Source: https://www.acrolinx.com/privacy-notice/
Timestamp: 2019-04-24 11:07:31+00:00

Document:
This Data Privacy Notice only governs the use of personal data on our website https://www.acrolinx.com , including the sub-pages. If you exit our website via a link, or visit us via a social media platform, this Data Privacy Notice no longer applies.
You can access, print, or download this Data Privacy Notice at any time at the address https://www.acrolinx.com/data-privacy.
The processing of various information is necessary in order to make the website available. In addition, the scope of the data processing will depend upon your use of the functionality of the website, for example, if you communicate with us via the contact form, or consent to the processing of data.
There is no obligation to make personal data available to us. However, where the availability of this data is technically essential in connection with your visit to our site, a refusal could mean that you cannot access and use our website.
As a visitor to our website, you are not subject to any automated decision making within the meaning of Article 22 GDPR.
The legal bases for the processing of personal data are set out below.
Fulfillment of a contract or carrying out pre-contractual measures Art. 6, para. 1b) Processing shall only occur to the extent that it is necessary to establish and fulfill the rights and duties under the contract. Unless specifically stipulated otherwise, we will only process data to this extent.
Legitimate interest Art. 6, para. 1f) Processing will occur to the extent that we have a legitimate interest and there is no overriding interest of the data subject. The specific interest is explained in this Data Privacy Notice in relation to the processing statement.
Consent Art. 6, para. 1a) Processing will occur to the extent that you have specifically agreed to the type and scope of the data processing. You can withdraw your consent at any time with future effect. However, any processing undertaken up to this point will not be affected.
Legal obligation Art. 6, para. 1c) Processing will occur to the extent that this is necessary to comply with a German or European legal obligation.
We erase your personal data at the point at which the legal basis for its processing is no longer valid. However, sometimes legal bases may co-exist or, when one legal basis is no longer valid, a new one may arise, such as the requirement to store certain data to comply with a statutory retention requirement.
In order for us to provide you with the website, it is necessary to process certain information. This already happens when you visit our website. In addition, our website offers various functionalities, which make it necessary to continue processing personal data.
We save this data in so-called server protocol files (log files). This data is not saved in connection with other data about you. The storage of log files, including your IP address, is necessary for our legitimate interest in making our website available and preventing its misuse. Log files that are saved will be erased after 30 days at most, unless longer storage is necessary. For example, to avert or resolve an attack on our website.
The use of technically necessary cookies and the associated data processing occur on the basis of our legitimate interest in enabling technically fault-free and comfortable use of our website. Technically necessary cookies will normally be automatically erased when your browser is closed (session cookies). in other cases, this will be after some time (persistent cookies). The storage period for persistent cookies is determined by the provider and can be viewed by you, for example, in your browser.
These entries are marked as mandatory fields. Any additional data that you transfer to us in the course of the query, including via the free text field, is provided voluntarily.
We will only use this data for responding to your query and communications linked to this. The legal basis for this processing of your data depends upon the content of your query. Generally, our legitimate interest in making available the contact functionality and responding to your query will apply in this situation. If your query relates to the conclusion of a contract with us, the processing will be on the basis of this pre-contractual obligation.
Your data will be erased once your query has been answered in full. Where we enter into a contract, if necessary, we will continue to process the data for the purposes of the contract.
We use the mapping service Google Maps (API) from Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) on our website, in order to show our location.
If you visit the sub-page on which the Google Maps map is integrated, our website sends various information, including your IP address, to Google in the USA, where is will be stored on their servers. If you have a user account with Google and are logged in at the time of visiting our website, the data will be directly assigned to your account. However, even without a user account, Google will create a use profile about you. This occurs irrespective of whether Google makes a user account available that you have logged in to, or whether no user account exists.
Our transfer of data to Google forms part of our legitimate interest in offering you the map function from Google Maps on our website.
For newsletter applications, we use the so-called “Double Opt-In” Procedure. This means that, following your application, an email will be sent to the email address provided, which contains a confirmation link to receive the newsletter.
The legal basis for processing your data to send the newsletter is the provision of consent pursuant to Art. 6, para. 1A) GDPR.
Our newsletter keeps interested parties updated at regular intervals about current offers and insights for Content Professionals, as well as new features, and tips and tricks for the Acrolinx platform. The data provided by you for this purpose is only processed to provide you with the newsletter. The additional data that is necessary for the application is only obtained to avoid misuse of the newsletter offer and, in particular, of your email address.
We use web fonts from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
Google is certified for this for the “Privacy Shield” (https://www.privacyshield.gov/), which is intended to ensure compliance with the data protection level applicable in the EU.
When you call up a page, your browser loads the required web fonts into your browser to display texts and fonts correctly. To do this, your browser connects to Google, which tells Google that our websites have been accessed via your IP address.
The use of Google Fonts is in the interest of a uniform and appealing representation of our web pages. If your browser does not support Google Fonts or Web Fonts, your device uses a default font.
The legal basis for the processing of personal data using Google Fonts is Art. 6 para. 1 lit. f DSGVO (legitimate interest).
We want to continue to improve the usability of the website as well as the attractiveness of our services. For this reason, we also collect data concerning usage behaviors when you visit our website, which we evaluate for this purpose. Therefore, tracking and analysis cookies are also used on our website, as well as the technically necessary cookies described above.
This website uses Google Analytics, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google gathers information about your use of the website (including your IP address) through a cookie in the USA and stores the information. However, we always use Google Analytics with an anonymization function, in which your IP address will be truncated in advance by Google within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. The full IP address will only be transferred to Google in the USA and truncated there in exceptional circumstances. Google analyzes the data gathered and transfers reports to us about the use activities on our website and also provides further services to us for this purpose. The IP address provided by your browser, within the scope of Google Analytics, will not be consolidated with other Google data.
As an alternative to the browser plug-in or within browsers on mobile devices, please click on the following link, in order to set an Opt-Out cookie, which will avoid the future gathering of information by Google Analytics within this website (this Opt-Out cookie only functions in this browser and only for this domain, if you erase your cookies in this browser, you need to click the link again): [deactivate Google Analytics].
We also use tracking cookies from the Pardot service of salesforce.com Inc. The Landmark @ One Market, Suite 300, San Francisco, CA 94105, USA (“salesforce”) on our website. Salesforce saves the cookies in your browser, in order to analyze your use of our website. No personal data is collected, only a personalized identifier.
Crazy Egg collects information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where they have come from, and the pages they visited.
Cookies placed by Crazy Egg do not include personally identifiable information such as name, phone number, e-mail, or mailing address.
To display adverts on the Acrolinx.com website, we use a service called Double Click.
Beeswax provides connectivity to Acrolinx to connect with some websites providing traffic in open exchanges. To improve campaign performances, anonymous information is provided to Beeswax under the form of pixels. A pixel is a 1×1 transparent image that conveys information from one system to another. This information does not contain any other data than segment lists used for targeting.
Where data processing is based upon your consent, or our legitimate interest, you have the right at any time to object to the processing or to withdraw your consent. Your objection or withdrawal will only have effect for the future. Where the analysis cookies have their own technical means of deactivation, this is set out in the relevant place. You can contact dataprotection@acrolinx.com at any time to exercise your right to object or withdraw. If you object to processing based upon our legitimate interest, we may only continue to process the data if we can demonstrate compelling legitimate grounds for the processing, which override your interests, rights and freedoms.
If your personal data is processed, you are a data subject within the meaning of Art. 4, para. 1 GDPR. As a data subject, you have the following rights in relation to your personal data. You can contact us via the contact information provided above in order to exercise these rights.
You have the right to prompt correction of false personal data and the completion of inaccurate data.
You have the right to request the erasure of your personal data, if one of the grounds set out in Art. 17 GDPR applies, in particular, where there is no longer a legal basis for the processing.
You have the right to request the restriction of processing of your personal data, if one of the grounds set out in Art. 18 GDPR applies, in particular, where you desire this instead of erasure of the data.
You have the right to request all personal data stored by us about you in a structured, accessible, and machine-readable format, and for this data to be transferred to another data controller without hindrance from the controller to which the personal data has been provided.
Under Art. 77 GDPR you have the right to make a complaint to the relevant regulatory authority.
The processing of your personal data in connection with the website is also partly undertaken by sub-processors, in particular, those undertaking the hosting of the website and using analysis tools. This will only occur on the basis of a contractual agreement that contains the measures set out in Art. 28, para. 3 GDPR.
Personal data that we gather from you in relation to the website will be transferred to third countries outside the European Economic Area, under certain circumstances.
Where Google Analytics is used, it may be the case in the exceptional cases described above that your IP address may be transferred to Google LLC in full and truncated there.
Where the analysis tool Pardot from Salesforce is used, your IP address and other information will be transferred.
Google and Salesforce are located in the USA and are therefore in a so-called “third country” pursuant to Art. 44 GDPR. These businesses are certified under the Data Privacy treaty “EU-US Privacy Shield,” which guarantees adherence to a European data privacy protection standard.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 4
 Art. 17
 Art. 18
 Art. 77
 Art. 28
 Art. 44