Source: https://www.itizzimo.com/en/privacy/
Timestamp: 2019-04-25 14:04:57+00:00

Document:
The protection of your personal data is very important to iTiZZiMO AG. It is important to us to inform you about which personal data we collect while visiting our web pages and when registering, how they are used and what options are available to you. This data protection notice provides answers to the most important questions.
2. What general data and information is collected by iTiZZiMO AG?
other similar data and information used for security purposes in the event of attacks on our information technology systems.
3. When and for what purpose does iTiZZiMO AG collect general data and information?
iTiZZiMO AG does not use the general data and information to identify the person targeted. Rather, this information is required to correctly deliver the contents of our website, to optimize the contents of our website as well as the advertising for it, to ensure the permanent functionality of our information technology systems and the technology of our website and to provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber attack.
These anonymously collected data and information are therefore evaluated by iTiZZiMO AG statistically and with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimal level of protection for the personal data processed by us. The anonymous data of the server log files are stored separately from all personal data provided by a person concerned.
4. When does personal data have to be provided, is there an obligation to do so and what are the consequences of not being provided?
iTiZZiMO AG collects, stores or uses data only for its own business purposes.
Principally, our websites are available to all users without the collection of personal data. Personal data will only be requested, processed and used to the extent necessary to provide services or content that you have requested.
The availability of personal data is partly required by law (e.g. due to tax regulations) or may result from contractual regulations (e.g. information on the contractual partner). When concluding a contract, it may be necessary that you provide us with personal data which must subsequently be processed by iTiZZiMO AG, otherwise the contract with you cannot be concluded. You may contact our data protection officer before providing personal data. The latter can clarify on a case-by-case basis whether the provision of your personal data is required by law or contract or necessary for the conclusion of the contract and what consequences the failure to provide the personal data has.
Cookies” are sometimes used on our websites. This standard technology conceals small text files which are stored on the device you are using and which, among other things, make it possible to make visiting a website more comfortable or safer. Cookies can also be used to better match the offer on a website to the interests of visitors or to improve it in general on the basis of statistical evaluations.
You can decide yourself whether or not the browser you are using allows cookies. Please note that website functionality may be limited or even disabled if cookies are not allowed.
Website session cookies: These cookies serve as an identification feature for the duration of your visit to our website. This only applies to the current session.
LinkedIn Analytics, a web analysis service of LinkedIn (LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA), collects and stores data on this website from which user profiles are created using pseudonyms. These usage profiles are used to analyse visitor behaviour and are evaluated to improve and design our offer in line with demand.
Cookies may be used for this purpose. The pseudonymised user profiles are not combined with personal data about the bearer of the pseudonym without the express consent of the data subject to be given separately.
This website uses the remarketing function of Google Inc. This makes it possible to present interest-related advertising to website visitors within Google’s advertising network. For this purpose, a so-called “cookie” is stored on the visitor’s computer. The string contained in it serves to recognize a visitor when he or she visits websites that are part of the Google advertising network. This may include advertisements that refer to content previously viewed on websites that use Google Remarketing.
Google uses the so-called “DoubleClick” cookie for this purpose. This is the same cookie that is used on websites that run advertising programs from Google subsidiary DoubleClick. No advertising from third parties is placed on our pages. The DoubleClick cookie is used here for remarketing purposes only.
11. What is “Conversion Tracking” and how is it used?
Our websites use Google Conversion Tracking. When you access our websites via a Google ad, Google AdWords stores a cookie on your computer. This cookie loses its validity after 30 days and serves only to recognize whether they visit our web pages within this time. It is not possible to draw any conclusions about you personally. The information collected using the conversion cookie is used to compile statistics on our conversion rate. This means that we know how many users come from a Google ad. If you do not wish to participate in the tracking process, you can deactivate cookies for conversion tracking by setting your browser settings to block cookies from the “googleadservices.com” domain..
12. What is “A/B Testing” and how is it used?
We continuously improve the user-friendliness of our website and workflows for our customers. For this purpose, we use A/B testing technology from time to time. This involves modifying small parts of our website for certain user groups in order to be able to measure improvements or deteriorations under real conditions. In order to be able to carry out the selection of test variants and the measurement of these tests properly, our website technology uses a short-lived session cookie as well as a cookie, which can be valid for a longer period of time (up to several years). Both cookies do not allow any conclusions to be drawn about your person and we do not pass on any further data to third party providers. If you do not wish to participate in the A/B tests, you can disable cookies for conversion testing by setting your browser to block cookies.
13. Embedded videos and images from external websites.
Some of our pages contain embedded content from Google (Google Forms and Google Captcha), YouTube (Google), Citrix (GoToWebinar registration) or Instagram. With the sole call of a side from our Internet offer with merged videos or pictures from our YouTube and/or Instagram channel no personal data, with exception of the IP address, are transmitted. In the case of Google and YouTube, the IP address is transmitted to Google Inc, 600 Amphitheatre Parkway, MountainView, CA 94043, USA, in the case of GoToWebinar/Citrix to Citrix Systems, Inc. 4988 Great America Parkway Santa Clara, CA 95054, USA and in the case of Instagram to Instagram Inc. 181 SouthPark Street Suite 2 San Francisco, California 94107, USA.
For the protection of your data we rely during the implementation on the fact that the Plugins on the web page are represented only as a diagram, which contains a linking on the appropriate web page of the Plugin offerer. By clicking on the graphic you will be forwarded to the respective services of the providers. Only then are their data sent to the respective services. If you do not click on the graphic, there will be no exchange between you and the social networks mentioned above.
15. Where is your data used?
Your data will be used in Germany. Data processing also takes place abroad only in individual cases and to the extent permitted by law.
16. How safe are your data?
To prevent unauthorized access and misuse of your data, we have taken extensive technical and operational security precautions in accordance with German law.
17. Will your data be transmitted to third parties?
Yes, some data must be forwarded under strict contractual and legal conditions.
To external service providers for data processing: When service providers come into contact with our customers’ personal data, this takes place within the framework of so-called order data processing. This is expressly provided for by law (§ 11 Federal Data Protection Act). iTiZZiMO AG remains responsible for the protection of your data even in this case. The service provider works exclusively in accordance with our instructions, which we ensure through strict contractual regulations, technical and organisational measures and supplementary controls.
We do not pass on any further data to third parties unless you have given your express consent or this is provided for by law.
We will only send newsletters, e-mails and other electronic notifications containing advertising information (hereinafter “newsletters”) with the consent of the recipients or a legal permission. If the contents of a newsletter are specifically described within the scope of a registration, they are decisive for the consent of the users. In addition, our newsletters contain information on legal topics, especially in the field of marketing law, data protection and our law firm (this may include references to blog articles, lectures or workshops, our services or online appearances).
The newsletter is sent via “MailChimp”, a newsletter distribution platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.
We trust in the reliability and IT and data security of MailChimp. MailChimp is certified under the US-EU data protection agreement „Privacy Shield“ and thus commits itself to comply with EU data protection regulations. Furthermore, we have concluded a „Data-Processing-Agreement“ with MailChimp. This is a contract in which MailChimp undertakes to protect the data of our users, to process them on our behalf in accordance with their data protection regulations and in particular not to pass them on to third parties. The data protection regulations of MailChimp can be viewed here.
To subscribe for the newsletter, it is sufficient in principle if you enter your e-mail address. Optionally, we ask you to enter your first and last name. This information is only used to personalise the newsletter. Furthermore, we ask you also optionally to indicate companies. We only use this information to adapt the contents of the newsletter to the interests of our readers.
The newsletters contain a so-called “web-beacon”, i.e. a pixel-sized file that is retrieved from the MailChimp server when the newsletter is opened. Within the scope of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and time of retrieval are initially collected. This information is used to technically improve the services based on the technical data or the target groups and their reading behaviour based on their retrieval locations (which can be determined using the IP address) or access times.
In accordance with the provisions of the Basic Data Protection Regulation (BDPR) applicable from 25 May 2018, we inform you that your consents to the sending of e-mail addresses are based on Art. 6 para. 1 lit. a, 7 BDPR and § 7 para. 2 no. 3 and para. 3 UWG. The use of the shipping service provider MailChimp, carrying out statistical surveys and analyses as well as logging of the registration procedure, are based on our legitimate interests pursuant to Art. 6 Para. 1 lit. f DSGVO. We are interested in using a user-friendly and secure newsletter system that serves our business interests and meets the expectations of our users.
We would also like to point out that you can object to the future processing of your personal data at any time in accordance with the statutory provisions of Art. 21 BDPR. The objection may be lodged in particular against processing for direct marketing purposes.
If a website user contacts iTiZZiMO AG via e-mail or contact form, the information provided by him/her will be stored for the purpose of processing the request and for possible follow-up questions.
We only handle personal data as far as this is possible in accordance with data protection regulations. We also take all necessary technical and organisational security measures to adequately protect your personal data from unauthorised access and misuse at all times.
Insofar as we store or process personal data, this is done within a high-security computer centre. To protect the security of your data during transmission, we use encryption methods (e.g. SSL) via HTTPS. Our servers are protected by firewall and virus protection. Back-up and recovery procedures as well as role and authorization concepts are a matter of course for us.
Our employees are obliged to observe the regulations of the Telemedia Law, the Federal Data Protection Law and the EU-BDPR when handling data.
For processing customer service inquiries and for customer communication by e-mail or telephone in accordance with your consent, your personal customer data will be stored and processed in our VTiger CRM system. The CRM itself is a local installation on a dedicated server and is only managed by the iTiZZiMO in its own data center on site. The data is backed up regularly on a backup server that is also managed locally. Your data (company, first name, surname, address, telephone number, e-mail etc.) will be encrypted unchanged (i.e. neither anonymized nor pseudonymized) using a standardized procedure within the program and is not accessible to the provider VTiger itself.
Data provided or transmitted with the establishment of contact or in a personal conversation will be used in this system for sales, business and advertising purposes for further use. If you no longer agree, you can object to this at any time by writing or by contacting us as explained under point 16.
22. How long does the data remain stored?
We abide by the principles of data avoidance and data economy. We therefore only store your personal data for as long as this is necessary to achieve the purposes stated herein or as provided for in the various storage periods provided for by law. After the respective purpose or expiry of these periods, the corresponding data will be blocked or deleted as a matter of routine and in accordance with statutory regulations.
23. Your rights to be informed, to rectify, block, delete and contradict.
You have the right to obtain information about your personal data stored by iTiZZiMO AG at any time. You also have the right to correct, block or, apart from the prescribed data storage for business transactions, delete your personal data. Please contact the data protection officer of iTiZZiMO AG. You can make changes or withdraw your consent by notifying us accordingly with effect for the future. The stored personal data will be deleted if you revoke your consent to its blocking.
You also have a right of access to information on whether personal data has been transferred to a third country or to an international organisation. If this is the case, you also have the right to obtain information about the appropriate guarantees in connection with the transmission.
If you wish to make use of this right to information, you can contact our data protection officer or another employee of the data controller at any time.
You also have the right granted by the European legislator to request the immediate correction of inaccurate personal data concerning you. You also have the right, taking into account the purposes of the processing, to request the completion of incomplete personal data, including by means of a supplementary declaration.
If you wish to make use of this right of correction, you can contact our data protection officer or another employee of the data controller at any time.
The data subject withdraws his/her consent on which the processing was based pursuant to Article 6(1)(a) BDPR or Article 9(2)(a) BDPR, and there is no other legal basis for processing.
The data subject objects to the processing in accordance with Article 21(1) of the BDPR and there are no overriding legitimate grounds for processing or the data subject objects to the processing in accordance with Article 21(2) of the BDPR.
The personal data was collected in relation to information society services offered pursuant to Art. 8 para. 1 BDPR.
If one of the above-mentioned reasons applies and you wish to have personal data stored at iTiZZiMO AG deleted, you can contact our data protection officer or another employee of the person responsible for processing at any time. The data protection officer of iTiZZiMO AG or another employee will arrange for the request for deletion to be complied with immediately.
If the personal data was made public by iTiZZiMO AG and our company is responsible according to Art. 17 Abs. 1 BDPR to delete personal data, iTiZZiMO AG shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform other persons responsible for data processing who process the published personal data, that the data subject has requested the deletion of all links to this personal data or of copies or replications of this personal data from these other persons responsible for data processing, insofar as processing is not necessary. The data protection officer of iTiZZiMO AG or another employee will take the necessary steps in individual cases.
You will be denied the accuracy of your personal data for a period of time that enables the person responsible to verify the accuracy of the personal data.
The data controller no longer needs the personal data for the purposes of processing, but you do need them to assert, exercise or defend legal claims.
You have filed an objection against the processing pursuant to Art. 21 para. 1 BDPR and it has not yet been determined whether the legitimate reasons of the person responsible outweigh your reasons.
If one of the above conditions is met and you wish to request the restriction of personal data stored by iTiZZiMO AG, you can contact our data protection officer or another employee of the person responsible for the processing at any time. The data protection officer of iTiZZiMO AG or another employee will arrange for the processing to be restricted.
You have the right granted by the European regulator to receive the personal data concerning you provided by you to a responsible person in a structured, common and machine-readable format. You also have the right to transmit this data to another data controller without obstruction by the controller to whom the personal data have been made available, provided that the processing is based on the consent pursuant to Art. 6 para. 1 letter a) BDPR or Art. 9 para. 2 letter a) BDPR or on a contract pursuant to Art. 6 para. 1 letter b) BDPR and that the processing is carried out using automated procedures, provided that the processing is not necessary for the performance of a task in the public interest or in the exercise of public authority which was transferred to the controller.
Furthermore, when exercising your right to data transferability pursuant to Art. 20 para. 1 BDPR, you have the right to obtain that the personal data be transferred directly from one data controller to another data controller, insofar as this is technically feasible and provided that the rights and freedoms of other persons are not affected by this.
To assert your right to data transferability, you can contact the data protection officer appointed by iTiZZiMO or another employee at any time.
You have the right granted by the European legislator of directives and regulations to object at any time for reasons arising from your particular situation to the processing of personal data concerning you on the basis of Article 6(1)(e) or (f) BDPR. This also applies to profiling based on these provisions.
In the event of an objection, iTiZZiMO AG will no longer process personal data unless we can prove compelling reasons worthy of protection for the processing that outweigh the interests, rights and freedoms of the person concerned or serve to process, assert, exercise or defend legal claims.
If iTiZZiMO AG processes personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to profiling insofar as it is connected with such direct advertising. If you object to iTiZZiMO AG processing for direct advertising purposes, iTiZZiMO AG will no longer process your personal data for these purposes.
You also have the right to object, for reasons arising from your particular situation, to the processing of personal data concerning you that is carried out at iTiZZZiMO AG. for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) BDPR, unless such processing is necessary to fulfil a task in the public interest.
To exercise your right of objection, you can contact the data protection officer of iTiZZiMO AG or another employee directly. You are also free to exercise your right of opposition in connection with the use of Information Society services, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications.
If it is made with your express consent, iTiZZiMO AG will take appropriate measures to protect the rights and freedoms as well as your legitimate interests, including at least the right to obtain the intervention of a person by the person responsible, to state his own position and to challenge the decision.
If you wish to assert rights relating to automated decisions, you can contact our data protection officer or another employee of the data controller at any time.
You have the right to revoke your consent to the processing of personal data at any time, granted by the European Directive and Regulation giver.
If you wish to exercise your right to revoke your consent, you can contact our data protection officer or another employee of the data controller at any time.
We reserve the right to occasionally adapt this data protection declaration so that it always complies with current legal requirements or to implement changes to our services in the data protection declaration, e.g. when introducing new services. You generally have a right of revocation with regard to the consents you have given. Please note that (if you do not make use of your right of revocation) the current version of the data protection declaration is the valid one.
26. Who is the responsible authority?

References: Art. 6
 § 7
 Art. 6
 Art. 21
 Art. 8
 Art. 17
 Art. 21
 Art. 6
 Art. 9
 Art. 6
 Art. 20
 Art. 89