Source: https://head-acoustics.com/eng/privacy.htm
Timestamp: 2019-04-24 12:35:04+00:00

Document:
The legal basis for this data processing is Art. 6(1)(f) GDPR (legitimate interests of the controller). The aforementioned reasons represent legitimate interests of the controller in processing data according to Art. 6(1)(f) GDPR.
Username from HTTP authentication, if applicable.
position, laboratory location, dongle number (software product), serial number (hardware product).
This data is processed to create your usage profile, to provide you with the necessary access data, to settle any costs and to contact you.
The legal basis for processing data entered during the registration is Art. 6(1)(a) GDPR (Consent). Your data will be retained for as long as your profile exists and/or if it is required for billing purposes (for example, legal retention periods).
You cannot delete your account on your own accord.
In order to verify that you are our customer your data may be transferred to our local subsidiary or local distributor.
We offer you the opportunity to subscribe to our newsletter. For this we only need your email address. If you no longer wish to receive the newsletter at a later date, this is possible via a simple Unsubscribe email. The legal basis for processing the data after the user has registered for the newsletter is the user's consent, Art. 6(1)(a) GDPR. The legal basis for sending the newsletter as a result of the sale of goods or services is § 7(3) of the Law Against Unfair Competition.
To download our free Acoustics Tutorial you need to request login data, which we will provide via e-mail. We collect and process the following data: Salutation, first and last name, email address, phone number, company/institution, country, postal code, city, address. In case the email address provided by you is not a private address we save these data in our CRM-system and we or our local subsidiary or local distributor will use it to contact you, which is why your data will be transferred to them. The legal basis for the processing of the data transmitted in the course of requesting the Acoustics Tutorial is Art. 6(1)(f) GDPR.
You can contact us via a contact form at any time with questions or suggestions. In order to answer your questions or send you a reply, we need the following information: Salutation, first and last name, email address, postal code, country, company/institution. We use this data exclusively for the aforementioned purposes. In case our local subsidiary or local distributor is responsible for answering you, we will forward your inquiry as well as the data provided by you to them. The legal basis for the processing of the data transmitted in the course of using the contact form or in sending an e-mail is Art. 6(1)(f) GDPR.
If the aim of the e-mail is to conclude a contract, then an additional legal basis for the processing of data is Art. 6(1)(b) GDPR.
Google Analytics cookies are stored on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising and thus also serves the financing, customer-oriented use, adaptation and updating of the website.
IP anonymization is activated on this website in connection with the evaluation by Google analytics.
Each data subject has the right to receive free information about the personal data stored about the data subject, including a copy of this information.
Each data subject has the right to request that the personal data concerning the data subject be erased without delay, provided that one of the reasons stipulated by law applies and if processing is not required.
Each data subject has the right to request the restriction of processing, provided that one of the reasons stipulated by law applies.
Each data subject has the right to receive, in a structured, common and machine-readable format, personal data relating to the data subject that has been provided to the controller by the data subject and to transmit that data to another person without hindrance, provided that the processing is carried out with the consent of the data subject pursuant to Art 6(1)(a) GDPR or Article 9(2)(a) GDPR or is based on a contract pursuant to Article 6(1)(b) GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Furthermore, in exercising the data subject’s right to data transferability under Article 20(1) of the GDPR, the data subject has the right to have the data subject’s personal data transmitted directly from one controller to another, insofar as this is technically feasible and insofar as the rights and freedoms of others are not affected.
Each data subject has the right to revoke consent to the processing of personal data at any time if the processing is based on Art. 6(1)( a) or Art. 9(2)(a), without affecting the legality of the processing that had already been carried out up to the point in time in which consent was withdrawn.
Each data subject has the right, at any time, to object to the processing of personal data relating to the data subject as a result of their particular situation, pursuant to Article 6(1)(e) or (f) GDPR. This also applies to profiling based on these provisions. When personal data is processed in order to send direct mail, the data subject has the right to object, at any time, to the processing of personal data concerning the data subject for the purposes of such advertising; this also applies to profiling insofar as it is associated with such direct mail.
In the cases referred to in points (1) and (3), the data controller shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.
The criterion for the duration of the storage of personal data is the respective legally prescribed retention period. After such period expires, the corresponding data will be routinely deleted, if it is no longer required in order to fulfill the contract or to initiate the performance of a contract.
Our website may also contain content from third parties (such as YouTube videos or videos from other providers, Google Maps, RSS feeds, etc.). The providers of such content set cookies on the user's computer. This can be prevented by changing the appropriate settings of your browser, which, however, may mean that this content will not be displayed correctly.
In addition, many (third party) providers store the IP address of the users in order to be able to send the corresponding content to the user's browser. We have no influence on third parties using the user’s IP address.
In case of a breach of data protection regulations every data subject shall have the right to lodge a complaint with a supervisory authority. This is the data protection officer of the federal state in which our company is located. A list of the data protection officers can be found at https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Our Data Protection Officer is responsible for our compliance with and the verification of our data protection obligations. The Data Protection Officer is at your disposal if you would like to receive further information concerning the topic of data protection.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 § 7
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art 6
 Art. 6
 Art. 9