Source: https://hsm.utimaco.com/privacy/
Timestamp: 2019-07-16 02:23:09
Document Index: 105094467

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', '§ 7', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6']

Privacy and data protection statement - Utimaco HSMs
Thank you for visiting our website and your interest in our company and products. To ensure that you feel safe and happy visiting our website, we have set out below what we do with your details. These data protection regulations are designed to inform you about how we collect, use and pass on personal data.
This privacy notice only refers to the website of the Utimaco IS GmbH and Utimaco Inc. Please note that it is not valid for websites of other providers this website may contain links to.
Website: https://hsm.utimaco.com/
System used by the user
V. Contact Form and Contact by E-Mail
User’s question (mandatory)
Date and time of transmission of message
URL of Utimaco entry page
The e-mail addresses provided can also be used to contact us. A list can be found at https://hsm.utimaco.com/company/contact/. In this case, the personal data of the user transmitted with the e-mail will be stored.
We process personal data of the user to process his contact request. If the user wishes to receive information about our products, the answer to his request can in certain cases also be taken over by one of our sales partners. In such a case and only for that purpose, we forward the user’s data to the responsible partner. Both we and our sales partners have a legitimate interest in a contact request regarding our products, Art. 6(1)(f) GDPR.
In addition, if the user wishes he can use the contact form to get informed by us from time to time about our products and services. He can give his consent to this, independently of sending the contact form, by activating a checkbox. We will then inform the user about our products and services via e-mail and/or phone. In all other respects, the provisions regarding the newsletter under section VII apply.
Within the scope of our contact form we use a so-called Customer-Relationship-Management System called HubSpot. You will find more detailed information on this under section X.
If the user declares his consent to receive information on our products and services, the legal basis for this is Art. 6(1)(a) GDPR. In all other respects, the provisions regarding the newsletter under section VII apply.
On the one hand, the processing of personal data serves us for processing the user’s request. The personal data processed from the input mask during the sending process also serve to prevent misuse of the contact form and to ensure the security of our information technology systems. This is also where our legitimate interest in data processing lies. On the other hand, we process the user’s personal data as part of our marketing activities. This is also in our legitimate interest.
Data are erased as soon as they are no longer needed to achieve the purposes for which they were initially collected. In the case of personal data from the input mask of the contact request form and the data transmitted with the e-mail, this occurs when the respective conversation with the user is terminated. A conversation is considered to be terminated when circumstances make it possible to assume that the respective issue has been conclusively clarified and no communication between us and the user is to be expected. This is no later than 18 months after the last contact by us or the user.
The user has the right to object to the processing of personal data at any time. In such a case, the conversation cannot be continued. The objection can be explained to us by sending an e-mail to dataprotection@utimaco.com.
In addition, the user may at any time withdraw his consent to receive information about our products and services for the future. The withdrawal can be declared to us by an e-mail to dataprotection@utimaco.com or by using the unsubscribe link contained in every newsletter.
In this case, the user’s data will be deleted without delay, unless the deletion is prevented by reasons arising from the law. For more information please see section XI.
The “Downloads” area of our website https://hsm.utimaco.com/ makes it possible to download various documents or use a download link. This is also possible without providing any personal data. If the user provides his data, the data will only be processed with the user’s consent. The user is informed of this before submitting any data and his consent is obtained by activating a checkbox. In addition, cookies are used when downloads are initiated (more on this in our cookie policy, see section IX).
If a user enters his or her data in the input mask, the following data will be recorded:
After the data are sent, the user receives an e-mail with the download link and the information regarding withdrawal of consent.
Legal basis for the processing of data with the consent of the user is Art. 6(1)(a) GDPR. In all other respects, legal basis is Art. 6(1)(f) GDPR.
By collecting the data, we can continuously optimize and improve the offers on our website. We can also identify which users are interested in our download content and better align our content with demand.
Data are erased as soon as they are no longer needed to achieve the purposes for which they were initially collected.
The user can object to the data processing any time via e-mail to dataprotection@utimaco.com and withdraw his consent for the future as described under section XI. In this case, the user’s data will be deleted without delay, unless the deletion is prevented by reasons arising from the law.
Visitors to our website can subscribe to a free newsletter. This involves the transfer of the following data from the input mask to us when they register to receive the newsletter:
The following data will also be recorded:
Time zone/date and time of registration
Data are forwarded to the service provider MailChimp in connection with data processing for the distribution of newsletters. More detailed information on MailChimp under section VII. 5.
Our newsletters contain so-called tracking pixels (web bugs). These help us to recognize whether and when an e-mail was opened and which links in the e-mail the recipient followed (so-called newsletter-tracking).
The user’s consent for processing the data is obtained during the registration process and via a subsequent confirmation e-mail with reference to this data protection information (so-called double-opt-in).
Legal basis for the processing of data within the scope of the newsletter subscription is the consent of the user according to Art. 6(1)(a) GDPR in conjunction with § 7 para. 2 no. 3 Unfair Competition Act (German Gesetz gegen den unlauteren Wettbewerb, UWG).
The e-mail addresses of users will be recorded for the purposes of delivery of the newsletter. Other personal data recorded in connection with the registration process serve to prevent abusive use of the services or the e-mail address used.
Data relating to newsletter tracking is processed by us so that we can optimally tailor our newsletters to the wishes and interests of our subscribers. This enables us to send personalized newsletters to the respective recipient.
Data from the input mask are erased as soon as they are no longer needed to achieve the purposes for which they were initially collected. Data are therefore kept until the user cancels his subscription.
5. Newsletter through MailChimp
We use the MailChimp component to distribute our newsletter. Mailchimp is a service provided by The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA.
The data stored during newsletter registration (e-mail address, if applicable name, IP address, country/region, timezone/date and the time of your registration) are transmitted to a server of The Rocket Science Group in the USA and stored there in compliance with the “EU-U.S. Privacy Shield”. The Rocket Science Group, LLC -, which operates MailChimp, is certified according to the requirements of Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG). According to the EU Commission, a company on the “Privacy Shield List” can in principle be assumed to offer an adequate level of data protection. The e-mail address is recorded only for the purposes of sending users an e-mail that they can use to confirm that they want to be included in the e-mail list (“double opt-in”). If the e-mail address is confirmed, it will be permanently stored by the list provider until its owner withdraws his or her consent or it is deleted manually by us.
For further information on MailChimp and data protection can be found at https://mailchimp.com/legal/privacy/.
6. Possibility of Objection and Elimination
Subscribers can cancel their subscriptions to the newsletter at any time by withdrawing their consent for the future. Detailed information on the procedure to be used is provided in the confirmation e-mail and each individual newsletter. Each newsletter contains a dedicated link for this purpose. Users can also cancel their subscriptions by sending an e-mail at dataprotection@utimaco.com. In this case, the user’s data will be deleted without delay, unless the deletion is prevented by reasons arising from the law. More information under section XI.
VIII. Registration in the Utimaco Portal
Users can register with their personal data at https://support.hsm.utimaco.com/hsm-simulator and, among other things, test the Utimaco SecurityServer HSM Simulator free of charge. The data they enter in the input mask when they register are sent to us and stored. The data are not made available to third parties.
Subject to a positive finding of adequacy as regards the export of data to other countries, the user will receive access to the Utimaco portal with his registered data.
The following data from the input mask will be transmitted to us during the registration process:
Company website (mandatory)
City and postal code (mandatory)
The following data will also be collected upon registration:
The following data will be collected during the use of the portal:
Newsletter (yes/no)
Roles (control of access to portal)
URL access to portal
File name and path of information accessed
When registering for our portal, the user also has the option of subscribing to our newsletter. For this the provisions regarding the newsletter under section VII apply.
Legal basis for the processing of data for the use of our portal is Art. 6(1)(f) GDPR.
In the event registration is necessary for the performance of a contract to which the user is party or to take steps prior to entering into a contract, Art. 6(1)(b) GDPR provides a second legal basis for processing the data.
In the event a user downloads goods subject to export controls, Utimaco is under a legal obligation to report the download to the Federal Office for Economic Affairs and Export Control (BAFA) if the goods are downloaded to a server located outside the European Union. General License No. 16 (Telecommunication and Information Security) of 19 January 2012 and EU General Export Authorization No. EU 001 provide the legal basis for this obligation. Art. 6(1)(c) GDPR provides the legal basis for processing data for such purposes.
Upon completion of registration, users receive direct access to the download files we make available. We require the data processed to be able to carry out the download and make the respective software or other documents available to users. In addition, we process user data in order to continuously optimize and improve our portal.
Registration of users is required for determination of compliance with the provisions of legislation governing export controls as well as for performance of a contract with a specific user or in order to take steps prior to entering into such a contract. In the event goods subject to export controls are downloaded to a server outside the European Union by a user, the data will also be processed for the purposes of compliance with our legal duty to report such downloads to the Federal Office for Economic Affairs and Export Control.
This will regularly occur when data processed for the purposes of performance of a contract with a specific user or in order to take steps prior to entering into such a contract are no longer required for the purposes of performance of a contract or in order to take steps prior to entering into such a contract. It may also be necessary to store personal data of a party to a contract after entering into such a contract in order to fulfill contractual or legal obligations, including but not limited to the submission of the legally required reports to the Federal Office for Economic Affairs and Export Control and retention of such documentation to comply with legal record keeping requirements.
The user can object to the data processing at any time via e-mail to dataprotection@utimaco.com. In this case, the user’s data will be deleted without delay, unless the deletion is prevented by reasons arising from the law. For more information, see point XI. The use of the portal is then no longer possible.
In the event data are required for the purposes of performance of a contract or in order to take steps prior to entering into such a contract, earlier erasure of such data is possible only if contractual or legal obligations do not prevent such erasure.
Information about the cookies we use and their functions can be found in our Cookie-Policy. There you will also find information on how you can change the cookie settings in your browser.
X. Deployment of Website Analysis Services
1. WiredMinds GmbH
We use the tracking technology of WiredMinds GmbH (www.wiredminds.de) to analyze visitor activity for marketing purposes and optimization of our website. This involves collecting, processing and storing data to prepare use profiles that are identified by pseudonyms. Whenever possible and appropriate, these use profiles are completely anonymized. Cookies may be used here. You will find more information on the use of cookies in our Cookie Policy (see section IX).
Opt-out from WiredMinds tracking
We use Google Analytics, a website analysis service of Google Inc. (“Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, on our website. Google Analytics uses cookies that are placed on the computers of users and permit analysis of the use of websites. The information generated by such cookies (including your IP address) is sent to and stored on a Google server in US. You will find more information on the use of cookies in our Cookie Policy (see section IX).
Duration of visit per visitor and page
Type of visit and history (in the sense of distinction between new and returning visitors)
Names and URLs of files and pages accessed
Website from which access is initiated (originating end)
Websites accessed by the systems of users through our website
The search term (query input)
Pageview frequency
Operating system, screen resolution
Internet service provider of users
Google uses this information for the purposes of evaluating the use of websites, compiling reports on website activity for website operators and providing other services relating to website activity and Internet usage. Google may also transfer this information to third parties if required to do so by law or such third parties process the information on Google’s behalf. Google will under no circumstances combine the IP addresses of users with other data in the possession of Google.
You can prevent the processing of your data by Google Analytics by means of an opt-out cookie. This cookie is set when you download the following browser add-on to deactivate Google Analytics: https://tools.google.com/dlpage/gaoptout?hl=en.
Google Analytics is also used to analyze data from AdWords for statistical purposes.
You can also opt-out from being tracked by Google Analytics by clicking the button.
For our online marketing, we use Google’s AdWords function. If the user accesses our website via a Google ad, a cookie is stored on the user’s computer.
These so-called “conversion cookies” are no longer active after 90 days and are not used to personally identify the user. If the user visits certain pages of our website while the cookie is still active, we and Google know that the user has clicked on ads on Google and has been redirected to our website. Google uses the information obtained through “conversion cookies” to compile statistics for our website. These statistics show us the total number of users who clicked on our ad and the pages of our website that were visited by each user. However, neither we nor other advertisers who use “Google Adwords” receive information that can be used to personally identify users. The installation of “conversion cookies” can be prevented via the browser settings, e.g. by setting the browser so that the automatic placement of cookies is deactivated or by blocking cookies from the “googleadservices.com” domain. You will find more information on the use of cookies in our Cookie Policy (see section IX).
We use HubSpot services for our marketing activities and customer relationship management (CRM). The operating company is HubSpot, Inc. 25 First Street, 2nd Floor, Cambridge, MA 02141 USA. The HubSpot office in Ireland can be found at: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, phone: +353 1 5187500.
HubSpot is certified under the conditions of the “EU – U.S. Privacy Shield Frameworks” and subject to the TRUSTe Privacy Seal and the “U.S. – Swiss Safe Harbor” Framework (https://www.privacyshield.gov/participant?id=a2zt0000000TN8pAAG).
HubSpot is software that collects, stores and, depending on the intended use, allows data to be used. The collected data is stored on HubSpot’s servers. HubSpot uses “web beacons” and cookies, which are stored on the user’s computer and enable an analysis of the use of the website. You will find more information on the use of cookies in our Cookie Policy (see section IX). The following personal data is collected:
Furthermore, HubSpot collects the user’s entered data if he/she
fills in the contact form (see V. Contact Form and E-Mail Contact),
uses our download area (see VI. Downloads), or
subscribes to our newsletter (see VII. Newsletter).
A list of the cookies used by HubSpot can be found here: https://knowledge.hubspot.com/articles/KCS_Article/Reports/What-cookies-does-HubSpot-set-in-a-visitor-s-browser.
Hubspot’s privacy policy is available at https://legal.hubspot.com/privacy-policy?utm_campaign=GDPR%20Privacy%20Policy&utm_source=hs_email&utm_medium=email&utm_content=63125824.
5. Purpose of Processing Data
We use these services to analyze the use of our website so that we can constantly optimize it and make it more user-friendly.
In addition, HubSpot is an integrated software solution that covers various aspects of our online marketing. These include content management (website), e-mail marketing (newsletters and automated mailings, e.g. for the provision of downloads), social media publishing & reporting, reporting (e.g. traffic sources, accesses, etc.), contact management (e.g. user segmentation & CRM), landing pages and contact forms. With HubSpot we can analyze our website and thus constantly optimize it and make it more user-friendly, as well as inform our users in a more targeted manner.
Our legitimate interest in data processing pursuant to Art. 6 (1)(f) GDPR also lies in these purposes.
6. Legal Basis for Processing of Data
The legal basis for processing the data is Art. 6(1)(f) GDPR or, if the user has given his or her consent, Art. 6(1)(a) GDPR.
The data will be deleted as soon as they are no longer necessary to achieve the purpose of their collection. In all other respects, we refer to the following sections of this Data Protection Notice as well as to our Cookie Policy:
V. Contact Form and E-Mail Contact,
VI. Downloads and
If the use of website analysis services is generally not desired, the user can manage the use of cookies himself at any time and block or delete them using his browser settings. In addition, he can object to the data processing any time via e-mail to dataprotection@utimaco.com and withdraw his consent for the future as described under section XI. In this case, the user’s data will be deleted without delay, unless the deletion is prevented by reasons arising from the law.