based on a contract pursuant to Art. 6 section 1 point (b) GDPR and if the processing is carried out by automated means.
In case of objection, the Operator no longer processes the personal data unless the Operator demonstrates compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defense of legal claims.
If the Operator processes data for direct marketing purposes, the data subject has the right to object at any time to processing of personal data concerning them for such marketing. This includes profiling to the extent that it is related to such direct marketing. If the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.
If you need more information that you cannot find here or in the following detailed data protection regulation, do not hesitate to contact our data protection supervisor.
dSPACE has integrated the Google Analytics component (with anonymization function) on this website. Google Analytics is a web analysis service provider. Web analysis is the collection and analysis of data on the behavior of website visitors. Among others, a web analysis service collects data on the website from which a data subject visits another website (called ‘referrer’), which subpages a data subject accessed, and how often and for how long a subpage was visited. A web analysis is predominantly used to optimize a website and to analyze the cost-benefit ratio of online advertising.
dSPACE uses the _gat._anonymizeIp function for the web analysis via Google Analytics. With this function, the IP address of the Internet connection of the data subject is truncated and anonymized by Google if the website is accessed from a Member State of the European Union or another Contracting State to the Agreement on the European Economic Area.
This website uses HotJar, an analysis and feedback tool that supports dSPACE in understanding the online behavior of website visitors and in receiving feedback for a continued improvement of the website.
By using this website, you consent to HotJar Ltd processing the captured data in the manner described above and stated on the website. If you do not consent, you can opt out of data collection by activating the Do Not Track header in your Internet browser. For more information, visit https://www.hotjar.com/opt-out.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 18
 Art 17
 Art. 6
 Art. 9
 Art. 6