Source: https://www.scalehub.com/privacy-policy/
Timestamp: 2019-04-18 12:35:42+00:00

Document:
“Personal data” is all information relating to an identified or identifiable person (Art. 4 Par. 1 of the GDPR). Details of an identified person could be their name or e-mail address.
However, data can also be described as personal if, despite the fact that a person’s identity cannot be deduced directly from the data, their identity can nonetheless be deduced by combining the data with other information.
A person could, for example, be identified via their address or bank details, date of birth, username, IP address or location details. The key point is that any information that can be used in any way to identify a person can be described as personal data.
Under Art. 4 Par. 2 of the GDPR, “processing” describes any process applied to personal data. This especially includes the collection, capture, administration, classification, recording, amendment, printing, making available, use, disclosure, sharing, dissemination, provision, comparison, linking, restriction, erasure or destruction of personal data.
We will process the personal data listed in detail under “Processing activities in detail” below, when you use the website. In this process, we will only process data from you that you actively enter on our website (e.g. by completing forms) or that you provide automatically when using our offer.
Your data will exclusively be processed by us and these data will, as a matter of principle, not be sold, leased or provided to any third parties. Insofar as we use external service providers for the processing of your personal data, that will be done in the context of a cooperation with a so-called data processor, where we act as principal and are authorized to give instructions to our contractors.
For the operation of our website, we use external service providers for hosting, and for the maintenance, update and further development. Insofar as other external service providers will be used for individual processing activities that are listed in “Processing activities in detail”, they will be specified there.
We do, in general, not transfer any data to any third countries and this is not planned for the future either. Any exemptions from this principle will be explained in the types of processing activities listed below.
Your IP address is recorded in full in the log files for your protection, because without the collection of your clear IP addresses our data center could not defend against cyber attacks.
Your data are processed in order to facilitate access to our website, to ensure the website’s stability and security, and to enable the statistical evaluation and improvement of our online service.
The processing is required to protect our overriding legitimate interests (Art. 6 Par. 1 f of the GDPR). Our legitimate interest lies in the purpose specified in point 2.
Your data will be erased as soon as they are no longer required for the purpose for which they were collected. Where your data have been collected for the purposes of providing our website, they will no longer be required for this purpose when your session ends. The log files will be deleted after 31 days.
By providing contact forms on our website, we want to offer you a convenient way to get in touch with us, to request an individual solution, to arrange an appointment for a product demonstration and/or to participate in ScaleHub events. The data transmitted with and in a contact form or your e-mail will be used exclusively for the purpose of processing and responding to your request.
The processing is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6 Par. 1f of the GDPR). Our legitimate interest is the purpose mentioned in article 2. Insofar as the contact by contact form or e-mail is aimed at concluding or performing a contract, the data will be processed to perform a contract (Art. 6 Par. 1b of the GDPR). The latter concerns e.g. your registration for our events.
We will delete the data as soon as they are no longer necessary to achieve the purpose for which they were collected. This is usually the case when the respective communication with you is finished. Communication is terminated when it can be inferred from the circumstances that your request has been finally clarified. If statutory retention periods prevent deletion, the data will be deleted immediately after the statutory retention period has expired.
We send a newsletter in irregular intervals. In the newsletter, we will inform you about our products, services and events. You will only receive our newsletter if you actively subscribe to our Newsletter or if you are an existing customer of ScaleHub.
You may subscribe to our newsletter by completing and sending a newsletter subscription form on our website. If you decide to subscribe to our newsletter, you only need to provide us with your e-mail address. All other data (such as e.g. your first name and name) can be given voluntarily and will only be used to personalize the e-mail. In addition, we have implemented a checkbox under our contact forms, which you only need to activate to subscribe to our newsletter.
In order to perform and verify newsletter registrations, we use the so-called double opt-in process. A registration involves several steps. First, you subscribe to our newsletter on our Website. Then, you will receive an e-mail from us to the e-mail address you specified. In this e-mail, we ask you to confirm that you have actually subscribed to the newsletter and wish to receive it. You confirm your subscription by clicking on a confirmation link in the e-mail. We will only include you in our newsletter distribution list after your successful confirmation and only then will you receive e-mails in the future. We will store date, time and your IP address in the double opt-in process, both during registration and upon confirmation.
If you have purchased goods or services from us and also provided your e-mail address in this context, we may subsequently use your e-mail address to send you an existing customer newsletter. In such a case, the newsletter will only send direct advertising for our own similar goods or services.
The processing will be done to offer the newsletter function and to be able to send newsletter e-mails to subscribers. The collection and storage of the date, time and IP address during the registration for the newsletter serves to document that the consent was granted and to protect against the abusive registration of e-mail addresses.
The processing for our subscriber newsletter will be done on the basis on your consent pursuant to Art. 6 Par. 1a of the GDPR. You can ask us for the declaration of consent at any time. Your consent is voluntary. Collecting and storing of date, time and IP address during the registration for our newsletter is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6 Par.1f of the GDPR). Our legitimate interest is the purpose mentioned under point 2.
Our “existing customer”-newsletter is processed on the basis of Art. 6 Par. 1f of the GDPR in order to safeguard the overriding interests of the person responsible. Our legitimate interest lies in direct advertising to existing customers. This is permissible within the applicable framework of § 7 Par. 3 German Act Against Unfair Competition (UWG).
If you fail to confirm your registration to our newsletter within 24 hours after receipt of the relevant subscription e-mail, your data will automatically be deleted. We will process your personal data for the period in which you subscribe to our newsletter. You may terminate the receipt of the newsletter, at any time, by withdrawing your consent.
A simple statement will suffice (by e-mail to contact@scalehub.com). You may also unsubscribe to the newsletter by clicking on the unsubscribe link which is provided in each newsletter e-mail. When you have withdrawn your consent, we will no longer send you any newsletters and your personal data will be removed from our active distribution list. We will take over your e-mail address, in a restricted manner, to our so-called black list, in order to enforce your withdrawal. That enables us to ensure that you will not receive any newsletter from us in the future and that your e-mail address will not be abused by any third parties.
We use the services of the newsletter provider Mailchimp to manage our newsletter distribution list and to send e-mails. This takes place within the framework of order processing. Mailchimp is a service of The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA (hereinafter “Mailchimp”). With your newsletter subscription, the data provided during the registration process is transferred to Mailchimp and processed on Mailchimp servers in the USA. Mailchimp has submitted to the EU–US Privacy Shield. For more information on the EU–US Privacy Shield, please visit https://www.privacyshield.gov/EU-US-Framework. Further information on data protection at Mailchimp can be found in the service provider’s data protection declaration at http://mailchimp.com/legal/privacy/.
The processing is required to protect our overriding legitimate interests (Art. 6 Par. 1f of the GDPR). Our legitimate interest lies in the purpose specified under point 2.
Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, individual functions of our website cannot be used or can only be used to a limited extent.
Our website uses “Google Web Fonts”, a font replacement service provided by Google Ireland Inc, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”). With Google Web Fonts, the standard fonts on your device are replaced with fonts from the Google catalogue when displaying our website. If your browser does not allow the integration of Google Web Fonts, the text of our website will be displayed in the standard fonts of your device. The Google fonts are loaded directly from a Google server. To do this, your browser sends a request to a Google server. As a result, your IP address in connection with the address of our website may also be transmitted to Google. However, Google Web Fonts does not store cookies on your end device. According to Google, data processed through the Google Web Fonts service is transferred to resource-specific domains such as fonts.googleapis.com or fonts.gstatic.com. They are not associated with data that may be related to the use of other Google services such as the search engine of the same name or Gmail. Further information on data protection for Google Web Fonts can be found at https://developers.google.com/fonts/faq?hl=en-DE&csw=1. General information on data protection at Google can be found at http://www.google.com/intl/de-DE/policies/privacy/.
It is processed to make the text on our website more legible and aesthetically pleasing to you.
The processing is necessary to protect the overriding legitimate interests of the person responsible (Art. 6 Par. 1 f of the DSGVO). Our legitimate interest lies in the purpose stated under point 2.
Through the use of Google Web Fonts, personal data may be transmitted to Google. Google also processes your personal data in the USA and has submitted to the EU–US Privacy Shield. For more information on the EU–US Privacy Shield, please visit https://www.privacyshield.gov/EU-US-Framework.
The processing is necessary to protect the overriding legitimate interests of the person responsible (Art. 6 Par. 1f of the DSGVO). Our legitimate interest lies in the purpose stated in point 2.
Personal information may be transferred to Adobe through the use of Adobe Typekit. Adobe may also process your personal information in the United States through Adobe Systems Incorporated, San Francisco, 345 Park Avenue, San Jose, California 95110, USA, which has submitted to the EU-US Privacy Shield. Further information on the EU-US Privacy Shield can be found at https://www.privacyshield.gov/EU-US-Framework.
Our website uses Font Awesome, an icon display and integration service developed by Fonticons, Inc. We operate Font Awesome exclusively as an installation on our own server. Therefore, the use and display of icons does not involve the transmission of data by Fonticons, Inc.
Our website uses services of “YouTube”, a video platform operated by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA (hereinafter referred to as “YouTube”). YouTube is represented by Google Ireland Inc, Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube by embedding individual videos from the platform on our website so that they can be played directly on our website. The videos are integrated in the “extended privacy mode” offered on YouTube, i.e. no personal data will be transferred from you to Google until you play the videos. Only by playing a video does data transfer to Google take place, on which we have no influence. If you play an embedded video on a subpage of our website, Google will know which subpage you visited and which video you watched. Your IP address may also be transmitted to Google. If you are logged in as a YouTube or Google user, Google assigns this information to your user account. Google stores your data as usage profiles and uses them for advertising purposes, market research and/or for the design of the Google website according to your needs. You have a right of objection to the creation of these user profiles, for the exercise of which you must contact Google directly. Further information on data protection at Google can be found at http://www.google.com/intl/de-DE/policies/privacy/.
The processing takes place in order to be able to show you videos on our website.
The processing is necessary to protect the overriding legitimate interests of the person responsible (Art. 6 para. 1 lit. f DSGVO). Our legitimate interest lies in the purpose specified in point 2.
Through the integration of YouTube, personal data may be transmitted to YouTube LLC or Google. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield. For more information on the EU-US Privacy Shield, please visit https://www.privacyshield.gov/EU-US-Framework.
Our website uses services of “Vimeo”, a video platform operated by Vimeo LCC, 555 West 18th Street, New York, NY 10011, USA (hereinafter referred to as “Vimeo”). We use Vimeo by embedding individual videos from the platform on our website as so-called iFrame, so that they can be played directly on our website. When you visit a page of our website on which a video is embedded, a connection to the Vimeo servers is established and the video is displayed within our website. This will tell Vimeo which website you have visited. Your IP address may also be transmitted to Vimeo. When you play an embedded video, this information is also passed on to Vimeo. If you are logged in as a Vimeo user, Vimeo assigns this data to your user account. Further information on data protection at Vimeo can be found at http://vimeo.com/privacy.
Vimeo processes personal data also in the USA.
Our website uses “Google Maps“, a service for displaying maps provided by the company Google Ireland Inc, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google“). We use Google Maps for embedding a map that displays our business address in our website. The map will be loaded directly from a Google server. In order to do this, your browser will send a request to a Google server. Your IP address might also be transferred to Google together with the address of our website. Google Maps will, however, not store any cookies on your device. If you are logged in to Google when you visit our website, Google Maps will associate this information to your Google user account. Google will store your data as user profiles and will use them for marketing purposes, for market research and/or the customized configuration of the Google websites. You have a right to object to the creation of user profiles; please directly contact Google to exercise such right. For more information on data privacy at Google, please refer to http://www.google.com/intl/de-DE/policies/privacy/.
The processing is done to be able to display an interactive map on our W´website.
The processing is necessary to protect the overriding legitimate interests of the person responsible (Art. 6 Par. 1f of the DSGVO). Our legitimate interest lies in the purpose stated under point 2.
Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield. For more information on the EU-US Privacy Shield, please visit https://www.privacyshield.gov/EU-US-Framework.
The processing is done to be able to evaluate the use of our website. The information gained in the process serves to improve our online presentation and to design it according to demand.
The processing is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6 Par. 1f of the GDPR). Our legitimate interest is the purpose mentioned in point 2.
For information on the storage period and an explanation of your control and setting options for cookies, please refer the section “Cookies”. You may object to the data processing by Google Analytics, at any time, by downloading and installing the browser add-on offered by Google at https://tools.google.com/dlpage/gaoptout?hl=en.
Google Analytics works for us as a service provider within the scope of an order processing. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield. For more information on the EU-US Privacy Shield, please visit https://www.privacyshield.gov/EU-US-Framework.
The processing takes place in order to carry out targeted online advertising for our own offers and to be able to evaluate their effectiveness and reach.
The processing is necessary to protect the overriding legitimate interests of the person responsible (Art. 6 Par. 1f of the DSGVO). Our legitimate interest lies in the purpose specified under point 2.
We have explained the duration of storage as well as your control and setting options for cookies under the section “Cookies”. You can object to the data processing by Google Remarketing at any time via the following website: http://www.google.com/ads/preferences.
Through the integration of Google Remarketing, personal data may be transmitted to Google. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield. For more information on the EU-US Privacy Shield, please visit https://www.privacyshield.gov/EU-US-Framework.
Our website uses various CDNs (Content Delivery Network), namely Amazon Cloudfront, a CDN from Amazon Inc. (Amazon), Fastly by Fastly Inc. (Fastly) and CDN77 from DataCamp Ltd. (DataCamp) A CDN shortens in particular the loading time of the website or certain content, e.g. by sending files from a very fast server that is as close to your location as possible. Amazon operates numerous servers in Europe (including Frankfurt am Main and Milan) to send our files to you as quickly as possible.
The processing is done to shorten the loading time of our website.
It is technically possible that your browser (e.g. because you access this website from outside the EU or for any other reason) may access a server from outside the EU. In such a case, data is sent directly from your browser to the respective country (North and South America, Asia, Australia). In this case, you agree to the transfer of your data to the USA and/or the country in which the respective server is located.
In order to protect your personal data from third-party access, we use SSL (secure sockets layer) or TLS (transport layer security) technology that encrypts the communication of data between our website and your device. You can identify SSL/TLS encryption via the small padlock logo on the left of the address bar of your browser.
You have the right to be informed by us if we are processing your personal data. If we are processing it, you have the right under Art. 15 of the GDPR to be informed as to what data we are processing and the right to additional information as specified in Art. 15 of the GDPR.
You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you and, where applicable, to have incomplete personal data completed, including by means of providing a supplementary statement.
You have the right to obtain from us the erasure of your personal data without undue delay, and we shall have the obligation to erase your personal data without undue delay where one of the following grounds under Art. 17 of the GDPR applies (e.g. if your data is no longer required for the purpose for which we were using it).
You have the right to demand that we restrict the processing of your personal data, provided that one of the criteria specified under Art. 18 of the GDPR is met (e.g. if you dispute the accuracy of your personal data, its processing will be restricted for the period necessary for us to check its accuracy).
Subject to the criteria specified under Art. 20 of the GDPR, you have the right to be given your data in a structured, commonly used and machine-readable format.
You have the right to withdraw your previously provided consent for data processing. The withdrawal will take effect from the time you request it (i.e. it will have future effect but no retrospective affect).
If you believe that the processing of your personal data is in breach of the GDPR, you can complain to a supervisory authority. You can submit your complaint to a supervisory authority in the EU member state where you are habitually resident or work, or where the alleged breach took place.
Decisions that have legal consequences for you or that could have a significant detrimental affect on you must not be based solely on the automated processing of personal data, including profiling. We do not apply any such processing or profiling to your personal data.
Where we process your personal data on the basis of Art. 6 Par. 1f of the GDPR in pursuit of our overriding legitimate interests, you have the right subject to Art. 21 of the GDPR to object, provided your objection is based on grounds relating to your specific situation. Once you have objected, we will no longer process your personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims. Regardless of the aforementioned restrictions, and regardless of whether any special circumstances apply, you have the right to object at any time to the processing of your personal data for direct marketing purposes.

References: Art. 4
 Art. 6
 Art. 6
 § 7
 Art. 15
 Art. 15
 Art. 17
 Art. 18
 Art. 20
 Art. 6
 Art. 21