Source: https://www.inpuncto.com/en/data-privacy/
Timestamp: 2019-04-19 01:28:55+00:00

Document:
– Inventory data (for example, person master data, names, or addresses).
– Meta/communication data (e.g. device information, IP addresses).
– Range measurement / marketing.
Insofar as we obtain the consent of the person concerned for the processing of personal data, Art. 6 para. 1 lit. a and Art. 7 GDPR serve as the legal basis.
Art. 6 para. 1 lit. b GDPR serves as a legal basis for the processing of personal data required for the performance of a contract to which the data subject is a party. This also applies to processing operations which are necessary for the implementation of pre-contractual measures (e.g. answering inquiries).
The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage ceases to apply. In addition, such storage may take place if provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.
We take appropriate technical and organisational measures in accordance with the statutory requirements in order to guarantee a level of protection appropriate to the risk.
In the event that data is disclosed, brokered or granted access to other persons and companies (e.g. contract processors, jointly responsible persons or third parties) or other companies of our group of companies within the framework of data processing, this is done on the basis of a legal permit, the consent of the users, a legal obligation or on the basis of our legitimate interest (e.g. when using agents, web hosts, etc.).
If we process data in a third country (i.e. outside the European Union (EU), the European Economic Area (EEA) or the Swiss Confederation) or if this is done in the context of the use of third party services or disclosure or transfer of data to other persons or companies, this will only occur if it is done to fulfil our (pre)contractual obligations, on the basis of your consent, a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or leave the data in a third country only if the legal requirements are met. I.e. the processing takes place e.g. on basis of special guarantees, like the officially recognized statement of a data protection level corresponding to the EU (e.g. for the USA by the “Privacy Shield”) or observance of officially recognized special contractual obligations.
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. To do this, the user’s IP address must be kept for the duration of the session.
The data is stored in log files to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. For these purposes, our legitimate interest in the processing of data according to Art. 6 para. 1 lit. f GDPR.
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case after 30 days at the latest. An assignment to a user is no longer possible with the stored information.
The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website Consequently, there is no possibility of objection on the part of the user.
The legal basis for the processing of personal data using technically necessary cookies is Article 6 (1) lit. f GDPRThe legal basis for the processing of personal data using cookies for analysis purposes is the consent of the user is Art. 6 para. 1 lit. a GDPR.
The use of the analysis cookies (third party cookies) takes place for the purpose of improving the quality of our website and its contents. Through the analysis cookies we learn how the website is used and can thus continuously optimize our offer. A web analysis collects, among other things, data on which website a person concerned came to a website from (the so-called referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed.
If cookies are disabled for our website, it may not be possible to use all the functions of the website.
Free downloads (PDF files) are available on our website. The download is sent based on the data that the user transmits to us via the input mask on the website.
By sending the information, the user agrees that his data will be used to transmit the download link. Furthermore, when sending the download registration, the user can agree that his data may in future be used by us to transmit information about our company and our products to the e-mail address provided.
In connection with the data processing for the transmission of downloads, there is no disclosure of the data to third parties. The data will only be used to send the download and will only be used to provide information about the company and our products if the user has given us their consent.
The legal basis for processing the data after registration for download dispatch is Art. 6 para. 1 lit. b DSGVO.
The collection of the e-mail address serves to deliver the download. The collection of other personal data (name and company) as part of the registration process serves to prevent misuse of the services or the e-mail address used.
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. Furthermore, the statutory archiving obligations apply.
Objection is also by telephone at +49 711-66 188-500, in writing: Fabrikstr. 5 | 73728 Esslingen or by e-mail at: unsubscribe@inpuncto.com The user data will then be deleted.
If you purchase goods or services on our website and provide us with your e-mail address, we may subsequently use it to send you a newsletter. In such a case, only information about our company and our products will be sent via the newsletter.
When contacting us via the contact form or requesting a download link, you can also specify that your data may be used to send you information about our company and our products by e-mail.
The legal basis for sending the newsletter as a result of the sale of goods or services is Section 7 para. 3 UWG. The legal basis for processing the data after sending the contact form or requesting a download link by the user is Art. 6 para. 1 lit. a GDPR if the user has given his advertising consent.
The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose there is a corresponding link in every newsletter. We may store the deleted e-mail addresses for up to three years on the basis of our legitimate interests before deleting them in order to be able to prove a previously given consent. The processing of this data is limited to the purpose of a possible defence against claims. An individual request for deletion is possible at any time, provided that the former existence of a consent is confirmed at the same time.
The consent of the user is obtained for the processing of the data within the scope of the sending process and reference is made to this data protection declaration.
In this context, it does not disclose the data to third parties. The data is used exclusively for processing the conversation.
If the e-mail contact aims at the conclusion of a contract, then additional legal basis for the processing is Art. 6 exp. 1 lit. b GDPR.
Within our online offering, we use content or service offers from third parties to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as “content”). The third party providers of this content perceive the IP address of the users, as they cannot send the content to their browser without the IP address.
The legal basis for the processing of personal data using cookies is Art. 6 para. 1 letter f DSGVO (i.e. interest in the analysis, optimisation and economic operation of the online offer).
The IP address is required to display the contents. We make every effort to use only those contents whose respective providers use the IP address only for the delivery of the contents.
The anonymous information may also be stored in cookies on the user’s device and may contain technical information about the browser and operating system, referring websites, visit time and other information about the use of our online offer, as well as be linked to such information from other sources.
With the Google Tag Manager we can manage so-called website tags via an interface (e.g. integrate Google Analytics and other Google services into our online offer). The Tag Manager only implements the tags, but does not process any personal user data. With regard to the processing of users’ personal data, we refer to the user guidelines: https://www.google.com/intl/de/tagmanager/use-policy.html.
The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. a GDPR and an order processing contract with Google pursuant to Art. 28 para. 3 sentence 1 GDPR.
Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with further services associated with the use of this online offer and the use of the Internet. Pseudonymous user profiles can be created from the processed data. We only use Google Analytics with activated IP anonymization. This means that the IP address of the users will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there.
The IP address transmitted by the user’s browser is not merged with other Google data.
As an alternative to the browser add-on or within browsers on mobile devices, the user can click on this link to prevent future collection by Google Analytics within this website. An opt-out cookie is stored on the user’s device. If the user deletes his cookies, he must click this link again.
Further information on data use by Google, possible settings and objections, can be found out in Google’s data protection declaration (https://policies.google.com/technologies/ads) and in the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated).
We use Google’s online marketing method “AdWords” to place ads on the Google advertising network. We will receive an individual “conversion cookie”. The information collected with the help of cookies is used by Google to generate conversion statistics for us. However, we only see the total number of anonymous users who clicked on our ad and were redirected to a page with a conversion tracking tag. However, we do not receive any information that personally identifies users.
User data is processed pseudonymously within the Google advertising network. This means that Google does not store and process, for example, the names or e-mail addresses of users, but processes the relevant data cookie-related within pseudonymous user profiles. This means from Google’s point of view, the ads are not managed and displayed for a specifically identified person, but for the cookie holder, regardless of who this cookie holder is. This does not apply if a user has expressly permitted Google to process the data without this pseudonymisation. The information collected about the users is transmitted as a rule to Google and stored on Google’s servers in the USA.
The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. a DSGVO.
We use the online marketing procedure Google “Ads” to place ads on Google’s advertising network (e.g., in search results, in videos, on websites, etc.) so that they are displayed to users who have a presumed interest in the ads. This allows us to display ads for and within our online offer more specifically in order to present users only ads that potentially correspond to their interests.
We integrate the fonts (“Google Fonts”) of the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. When a page is called up, the user’s browser loads the required web fonts into their browser cache to display texts and fonts correctly. For this purpose, the browser used by the user must connect to Google’s servers. This gives Google knowledge that our website has been accessed via the user’s IP address.
The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers.
On our website we use Google Maps (API) from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (“Google”). Google Maps is a web service for displaying interactive (country) maps in order to display geographical information visually. By using this service, users will be able to see our location and find their way to us more easily.
By using this service, users can see our location and find their way to us more easily.
We integrate the videos of the platform “YouTube” of the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. When users visit one of our pages with an embedded YouTube video, a connection to YouTube’s servers may be established. In this case, information of the user of our website (such as his IP address) is transferred as a rule to Google servers in the USA and stored there.
We use YouTube to present our products in an appealing way and to inform interested parties about our products.
The newsletter is sent by the mail service provider “MailChimp”, a newsletter delivery platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. The shipping service provider can use the recipient’s data in pseudonymous form, i.e. without assignment to a user, to optimize or improve its own services, e.g. to technically optimize the dispatch and presentation of the newsletter or for statistical purposes. However, the shipping service does not use the data of our newsletter recipients to write them down itself or to pass the data on to third parties. Users can view the data protection provisions of the shipping service provider here: https://mailchimp.com/legal/privacy/.
The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with the European data protection level (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active).
The dispatch service provider is used on the basis of our legitimate interests according to Art. 6 Para. 1 lit. f GDPR and an order processing contract according to Art. 28 Para. 3 S. 1 GDPR.
The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose there is a corresponding link in every newsletter. Objection is also by telephone at +49 711-66 188-500, in writing: Fabrikstr. 5 | 73728 Esslingen or by e-mail at: unsubscribe@inpuncto.com The user data will be deleted after 7 days at the latest.
The newsletters contain a so-called “web-beacon”, i.e. a pixel-sized file which is retrieved from the server of our mail service provider Mailchimp when the newsletter is opened. Within the scope of this retrieval, technical information such as information about the user’s browser and system as well as his IP address and the time of retrieval are initially collected. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our goal nor, if used, that of the shipping service provider to observe individual users.
The legal basis for recording the success measurement of the newsletter is our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR.
We use this information to technically improve the services based on the technical data or the target groups and their reading behaviour based on their retrieval locations (which can be determined using the IP address) or access times. The evaluations also serve us to recognize the reading habits of the users and to adapt our contents to them or to send different contents according to the interests of our users.
The data will be deleted no later than three months after cancellation of the newsletter.
A separate cancellation of the success measurement is unfortunately not possible, in this case the entire newsletter subscription must be cancelled.
For this purpose there is a corresponding link in every newsletter. Objection is also by telephone at +49 711-66 188-500, in writing: Fabrikstr. 5 | 73728 Esslingen or by e-mail at: unsubscribe@inpuncto.com The user data will be deleted after 7 days at the latest.
The legal basis for processing the data is Art. 6 para. 1 lit. a GDRP. The legal basis for the processing of data by inPuncto is Art. 6 Para. 1 lit. b DSGVO and Art. 6 Para. 1 lit. f.
A registration of the user is required for the webinar participation. Your e-mail address and personal information will be used by the webinar organizer LMI to communicate with you regarding the webinar. Furthermore, inPuncto will use the data provided by users for the webinar registration in order to send them later the link to the webinar recording or may use it for our legitimate interest to contact the webinar participants after the webinars in order to obtain their feedback with regard to improvements.
As a user, you have the option at any time to cancel your registration and to have the data stored about you modified or deleted.
The application procedure requires that applicants provide us with the applicant data. The necessary applicant data can be found in the job descriptions. In principle, this includes personal details, postal and contact addresses and the documents associated with the application, such as cover letters, curriculum vitae and certificates. Applicants may voluntarily provide us with additional information.
If special categories of personal data within the meaning of Art. 9 Para. 1 GDPR are voluntarily provided as part of the application process, they will also be processed in accordance with Art. 9 Para. 2 lit. b GDPR (e.g. health data, such as severely disabled status or ethnic origin). If special categories of personal data within the meaning of Art. 9 para. 1 GDPR are requested from applicants as part of the application procedure, they will also be processed in accordance with Art. 9 para. 2 lit. a GDPR (e.g. health data if they are required for the exercise of a profession).
Applicants can send us their applications via e-mail. Please note, however, that e-mails are generally not sent in encrypted form and the applicants themselves must ensure that they are encrypted. Therefore, we cannot assume any responsibility for the transmission path of the application between the sender and the reception on our server.
In the event of a successful application, the data provided by the applicants may be further processed by us for the purposes of the employment relationship. By submitting their application to us, applicants declare their consent to the processing of their data for the purposes of the application procedure in accordance with the type and scope set out in this data protection declaration.
The processing of applicant data is carried out to fulfil our (pre)contractual obligations within the scope of the application procedure as defined in Art. 6 para. 1 lit. a. GDPR, Art. 6 para. 1 lit. b. GDPR and Art. 6 para. 1 lit. f. GDPR insofar as data processing becomes necessary for us, e.g. within the framework of legal proceedings (in Germany, § 26 BDSG also applies).
We process applicant data only for the purpose and within the framework of the application procedure in accordance with the legal requirements.
If the application for a job offer was not successful or if the applicant has withdrawn his application (which the applicants are entitled to do at any time), the applicant’s data will be deleted.
Subject to justified revocation by the applicant, the data will be deleted after a period of six months so that we can answer any follow-up questions regarding the application and meet our obligations to provide evidence under the Equal Treatment Act. Invoices for any reimbursement of travel expenses will be archived in accordance with the provisions of tax law.
We maintain online presences within social networks and platforms in order to communicate with customers, interested parties and active users and to inform them about our services. When using the respective platforms, user data can be processed outside of the European Union area. This can result in risks for users, as it could, for example, make it more difficult to enforce the rights of users. US providers certified under the Privacy Shield have undertaken to comply with EU data protection standards. The data of the users of the platforms are usually processed for market research and advertising purposes. For example, user profiles can be created on the basis of user behaviour and the resulting interests of users. The user profiles can in turn be used, for example, to place advertisements inside and outside the platforms which are presumed to correspond to the interests of the users. For these purposes, cookies are usually stored on the computers of the users in which the user behaviour and the interests of the users are stored. Furthermore, data can also be stored in the user profiles independently of the devices used by the users (in particular if the users are members of the respective platforms and are logged in to them).
The processing of users’ personal data is carried out on the basis of our legitimate interests in the effective information of users and communication with users in accordance with Art. 6 Para. 1 lit. f. GDPR. If the users are asked by the respective providers for their consent to data processing (i.e. their consent e.g. by ticking a checkbox or confirming a button), the legal basis for processing is Art. 6 para. 1 lit. a., Art. 7 GDPR.
Also in the case of requests for information and the assertion of user rights, we point out that these can be asserted most effectively with the providers. Only the providers have access to the data of the users and can directly take appropriate measures and give information. If you nevertheless need help, you can contact us.
Right to information: You may ask the responsible person to confirm whether personal data relating to you will be processed by us and the right to access such data and to obtain further information and a copy of the data in accordance with the provisions of the law.
Right to rectification: you have a right of rectification and/or completion towards the data controller if the personal data processed concerning you are inaccurate or incomplete.
Right to cancellation and limitation of processing: You may request the data controller, in accordance with the provisions of the law, to delete the data concerning you immediately or, alternatively, to limit the processing of your data in accordance with the provisions of the law.
Right to be informed: If you have asserted the right to rectification, cancellation or limitation of processing to the controller, the latter is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification, cancellation or limitation of processing, unless this proves impossible or involves a disproportionate effort.
Right of withdrawal: You have the right to revoke your consent with effect for the future.
Right of objection: You can object at any time to the future processing of the data concerning you in accordance with the statutory provisions. In particular, you may object to the processing of your data for the purposes of direct marketing.
Right to complain to a supervisory authority: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, place of work or place of presumed infringement, if you are of the opinion that the processing of your personal data violates the GDPR.
This data protection declaration is currently valid and was updated on 12 September 2018.
We ask you to inform yourself regularly about the contents of our data protection declaration. Due to the further development of our Internet pages and offers or due to changed legal or official requirements, it may become necessary to amend this data protection declaration. We will inform you as soon as the changes require your cooperation (e.g. consent) or other individual notification.

References: Art. 6
 Art. 7

Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 28
 Art. 6
 Art. 6
 Art. 28
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 9
 Art. 9
 Art. 9
 Art. 9
 Art. 6
 Art. 6
 Art. 6
 § 26
 Art. 6
 Art. 6
 Art. 7