Source: https://www.copra.info/en/legal/privacy-policy/
Timestamp: 2019-04-21 20:58:42+00:00

Document:
This statement contains information for you, as a visitor or user of our webpages, on which personal data we collect. It details the scope, purpose and legal basis of our collection and use of personal data. Furthermore, we advise you on your rights with respect to the applicable data privacy laws and who you may contact in case of questions and any possible complaints.
You may find a list of all German federal data protection officers and their contact details at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
The definitions used in this data privacy statement are based predominantly on the definitions published by the European legislators in article 4 of the GDPR.
‘data subject‘ means any identified or identifiable natural person whose personal data are processed by the controller. A natural person may, for example, be identified by their name, address and date of birth. A natural person is identifiable by means of e.g. a customer number, tax code or ID card number.
‘cross-border processing’ means either (a) processing of personal data which takes place in the context of the activities of establishments in more than one Member State of a controller or processor in the Union where the controller or processor is established in more than one Member State; or (b) processing of personal data which takes place in the context of the activities of a single establishment of a controller or processor in the Union but which substantially affects or is likely to substantially affect data subjects in more than one Member State.
‘other controllers‘ (not defined in GDPR) means controllers, who process the publicly available personal data of data subjects.
‘third party countries‘ (not defined in GDPR) means all countries, where the GDPR is legally not binding, effectively all countries which are not members of the European Union (EU). This includes member states of the European Economic Area (EEA) Iceland, Liechtenstein and Norway as long as they have not adopted the GDPR (see www.efta.int/eea-lex/32016R0679), as well as from 30th March 2019 (00.00 hours CET) the United Kingdom, i.e. England, Scotland, Wales and Northern Ireland according to the communication of the EU commission of 9th January 2018 with regard to the impact of ‘Brexit’ on data exchanges between the EU and Great Britain.
‘web analytics‘ (not defined in GDPR) means the survey, collection and analysis of data relating to the behavior of visitors of webpages. Web analytics services records, among other data, which webpage was visited before the current page is viewed (referrer), which sub-pages of a webpage were viewed or how many times and for how long sub-pages were viewed. Web analytics are predominantly used to analyse the behaviour of visitors of a webpage and its sub-pages in order to optimize this webpage and its content.
Art. 6 (1a) of the GDPR forms the legal foundation for the processing of personal data whenever we request the agreement of a data subject to processing of their personal data.
Art. 6 (1b) of the GDPR forms the legal foundation for the processing of personal data which is necessary for the fulfillment of a contract between the data subject and our company. This also applies to processing of personal data prior to entering into a contract following a request, e.g. relating to our products and/or services, by the data subject.
Art. 6 (1c) of the GDPR forms the legal foundation for processing, if this is necessary for compliance with a legal obligation, e.g. relating to commercial or fiscal law, to which our company is subject.
Art. 6 (1d) of the GDPR forms the legal foundation for processing, if this is necessary in order to protect the vital interests of the data subject or of another natural person. For example, this may become necessary, in case an employee of one of our customers is injured on our premises and it becomes necessary to pass on their name, age, data relating to their health insurance or other vital information to a physician, a hospital or other third parties.
Art. 6 (1e) of the GDPR forms the legal foundation for processing, if this is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in our company.
Art. 6 (1f) of the GDPR forms the legal foundation for processing, if this is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. In particular, our company is permitted to carry out such processing as it is specifically cited by the European legislators in recital 47 (2) of the GDPR.
The personal data of the data subject are erased or blocked as soon as the purpose for storage terminates. In addition, this data may be stored, if this is required by a legal obligation of the European or member state legislators to which the controller is subject. The erasure or blocking of personal data is also conducted, if this is required by the expiration of time limits on storage specified in such legal obligations, unless the continued storage is mandatory e.g. for the conclusion or fulfillment of a contract or for the compliance with safekeeping duties as for example specified in Art. 257 of the German code of commercial law (Handelsgesetzbuch) and Art. 147 of the German fiscal code (Abgabenordnung).
our company, as the operator of this website and controller as specified by the GDPR, is entitled or required to conduct the transfer by law and/or judicial or official order. In particular, this may include disclosures for the purpose of prevention of threats to public safety or criminal prosecutions, according to Art. 24 of the German data protection law (Bundesdatenschutzgesetz).
While using our web page purely for accessing information, i.e. you do not register or provide information in any other way, but you only view our web page and its sub-pages, we do not collect any personal data beyond that transferred by your internet browser to our web server.
During every access of our web pages the browser used on your device automatically sends data to our web server. These data are temporarily stored by our web server in server logfiles.
and related data and content for the purpose of counteracting possible attacks targeting our IT systems.
Art. 6 (1)(1f) GDPR is the legal foundation for the temporary storage of these data and content. The purposes detailled above justify our legitimate interest in collecting and processing these data.
The data mentioned above are erased as soon as they are no longer required for achieving the purpose of their collection. Data used for the provision of our web pages are erased when the relevant session terminates.
You consent to electronic communications with us as soon as you contact us by email or by using one of our contact forms.
In case you contact our company by email we store the data you provide (your email address, possibly your name and telephone number) in order to answer your enquiry. After the storage of these data is no longer required, we erase it or restrict its processing, if its safekeeping is required by legal obligations our company is subject to. Art. 6 (1)(1f) GDPR is the legal foundation for the processing of data provided by email. If the purpose of the email contact is the conclusion of a contract or the performance of a contract or steps at the request of the data subject prior to entering into a contract, then Art. 6 (1)(1b) compliments the legal basis for processing these data.
In the interest of data thrift, the completion of only those input fields necessary for communication or the purpose of the individual form is mandatory while other fields may be optionally completed. These date are used exclusively for answering the question posed by the user and further enquiries by us or the user in this context. No data are transferred to a third party.
Art. 6 (1)(1a) GDPR is the legal foundation for this processing, if the user consents to the processing. This is completed by Art. 6 (1)(1b) GDPR in case of a registered user with a contractual relationship (e.g. a customer for software maintenance).
The data collected in the individual contact forms are erased as soon as they are not required anymore for achieving the purpose of their collection. For personal data provided by the user in the input fields, this is the case when the conversation with the user necessary for the processing and completion of their enquiry terminates.
You may register for our free newsletter, consenting explicitly to this registration. For registration we use the contact form on our web pages with a double opt-in process. This means, after registration you will receive an email to the email address you provided, asking you to confirm your registration. In case we do not receive this confirmation within 7 hours, your data are blocked and erased after one week. The only mandatory field for newsletter registration is your email address. The provision of further, separately marked data in the input fields of the registration form is voluntary and are used to address you personally. After receiving your confirmation we store your email address as well as the used IP address and the time of your registration and confirmation. We store your data exclusively for the purpose of providing you with the newsletter as well as the ability to prove your registration and confirmation and to resolve any possible incidents of misuse of your personal data. Art. 6 (1)(1a) GDPR is the legal foundation for the collection and storage of these data. We do not transfer these personal data collected for registering for our newsletter to any third party.
Your email address is stored as long as your newsletter registration remains active. You may cancel your consent declaration, which you provided at the time of registration, at any time and thereby stop receiving our newsletter.
To cancel, click on the ‘cancel’-link contained in every newsletter email or send an email to unsubscribe@datam.de or send a fax or call us. You may find the relevant contact details in the imprint of our webpages.
The cancellation does not impinge on the legality of the data processing up to this point. After we receive your cancellation request, we automatically erase all personal data collected for newsletter registration.
Normally cookies contain the name of the issuing domain, information on the ‘age’ of the cookie and an identification in the form of an alphanumeric string. Cookies allow our webserver to identify the device of the user and allow immediate access to any possible presets. Using cookies we, as operators of the web pages, obtain certain information, in particular the IP address of the user.
a) Temporary cookies are deleted when you close your browser. In particular this includes session cookies. These cookies store a session ID which allows us to assign individual requests of your browser to a common session. Session cookies are deleted when you log out of your user account or close your browser.
b) Permanent cookies are deleted automatically after a set time, which may differ for different cookie types. These cookies also allow us to optimize the usability of our webpage and its sub-pages: In case you visit our webpage again to use the information we provide and our services, you are recognized automatically as a previous visitor and so you do not have to repeatedly provide previous inputs and settings.
Most browsers accept cookies automatically. However, you may use the security settings of your browser to delete cookies, also those of third parties. You may also change the settings of your browser such that no cookies, also cookies of third parties, are stored in your device or that a warning is displayed each time before a new cookie is created. Please refer to the operating instructions of your browser for further information.
In connection to these settings we would like to point out that the complete deactivation or blocking of cookies may prevent you from using all functionality of our and of other webpages you may visit.
Our webpage uses Google Analytics (in the following referred to as 'Universal Analytics'), an analysis service of the US company Google LLC. (https://www.google.de/intl/en/about/), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (in the following ‘Google’).
Using Universal Analytics, it is possible to associated data, sessions and interactions on several devices with a pseudomised user ID and thus to analyse user activities independent of devices.
We use Universal Analytics with the code extension ‘anonymizeIP’. This code extension ensures that IP addresses are collected only in shortened form. The last 8 bit are cut and only the shortened IP address is further processed. This prevents that a data subject can be inferred using the IP address. The IP address provided by your browser to Universal Analytics is not combined with other data by Google.
Google uses this information on our behalf as operator to these webpages to analyse your use of our webpages, to compile reports on webpage activities and to provide other services to us relating to webpage use for purposes of market research and to further enhance our webpages. These data are transferred to third parties if this is legally required or if third parties process the data on your behalf.
We use Universal Analytics to analyse frequency of use and the use of our webpages in general in order to further optimise the quality and contents of our webpages. Using these statistical data we can enhance our offer to you and make it more interesting for you. Art. 6 (1)(1f) GDPR is the legal foundation for using Google Analytics.
Changing the relevant settings of your browser you may prevent the storage of these cookies and also permanently block cookies. We would like to advise you that this may prevent you from using some of the functionality of our webpages.
Furthermore, you may prevent the collection of the data relating to your use of this webpage (including your IP address) generated by this cookie and their processing by Google by downloading and installing the browser add-on available at https://tools.google.com/dlpage/gaoptout?hl=en. As described there, you download a plug-in that enables you to deactivate Universal Analytics using an opt-out cookie.
Alternatively, in particular for browsers on mobile devices, you can apply the opt-out for Universal Analytics for our webpages on all devices used by you.
Please note, that the opt-out cookie stored on your device only applies to the browser used by you and only to our webpages. In case you delete the cookies in your browser, you must again store the opt-out cookie for it to work.
In rare case, in which personal data are transferred to the USA, Google submits to the EU-US Privacy Shield Agreement. Google is in possession of Privacy Shield Certification. You may find Google’s certificate at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI.
You may find information (in German) for data subjects and which rights are granted to them under the EU-US Privacy Shield in case their personal data are transferred on the basis of the Eu-US Privacy Shield Agreement to a certified US enterprise on the webpages of the Bavarian data protection agency at https://www.lda.bayern.de/de/international.html.
Art. 6 (1) (1f) GDPR provides the legal foundation for the use of the open source software Matomo (previously Piwik) which we operate on our web server located in Germany. We use this tool to statistically analyse the use of our webpages and to tailor the design of our webpages to the needs of its users. However, we do not use the web analytics services of InnoCraft Ltd., based in New Zealand. This company does not process any data on our behalf. We conduct the analysis of these data ourselves.
For this, cookies are used (see 7 above) which, among other uses, allow your internet browser to be recognized. The data collected with the help of Matomo software (including anonymized IP addresses) are transferred to our server and are combined and stored in pseudonymized user profiles and processed. The logfiles contain sensitive data and are stored exclusively on our server located and operated in Germany.
We use the Matomo tool with the extension ‚AnonymizeIP‘. This shortens IP addresses for further processing and therefore a data subject cannot be inferred. The data generated by the cookie are not used to personally identify the user of our webpages and are not combined with any personal data of the owner of the pseudonym. Under no circumstances is the IP address combined with other data relating to the user. The IP addresses are anonymised (IP-masking) prior to storage and so no attribution is possible. The data are not transferred to third parties.
Should you disagree to the storage and analysis of these data relating to the visit of our webpages, then you may cancel this storage and processing at any time. For this, you may decide whether or not a unique web analysis cookie may be placed in your browser, allowing us as operator of the webpages to collect and analyse various statistical data.
An opt-out cookie will be placed in your browser which prevents any further collection by Matomo of session data relating to your visit of our webpages. Please note, the opt-out cookie stored in your browser only applies to the browser used by you and only for our webpages. In case you delete all cookies in your browser you need to again store the opt-out cookie for it to work.
Our webpages integrate video clips provided by http://vimeo.com. Vimeo is a internet portal operated by the US enterprise Vimeo LLC located in 555 West 18th Street, 10011 New York, USA.
Art. 6 (1)(1f) GDPR forms the legal foundation for the use of these components with the purpose of storing video clips in the Vimeo platform with the aim of providing an appealing visual impression of our products and services.
Each access of a sub-page of our webpages which contains a Vimeo component results in a direct connection of your browser and a server of Vimeo, Inc. in the USA. Your browser will be automatically asked to download from Vimeo an appropriate visualization of the component. Vimeo may also place cookies (see 7 above) on your device.
Furthermore, Vimeo allows the use of certain other functionality, e.g. the ranking and sharing with others of videos. For this it may become necessary for you to log into your user account at Vimeo or other third parties in order for Vimeo or these other third parties to connect the information you provide with your user account. This functionality is provided exclusively by Vimeo or other third parties. Therefore we recommend that you familiarise yourself also with their respective data privacy statements (see 10.2 below) before you use these services.
In case you access our webpages and you are logged in with Vimeo at the same time, Vimeo will track during your entire visit which sub-pages in our webpage you view and will associate this information including your IP address with your personal account at Vimeo. For example, if you click the ‘play’ button or leave comments, then this information will be transferred to your personal account with Vimeo and stored there. Vimeo always receives information via the Vimeo operating panel that you have visited our website when you are logged into Vimeo at the same time. This is independent of whether or not you click anything on the Vimeo operating panel or leave comments. Our company does not receive any information on the data collected by Vimeo or third parties and cannot exert any influence on their processing.
In case you have an account with Vimeo and do not wish Vimeo to collect data, via our webpages, relating to your behaviour while visiting our webpages or sub-pages and to combine these with the data in your personal account with Vimeo, then you must log out of your Vimeo account before visiting our webpages.
YouTube is an internet portal for the upload of all types of video clips, music videos, trailers, movies and television clips or video clips produced by users. The viewing of, rating of and commenting on these video clips is also free of charge. YouTube is provided by the US enterprise YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
On our webpages we integrate YouTube components (‘plug-ins’) which are stored at http://www.YouTube.com and can directly be accessed from our webpages. We integrate these components using the ‘extended data protection mode’, which implies that no data relating to you as the user are transferred to YouTube, unless you play any video clips. Only when you play video clips, will the data detailed in 11.2 be transferred to YouTube. We do not control this data transfer.
Art. 6 (1)(1f) GDPR forms the legal foundation for the use of these components with the aim of providing an appealing visual impression of our products and services. This constitutes a legitimate interest as defined by this regulation.
Following access of a sub-page of our webpages which contains a YouTube component, this component instructs your browser to automatically download a representation of this component. As a result, YouTube and Google gain information on which particular sub-page of our webpages you access. In addition, the data specified in section E 4.2 of this statement are transmitted to YouTube and Google. This transfer takes place independent of whether or not you play a YouTube video clip and whether or not you own a personal account with YouTube and whether or not you are logged into that account. However, if you are logged into your personal account with YouTube at the time of visiting our webpages, then these data are directly assigned to your account. YouTube stores these data in the form of user profiles and processes them for the purposes of marketing, market research and user-optimised design of its webpages. Even for users not logged into a YouTube account this analysis is used in particular to provide user-optimised advertising.
In case you own a personal account with YouTube, but do not wish to transfer these data, including a connection with your profile, to YouTube and Google, you may prevent this transmission by logging out of your personal account with YouTube before accessing our webpages.
You also have the right to object to the creation of user profiles. However, you need to exercise this right directly with YouTube LLC.
YouTube publishes data protection regulations at https://www.youtube.com/t/privacy and https://policies.google.com/privacy?hl=en. These provide you with information on the collection, processing and use of personal data by YouTube and Google. There you may also find further information regarding your rights and settings to protect your privacy.
We use Google Tag Manager to manage tags for our webpages. Tags are small code elements, used in particular to measure visitor traffic and user behaviour on our webpages. According to Google no cookies are used and no personal data is collected. Google Tag Manager may trigger other tags which may collect data. However, according to Google, Tag Manager does not access these data. In case cookies are deactivated for the domain or individually, then this deactivation remains in place for all tracking tags as long as these are implemented with Google Tag Manager.
You may find more information on Google Tag Manager at https://www.google.com/analytics/tag-manager/.
In order to make your visit of our webpages as secure as possible, we use the widespread Transport Layer Security (TLS) encryption protocol with the highest security level supported by your browser. You may recognize the encrypted transfer of individual webpages by noting the change from http:// to https:// in the address bar of your browser and the closed lock symbol in the lower status bar of your browser. Data you provide in contact forms will thus be encrypted before transfer and securely transferred from your browser to our server.
Furthermore, we employ appropriate technical and organizational security measures in order to protect your personal data against accidental or deliberate manipulation, partial or complete loss, damage or unauthorized access, alteration or dissemination by third parties. We continuously improve these security measures in step with technical developments.
You have the right to be informed whether your personal data are transferred pursuant to Art. 44 GDPR to a third country or to an international organization (as defined in Art. 4 (26) GDPR). In connection to such a transfer you may demand to be informed of the appropriate safeguards pursuant to Art. 46 GDPR relating to this transfer.
You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you and to have incomplete personal data completed.
you withdraw consent on which the processing is based according to point (a) of Art. 6(1), or point (a) of Art. 9(2) GDPR, and where there is no other legal ground for the processing.
3.2 Information of third parties Where we have made the personal data public and we are obliged pursuant to paragraph 1 to erase the personal data, we, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
for the establishment, exercise or defence of legal claims (Art. 17 (3e) GDPR).
the data subject has objected to processing pursuant to Art. 21(1) GDPR pending the verification whether our legitimate grounds override those of you.
In case you have obtained restriction of processing pursuant to the above, you shall be informed by us before the restriction of processing is lifted.
In case you have exercised your right to rectification, erasure or restriction of processing of your personal data by us, we shall communicate that you have exercised your right to rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort.
The exercise of the right referred to above shall be without prejudice to Art. 17 (right to erasure). Furthermore, in exercising your right to data portability pursuant to the above, you have the right to have your personal data transmitted directly from one controller to another, where technically feasible.
Freedoms and rights of other legal persons must not be infringed by the above. The right to data portability shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (e) or (f) of Art. 6(1), including profiling based on those provisions (Art. 21 (2) GDPR). We shall no longer process your personal data unless we are able to demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. Where your personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing (Art. 21 (2) GDPR). When you object to processing for direct marketing purposes, your personal data shall no longer be processed for such purposes.
Should you wish to exercise your right to object according to Art. 21 (1) or (2) GDPR, an email to dataprotection@datam.de is sufficient to declare your objection. You may also send your objection by fax, letter or telephone using the contact details provided in section A above or in the imprint of these webpages.
You also have the opportunity, in the context of the use of information society services, and notwithstanding Directive 2002/58/EC of 12th July 2002 (data protection directive for electronic communication), to exercise your right to object by automated means using technical specifications.
You have the right to withdraw your consent to the processing of your personal data at any time without stating reasons. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. This implies that your witdrawal of consent has no retroactive effect. However, it means that we will terminate processing of your personal data.
Should you wish to exercise your right to withdraw consent, an email to dataprotection@datam.de is sufficient to declare your withdrawal. You may also send your withdrawal by fax, letter or telephone using the contact details provided in section A above or in the imprint of these webpages.
You also have the opportunity, in the context of the use of information society services, and notwithstanding Directive 2002/58/EC of 12th July 2002 (data protection directive for electronic communication), to exercise your right to withdraw consent by automated means using technical specifications.
Decisions referred to above shall not be based on special categories of personal data referred to in Art. 9(2)1) GDPR, unless point (a) or (g) of Art. 9(2) GDPR applies and suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests are in place. In the cases referred to in points (1) and (3) above, the data controller shall implement suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.
Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes this Regulation. The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
Due to the further development of our web pages and the offers contained therein or because of changes to the GDPR and/or because of country-specific changes to data protection laws or official directives, it may become necessary to change this data privacy statement. You may obtain and print the most up to date data privacy declaration from our webpages at any time.

References: Art. 6

Art. 6

Art. 6

Art. 6

Art. 6

Art. 6
 Art. 257
 Art. 147
 Art. 24

Art. 6
 Art. 6
 Art. 6

Art. 6
 Art. 6
 Art. 6
 Art. 6

Art. 6

Art. 6

Art. 6
 Art. 44
 Art. 4
 Art. 46
 Art. 6
 Art. 9
 Art. 21
 Art. 17
 Art. 6
 Art. 21
 Art. 9
 Art. 9
 Art. 78