Source: https://www.orderfox.com/home/da/599-privacy-policy.html
Timestamp: 2019-04-23 20:54:24
Document Index: 3436202

Matched Legal Cases: ['Art. 28', 'Art. 6', 'Art. 6', 'Art. 7', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 7', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6']

Politik for databeskyttelse - ORDERFOX.com
We are delighted that you have expressed an interest in www.orderfox.com (hereinafter ‘Online Service’ or ‘Website’). We take the protection of your data very seriously and want you to feel safe when using our Online Service. This privacy policy provides details of the personal data (hereinafter ‘Data’ for short) that we collect and how we use it. The term ‘User’ comprises all customers (in particular CNC manufacturers and CNC buyers) and visitors to our Online Service. The terms used such as ‘User’ are gender-neutral.
2. Relevant Legal Basis for the Processing;
1.1."Personal Data" means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
1.5."Pseudonymisation" means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person; E.g. if an exact interest profile of the computer user is stored in a cookie (a "marketing avatar"), but not the name of the user, then data is processed pseudonymously. If his name is stored, e.g. as part of his e-mail address or his IP address is stored, then the processing is no longer pseudonymous.
5.2.If we commission third parties with the processing of data on the basis of a so-called " Data Processing Agreement", this is done on the basis of Art. 28 GDPR.
10.1. „Cookies" are small files that are stored on the user's computer. Within the cookies different data can be stored. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after his or her visit to an online service. Temporary cookies, or "session cookies" or "transient cookies", are cookies that are deleted after a user leaves an online service and closes his browser. In such a cookie, for example, the content of a shopping basket in an online shop or a login status can be stored. Cookies that remain stored even after the browser is closed are referred to as "permanent" or "persistent". For example, the login status can be saved when users visit it after several days. Likewise, the interests of users used for web analytics or marketing purposes may be stored in such a cookie. "Third-party cookies" are cookies that are served by providers other than the Controller for operating the online services (otherwise, if they are only the Controller's cookies, they are referred to as "first-party cookies").
10.2. If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of our online services.
10.3. A general objection to the use of cookies used for online marketing purposes can be declared for many of the services, especially in the case of tracking, via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be achieved by deactivating them in the browser settings.
12.2.We additionally process your Data in accordance with the statutory requirements on the basis of our justified interests. These processing purposes include statistical analyses that serve on the one hand to optimise our Online Service and on the other to fulfil our own business purposes. In this context, we are able to create so-called user profiles (hereinafter ‘Profiles’ for short) based on the Data recorded (e.g. addresses, profile descriptions, profile access, jobs assigned, offer and request profiles). To protect your interests, we process your Data for the above-mentioned purposes using pseudonyms wherever possible, i.e. the Profiles are logged without any means of identification such as names or email addresses. Only if it is necessary for a Profile to be attributable to a User, for example to show the User specific information based on their behaviour, do We establish a link between a Profile and the specific User. Insofar as it is not necessary for a Profile to be attributable to a User (for example if We are only interested in statistical information), the User’s Details are processed anonymously, i.e. the Profiles and analysis results cannot be attributed to individual Users, thus identifying them.
13.1.In the interests of our customers’ security, we do not log any credit card details or bank data ourselves and instead use the payment service “Strip”, provided by Stripe, Inc., 510 Townsend Street San Francisco, CA 94103, USA.
14.5.Upon successful termination, we are at liberty to delete the Users’ Profiles. It is the Users’ responsibility to save their Profile information. The user's data will be erased insofar as their retention is not necessary, e.g. for tax reasons (retention period in general 10 years) or in the event of queries regarding the contract, such as payment history (retention period in general 5 years) or a longer period of retention has been expressly agreed with the user. In the case of granted advertising consents, these must be revoked independently of the contract termination. In the case of legally permitted promotional communications with users, these must also be objected to separately. Furthermore, we would like to point out that in the event of a user account being blocked without the contract being terminated at the same time, the user's data will not be erased in order to enable the account to be used after the block has been removed.
15.1.We use the service "Autodesk Forge" provided by US based company Autodesk (Autodesk, Inc. 111 McInnis Pkwy, San Rafael, California 94903, USA) for the presentation of three-dimensional objects. For this purpose, 3D models are uploaded to Autodesk servers for further processing.
15.2.The use of Autodesk is made in accordance with Art. 6 (1) lit b. GDPR for the fulfilment of our contractual services towards the user, which includes the provision of the presentation function as part of the features of Orderfox.
19.2.We send newsletters, emails and other electronic notifications containing advertising information (hereinafter ‘Newsletters’) only with the recipients’ consent or subject to legal permission. Insofar as the content of the Newsletter is specifically outlined at the registration stage, this content is authoritative with regard to the User’s consent. Our Newsletters otherwise contain information regarding developments and offers within the CNC industry and relating to our services.
19.4.The Newsletter is dispatched using the MailChimp platform of the service provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA (hereinafter the ‘Dispatch Service Provider’). You can view MailChimp’s data privacy policy here: http://mailchimp.com/legal/privacy/.
19.5.Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy-Shield Agreement, thereby guaranteeing compliance with European and Swiss data protection laws.
19.6.The email addresses of our Newsletter recipients and their other details as outlined here are saved on the Dispatch Service Provider’s servers. The Dispatch Service Provider uses this information in order to dispatch and analyse the Newsletter on our behalf. The Dispatch Service Provider may additionally use this Data to optimise or improve their own services, for example for the technical optimisation of the dispatch process and presentation of the Newsletter or for commercial purposes to determine which countries the recipients are based in. The Dispatch Service Provider will not, however, use the details of our Newsletter recipients to communicate with them directly or to share them with third parties.
19.7.Submission of your email address will suffice for a Newsletter registration. We optionally ask you to provide other details such as your first name and surname for the purposes of Newsletter personalisation and your industry in order that We can bring the content of the Newsletter into line with the readers’ interests.
19.8.The Newsletters contain a so-called web beacon, i.e. a pixel-sized file which is accessed by the Dispatch Service Provider’s server when the Newsletter is opened. When this is accessed, technical information is logged regarding, for example, your browser and system, your IP address and the time at which it is accessed. This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behaviour, the places from which it is accessed (determined with the aid of IP addresses) or the times at which it is accessed. The statistics logged also include details regarding whether the Newsletters are opened, when they are opened and which links are clicked on. While this information can be attributed to specific Newsletter recipients for technical reasons, neither We nor the Dispatch Service Provider endeavour to monitor individual Users. Rather, the analyses allow Us to identify our Users’ reading habits and to adapt our content accordingly or to dispatch different content based on our Users’ interests.
19.9.The newsletter is sent and the performance measurement associated with it is based on the recipient's consent pursuant to Art. 6 (1) lit. a, Art. 7 GDPR or, if no legal permission is required, on our legitimate interests in direct marketing pursuant to Art. 6 (1) lit. f. GDPR. The registration procedure is logged on the basis of our legitimate interests pursuant to Art. 6 (1) lit. f. GDPR. We are interested in the use of a user-friendly and secure newsletter system that serves both our business interests and the expectations of users and also allows us to provide proof of consent.
19.10.We may store the e-mail addresses we have unsubscribed for up to three years on the basis of our legitimate interests before we delete them for the purpose of sending the newsletter in order to be able to prove a previously given consent. The processing of these data is limited to the purpose of a possible defence against claims. An individual request for erasure is possible at any time, provided that at the same time the former existence of a consent is confirmed. A separate revocation of the performance measurement is unfortunately not possible, in this case the entire newsletter subscription must be cancelled.
20.7.The legal basis for Orderfox’s processing of users’ data is their consent pursuant to Art. 6 (1) lit. a., Art. 7 GDPR.
24.2.Google is certified under the Privacy Shield framework which offers a guarantee of compliance with European and Swiss data protection legislation. If we ask the users for their consent (e.g. in the context of a cookie consent), the legal basis for this processing is Art. 6 (1) lit. a. GDPR. Otherwise, the personal data of the user will be processed on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer in the sense of Art. 6 (1) lit. f. GDPR.
24.7.Further information on Google's use of data, your settings options and your opt-out options can be found on Google's websites: https://policies.google.com/technologies/partner-sites ("How Google uses information from sites or apps that use our services"), https://policies.google.com/technologies/ads ("Data use for advertising purposes"), https://adssettings.google.com/authenticated ("Manage the information used by Google to display advertising to you").
25.2.Google is certified under the Privacy Shield framework which offers a guarantee of compliance with European and Swiss data protection legislation. If we ask the users for their consent (e.g. in the context of a cookie consent), the legal basis for this processing is Art. 6 (1) lit. a. GDPR. Otherwise, the personal data of the user will be processed on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer in the sense of Art. 6 (1) lit. f. GDPR.
25.5.One of the Google marketing services we use is the online advertising service “Google AdWords”. In the case of Google AdWords, each AdWords client receives a different “conversion cookie”. Thus, cookies cannot be tracked across the websites of AdWords clients. The information collected by the conversion cookies is used to provide aggregate conversion statistics for AdWords clients who have opted in to conversion tracking. AdWords clients are informed of the total number of users who clicked on the ad and were forwarded to a conversion tracking tag page. However, they do not receive any information that would enable them to identify users personally.
25.7.We use "Google Optimize" a service that allows us to track the effects of various changes to a website (e. g. changes in input fields, design, etc.) within the framework of so-called "A/B tests".
25.8.We may also use the Google Tag Manager to incorporate and manage Google analysis and marketing services in our Websites.
26.1.Our Online Service makes use of the Social Plugins (‘Plugins’) of the social network facebook.com, which is run by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (‘Facebook’). The Plugins can be identified on the basis of one of the Facebook logos (white ‘f’ on a blue tile, the terms ‘Like’ or a thumbs-up symbol) or feature the phrase ‘Facebook Social Plugin’. A list of and the appearance of Facebook Social Plugins can be found here: https://developers.facebook.com/docs/plugins/.
26.2.Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European and Swiss data protection law. If we ask the users for their consent (e.g. in the context of a cookie consent), the legal basis for this processing is Art. 6 (1) lit. a. GDPR. Otherwise, the personal data of the user will be processed on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer in the sense of Art. 6 (1) lit. f. GDPR.
27.1.Our Online Service uses the so-called Facebook Pixel belonging to the social network Facebook, which is run by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are resident in the EU, by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (‘Facebook’). The Facebook Pixel enables Facebook to identify visitors to our Online Service as the target group for the presentation of so-called Facebook Ads. Accordingly, we use the Facebook Pixel to present the Facebook Ads placed by us only to those Facebook users who have expressed an interest in our Online Service (so called “Custom Audiences”). In other words, with the assistance of the Facebook Pixel, we want to ensure that our Facebook Ads are in keeping with the Users’ possible interests, rather than being seen as a nuisance. Additionally, the Facebook Pixel allows Us to understand the effectiveness of Facebook Ads for statistical and market research purposes by allowing Us to see whether Users were taken to our website upon clicking on a Facebook Ad.
27.2.Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European and Swiss data protection law. If we ask the users for their consent (e.g. in the context of a cookie consent), the legal basis for this processing is Art. 6 (1) lit. a. GDPR. Otherwise, the personal data of the user will be processed on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer in the sense of Art. 6 (1) lit. f. GDPR.
27.4.You may revoke your consent to the Facebook Pixel collecting data and using it to present Facebook Ads. You can access the page created by Facebook to do so, at https://www.facebook.com/settings?tab=ads, following the instructions there regarding the settings for use-based advertising, or you can revoke your consent via the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/. The settings are platform-independent, i.e. they are applied to all devices such as desktop computers and mobile devices.
28.3. For the aforementioned purposes, Hotjar stores and evaluates cookies with a pseudonymous identification number on the User's devices. The cookies that Hotjar uses have various "lifespans"; some last up to 365 days, some only last for the duration of the relevant website visit.
28.5. If we ask the users for their consent (e.g. in the context of a cookie consent), the legal basis for this processing is Art. 6 (1) lit. a. GDPR. Otherwise, the personal data of the user will be processed on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer in the sense of Art. 6 (1) lit. f. GDPR.
28.6. Users may prevent Hotjar from collecting the data by using their browser's “do not track” settings or by clicking on the following link and following its instructions: https://www.hotjar.com/legal/compliance/opt-out.
29.1.For the purposes of our legitimate interests (i.e. our interest in analysing, optimizing and running our Websites in a commercially viable manner within the meaning of Art. 6 (1) f. of the GDPR), we use third-party content and service delivery services on our Websites in order to incorporate content and services such as videos and fonts, for example (hereinafter jointly referred to as “content”). The third-party provider of this content always requires the User's IP address in order to send the content to the browser of the respective User. In other words, the IP address is required to display this content. We endeavour only to use such content where the respective provider uses the IP address exclusively to deliver said content. Third-party providers may additionally use “pixel tags” (invisible image files, also known as web beacons) for statistical or marketing purposes. Pixel tags can be used to analyse information such as the number of visitors accessing the pages of this website. The pseudonymized information may additionally be stored on User devices in the form of cookies. This information includes technical information on the browser and operating system, referring websites, time spent on the website, and further details on how Users make use of our Websites, plus it can also be combined with comparable information from other sources.
29.2.The list below provides an overview of third-party providers and their content as well as links to their privacy policies, which contain further information on data processing and opt-out mechanisms, some of which have already been discussed here: