Source: https://www.protonic-software.com/en/Privacy.psx
Timestamp: 2019-04-19 16:41:11+00:00

Document:
(1) We are pleased about your interest in our company. Data protection is very important for Protonic Software GmbH and has a significant impact on our actions.
(2) It is possible to use the Protonic Software GmbH websites in general without providing your personal data.
(3) If a person requests services via the website, or would like to make use of them, personal data may be collected and processed, as the data is necessary in order to provide the service.
(4) If it is necessary to process personal data and there is no legal basis for processing it, we must request in general consent by the Data Subject.
(5) The processing of personal data, such as the name, salutation, e-mail address, company name or telephone/fax number of the Data Subject, always takes place in compliance with the EU General Data Protection Regulation and in compliance with the country-specific data protection regulations that apply for Protonic Software GmbH.
(6) With this data protection statement, our company would like to inform the public about the type, scope and purpose of the personal data we collect, use and process. Furthermore, Data Subjects will be informed in this data protection statement about their rights.
(7) Protonic Software GmbH, as the Data Controller, has implemented extensive technical and organizational measures in order to ensure the most complete protection possible for the personal data processed via this website. However, Internet-based data transfer can, in principle, demonstrate security gaps so that absolute protection cannot be guaranteed. For this reason all Data Subjects have the right to provide us with their personal data using alternative methods, such as by phone, e-mail or fax.
The data protection statement of Protonic Software GmbH is based on the concepts that were used by the European body issuing the directives and regulations for the adoption of the General Data Protection Regulation (GDPR). Our data protection statement should be easy to read and understand both for the public as well as for our customers and business partners. To ensure this, we would like to explain the utilized terms in advance. The following terms, among others, are used in this data protection statement.
The Data Processor is a natural or legal person, public authority, agency or any other body that processes the personal data on behalf of the Data Controller.
Cookies are text files that are filed and saved in a computer system via an Internet browser.
A Third party is a natural or legal person, public authority, agency or any other body other than the Data Subject, Data Controller, the Data Processor or people who are authorized under the direct responsibility of the Data controller to process the personal data.
The Recipient is a natural or legal person, public authority, agency or any other body to which personal data is disclosed, regardless if the Recipient is a third party or not. Public authorities, who may receive personal data within the framework of a particular inquiry according to European Union law or the law of the Member States, are not regarded as recipients.
Consent is an unequivocal expression of intent voluntarily provided by the Data Subject for the specific case in an informed manner in the form of a statement or any other clearly confirming act, with which the Data Subject makes known that he or she agrees to the processing of the concerned personal data.
Personal data is any information about an identified or an identifiable natural person (hereafter "Data Subject"). A natural person is considered to be identifiable who can be identified directly or indirectly, in particular through the assignment of an identifier such as a name, to an identification number, location data, an on-line identifier or to one or multiple special characteristics that represent the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person.
Pseudonymization is the processing of personal data in a manner that makes it impossible to assign the personal data to a specific Data Subject without the involvement of additional information, providing that this additional information is stored separately and technical and organizational measures have been taken to guarantee that the personal data cannot be assigned to an identified or identifiable natural person.
Profiling is any type of automatic processing of personal data that consists in evaluating certain personal aspects that refer to a natural person, in particular to analyze or predict aspects regarding work performance, economic situation, health, personal preferences, interests, reliability, behavior, residence or change of location of this natural person.
Processing is any action, carried out with or without the assistance of automated processes or any series of processes in connection with personal data, such as the collection, recording, organization, arrangement, storage, adaptation or changing, reading out, query, use, disclosure through the transmission, divulging or any other form of providing, comparing or linking, restricting, deleting or destruction.
The Controller or Data Controller is the natural or legal person, public authority, agency or any other body that makes decisions, either alone or with others, regarding the purposes and means for processing personal data. If the purposes and means of processing are specified by European Union law or the law of the Member States, the Data Controller or the specific criteria for his nomination may be specified according to European Union Law or the Law of the Member States.
(2) Each Data Subject can directly contact our Data Protection Officer at any time in case of questions and suggestions regarding data protection.
the website from which an accessing system reaches our website (so-called referrer).
other similar data and information used to advert a danger if our IT systems are attacked.
provide the information to law enforcement authorities necessary to prosecute offences in the case of a cyber attack. This data and information collected anonymously will therefore be evaluated statistically by Protonic Software GmbH and also with the goal to increase data protection and data security in our company, in order to guarantee an optimal level of security for the personal data we process. The anonymous data in the server log files will be saved separately from all other personal data specified by a Data Subject.
(3) By using cookies, Protonic Software GmbH is able to provide user-friendly services to the users of this website, which would not be possible without the cookie setting.
(5) The Data Subject can prevent cookies from being set by our website using the corresponding setting in the utilized Internet browser and thereby permanently block the setting of cookies. Furthermore, cookies that were already set can be deleted at any time via an Internet browser or another software program. This is possible in all standard Internet browsers. If the Data Subject deactivates the setting of cookies in the Internet browers used, it is possible that not all functions in our website will be completely usable.
(1) The Data Subject has the possibility to register on the website of the Data Controller by indicating the personal data. Which personal data is transmitted to the Data Controller results from the respective input mask used for the registration. The personal data entered by the data subject will be collected and stored exclusively for internal use by the Data Controller and for our own purposes. The Data Controller can pass on the personal data to one or more Data Processors, for example a parcel service, which only use the personal data exclusively for an internal user that is attributed to the Data Controller.
(2) By registering on the website of the Data Controller, also the date and time of the registration is stored. This data is stored due to the fact that this is the only way to prevent the misuse of our services, and this data can be used if necessary to clarify any offences that were committed. Therefore this data must be stored to protect the Data Controller. This data will in general not be provided to third parties, unless there is a legal obligation to do so or it must be forwarded as part of a criminal prosecution.
(3) The registration of the Data Subject with the voluntary submission of the personal data is used by the Data Controller to offer contents or services to the Data Subject that, due to the nature of the matter, can only be offered to registered users. Registered persons have the possibility to modify the personal data provided upon registration or to have it completely deleted from the Data Controller's database, providing that there is no overriding legal obligation that obliges the responsibility body to keep the data.
(1) The Protonic Software GmbH website contains information, based on statutory provisions, that makes it possible to quickly contact our company electronically or permit direct communication with us, which includes a generic electronic address (e-mail address).
(2) If the Data Subject makes contact with the Data Controller via e-mail or using the contact form, the personal data provided by the Data Subject will be stored automatically. The data a Data Subject voluntarily provides to the Data Controller will be stored for the purposes of processing or for contacting the Data Subject. This personal data will not be forwarded to third parties.
(2) Processing may also take place electronically. This may be done in particular if an applicant sends in the corresponding application documents electronically, for example via e-mail, or using a web form on a website, to the Data Controller.
(3) If the Data Controller concludes an employment contract with an applicant, the transferred data will be stored for the purposes of carrying out the employment relationship in observance of statutory provisions.
(4) If the Data Controller does not conclude an employment contract with the applicant, the application documents will be automatically deleted six months after notification of the decision not to hire the applicant, providing that their deletion is not contrary to the legitimate interests of the Data Controller. Another legitimate interest in this sense is for example is the burden of proof in proceedings in accordance with the General Act on Equal Treatment.
(1) Users will be given the opportunity on the Protonic Software GmbH website and in the App to subscribe to our company newsletter. The personal data that must be forwarded to the Data Controller when ordering the newsletter can be seen in the input mask used for this purpose.
(2) Protonic Software GmbH uses a newsletter to regularly inform its customers and business partners about company offers. Our company newsletter can only be received in general by the Data Subject if (1) the Data Subject has a valid e-mail address and (2) the Data Subject registers for the newsletter. For legal reasons, a confirmation e-mail will be sent for the first time to the e-mail address entered by the Data Subject using the double opt-in procedure. The confirmation e-mail serves the purpose of checking if the owner of the e-mail address, as the Data Subject, authorized the receipt of the newsletter.
(3) When registering for the newsletter, we also store the IP address assigned by the Internet Service Provider (ISP) to the computer system used by the Data Subject at the moment of registration, as well as the date and time of the registration. This data must be collected in order to reconstruct at a later time a (possible) misuse of the e-mail address of a Data Subject and is therefore is necessary for the legal protection of the Data Controller.
(4) The personal data collected during registration for the newsletter will only be used for sending our newsletter. Furthermore, newsletter subscribers could receive information via e-mail, if this is required for the operation of the newsletter service or the respective registration, as is in the case of changes to the newsletter offer or changes in technical conditions. The personal data collected for the newsletter service will not be forwarded to third parties. The Data Subject can cancel the subscription to our newsletter at any time. The consent to store the personal data that the Data Subject provided to use for the newsletter subscription can be revoked at any time. There is a corresponding link in every newsletter that can be used to revoke consent. Furthermore, it is possible to cancel the newsletter subscription directly on the website of the Data Controller or to indicate this to the Data Controller in another manner.
(1) The Protonic Software GmbH newsletter contain so-called web beacons. A web beacon is a small image that is embedded in e-mails that are sent in HTML format to permit the recording of log files and the analysis of the log file. This makes it possible to statistically evaluate the success or failure of online marketing campaigns. Protonic Software GmbH can use these embedded web beacons to recognize if and when an e-mail is opened by a Data Subject and which of the links contained in the e-mail were activated by the Data Subject.
(2) The personal data collected via the web beacons contained in the newsletters are stored and evaluated by the Data Controller in order to optimize the newsletter and to better adapt the content of future newsletters to the interests of the Data Subject. This personal data is not forwarded to third parties. Data Subjects are entitled at any time to revoke the relative separate declaration of consent provided via the double opt-in procedure. After revocation, the personal data will be deleted by the Data Controller. Protonic Software GmbH shall automatically interpret the cancellation of the newsletter as revocation.
(1) Art. 6 Ietter a of the General Data Protection Regulation (GDPR) provides our company with the legal basis by means of which we can receive consent for a certain processing purpose. If it is necessary to process personal data for the fulfillment of a contract, and the contract party is the Data Subject, such as is the case, for example, for processing operations that are necessary to delivery goods or provide other services or services in return, the processing is based on Art. 6 I letter. b of GDPR. The same applies for those processing operations that are required for carrying out pre-contractual measures, such as when making inquiries about our products or services.
(2) If our company is subject to a legal obligation that makes it necessary to process personal data, such as for the fulfillment of tax obligations, for example, this processing is based on Art. 6 I letter. c of GDPR.
(3) It may be necessary in rare cases to process personal data in order to protect the vital interests of the Data Subject or another natural person. This would be the case, for example, when a visitor to our company is injured and must therefore his or her name, age, health insurance information or other vital information must be given to a physician, hospital or other third party. In that case, the processing would be based on Art. 6 I letter d of GDPR. Finally, processing operations can be based on Art. 6 I letter f of GDPR. Processing operations are based on this legal basis that are not included in any of the previously mentioned legal bases when the processing is necessary to protect a legitimate interest of our company or a third party, as long as the interests, legal basis and fundamental freedoms of the Data Subject do not prevail. Such processing operations are therefore permitted in particular as they are specifically mentioned by the European legislator. This considers that a legitimate interest could be assumed when the Data Subject is a customer of the Data Controller (Recital 47, second sentence of GDPR).
If the processing of personal data is based on Article 6 I letter f of GDPR, it is our legitimate interest to carry out our business operations to the benefit of all our employees and our shareholders.
As a conscientious company, we do not use automatic decision making or profiling.
Every Data Subject has the right granted by the European body issuing the directives and regulations to request confirmation from the Data Controller if his or her personal data was processed. If a Data Subject would like to exercise this right to confirmation, Protonic Software GmbH can be contacted at any time in this regard via the e-mail address datenschutz@protonic-software.com oder die Telefonnummer +49 6181 98 39 39 - 0.
the recipient or category of recipients to whom the personal data has been disclosed or will be disclosed, in particular in the case of recipients in particular in non-member countries or international organizations.
Furthermore, the Data Subject has the right to receive information if the Personal Data was transmitted to a non-member country or an international organization. If this is the case, the Data Subject shall also have the right to receive information about the appropriate guarantees in connection with the transmission.
If a Data Subject would like to exercise this right to information, Protonic Software GmbH can be contacted at any time in this regard via the e-mail address datenschutz@protonic-software.com oder die Telefonnummer +49 6181 98 39 39 - 0.
Every Data Subject whose personal data was processed has the right granted by the European body issuing the directives and regulations to request the immediate correction of any inaccurate personal data. Furthermore, the Data Subject has the right, in consideration of the purpose of the processing, to request the completion of incomplete personal data — also by submitting a supplementary declaration. If a Data Subject would like to exercise this right to correction, Protonic Software GmbH can be contacted at any time in this regard via the e-mail address datenschutz@protonic-software.com oder die Telefonnummer +49 6181 98 39 39 - 0.
Every Data Subject whose personal data was processed has the right granted by the European body issuing the directives and regulations to request the Data Controller to immediately delete personal data if one of the following reasons applies and providing that the processing is not required and there is no legal obligation to retain the data.
The personal data was collected for such purposes or processed in some other form for which it is no longer necessary.
The Data Subject revokes his or her consent on which the processing is based pursuant to Art. 6 section 1 letter a of the GDPR or Art. 9 section 2 letter a of GDPR, and no other legal bases exist for processing.
The Data Subject has objected to processing pursuant to Art. 21 section 1 of GDPR, and there are no overriding legitimate reasons for processing, or the Data Subject has objected to processing pursuant to Art. 21 section 2 of GDPR.
The personal data was illegally processed.
The deletion of the personal data is required in compliance with a legal obligation in accordance with European Union law or the law of the Member State to which the Data Controller is subject.
The personal data was collected in reference to offered information society services, pursuant to Art. 8 section 1 of GDPR.
If one of the above reasons applies and a Data Subject would like to have his or her personal data deleted that is stored at Protonic Software GmbH, the Data Subject can contact the Data Controller at the e-mail address datenschutz@protonic-software.com oder die Telefonnummer +49 6181 98 39 39 - 0.
If the personal data was published by Protonic Software GmbH and our company, as the Data Controller, pursuant to Art. 17 section 1 of GDPR, is responsible for deleting the personal data, Protonic Software GmbH shall take suitable measures, also technical, in consideration of available technology and implementation costs, to inform other Data Controllers who process the published personal data that the Data Subject has requested these other Data Controllers to delete all links to his or her personal data or any copies or replications made of his or her personal data, providing that its processing is not required. An employee of Protonic Software GmbH will take the necessary steps in an individual case.
The Data Subject disputes the correctness of his or her personal data for a period of time that makes it possible for the Data Controller to check the correctness of the personal data.
The processing is illegal, the Data Subject declines to have his or her personal data deleted but instead requests that the user of the personal data be limited.
The Data Controller no longer requires the personal data for the purpose of processing, the Data Subject still requires it in order to establish, exercise or defend legal claims.
The Data Subject has opposed processing pursuant to Art. 21 section 1 of GDPR and it has not yet been determined if the legitimate reasons of the Data Controller prevail over those of the Data Subject.
If one of the above stated condition is met and a Data Subject would like to request the limitation of his or her personal data that is stored at Protonic Software GmbH, the Data Subject can sent a mail for this purpose to Protonic Software GmbH via the e-mail address datenschutz@protonic-software.com oder die Telefonnummer +49 6181 98 39 39 - 0. An employee at Protonic Software GmbH will take steps to limit the processing.
Every Data Subject whose personal data was processed has the right granted by the European body issuing the directives and regulations to receive his or her personal data that was provided by the Data Subject to a Data Controller in a structured, common and machine-readable format. The Data Subject also has the right to transmit this data to another Data Controller without obstruction by the Data Controller to whom the personal data was provided, providing that the processing is based on consent pursuant to Art. 6 section 1 letter a of GDPR or Art. 9 section 2 letter a of GDPR or a contract pursuant to Art. 6 section 1 letter b of GDPR and processing takes placed with an automated process, providing that processing is not required for carrying out a task that is of public interest or in the exercise of official authority vested in the Data Controller.
Furthermore, the Data Subject has the right, when exercising his or her right to data portability according to Art. 20 section 1 of GDPR to have his or her personal data transmitted directly from one Data Controller to another Data Controller, providing that this is technically feasible and providing that the rights and freedoms of other people are not impaired as a result.
To assert the right to data portability, the Data Subject can contact Protonic Software GmbH via the e-mail address datenschutz@protonic-software.com oder die Telefonnummer +49 6181 98 39 39 - 0.
Every Data Subject whose personal data was processed has the right granted by the European body issuing the directives and regulations to object to the processing of his or her personal data for reasons that result from his or her particular situation pursuant to Art. 6 section 1 letters e or f of GDPR. This also applies to profiling based on these provisions.
Protonic Software GmbH will no longer process the personal data in the case of an objection, unless we can demonstrate compelling legitimate grounds for the processing that take precedence over the interests, rights and freedoms of the Data Subject, or if the processing serves the purpose to establish, exercise or defend legal claims.
If Protonic Software GmbH processes personal data for the purposes of direct advertisement, the Data Subject has the right at any time to object to the processing of his or her personal data for the purpose of any type of advertisement. This also applies for profiling, providing that it is connected with this direct advertisement. If the Data Subject objects to the processing for the purposes of direct advertisement by Protonic Software GmbH, Protonic Software GmbH will no longer process the personal data for these purposes.
Furthermore, the Data Subject has the right for reasons resulting from his or her special situation, to object to the relevant processing of his or her personal data at Protonic Software GmbH for scientific or historical research purposes or for statistical purposes pursuant to Art. 89, section 1 of GDPR, unless this processing is required for the fulfillment of a task in the interest of the general public.
In order to exercise the right to object, the Data Subject can contact Protonic Software GmbH at any time via the e-mail address datenschutz@protonic-software.com oder die Telefonnummer +49 6181 98 39 39 - 0.
Furthermore, the Data Subject is free, in connection with the use of Information Society services, to exercise his or her right to object by means of automated processes, irrespective of Directive 2002/58/EC, where technical specifications are used.
takes place with the explicit consent of the Data Subject.
is made with the explicit consent of the Data Subject, Protonic Software GmbH shall take appropriate measures to protect the rights and freedoms as well as the legitimate interests of the Data Subject, which shall include at least the right to obtaining the intervention of a person by the Data Controller, expressing his or her point of view and contesting the decision. If a Data Subject would like to exercise this right concerning the automated decision, Protonic Software GmbH can be contacted at any time in this regard via the e-mail address datenschutz@protonic-software.com oder die Telefonnummer +49 6181 98 39 39 - 0.
Every Data Subject whose personal data was processed has the right granted by the European body issuing the directives and regulations to repeal his or her consent to process personal data at any time. If a Data Subject would like to exercise this right to withdrawal of consent, Protonic Software GmbH can be contacted at any time in this regard via the e-mail address datenschutz@protonic-software.com oder die Telefonnummer +49 6181 98 39 39 - 0.
We inform you that the provision of personal data is in part required by law (e.g. tax regulations) or can result from contractual regulations (e.g. information concerning the contract partner). However, it may be necessary in order to conclude a contract for a Data Subject to provide us with personal data that must be processed by us subsequently. The Data Subject is for example obligated to provide us with his or her personal data with our company enters into a contract with him or her. Failure to provide the personal data can result in not being able to conclude the contract with the Data Subject. Before providing personal data by the Data Subject, the Data Subject must contact Protonic Software GmbH via the e-mail address datenschutz@protonic-software.com oder die Telefonnummer +49 6181 98 39 39 - 0. An employee will inform the Data Subject on a case-by-case basis if the provision of the personal data is mandated by law or due to the contract or required for the conclusion of the contract, or if there is an obligation to provide the personal data, and the consequences there would be if the personal data is not provided.
The criteria for the duration of the storage of the personal data is the respective legal retention period. After expiration of this term, the corresponding data is routinely deleted, providing that it is no longer required for contract performance or contract initiation.
(1) The Data Controller processes and stores the personal data of the Data Subject only for the period of time that is required to reach the storage purpose or if this is provided for by the European body issuing the directives and regulations or another Body issuing laws or regulations to which the Data Controller is subject.
(2) If the storage purpose no longer applies or if the storage period mandated by the European body issuing the directives and regulations or another responsible Body issuing laws, the personal data will be routinely, and in compliance with the statutory provisions, blocked or deleted.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 17
 Art. 21
 Art. 6
 Art. 9
 Art. 6
 Art. 20
 Art. 6
 Art. 89