Source: https://certgate.com/en/data-privacy/
Timestamp: 2019-04-19 20:33:35+00:00

Document:
As the operator of this website, we take protection of your personal information very seriously. We treat your personal information as confidential and handle it in accordance with legal data privacy regulations and with this Data Privacy Declaration.
In general, it is possible to use our website without providing any personal information. If personal information (such as your name, address, or e-mail address) is collected on our website, it is always collected on a voluntary basis whenever possible. We will never transmit this data to third parties without your express consent.
We would like to note that there may be gaps in security whenever data is transmitted over the internet (such as via e-mail communication). It is not possible for us to provide seamless protection for your data from third party access.
We are glad you’re visiting our website (www.certgate.com) and thank you for your interest. Please note, for our online web shop (shop.certgate.com) a separate privacy statement, covering the requirements of an online web shop , is available for download within the shop.
In the following document, we will be informing you how we handle your personal information when you use our website. Personal information includes all data that can be used to personally identify you.
The individual responsible for data processing on this website in the sense of the European General Data Privacy Regulation (GDPR) and German “Datenschutz-Grundverordnung (DSGVO)” is certgate GmbH, Merianstrasse 26, 90409 Nuremberg, Germany, Tel.: +49 (0911) 93 52 30, e-mail: info@certgate.com.
Please Note: The following Privacy Declaration refers to the German DSGVO, which is in full compliance with the European GDPR.
For security reasons, and to protect transmitted personal information and other confidential content (such as orders or inquiries to the responsible persons), this website uses SSL and/or TLS encryption. You can recognize an encrypted connection because your browser line will start with “https://” and a lock symbol.
Data is processed in accordance with Art. 6 para. 1 lit. f DSGVO to fulfill our justifiable interests and in order to improve the stability and function of our website. Data is not transmitted to others or used in any other manner. However, we reserve the right to review server log files subsequently if we have concrete reasons to believe illegal usage has occurred.
In some cases, cookies save settings to simplify the ordering process (for instance to note the contents of a virtual shopping basket and save them for the next time you visit our website). If individual cookies implemented by us also process personal information, this information is processed in accordance with Art. 6 para. 1 lit. b DSGVO either to carry out the Agreement or in accordance with Art. 6 para. 1 lit. f DSGVO to safeguard our justifiable interests in ensuring the best possible functioning of the website and a customer-friendly and effective design for your site visit.
In some cases, we work alongside advertising partners who help us make our web presence more interesting to you. Cookies from partner companies may also be saved on your hard drive (cookies from third party providers) for this purpose when you visit our website. If we collaborate with the aforementioned advertising partners, you will be informed separately and individually regarding the use of such cookies and the scope of information collected in the following paragraphs.
Please note that you can change your browser settings in such a way that you are informed when cookies are sent, so that you may make individual decisions regarding their acceptance, or you may set a preference to generally accept or reject cookies in certain cases. Each browser manages cookie settings in a different way. This is described in the help menu of each browser, which explains how you can change your cookie settings.
Please note that if you choose not to accept cookies, some website functions may be restricted.
When you contact us (for instance using the contact form or via e-mail), we collect your personal information. The specific data collected is indicated on each specific contact form. We save and use this data only for the purpose of answering your inquiry or to contact you, and for associated technical administrative purposes. Data is processed on the legal basis of our justifiable interest in answering your inquiry in accordance with Art. 6 para. 1 lit. f DSGVO. If the purpose of your contact is to conclude an agreement, Art. 6 para. 1 lit. b DSGVO also serves as a legal basis for processing. Your data is deleted after we have finished processing your inquiry. Your inquiry is considered complete if circumstances indicate that the matter in question has been clarified and we are not subject to any statutory retention periods.
According to Art. 6 para. 1 lit. b DSGVO, personal information is furthermore collected and processed if you provide it to us to carry out an agreement or open a customer account. The specific data collected is clear from the input form. You can delete your customer account at any time by sending a message to the aforementioned responsible party’s address. We save and use data provided by you to process your contract. After we have fully processed your contract or deleted your customer account, your data is blocked in accordance with tax and commercial law retention periods and then deleted after this period unless you have expressly consented to the further use of your data or if we have reserved the right to carry out further legally allowed data processing, of which we will inform you accordingly thereafter.
Registration for our e-mail newsletter: If you register for our e-mail newsletter, we will send you information on our services regularly. Only your e-mail address is required for us to send you the newsletter. Any further data is provided voluntarily and is used to contact you personally. We use a double opt-in process to send out our newsletter. This means we will only send you an e-mail newsletter if you have expressly confirmed your consent to receive the newsletter. We will then send you an e-mail confirmation which will ask you to click a link to confirm you would like to receive the newsletter in the future.
When you activate your confirmation link, you grant us your consent to use your personal information in accordance with Art. 6 para. 1 lit. a DSGVO. When you register for our newsletter, we save the IP address entered by your internet service provider (ISP), as well as the date and time of your registration so we can track any potential misuse of your e-mail address at a later date if necessary. Data we collect to register you for our newsletter is only used for advertising purposes through the newsletter. You can cancel your newsletter subscription at any time by clicking the provided link in the newsletter, or by sending a message to this effect to the responsible individual named above. After the cancellation, we will promptly delete your e-mail address from our newsletter distribution list unless you have expressly consented to further use of your data or unless we reserve the right to process your information further in accordance with the law as indicated in this declaration.
NOTE: In general, orders can only be processed through the certgate online shop for commercial customers, e.g. companies. Ordering and delivery to non-commercial customers is excluded.
We work with the following service providers to process your order; they support us in whole or in part in carrying out agreements once they are concluded. Certain personal information is transmitted to these service providers as stated in the following. We provide personal information we collect during order processing to the following commissioned service providers if necessary to process your order or to process and deliver goods. The legal basis for data transmission is Art. 6 para. 1 lit. b DSGVO.
In general, orders in the certgate online shop are billed only to commercial customers, e.g. companies. Invoices are processed by an external service provider, Billomat GmbH & Co. KG, Barbiergasse 6, 90443 Nuremberg, Germany. If personal information such as names and addresses of a recipient are recorded during a commercial ordering process, this information is transmitted to Billomat alongside other information on the order and billing for proper invoicing and further processing in the service provider’s systems. Further details on data privacy and contract data processing by Billomat as a service provider are available here: https://www.billomat.com/datenschutz/.
certgate’s services are generally directed only towards commercial customers. If personal information such as names, addresses, and contact data are recorded when contacting customers, this may be transmitted to external IT infrastructure service provider Microsoft as part of business communications, such as e-mails, letters, etc. and saved on the service provider’s systems. The certgate IT infrastructure (Office 365) is partially provided as a service by an external operator, Microsoft Ireland Operations Limited, The Atrium Building, Block B, Carmanhall Road, Sandyford Business Estate, Dublin 18. Further details on data privacy and contract data processing by Microsoft as a service provider are available here: https://privacy.microsoft.com/en-gb/privacystatement.
certgate’s services are generally directed only towards commercial customers. If personal information such as names, addresses, and contact data are recorded when contacting customers, this may be transmitted to external CRM infrastructure service provider Microsoft as part of business communications, such as e-mails, letters, etc. and saved on the service provider’s systems. The certgate CRM infrastructure is provided as a service by an external operator, Citrix Systems UK Limited, Building 3, Chalfont Park House, Gerrards Cross, SL9 0DZ, United Kingdom. Further details on data privacy and contract data processing by Citrix as a service provider are available here: https://www.citrix.com/about/legal/privacy/ .
certgate’s services are generally directed only towards commercial customers. If personal information such as names, addresses, contact data and order details are recorded when contacting customers or processing orders, this may be transmitted to external IT service provider Zapier systems for further processing and storage. A seamless integration of the online shop, billing, sales and newsletter services, is provided as a service by the external operator, Zapier, 243 Buena Vista Avenue, Suite 508, Sunnyvale, CA 94086, United States. Further details on data privacy and contract data processing by Zapier as a service provider are available here: https://zapier.com/privacy/.
If goods are sent via package, they are shipped by transportation service provider DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, zip code / city: 53113 Bonn. The recipient’s name, address, e-mail, and if applicable telephone number are transmitted before goods are delivered in accordance with Art. 6 para. 1 lit. a DSGVO for the purpose of setting a delivery date or to announce the delivery and provision to DHL, if you have selected this shipping method during the order process. Data is only transmitted if necessary to deliver goods. Further details on data privacy for service provider DHL are available here: http://www.dhl.com/en/legal.html#privacy .
If goods are delivered as a letter or small package, shipping is handled by the transportation service provider Deutsche Post AG, Charles-de-Gaulle-Straße 20, zip code / city: 53113 Bonn, Germany. The recipient’s name and address are transmitted before goods are delivered in accordance with Art. 6 para. 1 lit. a DSGVO for the purpose of delivery, if you have selected this shipping method during the order process. Data is only transmitted if necessary to deliver goods. Further details on data privacy for service provider Deutsche Post AG are available here: https://www.deutschepost.com/en/f/footer/data-protection-and-cookies.html.
This website uses the online advertising program “Google AdWords” and conversion tracking under Google AdWords from Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). We use Google’s services to make you aware of our attractive services on external websites using advertisements (called Google AdWords). We can determine how successful our individual advertising measures are in relation to data from advertising campaigns. Our purpose in doing so is to show you ads that are of interest to you, to make our website more interesting for you, and to calculate advertising costs fairly. A cookie is saved for conversion tracking when a user clicks on an AdWords advertisement placed by Google. Cookies are small text files saved on your computer system. These cookies typically become invalid after 30 days and are not used to personally identify you. If the user visits certain parts of this website, and the cookie has not yet expired, we and Google can see that the user clicked on the ad and was transferred to this page. Each Google AdWords customer receives a unique cookie. Therefore, cookies cannot be tracked through AdWords customer websites. Information obtained using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ads and were transferred to a page with a conversion tracking tag. However, they do not receive any information that could be used to personally identify users. If you do not want to take part in tracking, you can block this use by deactivating the Google conversion tracking cookie using the user settings on your web browser. Afterwards, you will no longer be included in conversion tracking statistics. We use Google AdWords based on our justifiable interest in targeted advertisement under Art. 6 para. 1 lit. f DSGVO.
This website uses Google Analytics, a web analytics service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses so-called “cookies,” text files saved on your computer that facilitate an analysis of your use of our website. The information provided by these cookies regarding your use of our website (including your abbreviated IP address) is generally transferred to a Google server in the USA and stored there.
This website uses Google Analytics only with the extension “_anonymizeIp(),” which ensures your IP address is anonymized through an abbreviation and makes it impossible to directly connect data with you personally. The extension means your IP address will be abbreviated within the member states of the European Union or in other contracting states in the Agreement on the European Economic Area before this transfer. Only in exceptional cases will your full IP address be transferred to a Google server in the USA, where it will be shortened. In these exceptional cases, processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO based on our justifiable interest in statistically analyzing user behavior for optimization and marketing purposes.
Google will use this information under contract by us to evaluate your site usage, create reports regarding website activity, and complete additional services associated with your internet usage on our behalf. The IP addresses transferred by your browser as part of Google Analytics are not associated with other data from Google. You can prohibit the storage of cookies by changing the settings in your browser software accordingly; we would, however, like to inform you that in this case you will not be able to use the full extent of all functions on our website. You can, additionally, prohibit the collection of the data created by cookies and related to your use of the website (incl. your IP address) by Google and Google’s processing of this data by downloading and installing the browser plug-in available at the following link.
As an alternative to a browser plug-in or when using browsers on mobile devices, please click the following link to set an opt-out cookie that will prevent recording by Google Analytics on this website in the future (this opt-out cookie only works in this browser and only for this domain; if you delete your cookies in this browser, you will have to click the link once again): Deactivate Google Analytics.
This website uses the functions of Google AdWords Remarketing, which allows us to advertise this website in Google search results and on third party websites. The service provider is Google LLC., 1600 Amphitheatre Parkway Mountain View, CA 94043 USA (“Google”). Google saves a cookie in your device’s browser for this purpose that automatically uses a pseudonymized cookie ID and the pages you visit to show you an interest-based advertisement. Data is processed based on our justifiable interest in optimal marketing for our website in accordance with Art. 6 para. 1 lit. f DSGVO.
Any further data processing is only carried out if you have given Google your consent that Google may link your internet and app browser behavior to your Google account, and that information from your Google account can be used to personalize ads you see online. If you are logged in to Google while visiting our website, Google will use your data alongside Google Analytics data to create and define target audience lists for cross-device remarketing purposes. Google will temporarily link your personal information with Google Analytics data to form target audiences.
You can permanently deactivate saving cookies for advertising purposes by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/onweb/ Alternatively, you can learn about how cookies are saved from the Digital Advertising Alliance at the website www.aboutads.info and change your settings accordingly. Finally, you can set your browser in such a way that you are informed when cookies are sent so you may make individual decisions regarding their acceptance, or you may set a preference to generally accept or reject cookies in certain cases. If you choose not to accept cookies, the functions of our website may be limited. Google LLC, headquartered in the USA, is certified for the US European “Privacy Shield” data privacy convention, which ensures compliance with the same level of data privacy applicable in the EU.
Right to information in accordance with Art. 19 DSGVO: If you have asserted your right to correction, deletion, or restriction of processing towards the responsible person, this individual is obligated to inform all recipients to whom your personal information was disclosed of this correction or deletion of data, or of the restriction of processing, unless this proves to be impossible or would be associated with an unreasonable amount of work. You have the right to be informed of these recipients.
Right to revoke granted consent in accordance with Art. 7 para. 3 DSGVO: You have the right to revoke your consent to process data at any time with future effect. If we receive a revocation, we will promptly delete the data in question unless further processing is carried out on some legal basis that does not require your consent. A revocation of consent will not affect the legality of processing completed based on the consent up until the time it was revoked; – Right to complaint in accordance with Art. 77 DSGVO: Apart from any other administrative law or legal remedy, you have the right to submit a complaint to a supervising authority, in particular in the member state in which your domicile or workplace are located, or the place of the alleged violation, if you believe that processing of your personal information violates the DSGVO.
IF WE PROCESS YOUR PERSONAL INFORMATION BASED ON OUR OVERWHELMING JUSTIFIABLE INTEREST, HAVING WEIGHED THE INTERESTS OF THE VARIOUS PARTIES, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING WITH FUTURE EFFECT FOR REASONS RELATED TO YOUR SPECIFIC SITUATION. IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING YOUR DATA. HOWEVER, WE RESERVE THE RIGHT TO PROCESS DATA FURTHER IF WE CAN SHOW MANDATORY PROTECTED GROUNDS FOR PROCESSING THAT OUTWEIGH YOUR INTERESTS, BASIC RIGHTS, AND BASIC FREEDOMS, OR IF SUCH DATA IS PROCESSED TO ASSERT, EXERCISE, OR DEFEND AGAINST LEGAL CLAIMS. IF WE PROCESS YOUR PERSONAL INFORMATION FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO PROCESSING OF YOUR PERSONAL INFORMATION FOR SUCH ADVERTISING PURPOSES AT ANY TIME. YOU CAN EXERCISE THIS RIGHT TO OBJECT AS DESCRIBED ABOVE. IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING YOUR DATA FOR DIRECT ADVERTISING PURPOSES.
The duration of time for which personal information is saved is determined based on the applicable statutory retention periods (e.g. commercial and tax law retention periods). After the end of the period, the relevant data is deleted through a routine process if it is no longer required to fulfill or initiate a contract, and/or if we have no further justifiable interest in continuing to save it.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 19
 Art. 7
 Art. 77