Source: https://es.digipara.com/sobre-nosotros/privacy-policy/
Timestamp: 2019-04-25 18:10:20+00:00

Document:
No data protection officer was appointed, as there is no obligation to appoint a data protection officer according to Art. 37(1) GDPR.
In principle, we process the personal data of our users only if doing so is required in order to ensure that our website functions properly and to the extent necessary for our online products and services. As a rule, personal data of our users is processed only with the consent of the user, with the exception of cases in which it is not possible to obtain prior consent for factual or practical reasons and the data processing is permissible by law.
Art. 6(1)(a) EU General Data Protection Regulation (GDPR) serves as the legal basis in the event that we obtain the consent of the data subject for personal data processing operations.
Art. 6(1)(b) GDPR forms the legal basis in cases where processing of personal data is required for the performance of a contract, to which the data subject is a contractual party. This also applies to processing operations that are necessary to take steps prior to entering into a contract.
Art. 6(1)(c) GDPR serves as legal basis insofar as the processing of personal data is required for compliance with a legal obligation, to which our company is subject.
In the event that vital interests of the data subject or another natural person render the processing of personal data necessary, Art. 6(1)(d) GDPR becomes the legal basis.
Art. 6(1)(f) GDPR serves as legal basis for processing personal data if it is required to protect a legitimate interest of our company or a third party and if the said interest is not overridden by the interests, fundamental rights and freedoms of the data subject.
Personal data of the data subject are erased or blocked as soon as the intended purpose of saving the data ceases to apply. Personal data may remain stored if it has been stipulated by the European or national legislative authority in the EU provisions, laws or other regulations to which the controller is subject. Data are also blocked or erased in the event that the storage period stipulated by said regulations expires, unless the data need to continue to be stored for the purposes of concluding or performing a contract.
You may acquire usage rights to our software products in our online shop.
The data are stored in our system. This excludes payment information (credit card information as well as PayPal information), which we do not store. The IP address of the user, or any other data that allow allocation of the data to a specific user, are not saved. These data are not stored with other personal data of the user.
Art. 6(1)(a) GDPR forms the legal basis for the processing of data where consent of the user is available.
Additional legal basis for the processing of data is Art. 6(1)(b) GDPR.
Data must be collected for the purpose of performing the contract concluded with the user.
The data are erased once collection thereof is no longer required to achieve the purpose for which such data were being collected.
With respect to data collected during the ordering process for contract performance or for steps taken prior to entering into a contract collection is no longer required if the data are no longer needed to execute the contract. It may be necessary to store the personal data of the contractual partner even after conclusion of the contract to remain in compliance with contractual or legal obligations.
As a user you have the option to cancel your registration at any time. At any point of time, you may have the data stored on you rectified.
Should the data be required for performance of a contract or for taking steps prior to entering into a contract, a premature erasure of the data is only possible if no contractual or legal obligations contradict such erasure.
Each time you visit our website, our system automatically collects data and information on the calling computer system.
These data are also stored in the log files of our system. The IP address of the user, or any other data that allows allocation of the data to a specific user, are not saved. These data are not stored with other personal data of the user.
Art. 6(1)(f) GDPR forms the legal basis for the temporary storage of data.
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the IP address of the user must remain stored for the duration of the session.
Our legitimate interest in data processing in accordance with Art. 6(1)(f) GDPR is also inherent in this purpose.
Access log files are archived by DigiPara for 60 days and then erased.
Collecting data to make the website available and the storing of data in log files is absolutely necessary for website operation. Therefore, the user does not have the option of objection.
(1) This website uses Google Analytics, a web analysis service of Google Inc. («Google»). Google Analytics uses so-called “cookies”, which are text files that are saved on your computer and allow your use of the website to be analysed. The information generated by the cookie regarding your use of this website is usually transferred to Google’s server in the USA and stored there. In the event that IP-anonymisation is activated on this website, your IP address will first be truncated by Google within Member States of the European Union or in any other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. Google uses this information on behalf of the operator of this website to evaluate your use of the website, compile reports on the website activities and provide additional services associated with the use of the website and the Internet to the website operator.
(3) You can prevent cookies from being stored on your computer by selecting the appropriate settings on your browser; however, please note that if you do this, you may not be able to make full use of all the features of this website. Furthermore, you can prevent Google from collecting the data generated by the cookie and related to the usage of the website (including your IP address) and from processing such data by downloading and installing the browser plugin which is available at: https://tools.google.com/dlpage/gaoptout?hl=en.
(4) This website uses Google Analytics with the “_anonymizeIp()” extension. It processes IP addresses further in truncated form, making it impossible to trace the IP address back to a specific person. Therefore, if the data collected on you has any reference to personal identification, it will be immediately excluded and the personal data will be promptly deleted.
(5) We use Google Analytics so that we can analyse the usage of our website and to regularly improve it. Using the statistics we obtain, we can improve our service and make it more interesting to you as a user. In exceptional cases, where personal data are transmitted to the USA, Google adheres to the requirements of the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. Art. 6(1), cl. 1 of (f) GDPR serves as the legal basis for the use of Google Analytics.
Art. 6(1)(f) GDPR forms the legal basis for using technically required cookies to process personal data.
Art. 6(1)(a) GDPR forms the legal basis for using cookies to process personal data for analysis purposes where the user has granted consent.
User data collected by means of technically required cookies is not used to create user profiles.
Analysis cookies are used only for one purpose: to improve the quality of our website and improve its contents. Through analysis cookies we learn how the website is used and, can thus continually optimise our service.
Our legitimate interest in processing personal data in accordance with Art. 6(1)(f) GDPR is also inherent in this purpose.
The user’s consent to the processing of these data are obtained as part of the registration process.
Art. 6(1)(b) GDPR serves as the additional legal basis where the registration is for the purpose of contract performance, to which the user is a contractual party, or for steps taken prior to entering into a contract.
In addition, user registration is required for the purpose of contract performance with the user or for steps taken prior to entering into a contract. User registration is also necessary to be able to complete orders in the shop area or to send support requests.
The data are erased once its collection is no longer required to achieve the purpose for which such data were being collected.
With respect to data collected during the registration process for contract performance or for steps taken prior to entering into a contract collection is no longer required if the data are no longer needed to execute the contract. It may be necessary to store the personal data of the contractual partner even after conclusion of the contract to remain in compliance with contractual or legal obligations.
As a user you have the option to cancel your registration at any time. At any point in time, you may have the data stored on you rectified.
Art. 6(1)(b) GDPR forms the legal basis.
The collection of data is necessary for use of the software provided by us and it serves the purpose of performing a contract with the user.
Should the data be required for performing a contract or for taking steps prior to entering into a contract, a premature erasure of the data is only possible if no contractual or legal obligations contradict such erasure.
Alternatively, it is also possible to get in touch via the email address provided. In this case, the user’s personal data that were transmitted in the email are stored.
In this context, the data are not shared with third parties. The data are used exclusively for processing the conversation.
Art. 6(1)(a) GDPR forms the legal basis for the processing of data in the case where the consent of the user is available.
The legal basis for processing the data that is transmitted while sending an email is Art. 6(1)(f) GDPR. In case contact by email is made for the purpose of concluding a contract, then Art. 6(1)(b) GDPR serves as the additional legal basis.
The personal data from the input screen is processed for the sole purpose of facilitating communication. If contact is made by email, a necessary legitimate interest in the processing of the data also applies here.
Other personal data processed during the sending procedure help to prevent misuse of the contact form and ensure the safety of our IT systems.
The data are erased once collection thereof is no longer required to achieve the purpose for which such data were being collected. With respect to personal data from the input screen of the contact form and such that was transmitted to us by email, this is the case once the conversation with the user has ended. The conversation is deemed to have ended when it can be inferred from the circumstances that the relevant facts have been conclusively clarified.
Any additional personal data collected during the sending procedure is erased no later than after a period of seven days.
The user has the option at all times to withdraw his/her consent to the processing of the personal data. If the user contacts us via email, he or she may object to the storage of their personal data at any time. In such a case, the conversation may not be pursued further.
The objection is to be sent to the following email address: info@digipara.com.
All personal data stored in the course of the communication is erased in this case.
For a standardised display of fonts, this website uses so-called web fonts provided by Google. When you visit a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.
This website uses the Google Maps service via an API. The provider is Google Inc., 1600 Amphitheatre, Parkway, Mountain View, CA 94043, USA.
Your IP address must be stored in order for the Google Maps features to function properly. This information is usually transferred to a Google server in the USA and stored there. The provider of this website has no influence on this data transfer.
You have the right to obtain a confirmation from the controller as to whether personal data concerning you is being processed by us.
(8) the existence of an automated decision-making process, including profiling, pursuant to Art. 22(1) and (4) GDPR and – at least in these cases – conclusive information on the logic involved, as well as the importance and intended consequences of such processing for the data subject.
You are entitled to request information as to whether the personal data concerning you are transmitted to a third country or an international organisation. In this regard, you may also ask to be informed about the appropriate safeguards according to Art. 46 GDPR relating to such transmission.
If the processed personal data concerning you are incorrect or incomplete, you have the right to demand rectification and/or completion of the data from the controller. The controller is obliged to perform such rectification without undue delay.
(4) if you have objected to the processing of your data pursuant to Art. 21(1) GDPR and it is not yet certain whether the legitimate reasons of the controller override your reasons.
If the processing of your personal data has been restricted, then these data – except for its storage – may be processed only with your consent or for the establishment, exercising or defence of legal claims or to protect the rights of another natural person or legal entity or for reasons of important public interest of the Union or of a Member State.
If the restriction on processing is effected in accordance with the above-mentioned conditions, you will be informed by the controller before this restriction is removed.
(6) your personal data was collected in connection with the offered services of the information society pursuant to Art. 8(1) GDPR.
If the controller has made your personal data public and is obliged to erase it in accordance with Art. 17(1) GDPR, then the controller, taking account of the available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform the controllers processing the personal data that you as data subject have requested the erasure by such controllers of all links to, or copy or replication of, this personal data.
If you have asserted the right to rectification, deletion or restriction of processing vis-à-vis the controller, then the controller is obliged to inform all recipients, to whom your personal data has been disclosed, about this rectification or deletion of data or the restriction on processing, unless this proves impossible or involves disproportionate effort.
You are entitled to request information from the controller about these recipients.
(2) the processing is done using automated processes.
In exercising this right you are further entitled to have your personal data transmitted directly from one controller to another, as long as it is technically feasible. This may not negatively affect the rights and freedoms of any other person.
The right to data portability does not apply to the processing of personal data required for performing a task in the public interest or as part of exercising public authority vested in the controller.
You are entitled to object at any point in time to the processing of your personal data on the basis of Art. 6(1)(e) or (1)(f) GDPR on grounds relating to your particular situation; this also applies to profiling based on these provisions.
If your personal data are being processed for direct advertising, then you have the right to object at any point in time to the processing of personal data concerning you for such advertising purposes; this also applies to profiling, provided it is related to such direct advertising.
If you object to the processing for purposes of direct advertising, your personal data will no longer be processed for such purposes.
Regardless of the Directive 2002/58/EC, you have the option, in the context of the use of information society services, of exercising your right to object through automated procedures using technical specifications.
You have the right to withdraw your consent declaration under data protection law at any time. The withdrawal of consent does not affect the legality of the processing on the basis of consent until the time of its withdrawal.
However, these decisions may not be based on special categories of personal data as per Art. 9(1) GDPR, provided Art. 9(2)(a) or (2)(g) GDPR does not apply and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.
In the cases referred to in (1) and (3), the controller shall take appropriate measures to safeguard the rights and freedoms as well as your legitimate interests, such that there exists at least the right to obtain human intervention on part of the controller, to present a personal point of view and to contest the decision.
Without prejudice to any other administrative or judicial remedy, you are entitled to lodge a complaint with a supervisory authority – in particular in the Member State of your residence, your place of work or the place of the alleged violation – if you are of the view that the processing of your personal data is in violation of GDPR.
The supervisory authority, with whom the complaint has been lodged, shall inform the complainant on the progress and the outcome of the complaint, including the possibility of legal remedy pursuant to Art. 78 GDPR.

References: Art. 37

Art. 6

Art. 6

Art. 6
 Art. 6

Art. 6

Art. 6
 Art. 6

Art. 6
 Art. 6
 Art. 6

Art. 6

Art. 6
 Art. 6

Art. 6

Art. 6

Art. 6
 Art. 6
 Art. 6
 Art. 22
 Art. 46
 Art. 21
 Art. 8
 Art. 17
 Art. 6
 Art. 9
 Art. 9
 Art. 78