Source: https://sedo.com/es/sobre-sedo/politicas/directrizes-sobre-la-proteccion-de-datos/?session=8915663e8a25cf797aabccc6d97ef7c1
Timestamp: 2019-04-18 13:26:22+00:00

Document:
The protection of your personal data is very important to us. As such, our customers’ and users’ data protection and data security is a top priority for Sedo GmbH. When you use a Sedo website, we will collect personal data relating to you for various purposes. Your personal data is processed in accordance with the EU General Data Protection Regulation and the applicable country-specific data protection regulations.
Sedo GmbH has taken numerous technical and organizational measures to guarantee the greatest possible protection of the personal data collected and processed via this website. Notwithstanding this, internet-based data transfers are generally subject to security weaknesses, making it impossible to absolutely guarantee your protection. For this reason, all data subjects are free to visit the Sedo.com LLC website and send your personal data to us using alternative, non-electronic means.
Our data protection declaration is based on the terms used by the European legislator for the adoption of the EU General Data Protection Regulation (GDPR). Our data protection declaration should be legible and understandable for the general public, as well as our customers and business partners. To ensure this, we would like to first explain the terminology used.
We, Sedo GmbH, are the controller within the meaning of the GDPR, that is the legal person which determines the purposes and means of the processing of personal data. Our contact details are: Im Mediapark 6B, 50670 Cologne, Germany; Ph.: +49 180 5 733622; Fax: +49 221 34030-102, Email: kontakt@sedo.de.
Our data protection officer is Noura Khelaifia, Im Mediapark 6B, 50670 Cologne, Ph.: +49 221 34030-571, Email: datenschutz@sedo.de.
All data subjects may refer personal data-related questions or queries to our data protection officer directly.
4. How is your personal data processed?
Recognition data regarding the browser and operating system used.
When this general data and information is processed, we do not connect it to a data subject. Rather, this information is processed to allow access to the website (establishing a connection), for the purposes of the ongoing technical functionality of our IT systems and the technology in our website, for system security and to optimize our online offerings. As such, the data and information are analyzed by us for statistical purposes on the one hand and, on the other hand, to improve our company’s data protection and data security and thereby to offer an optimal level of data protection in relation to the personal data processed by us. The data on the server log files is kept separate from personal data provided by a data subject.
Personal data going beyond this, such as name, address, telephone number or email address are not collected unless you provide this information voluntarily, for example in the context of a request for information.
As part of the registration for the use of our services in accordance with the contract, we collect personal data such as your name, address and email address. You can see what personal data is being sent to us from the fields which are used to enter information during registration. The personal data entered by the data subject is only collected and stored for internal use and our own purposes.
When you register on our website, we also save the IP address allocated by the data subject’s internet service provider (ISP), as well as the time and date of registration. This information is recorded in order to prevent misuse of our services and to allow the investigation of any criminal offences. As such, this data is stored for security purposes. In principle, this information is not disclosed to third parties to unless there is a legal obligation to do so or the disclosure is in order to further a criminal investigation.
The registration of personal data provided voluntarily by data subjects helps us to offer content and services to the data subject which, due to the nature of the matter, can only be offered to registered users. Registered persons have the right to change or request the complete deletion of personal data provided during registration, as long as this is not inconsistent with any legal regulations.
On request, we will provide any data subject with information regarding what personal data we have saved in relation to them. Furthermore, we will correct or delete personal data on request or if instructed by the data subject, to the extent that this is not inconsistent with a statutory data retention obligation.
Your data will only be processed for other purposes with your consent or if there is a legal basis for this.
This data processing is based on art. 6(1)(b) of the GDPR which allows the processing of data in performance of a contract or in relation to steps prior to entering into a contract.
Our website contains information that enables a quick electronic contact to our enterprise, as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the controller by e-mail or via a contact form, the personal data transmitted by the data subject are automatically stored. Such personal data transmitted on a voluntary basis by a data subject to the data controller are stored for the purpose of processing or contacting the data subject.
The processing of data submitted through the contact form is based on art. 6(1)(b) of the GDPR which allows the processing of data in performance of a contract or in relation to steps prior to entering into a contract. In addition to this, art. 6(1)(b) of the GDPR authorizes us to process data for the purposes of our legitimate interests.
We collect and process the personal data of applicants for the purpose of the processing of the application procedure. The processing may also be carried out electronically. This is the case, in particular, if an applicant submits corresponding application documents by e-mail. If we conclude an employment contract with an applicant, the submitted data will be stored for the purpose of processing the employment relationship in compliance with legal requirements. If no employment contract is concluded with the applicant by us, the application documents shall be automatically erased two months after notification of the refusal decision, provided that no other legitimate interests of the controller are opposed to the erasure. Other legitimate interest in this relation is, e.g. a burden of proof in a procedure under the General Equal Treatment Act (AGG).
We inform our customers and business partners regularly by means of a newsletter about enterprise offers. The enterprise's newsletter may only be received by the data subject if the data subject has a valid e-mail address and the data subject registers for the newsletter shipping. A confirmation e-mail will be sent to the e-mail address registered by a data subject for the first time for newsletter shipping, for legal reasons, in the double opt-in procedure. This confirmation e-mail is used to prove whether the owner of the e-mail address as the data subject is authorized to receive the newsletter.
The personal data collected as part of a registration for the newsletter will only be used to send our newsletter. In addition, subscribers to the newsletter may be informed by e-mail, as long as this is necessary for the operation of the newsletter service or a registration in question, as this could be the case in the event of modifications to the newsletter offer, or in the event of a change in technical.
You can find additional information regarding Oracle approach to data protection at: www.oracle.com/de/legal/privacy/.
Naturally, you are able to withdraw your consent for the receipt of our newsletters at any time by logging in at www.sedo.de and updating your email settings for the relevant newsletter which can be found under account settings in the customer area. Alternatively, you can unsubscribe using the unsubscribe link contained in each newsletter email.
Your email address is therefore processed exclusively on the basis of your consent (art. 6(1)(a) of the GDPR). You may withdraw this consent at any time. There are no formal requirements for this; a simple email to us will suffice. Withdrawal of consent does not affect the lawfulness of any data processing which has occurred prior to the withdrawal of consent.
Such personal data collected in the tracking pixels contained in the newsletters are stored and analyzed by us in order to optimize the shipping of the newsletter, as well as to adapt the content of future newsletters even better to the interests of the data subject. These personal data will not be passed on to third parties. Data subjects are at any time entitled to revoke the respective separate declaration of consent issued by means of the double-opt-in procedure. After a revocation, these personal data will be deleted by us. We automatically regard a withdrawal from the receipt of the newsletter as a revocation.
The main purpose of tracking and the associated analysis of user behavior is to measure the success of advertising campaigns and to optimize the advertising being displayed. This processing of personal data is carried out pursuant to art. 6(1)(f) of the GDPR. You are able to prohibit third party provider tracking.
On this website, we have integrated components of PayPal. PayPal is an online payment service provider. Payments are processed via so-called PayPal accounts, which represent virtual private or business accounts. PayPal is also able to process virtual payments through credit cards when a user does not have a PayPal account. A PayPal account is managed via an e-mail address, which is why there are no classic account numbers. PayPal makes it possible to trigger online payments to third parties or to receive payments. PayPal also accepts trustee functions and offers buyer protection services.
The transmission of the data is aimed at payment processing and fraud prevention. We will transfer personal data to PayPal, in particular, if a legitimate interest in the transmission is given. The personal data exchanged between PayPal and us for the processing of the data will be transmitted by PayPal to economic credit agencies. This transmission is intended for identity and creditworthiness checks.
On our website we have integrated the component of Google Analytics (with the anonymizer function). Google Analytics is a web analytics service. Web analytics is the collection, gathering, and analysis of data about the behavior of visitors to websites. A web analysis service collects, inter alia, data about the website from which a person has come (the so-called referrer), which sub-pages were visited, or how often and for what duration a sub-page was viewed. Web analytics are mainly used for the optimization of a website and in order to carry out a cost-benefit analysis of Internet advertising.
For the web analytics through Google Analytics we use the application "_gat. _anonymizeIp". By means of this application the IP address of the Internet connection of the data subject is abridged by Google and anonymised when accessing our websites from a Member State of the European Union or another Contracting State to the Agreement on the European Economic Area.
Google Analytics places a cookie on the information technology system of the data subject. The definition of cookies is explained above. With the setting of the cookie, Google is enabled to analyze the use of our website. With each call-up to one of the individual pages of this Internet site, which is operated by us and into which a Google Analytics component was integrated, the Internet browser on the information technology system of the data subject will automatically submit data through the Google Analytics component for the purpose of online advertising and the settlement of commissions to Google. During the course of this technical procedure, the enterprise Google gains knowledge of personal information, such as the IP address of the data subject, which serves Google, inter alia, to understand the origin of visitors and clicks, and subsequently create commission settlements.
The tracking and the associated analysis of user behavior are principally carried out for the performance of our contractual obligations. This processing of personal data is carried out pursuant to art. 6(1)(b) of the GDPR. You are able to prohibit third party provider tracking.
Google Analytics also uses tracking technology to measure the success of advertising campaigns and optimize the display of advertising. This processing of personal data is carried out pursuant to art. 6(1)(f) of the GDPR. You are able to prohibit third party provider tracking.
Further we have integrated Google AdSense on our website. Google AdSense is an online service which allows the placement of advertising on third-party sites. Google AdSense is based on an algorithm that selects advertisements displayed on third-party sites to match with the content of the respective third-party site. Google AdSense allows an interest-based targeting of the Internet user, which is implemented by means of generating individual user profiles.
The purpose of Google's AdSense component is the integration of advertisements on our website. Google AdSense places a cookie on the information technology system of the data subject. The definition of cookies is explained above. With the setting of the cookie, Alphabet Inc. is enabled to analyze the use of our website. With each call-up to one of the individual pages of this Internet site, which is operated by us and into which a Google AdSense component is integrated, the Internet browser on the information technology system of the data subject will automatically submit data through the Google AdSense component for the purpose of online advertising and the settlement of commissions to Alphabet Inc. During the course of this technical procedure, the enterprise Alphabet Inc. gains knowledge of personal data, such as the IP address of the data subject, which serves Alphabet Inc., inter alia, to understand the origin of visitors and clicks and subsequently create commission settlements.
As a further tracking-technology we have integrated Google Remarketing services on our website. Google Remarketing is a feature of Google AdWords, which allows an enterprise to display advertising to Internet users who have previously resided on the enterprise's Internet site. The integration of Google Remarketing therefore allows an enterprise to create user-based advertising and thus shows relevant advertisements to interested Internet users.
Google Remarketing also uses tracking technology to measure the success of advertising campaigns and optimize the display of advertising. This processing of personal data is carried out pursuant to art. 6(1)(f) of the GDPR. You are able to prohibit third party provider tracking.
On our website, we have integrated a tracking pixel for real-time measurement. A tracking pixel is a miniature graphic embedded in Internet pages to enable log file recording and log file analysis to subsequently perform a statistical analysis. The integrated tracking pixels are used for the Scalable Central Measurement System (SZMS) of INFOnline GmbH.
With the setting of the opt-out cookie, however, the possibility exists that our websites are not fully usable anymore by the data subject. The applicable data protection provisions of INFOnline may be accessed at https://www.infonline.de/datenschutz/.
On our website, we have integrated components of the company etracker. Etracker is a Web analytics service. Web analytics is the collection, gathering and analysis of data about the behavior of visitors to websites. A web analysis service captures, among other things, data about from which website a person has arrived on another website (the so-called referrer), which sub-sites of the website were visited or how often and for what duration a sub-site was viewed. Web analytics are mainly used for the optimization of a website and in order to carry out a cost-benefit analysis of Internet advertising.
Etracker sets a cookie on the information technology system of the data subject. The definition of cookies is explained above. With each call-up to one of the individual pages of this Internet site, which is operated by us and into which an etracker component was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to transmit data for marketing and optimisation purposes to etracker through the etracker component. During the course of this technical procedure etracker receives data that is used to create pseudonymous user profiles. The user profiles created in such a way are used for the analysis of the behavior of the data subject, which has accessed Internet page of us and are evaluated with the aim of improving and optimizing the website. The data collected through the etracker component is not used without first obtaining of a separate and explicit consent of the data subject to identify the data subject. This data is not merged with personal data or other data which contain the same pseudonym.
With the setting of the opt-out cookie, however, the possibility exists that our websites are not fully usable anymore by the data subject.
Following an order, the Trusted Shops Trustbadge is incorporated into this web page in order to display our eventually collected reviews.
Other personal information will only be transferred to Trusted Shops if you decide, after completing an order, to use Trusted Shops products or have already registered for their use. In this case, the contractual agreement between you and the Trusted Shops applies.
This tracking is carried out to get evaluations from our customers. This processing of personal data is carried out pursuant to art. 6(1)(f) of the GDPR.
On our website we have integrated components of the enterprise Facebook. Facebook is a social network.
With each call-up to one of the individual pages of this Internet website, which is operated by us and into which a Facebook component (Facebook plug-ins) was integrated, the web browser on the information technology system of the data subject is automatically prompted to download display of the corresponding Facebook component from Facebook through the Facebook component. An overview of all the Facebook Plug-ins may be accessed under https://developers.facebook.com/docs/plugins/. During the course of this technical procedure, Facebook is made aware of what specific sub-site of our website was visited by the data subject.
Facebook is used in the interests of presenting our online services. This constitutes a legitimate interest within the meaning of art. 6(1)(f) of the GDPR.
Furthermore, we have integrated on our website components of Twitter. Twitter is a multilingual, publicly-accessible microblogging service on which users may publish and spread so-called ‘tweets,’ e.g. short messages, which are limited to 280 characters. These short messages are available for everyone, including those who are not logged on to Twitter. The tweets are also displayed to so-called followers of the respective user. Followers are other Twitter users who follow a user's tweets. Furthermore, Twitter allows you to address a wide audience via hashtags, links or retweets.
With each call-up to one of the individual pages of this Internet site, which is operated by us and on which a Twitter component (Twitter button) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to download a display of the corresponding Twitter component of Twitter. Further information about the Twitter buttons is available under about.twitter.com/de/resources/buttons. During the course of this technical procedure, Twitter gains knowledge of what specific sub-page of our website was visited by the data subject. The purpose of the integration of the Twitter component is a retransmission of the contents of this website to allow our users to introduce this web page to the digital world and increase our visitor numbers.
Twitter is used in the interests of presenting our online services. This constitutes a legitimate interest within the meaning of art. 6(1)(f) of the GDPR.
On this website, we have integrated components of YouTube. YouTube is an Internet video portal that enables video publishers to set video clips and other users free of charge, which also provides free viewing, review and commenting on them. YouTube allows you to publish all kinds of videos, so you can access both full movies and TV broadcasts, as well as music videos, trailers, and videos made by users via the Internet portal.
With each call-up to one of the individual pages of this Internet site, which is operated by us and on which a YouTube component (YouTube video) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to download a display of the corresponding YouTube component. Further information about YouTube may be obtained under https://www.youtube.com/yt/about/en/. During the course of this technical procedure, YouTube and Google gain knowledge of what specific sub-page of our website was visited by the data subject.
YouTube is used in the interests of presenting our online services. This constitutes a legitimate interest within the meaning of art. 6(1)(f) of the GDPR.
We have taken technical and organizational measures to protect your personal data from loss, destruction, forgery, manipulation and unauthorized access or disclosure. All of our employees and other persons involved with the data processing are under an obligation to treat personal data with confidentiality and in accordance with data protection-relevant laws.
We do not have any influence over the third parties’ compliance with data protection and security requirements and refer you to the relevant providers’ privacy policies.
If one of the aforementioned reasons applies, and a data subject wishes to request the erasure of personal data stored by us, he or she may, at any time, contact us. We will ensure that the erasure request is complied with immediately.
Where we have made personal data public and we are obliged pursuant to Article 17(1) to erase the personal data, we, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform other controllers processing the personal data that the data subject has requested erasure by such controllers of any links to, or copy or replication of, those personal data, as far as processing is not required. We will arrange the necessary measures in individual cases.
If we processe personal data for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing. This applies to profiling to the extent that it is related to such direct marketing. If the data subject objects the processing for direct marketing purposes, we will no longer process the personal data for these purposes.
If the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or (2) it is based on the data subject's explicit consent, we will implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on our part, to express his or her point of view and contest the decision.
If you wish to exercise one of your rights mentioned under section 11 a) – i) you can contact us under dataprotection@sedo.de.

References: art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6