Source: https://www.emdesk.com/privacy-policy
Timestamp: 2020-08-04 08:36:44
Document Index: 495105174

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6']

EMDESK's Privacy Policy - EMDESK
The following Privacy Policy is intended to give you a overview of what happens to your personal information when you visit our website and use our services.
This Privacy Policy is applicable to Emdesk GmbH’s (“Emdesk” or “we”) database of customers and users of its services and websites (“Services”) as well as Emdesk’s marketing database.
This Privacy Policy describes how we process personal data concerning the users of Emdesk’s Services as well as the representatives of our customers and potential customers (all the aforementioned hereinafter “Customers” or “you”).
This Privacy Policy may be updated if required in order to reflect the changes in data processing practices or otherwise. The current version can be found on our website.
Please note that this Privacy Policy applies to processing of personal data carried out by Emdesk as a data controller. As regards the data Emdesk processes on behalf of its customer organizations, Emdesk processes this personal data as a data processor and the relevant customer shall be considered to be the data controller with regard to this personal data.
Emdesk GmbH is the controller of the data processing described in this privacy policy.
Some data is collected when you provide it to us. Most of the data is received directly from Customers at the point of registration or automatically in connection with the Customer’s use of the Services.
Other data is collected automatically by our IT systems when you visit the Services. These data is primarily technical data such as the browser and operating system you are using or when you accessed the page. These data is collected automatically as soon as you use our Services.
We process your personal data to perform our contractual obligations towards you and to comply with legal obligations. Furthermore, we process your personal data to pursue our legitimate interest to run, maintain, and develop our business and to create and maintain customer relationships. When choosing to use your data on the basis of our legitimate interests, we weigh our own interests against your right to privacy and e.g. provide you with easy to use opt-out from our marketing communications and use pseudonymized or non-personally identifiable data when possible.
Personal data is processed by Emdesk for the following purposes:
We process personal data in the first place to be able to offer the Services to our Customers and to run, maintain, and develop our business. Personal data may be processed in order to carry out our contractual obligations towards the Customer. We may use the data, for example, to offer essential functionalities of the Services and to provide access to the Services.
If a Customer contacts our customer service, we will use the provided information for answering questions and solving possible issues.
We may process information regarding the use of the Services to improve the quality of our Services, e.g. by analysing any trends in the use of our Services. When possible, we will do this using only aggregated, non-personally identifiable data.
When visiting our website, statistical analyses may be made of your surfing behavior. This happens primarily using cookies and analytics. The analysis of your surfing behavior is usually anonymous, i.e. we will generally not be able to identify you from this data.
Emdesk takes the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data protection regulations and this privacy policy.
Emdesk does not store personal data longer than is legally permitted and necessary for the purposes of this privacy policy. The storage period depends on the nature of the information and the purposes of processing. The maximum period may therefore vary per use.
Most personal data relating to a user account with the Services will be deleted after a reasonable time has lapsed after the termination of the business relationship between your organization and Emdesk. Thereafter, a part of the personal data may be stored only as long as such processing is required by law or is reasonably necessary for our legal obligations or legitimate interests, such as claims handling, legal proceedings, bookkeeping, and internal reporting.
We store your personal data primarily within the European Economic Area. However, we have service providers and operations in several geographical locations. As such, we and our service providers may transfer your personal data to, or access it in, jurisdictions outside the European Economic Area.
Telephone: +493616603612
Email: contact@emdesk.com
Withdrawing a consent may lead to fewer possibilities to use our Services. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
If there has been a breach of data protection legislation, the person affected may file a complaint with the competent regulatory authorities. In case Customer considers our processing of personal data to be inconsistent with the applicable data protection laws, a complaint may be lodged with the local supervisory authority for data protection. The competent regulatory authority for matters related to data protection legislation is the data protection officer of the German state in which our company is headquartered. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Customers have the right to receive their personal data that they have provided to us in a structured and commonly used format and to independently transmit those data to a third party. If you require the direct transfer of data to another responsible party, this will only be done to the extent technically feasible.
Rights to access, recification, erasure, and restriction of processing
As permitted by law, you have the right to be provided at any time with information free of charge about any of your personal data that is stored as well as its origin, the recipient, and the purpose for which it has been processed. You can contact us at any time using the address given herein if you have further questions on the topic of personal data.
Customers may request us to restrict processing of personal data, for example, when your data erasure, rectification, or objection requests are pending and/or when we do not have legitimate grounds to process your data. This may however lead to fewer possibilities to use our Services.
Right to object and direct marketing
Customers may object to the processing of personal data if such data is processed for other purposes than purposes necessary for the performance of our Services to the Customer or for compliance with a legal obligation. In case we do not have legitimate grounds to continue processing such personal data, we shall no longer process the personal data after your objection.
Customer has the right to prohibit us from using Customer’s personal data for direct marketing purposes and profiling made for direct marketing purposes by contacting us on the addresses indicated above or by using the functionalities of the Services or the unsubscribe possibility offered in connection with any direct marketing messages.
We use administrative, organizational, technical, and physical safeguards to protect the personal data we collect and process. Measures include, for example, where appropriate encryption, firewalls, secure facilities, and access right systems. Our security controls are designed to maintain an appropriate level of data confidentiality, integrity, availability, resilience, and ability restore the data. We regularly test our Services, systems, and other assets for security vulnerabilities.
Most of the cookies we use are so-called "session cookies". They are automatically deleted after your visit. Other cookies remain in your device’s memory until you delete them. These cookies make it possible to recognize your browser when you next visit the site.
Cookies which are necessary to allow electronic communications or to provide certain functions you wish to use are stored pursuant to Art. 6 paragraph 1, letter f of GDPR. We have a legitimate interest in the storage of cookies to ensure an optimized service provided free of technical errors. If other cookies (such as those used to analyse your surfing behavior) are also stored, they will be treated separately in this privacy policy.
We process personal data to pursue our legitimate interest to run, maintain, and develop our business pursuant to Art. 6 paragraph 1, letter f of GDPR.
Should you send us questions via a contact form, we will collect the data entered on the form, including the contact details you provide, to answer your question and any follow-up questions.
This is done based on Art. 6 (1) (b) GDPR, which allows the processing of data to fulfill a contract or for measures preliminary to a contract. Furthermore, we process personal data to pursue our legitimate interest to run, maintain, and develop our business and to create and maintain customer relationships pursuant to Art. 6 paragraph 1, letter f of GDPR.
We collect, process, and use personal data only insofar as it is necessary to establish or maintain legal relationships with us. This is done based on Art. 6 (1) (b) GDPR, which allows the processing of data to fulfill a contract or for measures preliminary to a contract. Furthermore, we process personal data to pursue our legitimate interest to run, maintain, and develop our business and to create and maintain customer relationships pursuant to Art. 6 paragraph 1, letter f of GDPR.
We collect, process, and use your personal data when accessing our website (usage data) only to the extent required to enable you to access our service or to bill you for the same.
Emdesk may collect and process the following customer data: (i) name and contact details (including user names); (ii) organization and title; (iii) phone number; (iv) e-mail address; (v) correspondence; (vi) invoicing and billing information; (vii) data concerning your use of the Services or your interest in our Services; (iix) marketing opt-outs and opt-ins.
In no case we sell or rent out your personal data or Customer Data to third parties, nor does it use them for any purposes other than those set forth in this policy.
We do not share personal data with third parties outside of Emdesk’s organization unless one of the following circumstances applies:
We may share personal data with third parties outside Emdesk’s organization if we have a good-faith belief that access to and use of the personal data is reasonably necessary to: (i) meet any applicable law, regulation, and/or court order; (ii) detect, prevent, or otherwise address fraud, security, or technical issues; and/or (iii) protect the interests, properties, or safety of Emdesk, our Customers, or the public in accordance with the law. When possible, we will inform Customers about such transfer and processing.
To authorized service providers and to third parties when it is necessary for the purposes set out in this Privacy Policy
We may share personal data to authorized service providers who perform services for us (including data storage, customer relationship management, and customer support services). Our agreements with our service providers include commitments that the service providers agree to limit their use of personal data and to comply with privacy and security standards at least as stringent as the terms of this Privacy Policy.
To the extent that third parties need access to personal data to perform the Services, Emdesk has taken appropriate contractual and organizational measures to ensure that personal data are processed exclusively for the purposes specified in this Privacy Policy and in accordance with all applicable laws and regulations.
If EMDESK is involved in a merger, acquisition, or asset sale, we may transfer personal data to the third party involved. However, we will continue to ensure the confidentiality of all personal data. We will give notice to all Customers concerned when the personal data are transferred or become subject to a different privacy policy as soon as reasonably possible.
We may share personal data with third parties outside EMDESK’s organization for other reasons than the ones mentioned before, when we have the Customer’s explicit consent to do so. The Customer has the right to withdraw this consent at all times.
Website and application hosting and subscription administration
We have subcontracted the hosting of our websites to the service provider Hetzner.de in Germany.
We have subcontracted the hosting of our application to the service provider KeyWeb AG and OpenTelekomCloud, both in Germany.
In addition, we use Zoho.eu to administer the subscriptions of our Customers to our Services. Zoho.eu servers are in Amsterdam, the Netherlands, and Dublin, Ireland. Here we do not share Customer Data or users’ personal data other than the personal data of the subscription owner only.
Google Analytics cookies are stored based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in analysing user behavior to optimize both its website and its advertising.
For more information about how Google Analytics handles user data, see Google Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=en.
This website uses Google AdWords. AdWords is an online advertising programme from Google Inc.
Each Google AdWords advertiser has a different cookie. Thus, cookies cannot be tracked using the website of an AdWords advertiser. The information obtained using the conversion cookie is used to create conversion statistics for the AdWords advertisers who have opted for conversion tracking. If you do not want to participate in tracking, you can opt-out of this by easily disabling the Google Conversion Tracking cookie by changing your browser settings. In doing so, you will not be included in the conversion tracking statistics.
Conversion cookies are stored based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in analysing user behavior to optimize both its website and its advertising.
You can configure your browser to inform you about the use of cookies, so that you can decide on a case-by-case basis whether to accept or reject a cookie. Alternatively, your browser can be configured to automatically accept cookies under certain conditions or to always reject them, or to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of this website.
This website uses the services of Mailjet to send newsletters.
Mailjet is a service which organizes and analyses the distribution of newsletters.
We use Mailjet and web beacons to analyse our newsletter campaigns. This allows us to determine if a newsletter message has been opened and which links you click on. In addition, technical information is collected (e.g. time of retrieval, IP address, browser type, and operating system). This information cannot be assigned to a specific recipient. It is used exclusively for the statistical analysis of our newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to your interests.
You will have to unsubscribe from the newsletter if you do not want to receive newsletters. For this purpose, we provide a link in every newsletter we send.
Further information about handling user data, can be found at https://developers.google.com/fonts/faq and in Google Privacy Policy at https://www.google.com/policies/privacy.
PayPal, Stripe, and Gocardless
Our website may accept payments via PayPal, Stripe, and Gocardless.
If you select payment via these payment service providers, the payment data you provide will be supplied to payment service providers based Art. 6 (1) (b) of the GDPR (Processing for contract purposes).
Functions of the Twitter service have been integrated into our website and app. These features are offered by Twitter Inc. When you use Twitter and the “Retweet” function, the websites you visit are connected to your Twitter account and made known to other users. In doing so, data will also be transferred to Twitter. We would like to point out that, as the provider of these pages, we have no knowledge of the content of the data transmitted or how it will be used by Twitter. For more information on Twitter Privacy Policy, please go to https://twitter.com/privacy.