Source: https://suite.insyca.com/privacy-policy
Timestamp: 2019-11-16 22:32:37
Document Index: 389932281

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'art. 28', 'art. 28', 'Art. 15', 'Art. 16', 'Art. 17', 'Art. 6']

Purposes of data processing +
Your personal data is recorded via inSyca IT Solutions GmbH websites if you actively provide such data to us, for instance as part of a registration, by filling out forms or by sending emails. We use these data for the purposes described above or for purposes that arise from the respective request, for example, to communicate with you, to prepare or handle business transactions, or to inform you about news regarding our services. The data are only used for advertising purposes to the extent that such advertising is our own (including tell-a-friend features).
Security, SSL technology +
inSyca has implemented a variety of technical and organizational measures in order to protect your personal data, in particular against random or intentional manipulation, loss, destruction and access by unauthorized persons. These security measures will be continually adapted in accordance with technological developments. The transfer of personal data between your computer and our server invariably takes place by encrypted connection (Secure Socket Layer (SSL)).
You can withdraw your consent at any time to the storage of your personal data and their use for newsletter distribution. Each newsletter contains a link which you can use for this purpose. In addition, you can also unsubscribe directly on this website at any time or send us your request to that effect using the contact details in this privacy policy.
Most of the cookies used by us are so-called session cookies, which are required in order to maintain consistency during your visit, for example by ensuring that the preferences you entered as part of a registration for an event, as well as any other information entered, are remembered for the duration of your session. We also need session cookies in order to ensure that any offers (e.g., promotional offers) you click on are assigned to your request. Session cookies are automatically deleted after each session. We furthermore use cookies in order to determine, when you pay return visits to our website, whether you are interested in certain types of offers. This enables us to be more targeted about the offers we show you on our website. If you are already registered with us and have a customer account, it will be possible for us to compare the information recorded by the cookies used with the information known to us. This in turn enables us to tune our offers more finely to your needs and wishes. These cookies have a lifespan of one year, after which they are automatically deleted. We also need cookies for purposes of settling accounts with our advertising partners, because cookies are able to record the page or promotional campaign that led the customer to us. As with other data, we record this data exclusively in abstract form so as to ensure that it cannot be used to identify the data subject. A cookie of this type has a lifespan of 31 days.
Use of Google Analytics +
Use of Google Maps +
inSyca IT Solutions GmbH’s websites use Google Maps API applications. By using the online services or the contact form, you declare that you agree with such services being subject to the terms of service and the privacy policy of Google. To access Google’s terms of service, please click here. The access Google’s privacy policy, please click here. Google Maps is used to provide customers with the appropriate map section and to show them the address of the headquarter. The transfer of location data to Google invariably takes place in anonymised form; no further information is provided to Google.
Advertising shown by us is based on the interest in products our customers previously exhibited. We record information about our customers’ surfing patterns for purposes of providing them with interest-based online advertising. For this, cookies are stored on the respective user’s computer; these contain a multiple-digit identification number. If you do not agree with having your user behavior analyzed, you can adjust your browsers settings so as to prevent analysis cookies from being set. Please note, however, that this may prevent you from being able to use in full all the functions of this website.
Our website uses the conversion tracking of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Microsoft Bing Ads uses a cookie that is stored on your device when you reach our website through a Microsoft Bing ad. Microsoft Bing and we learn that you have reached our website by clicking on a Bing controlled ad and have reached a previously specific landing page (conversion page). Only the total number of users who have reached the conversion page via a Bing ad is registered. We do not receive any information that enables the users to be personally identified. The Bing Ads cookie is set on the basis of Article 6 (1) lit. f GDPR. As the operator of this website, we have a legitimate interest in analyzing user behavior in order to optimize our website and, if necessary, advertising. With a modern web browser, you can monitor, restrict and prevent cookies from being set. This allows you to object to the tracking method by disabling the automatic setting of cookies in general by adjusting your browser. Alternatively, you can prevent Microsoft from collecting the data generated by using our website by clicking on the following link: http://choice.microsoft.com/de-DE/opt-out. For more information on privacy and the cookies used at Microsoft and Bing Ads, visit Microsoft's website at https://privacy.microsoft.com/de-de/privacystatement
Use of script libraries +
In the following we would like to inform you about the types of data processed by inSyca IT Solutions GmbH and about the purposes of such data processing. We would also like to inform you about important legal aspects of data protection, such as your rights.
The party responsible for processing your data (controller) is inSyca IT Solutions GmbH, Finsinger Feld 5, D-85521 Ottobrunn (hereinafter also referred to as inSyca).
If you have any questions on data protection, please contact us at This email address is being protected from spambots. You need JavaScript enabled to view it. . You can also contact our data protection officer at the following address: inSyca GmbH, Datenschutzbeauftragter, Kronstadter Strasse 4, DE 81677 München.
Categories of personal data +
A large part of the personal data we collect directly from you or the data arises directly on the basis of the respective business relationship. However, in the context of the processing operations referred to in inSyca for data processing purposes, it may be necessary to use personal data from other sources. Of course, this takes place in compliance with the data protection regulations. In such cases personal data may be obtained from publicly available sources (e.g., commercial registers, association registries, registration registers, land registers, debtor directories, press releases and internet searches), affiliated companies or other third parties (eg credit bureaus, adress publishers and government agencies). Depending on the processing activity and purpose, in particular data from the following categories are processed:
Personal master data, such as name, date of birth, place of birth, nationality, marital status, job title and industry affiliation
Contact details and addresses, e.g. residential address, registration address if different, e-mail address, telephone and fax numbers
Bank details, other account information and payment data
Tax information, such as tax ID and/or VAT ID
Order data, such as type and quantity of goods ordered or services used
Credit information and payment conditions
Data concerning complaints
Authentication data, such as ID card data, signature, company stamps and passwords
Historical data on any business relationship with inSyca GmbH and affiliated companies
Advertising and sales data including target group-specific information
Data concerning the maintenance of contacts or the initiation of a relationship, such as data on communications that have already taken place, including date and time as well as purpose and content of the communications
Copies of correspondence, if made in writing, by email or by fax
Third party data: If you provide us with personal data of third parties within a service relationship (for example, of customers, suppliers, employees), we also process this data.
Unless you are on websites of inSyca GmbH or use other electronic services provided by us, we process various IT-specific information. In addition to the type, time and duration of access, this also includes the IP addresses you use, data about the terminals you use, such as the number of IP addresses you use. Operating system and browser as well as amount of transmitted data. Further information can be found in the context of the specific data protection information for the respective website or the respective electronic service under the item Cookie Policy and The purposes of data processing at inSyca
The legal basis for data processing at inSyca +
Art. 6 (1) point b) GDPR: Pursuant to this provision, the processing of your personal data is lawful if such processing is necessary for the performance of a contract to which you are party, or in order to take steps at your request prior to entering into a contract.
Art. 6 (1) point c) GDPR: Pursuant to this provision, the processing of your personal data is lawful if such processing is necessary for compliance with a legal obligation to which inSyca is subject.
Art. 6 (1) point f) GDPR: Pursuant to this provision, the processing of your personal data is lawful if such processing is necessary for the purposes of the legitimate interests pursued by the controller, i.e., inSyca, or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, i.e., you yourself.
The purposes of data processing at inSyca +
Processing for the execution and fulfilment of a contract or for pre-contractual measures
Processing as it relates to the fulfilment of legal obligations or to the performance of a task carried out in the public interest
Like any other company, inSyca GmbH has to fulfil and comply with a wide variety of legal obligations. To do this, personal data must also be processed. The legal basis for this is Art. 6 Para. 1 Sent. 1 (c) of the GDPR. Furthermore, personal data may have to be processed during the performance of a task carried out in the public interest. The legal basis for this is Art. 6 Para. 1 Sent. 1 (e) of the GDPR. The requirements and the resulting processing activities and purposes arise, in particular, from commercial and tax law but also from other supervisory or regulatory requirements. The retention periods for business documents require, for example, that a large number of documents, including the personal data that such documents contain, are stored on a long-term basis.
Processing for the protection of the legitimate interests of inSyca GmbH or a third party
As a customer or business partner of inSyca GmbH, you are accustomed to having a trusting relationship with us. In addition to the execution and fulfilment of contracts with you, the implementation of pre-contractual measures, the fulfilment of legal obligations, and the preservation of public interests, we process personal data in order to safeguard our legitimate interests or those of third parties. The legal basis for this is the first sentence of art. 6 para. 1 sentence 1 letter f) GDPR. The processing activities comprise in particular:
General contact maintenance within the framework of an existing business relationship
Compliance measures, including internal and external investigations to prevent and, if necessary, detect criminal offences or other violations
Data exchange with affiliated companies to optimise the range of goods and services and to improve processes and structures
Limited storage of personal data instead of deletion according to Section 35 FDPA
Obtaining offers for credit insurance and taking out credit insurance to reduce the economic risk for inSyca GmbH
Obtaining information and exchanging data with credit agencies, among other things to reduce the economic risk for inSyca GmbH and to grant payment terms
Ensuring IT and data security, including measures to safeguard the confidentiality, integrity and availability of data
Measures for corporate management, e.g. recording of costs, controlling, internal and external reporting, internal auditing
In individual cases, monitoring of telephone calls during order acceptance for training purposes or as part of quality control
Quality management, monitoring and optimisation of business processes,
Risk and emergency management as well as various security measures including measures for the protection of domiciliary rights
Statistical evaluations and demand analyses to optimise the offer, availability of goods and services and to enable direct customer approach
Statistical evaluations for measuring the reach of newsletters (e.g. opening rate)
Activities in the interest of building and system security, including access control and logging
Video surveillance in the context of the protection of domiciliary rights, for the prevention and prosecution of criminal offences as well as for the protection of the property of inSyca GmbH and of third parties
Video surveillance of technical equipment for the safety of the persons present and for the detection of technical defects
Processing on the basis of your explicit consent
Categories of recipients +
Within inSyca GmbH, the departments have access to personal data which they require for their professional activities and for carrying out the processing described under The purposes of data processing at inSyca. Your personal data will only be passed on to entities outside inSyca GmbH if this is legally permitted and is necessary as part of the processing mentioned under The purposes of data processing at inSyca.
You have given us or a third party your explicit consent. Art. 6 para. 1 sentence 1 letter a) GDPR
The transfer is necessary for the performance of a contract which you have concluded with inSyca GmbH or a third party or for the implementation of pre contractual measures. Art. 6 para. 1 sentence 1 letter b) GDPR
The transfer is necessary for the fulfilment of legal obligations to which inSyca GmbH is subject. Art. 6 para. 1 sentence 1 letter c) GDPR
Such disclosure is necessary for safeguarding public interests. Art. 6 para. 1 sentence 1 letter e) GDPR
The transfer is necessary to protect the legitimate interests of inSyca GmbH or a third party. Art. 6 para. 1 sentence 1 letter f) GDPR
It involves order processing within the meaning of art. 28 GDPR.
Like most other companies, inSyca GmbH works together with service providers. These vicarious agents are obliged to comply with data protection regulations. If the order processing is within the meaning of art. 28 GDPR, the service provider may only process personal data in accordance with the instructions and within the narrow limits of the respective order. The service providers and contractors that inSyca GmbH makes use of come from the following categories in particular:
Banks, credit institutions and other payment service providers
Consulting, including legal advice, tax advice, management consulting and auditing
Security companies and security service providers
Waste-disposal companies
IT service providers Logistics and transport
In addition to the purposes mentioned under The purposes of data processing at inSyca -> Processing for the protection of the legitimate interests of inSyca GmbH or a third party, transmission takes place in one or more of the following contexts in particular:
Conclusion of credit insurance,
Processing of receipts and other documents,
Data and data carrier destruction,
Obtaining credit information,
Creation of personalised print products,
Preparation and evaluation of expert opinions,
Marketing, including the implementation of advertising measures and market and opinion research,
Screening of data in the context of the fight against money laundering,
Statistical evaluations,
Telephony and/or other electronic communication,
Dispatch and delivery of goods and/or documents,
Management of customers and suppliers,
Maintenance and support for IT systems (hardware and software),
Apart from service providers who act on behalf of inSyca GmbH, other categories of recipients may be taken into consideration:
third parties with whom you have a contractual relationship,
third parties, provided that you have consented to the disclosure of your data,
inSyca GmbH suppliers,
public offices and institutions, such as tax and financial authorities, law enforcement authorities, courts of law, supervisory authorities, etc.,
companies associated with inSyca GmbH for the purpose of joint administration, risk management, controlling and/or statutory obligations
Third country or international organisation +
Personal data is processed by inSyca GmbH solely in Germany or the European Union. Such data shall only be forwarded to service providers, associated companies or other third parties outside the European Union in accordance with statutory provisions, if:
this is necessary for the purpose of performing a contract with you or for pre-contractual measures (e.g. delivery to an address outside the European Union),
this is necessary for the purpose of concluding or performing a contract in your interest,
there is a statutory obligation to this effect or a substantial public interest in doing so,
this is necessary to assert, exercise or defend legal claims,
this is necessary to safeguard the legitimate interests of inSyca GmbH or an associated company, or
contract processing is involved.
Adequacy decision of the European Commission,
binding in-house data protection regulations,
approved Codes of Conduct pursuant to Article 40 GDPR,
approved certification mechanism or
contractual clauses approved by the supervisory authorities.
Storage duration/criteria for storage duration +
inSyca stores your personal data until they are no longer necessary in relation to the purposes for which they were collected or otherwise processed (see → The purposes of data processing at inSyca). Where inSyca is under legal obligation to store personal data, it will store personal data for the preservation period stipulated by law. The preservation period for commercial documents, which include bookkeeping documents and accounting records (including invoices), is 10 years (Section 257 (4) of the German Commercial Code). During this period, your data may be subject to restricted use within day-to-day operations if its processing serves no further purposes.
Rights of data subjects +
You have the right to, at reasonable intervals, obtain information about your personal data under storage (Art. 15 GDPR). The information you are entitled to includes information about whether or not personal data concerning you are stored, about the categories of personal data concerned, and about the purposes of the processing. Upon request, inSyca will provide you with a copy of the personal data that are processed.
You also have the right to obtain from inSyca the rectification of inaccurate personal data concerning you (Art. 16 GDPR).
You furthermore have the right to obtain from inSyca the erasure of personal data concerning you (Art. 17 GDPR). We are under obligation to erase personal data in certain circumstances, including if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, if you withdraw the consent on which the processing is based, and if the personal data have been unlawfully processed.
You are not contractually or legally obliged to provide us with your personal data. Please note, however, that you cannot enter a contract of services provided by us if we are not permitted to collect and process the data as required for the purposes specified in the foregoing (see → The purposes of data processing at inSyca)
If the processing of your data by inSyca is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller (Art. 6 (1) point e) GDPR) or if it is necessary in the legitimate interests of inSyca, then you have the right to object at any time, on grounds relating to your particular situation, to the processing of your data. inSyca will then end the processing, unless we can present compelling legitimate grounds for such processing that supersede the grounds for ending the processing.
If data processing at inSyca is based on your consent, then you have the right to, at any time, withdraw the consent you granted. The withdrawal of consent shall not affect the lawfulness of processing between the time consent was granted and the time it was revoked.
Right to lodge a complaint with the supervisory authority +
You have the right to lodge complaints with the supervisory authority responsible for inSyca. Please send such complaints to the following address:
Last amended in: January 2019
Neues von inSyca IT Solutions GmbH: Hohes Risikopotential für KMUs durch fehlende Zugangsdaten - https://t.co/ZUeVp2nuHQ
RT @insyca_it: Geschäftsprozesse auf Zack – Mit RPA! https://t.co/gADSojeiKt