Source: https://www.iteratec.at/data-protection/?L=1
Timestamp: 2019-04-18 20:28:14+00:00

Document:
We, iteratec GmbH, firmly believe that you should have control over your data and therefore take the protection of your personal data very seriously and strictly adhere to the data protection laws. On this website, personal data is collected only to the extent technically necessary. The data protection policy set out below provides you with an overview of how we guarantee this level of protection, what kind of data we collect for what purpose and what your rights are with regard to your personal data.
Any changes we will make to "iteratec GmbH's data protection policy" in the future will be published on this page.
1.1. This data protection policy informs you about the type, scope and purpose of the processing of personal data as part of our websites, functions and contents (hereinafter jointly referred to as “website”). This data protection policy applies regardless of the domains, systems, platforms and devices (e.g. desktop or mobile) used and on which the online offer is executed.
1.2. The terms used, such as “personal data” or their “processing”, refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).
1.3. The personal data of users processed within the scope of the online offer includes usage data (browser type and version, operating system used, URL of the page previously visited, IP address of the accessing computer as well as time of the request) and information regarding content (e.g. entries in an application form).
1.4. The term “user” covers all categories of data subjects. These include our business partners, customers, interested parties and other visitors of our online offers. The terms used, such as “user”, are to be understood as gender-neutral.
1.5. We process personal data of users only in compliance with the relevant data protection laws. This means that the users’ data will only be processed if there is a legal permission to do so, especially if the data processing is required by law, if the user has consented for us to do so, and also on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and the economic operation and security of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR, in particular for range measurements, the creation of profiles for advertising and marketing purposes as well as the collection of access data and the use of services offered by third parties).
1.6. We point out that the legal basis for the processing is either the relevant consent (to process the data in order to be able to provide our services and execute contractual measures, to process the data in order to fulfil our legal obligations), or to process the data in order to protect our legitimate interests (Art. 6 para. 1 lit. a. and Art. 7 GDPR).
1.7. What sources and data do we use? We process personal data of customers, suppliers, interested parties, applicants and employees. We process this data in the context of business relationships, application procedures or employment relationships. We also use data from publicly accessible sources that is allowed to be processed. The legal basis is the fulfilment of (pre-)contractual obligations, legitimate interest, a law or a consent provided by the person concerned.
2.1. We take organisational, contractual and technical security measures in accordance with the current technical standards in order to ensure that all applicable data protection laws are adhered to and thereby to protect the data processed by us against any accidental or intentional manipulation, loss, destruction or access by unauthorised persons.
Have you discovered a gap in our security? Then please write to us at security-incident@iteratec.de. We will contact you as soon as possible. For encrypted contact, you can also use our certificate.
3.1. Data will only be disclosed to third parties within the framework of the law. We only disclose user data to third parties if, for example, this is required for contractual purposes on the basis of Art. 6 para. 1 lit. b) GDPR or on the basis of legitimate interests regarding the economic and effective operation of our business operations pursuant to Art. 6 para. 1 lit. f. GDPR.
3.2. In case we use subcontractors to provide our services, we will take appropriate legal precautions as well as appropriate technical and organisational measures to ensure the protection of personal data in accordance with the relevant statutory provisions.
3.3. To the extent any content, tools or other means from other providers (hereinafter jointly referred to as "third party providers") are used in the context of this data protection policy, these will only be transferred to countries with an appropriate level of data protection and to countries within the scope of application of the GDPR.
4.2. If we receive proactive applications by post or e-mail, technical and organisational measures ensure that your personal data will be treated confidentially within the legal provisions. After the application process has concluded, your data will be deleted unless you agree to the data being saved for a longer period of time. The deletion takes place after four months (due to compliance with deadlines for possible lawsuits under the German Anti-Discrimination Act, AGG).
At https://karriere.iteratec.de we offer support in the form of a chatbot (hereinafter referred to as “iteraBot”). The iteraBot is intended to answer potential applicants' questions about the company and the application process in advance.
When using the iteraBot no personal data is being collected. Its use is anonymous, without login data or the input of other data that can be assigned to certain persons, unless the input of such data is voluntary by the user.
We do not knowingly request data from minors. There is no profiling. Due to the anonymous use of the iteraBot, any requests for information as well as contradictions or the deletion of data is not possible.
All data collected by the input field is saved on an internal server to which only authorised iteratec employees have access. The content is saved for the purpose of evaluating the history logs of conversations with the chatbot and is not deleted within a certain period of time because it is used as part of a data set for machine learning.
It is not possible to assign the data to a particular user, unless the user voluntarily enters data which may be assigned to him or her.
In addition, the iteraBot application uses Microsoft Cognitive Services (https://eu.luis.ai/) as part of the input processing with the aim of creating a suitable output. For this, the user input is sent unchanged to the previously mentioned service from Microsoft. Microsoft may use this data to improve its services. Additionally, Bot Connector Service and Bot State Service (https://dev.botframework.com/) from Microsoft are also used to manage the link between the application and the user. For more information, seehttps://privacy.microsoft.com/en-us/privacystatementandhttps://azure.microsoft.com/en-us/support/legal/cognitive-services-terms/.
At all times of use the user interacts with the application, at no time is the chat taken over by a person.
This includes name, e-mail address, gender, photo, self-assessment of technical skills and, if necessary, application documents.
saved on an internal system and are only accessible to authorised persons.
Transferred to the application management system of our service provider Talention.
All data will be deleted after four months, unless the interested party explicitly agrees to the storage of the data for a longer period of time in order to be contacted at a later point in time. In this case, the data is saved for one year and is then deleted.
5.1. Cookies are small text files used by websites to make the user experience more efficient.
The iteratec web pages use different cookie types. Some of the cookies appearing on our web sites are placed by third parties.
5.2. How can I reject and delete cookies?
5.3. What types of cookies are there?
5.4. What cookies does iteratec use on its websites?
The following overview applies to the domains iteratec.at, iteratec.com, iteratec.pl, iteraplan.de, openspeedmonitor.de, openspeedmonitor.com, openspeedmonitor.org, securecodebox.io and malsato.com and all subdomains.
The following overview applies to the domains iteratec.at, iteratec.com and iteratec.pl as well as all subdomains.
TYPO3: Each author of a blog comment receives an AuthorIdent, which is saved in comments and votes. If the user is logged in, it contains the user ID of the frontend user. Otherwise, it contains a randomly generated character sequence. For users who are not logged in, this character sequence is saved as a cookie with the key tx_pwcomments_ahash.
Google Analytics: This cookie contains information about when the visitor was on the site for the first time, how often and when it was last visited.
Google Analytics: This cookie contains a timestamp of when the visitor visited the site. Together with __utmc, this cookie can provide information about how long the visitor spent on a particular site.
Google Analytics: This cookie contains a time stamp when the visitor left the site. Together with __utmb, this cookie can provide information about how long the visitor spent on a particular site.
Google Analytics: Shows what type of request was made. (Can be an event, transaction, item or custom variable. If no information is provided, it is a simple page view.
Google Analytics: This cookie contains information about where the visitor came from before calling up the page to be analysed. For example, it may contain information about search engines and the search terms entered there, or where on earth the visitor’s IP address is located.
The following overview applies to the domain iteraplan.de and all subdomains.
WordPress: This cookie is set by Wordfence, a security tool for WordPress installations. The cookie is used to determine whether the website is accessed by a human being rather than a bot.
This cookie saves your current session with reference to PHP applications and thereby ensures that all functions of the page, which are based on the PHP programming language, can be fully displayed.
The cookie saves the session ID, which bundles several related requests to the server and assigns them to a session.
vbulletin (forum): Purpose being clarified with the provider.
vbulletin (forum): This cookie saves your current session with reference to PHP applications and thereby ensures that all functions of the page, which are based on the PHP programming language, can be fully displayed.
vbulletin (forum): Timestamp of the last acticity in the forum.
vbulletin (forum): Timestamp of the last visit in the forum.
vbulletin (forum): Saves all pop-up messages that have already been shown to the user.
vbulletin (forum): A randomly generated session ID which is used to link the browser session of the user with the session data that is saved in the database.
vbulletin (forum): Saves an encrypted version of the password used to authenticate the user. For example, if the password is changed on another computer, the user is prompted to log in again.
vbulletin (forum): Saves the user ID of the user who is logged in.
vbulletin (forum): Saves the user’s language preferences.
WordPress: The cookie wfvt_ is used to analyse user behaviour on our websites in order to improve our services.
The following overview applies to the domains openspeedmonitor.de, openspeedmonitor.com and openspeedmonitor.org as well as all subdomains.
JSESSIONID is a platform session cookie and is sued by websites with JavaServer Pages (JSP).
The following overview applies to the domains securecodebox.io and all subdomains.
We use MailChimp to manage all subscriptions to our mailing lists and to create and send emails to subscribers to these lists. MailChimp uses a session cookie to track users through the login process when they submit information via our registration form.
The following overview applies to the domains malsato.com, donau-plate.at and donau-plate.com as well as all subdomains.
The services of Malsato.com are available in different locations, but most of the time users are only interested in the offer at a certain location. The malsato_location cookie saves a user's location preference as soon as the user selects it for the first time when visiting the site. The offer for the selected location is then automatically displayed to the user.
6.2. Google is certified under the Privacy Shield Agreement and thereby offers a guarantee to comply with European data protection laws (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
6.3. Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with further services connected with the use of this online offer and the use of the Internet. Pseudonymous user profiles may be created from the processed user data.
6.4. We use Google Analytics only with IP anonymisation enabled. This means that Google will shorten the IP address of users within member states of the European Union or in other states that are a party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
As part of its online offer, iteratec offers the possibility to follow its social media offers via so-called “follow buttons”. Online maps and videos are also provided by third parties. Below you will find further information regarding the respective services.
7.1. Twitter: As part of our online offer, Twitter functions can be integrated. These functions are provided by Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the "follow" function, the websites you visit are linked to your Twitter account and made known to other users. Data is also transmitted to Twitter in this process. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the data transmitted or how it is used by Twitter. You can find Twitter's data protection policy at http://twitter.com/privacy. You can amend your data protection settings in your Twitter account settings under http://twitter.com/account/settings.
7.2. Facebook: Our pages include a "follow button" to the social network Facebook (Facebook Inc., 1601 Willow Road, Menlo Park, California, 94025, USA).
7.6. YouTube: embedded videos of the platform “YouTube” from the third party service provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Data protection policy: https://www.google.com/policies/privacy/- Opt-out: https://www.google.com/settings/ads/. If you click on a link to a video, we only enable you to establish a connection to the service offered by YouTube.
Our online offer of iteraplan.de and securecodebox.de includes the possibility to subscribe for a newsletter.
The following information is intended to inform you about the contents of our newsletter as well as the registration, dispatch and statistical evaluation procedure as well as your rights of objection.
By subscribing to our newsletter, you agreed to its receipt as well as the procedure described below.
We will only send newsletters, e-mails and other electronic notifications containing advertising information (hereinafter referred to as "newsletter") with the consent of the recipients or if we are legally allowed to do so. If the content of a newsletter is specifically described within the registration process, this is relevant for the extent of the user’s consent.
The registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registration you will receive an e-mail asking you to confirm your registration.
This confirmation is necessary so that no one can log in with another person’s e-mail address.
Subscriptions to the newsletter are logged to enable us to prove the registration process in accordance with legal requirements. This includes saving the time of the registration and confirmation as well as the IP address. Additionally, any changes of your data saved within MailChimp are logged.
The newsletter is sent via "MailChimp", a newsletter distribution platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. The e-mail addresses of our newsletter recipients as well as their other data as described in these notes are saved on the servers of MailChimp in the USA. MailChimp uses this information to send and evaluate the newsletter on our behalf. Furthermore, according to MailChimp, it can use this data to optimise or improve its own services, for example to technically optimise the distribution and depiction of the newsletter or for economic purposes to determine which countries the recipients are from. However, MailChimp does not use the data of our newsletter recipients to write to them or to pass their details on to third parties. We trust in MailChimp’s reliability as well as its IT and data security. MailChimp is certified under the US-EU data protection agreement "Privacy Shield" and thus undertakes to comply with EU data protection regulations.
Additionally, we have concluded a “data processing agreement” with MailChimp. This is a contract in which MailChimp undertakes to protect the data of our users, to process them on our behalf in accordance with their data protection regulations and, in particular, not to pass them on to third parties. You can read MailChimp’s data protection policy here.
In order to subscribe to the newsletter, you only need to enter your e-mail address. There is also the option to provide us with your first and last name. This information is only used to personalise the newsletter. It is also optional to enter your date of birth, gender and the industry in which you work. We only use this information to adapt the contents of the newsletter to the individual interests of our readers.
The newsletters contain a so-called “web-beacon”, i.e. a pixel-sized file that is retrieved from the MailChimp server when the newsletter is opened. Within the scope of this retrieval, technical information such as information about the browser and your system as well as your IP address and time of retrieval is initially collected. This information is used to technically improve the services using the technical data or the target groups and their reading behaviour on the basis of their retrieval locations (which can be determined with the help of the IP address) or their access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are followed. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our endeavour nor that of MailChimp to watch individual users. The evaluations are only intended to help us recognise the reading habits of our users and to adapt our contents to them or to distribute different contents according to the individual interests of our users.
You can cancel the receipt of our newsletter at any time, i.e. revoke your consent. You will find a link to cancel your newsletter subscription at the end of each newsletter. After you have cancelled your subscription, all your data will be deleted apart from your e-mail address. Your e-mail address is saved in a list of blocked e-mail addresses and is only used to ensure that we do not send any further e-mails to your e-mail address.
In accordance with the provisions of the General Data Protection Regulation (GDPR) which enters into force on 25 May 2018, we inform you that we obtain your consent to the distribution of e-mail addresses on the basis of Art. 6 para. 1 lit. a, 7 GDPR and Sec. 7 para. 2 no. 3 and para. 3 of Germany’s Act against Unfair Practices (UWG). The use of the distribution service provider MailChimp, the performance of statistical surveys and analyses as well as the logging of the registration procedure are carried out on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR. Our interest relates to the use of a user-friendly and secure newsletter system, which both serves our business interests as well as meets the expectations of the users. We would also like to point out that, in accordance with the legal requirements pursuant to Art. 21 GDPR, you can object to the future processing of your personal data at any time. The objection may be lodged in particular against the processing of your data for direct advertising.
8.1. Right to information: Users have the right to request and receive free of charge information about the personal data we have saved about them.
8.2. Right to correction: In addition, users have the following rights: to have inaccurate data corrected, to place limits on the processing of their personal data, to have their personal data deleted and, if applicable, to assert their rights to data portability and, if they believe unlawful data processing has taken place, to lodge a complaint with the competent supervisory authority.
8.3. Users may also revoke their consent, with effect for the future. The revocation is to be addressed to the data protection officer.

References: Art. 4
 Art. 6
 Art. 7
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 21