Source: https://www.braintower.de/en/privacy-policy/
Timestamp: 2019-04-21 04:09:42+00:00

Document:
Websites which are accessed by the user’s system via our website.
This information is processed (1) to guarantee a smoothly established connection to the website, including the delivery of the website on the user’s computer; (2) to guarantee convenient use of our website; (3) for the purpose of evaluating system security and stability; and (4) for further administrative purposes.
The legal basis for data processing is Art. 6, Para. 1, Subpara. 1, Clause 1, lit. f of the GDPR. Our legitimate interest results from the data processing purposes listed above. Data is not analysed for marketing purposes or for the purpose of drawing conclusions about you as a person in this respect.
The data for providing the website is deleted as soon as it is no longer required to achieve this purpose, i.e. when the respective session is ended. The data stored in log files is deleted after 14 days at the latest.
Our website offers you as a user the opportunity to make and adjust individual comments on individual posts within a blog. A blog is a portal which is managed on a website and generally publicly available, in which one or more persons (known as “bloggers” or “web bloggers”) can post articles or record thoughts in what are known as “blog posts”. The blog posts can generally be commented on by third parties.
If a user posts a comment, the data entered in the input screen shall be transferred to us and stored. You need to provide a valid email address and your name so that we can determine who the comment was made by. The accessing computer’s IP address and the send date and time are stored at the time the message is sent. The aforementioned data is stored for security reasons and in the event that the data subject infringes third-party rights with a submitted comment or posts unlawful contents. The aforementioned personal data is not disclosed to third parties unless such disclosure is prescribed by law or permissible based on a legal regulation.
The legal basis for data processing, provided that the user has given their consent to this effect, is Art. 6, Para. 1, Subpara. 1, lit. a of the GDPR, in addition to Art. 6, Para. 1, Subpara. 1, lit. f of the GDPR.
The personal data we collect for use of the contact form is generally only deleted upon request, but once the relevant blog topic has been deleted at the latest.
On our website, it is possible to subscribe to a free newsletter. To subscribe to the newsletter, all you need to do is provide a valid email address. The accessing computer’s IP address and the send date and time are also stored upon subscription.
The collection of the user’s email address serves the purpose of sending the newsletter. The collection of other personal data during the subscription process serves to prevent misuse of services or the email address used. Data is not disclosed in connection with data processing for sending newsletters.
The personal data concerning you is not disclosed to third parties in connection with data processing for sending newsletters beyond disclosure of the same to Rocket Science.
The legal basis for data processing following the user’s subscription to the newsletter, provided that the user has given their consent to this effect, is Art. 6, Para. 1, lit. a of the GDPR.
Your email address is only stored for as long as the subscription to the newsletter is active. You can cancel the subscription at any time by clicking on a link provided at the end of every newsletter or by emailing info@braintower.de. The other personal data collected during the subscription process is generally only deleted upon request, but at the latest following cancellation of the subscription to the newsletter.
Our website enables you to contact us and report technical faults over the Jira Service Desk platform.
To be able to use this platform, you must register (providing personal data during the registration process) and create a user account. In this regard, data is entered in an input screen, sent to us and stored. A valid email address and your full name are required to register. When you complete the registration process, the accessing computer’s IP address and the send date and time are also stored.
User registration serves to make processing of faults reported by customers easier, because the customer’s information is automatically submitted during the processing operation.
If you report a fault over the platform, it may under certain circumstances receive additional personal data. This additional personal data is also only used for the purpose of processing the reported fault.
Insofar as doing so is necessary for processing your reported fault, we shall disclose the personal data concerning you to third parties (e.g. manufacturers, suppliers and service providers). Under certain circumstances, personal data shall also be transferred to a third country.
The legal basis for data processing, provided that the user has given their consent to this effect, is Art. 6, Para. 1, Subpara. 1, lit. a of the GDPR, in addition to Art. 6, Para. 1, Subpara. 1, lit. f of the GDPR. If registration and fault reporting are associated with fulfilling a contract, the contracting party for which is the user, or with implementing pre-contractual measures, Art. 6, Para.1, Subpara. 1, lit. b of the GDPR forms an additional legal basis for data processing.
The additional personal data processed for the purpose of processing the reported fault is deleted once the statutory retention periods have elapsed at the latest, unless you have consented to further storage according to Art. 6, Para. 1, Subpara. 1, Clause 1, lit. a of the GDPR. Generally speaking, the processed personal data must be deleted 6 years after the end of the calendar year in which the contractual relationship was terminated; in the case of invoicing records, the general retention period is 10 years. In exceptional cases, we can also be obligated to store data for longer based on retention and documentation requirements under fiscal and commercial law (as a result of the German Commercial Code, the German Criminal Code or the German Tax Code). Insofar as no statutory retention periods have to be complied with, we shall delete the processed personal data immediately as long as it is no longer required to process the reported fault or to preserve statutory retention periods.
Furthermore, our website offers users the opportunity to request a licence for our SMS Gateway product online via the SMS Gateway licence portal, or to view relevant licence information and support (e.g. for fault reporting) and to procure current firmware for the SMS Gateway used.
The device’s serial number is required to be able to use this portal. Once you have licensed the device, the personal data stored in the licence request is assigned to the serial number.
The legal basis for data processing, provided that the user has given their consent to this effect, is Art. 6, Para. 1, Subpara. 1, lit. a of the GDPR, in addition to Art. 6, Para. 1, Subpara. 1, lit. f of the GDPR. If registration is associated with fulfilling a contract, the contracting party for which is the user, or with implementing pre-contractual measures, Art. 6, Para.1, Subpara. 1, lit. b of the GDPR forms an additional legal basis for data processing.
The additional personal data processed for the purpose of processing the reported fault is deleted once the statutory retention periods have elapsed at the latest, unless you have consented to further storage according to Art. 6, Para. 1, Subpara. 1, Clause 1, lit. a of the GDPR. Generally speaking, the processed personal data must be deleted 6 years after the end of the calendar year in which the contractual relationship was terminated; in the case of invoicing records, the general retention period is 10 years. In exceptional cases, we can also be obligated to store data for longer based on retention and documentation requirements under fiscal and commercial law (as a result of the German Commercial Code, the German Criminal Code or the German Tax Code).
The reCAPTCHA service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA (hereinafter referred to as “Google”) is used to protect the data transferred when using the blog comments function. The purpose of this service is to distinguish whether the entry is being made by a natural person or improperly through automated, machine-based processing. The query includes sending of the IP address and, if necessary, further data required by Google for the reCAPTCHA service. Your entry is transferred to and further used by Google for this purpose.
If IP anonymisation is activated on this website, Google will, however, truncate your IP address beforehand within member states of the European Union or other states which are parties to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there.
We use what are known as “cookies” on our website. Cookies are small files which are automatically created by your browser when our website is accessed and which are stored on your terminal device (laptop, tablet, smartphone or a similar device). Resulting information in connection with the specific terminal device used is stored in the cookie.
On the one hand, cookies are used to make use of our website as user-friendly as possible. We use what are known as “session cookies” to identify that you have already visited individual pages of our website. These are automatically deleted once you leave our site. We also use temporary cookies to optimise our website’s user-friendliness. These cookies are stored on your terminal device for a specific period of time defined in advance and contain information which allows your browser to be uniquely identified the next time the website is accessed. This is done to automatically reapply the entries and settings made the last time our website was accessed. However, we do not immediately receive knowledge of your identity through identification of your browser.
The legal basis for personal data processing using technically necessary cookies is Art. 6, Para. 1, Subpara. 1, lit. f of the GDPR.
Browser settings are generally made so that cookies are automatically stored on the user’s terminal device. You can prevent or restrict this by changing your browser’s settings. You can also delete cookies which have already been saved at any time, whereby deletion can also take place automatically. If cookies are deleted or deactivated for our website, it may no longer be possible to use all of the website’s functions without restriction.
We use the “_gat._anonymizeIp” add-on for web analysis using Google Analytics. Using this add-on, the accessing computer’s IP address is truncated and anonymised by Google if our website is accessed from a member state of the European Union or from a state which is a contracting party to the Agreement on the European Economic Area.
Cookies are used for analysis purposes to improve the quality of our website and its contents. The analysis cookies allow us to find out how the website is used and therefore allow us to continuously optimise it.
The legal basis for personal data processing is Art. 6, Para. 1, Subpara. 1, Clause 1, lit. f of the GDPR. In the aforementioned purposes, we also have a legitimate interest in personal data processing according to Art. 6, Para. 1, Subpara. 1, lit. f of the GDPR.
You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie that prevents your data from being collected on future visits to this website is set.
Our website uses the Google Maps service to display a location map. We use Google Maps, which is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”). When Google Maps is used, Google automatically collects and processes data about the use of the Google Maps functions.
According to Art. 15 of the GDPR, you have the right to request information about what personal data we process.
(8) the existence of automated decision-making, including profiling, and meaningful information on the details of such processing.
You can also request information about whether the personal data concerning you is transferred to a third country or an international organisation. In this context, you can request to be informed of the appropriate safeguards according to Art. 46 of the GDPR in connection with such transfer.
According to Art. 16 of the GDPR, you have the right to request that we immediately correct incomplete personal data which we have stored about you or that we complete the same.
According to Art. 17 of the GDPR, you have the right to request that we delete the personal data which we have stored about you.
According to Art. 18 of the GDPR, you have the right to request that we restrict processing.
(4) you have objected to processing according to Art. 21, Para. 1 of the GDPR and it has not yet been determined whether our legitimate grounds take precedence over your grounds.
According to Art. 21 of the GDPR, you have the right to object to processing of the personal data concerning you according to Art. 6, Para. 1, Subpara. 1, Clause 1, lit. f of the GDPR based on legitimate interests on grounds relating to your particular situation.
If the personal data concerning you is processed for the purposes of direct advertising, according to Art. 21, Para. 2 of the GDPR you have the right at any time to object to processing of the personal data concerning you for the purposes of such advertising; this also applies to profiling if it is in conjunction with such direct advertising.
According to Art. 20 of the GDPR, you have the right to receive your personal data concerning you which you provided us with in a structured, common and machine-readable format or to request direct transfer of the personal data concerning you to another controller if doing so is technically feasible.
According to Art. 7 of the GDPR, you have the right to revoke the consent you granted at any time.
If you revoke your consent, we may no longer continue our data processing activities based on this consent with effect for the future. The lawfulness of processing carried out based on consent up until revocation of the same is not affected by such revocation.
According to Art. 77 of the GDPR, regardless of another administrative or judicial legal remedy, you have the right to lodge complaints with a supervisory authority, particularly in the member state where your place of residence, your workplace or the place of the suspected violation is located if you believe that the processing of the personal data concerning you is in violation of the GDPR.
When you visit our website, we use the popular SSL (Secure Socket Layer) method in conjunction with the highest encryption level supported by your browser. This is usually a 256-bit encryption. You can recognise whether an individual page of our website is transferred in encrypted format by the closed key or padlock symbol in your browser’s bottom status bar.
Additionally, we use suitable technical and organisational security measures to protect your data from accidental or deliberate manipulation, partial or complete loss, destruction or access by unauthorised third parties. Our security measures are continuously improved in line with technological developments.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 15
 Art. 46
 Art. 16
 Art. 17
 Art. 18
 Art. 21
 Art. 21
 Art. 6
 Art. 21
 Art. 20
 Art. 7
 Art. 77