PRIVACY POLICY AND DECLARATION OF CONSENT

1. NAME AND ADDRESS OF THE RESPONSIBLE PARTIES

TECXIPIO GmbH
Augartenstraße 1
76137 Karlsruhe
Managing Director: Herr Norbert Türbach

Phone: +49 (0) 721 – 35 48 01 - 00
Fax: +49 (0) 721 – 35 48 01 - 10
Email: info@tecxipio.com

2. DATA PROTECTION OFFICER CONTACT INFORMATION

ENSECUR GmbH
Kaiserstraße 86
76133 Weingarten
Email: dsb-tecxipio@ensecur.de

3. DATA PROCESSING/DEFINITION

3.1. In the following document, we explain how we process your personal data when you use our website and outline your rights as a data subject.

3.2. Only if we subsequently inform you that the provision of personal data is required by law or contract or is required for a contract and you as the data subject are obliged to provide the personal data, these circumstances are present. Automated decision-making or profiling in accordance with Article 22 paragraphs 1 and 4 shall only take place if explicitly announced.

3.3. If you do not agree to provide us the data outlined below, you will be unable to use our services/functions or contact us.

3.4. For the purpose of this privacy statement, the following definition applies:

Cookies:
Cookies are small text files stored by your browser on your device. We use cookies to make our offerings more user-friendly and secure.

The cookies are stored on user devices and the cookie data is transmitted to us by users. As a user, you can control the use of cookies. By changing the settings in your browser, you can disable or restrict the transmission of cookies. Already saved cookies can be deleted at any time, and you can adjust settings to make such deletions automatic.

To learn more about how to control these setting or how to delete cookies on different browsers, please visit https://www.aboutcookies.org/how-to-control-cookies/ or https://www.aboutcookies.org/how-to-delete-cookies/
However, keep in mind that if you disable cookies, you may not be able to fully use all features of the web pages you visit or various tools on the Internet.

3.5. We use external service providers to process some parts of your data (data processor pursuant to art. 28 GDPR). We carefully select and commission these providors; they are bound by our instructions and monitored regularly. Incidentally, we only transfer your data to third parties in the instances outlined individually below.

4. DATA PROCESSING OVER WEBSITE

4.1. Encoding

To ensure that your personal data is processed in a way that protects it against unauthorized or unlawful processing as well as against unintentional loss, destruction, or damage, we use encryption (SSL or TLS) on our website and all subpages.

4.2. Visiting our Website

Each time a user accesses our website, our system automatically collects the following data and information from the computer system of the calling computer:

• Name of the retrieved file
• Date and time of retrieval
• Amount of transmitted data
• Message regarding success of retrieval
• IP address
• Browser type
• Browser version and its language
• Operating system and its interface
• Referrer URL
• Access status / HTTP status code
• Device used

This data is stored in the log files of our host‘s IT system.

Purpose of data processing:
We process the data mentioned above to effectively display our website and ensure the security and stability of our information technology systems and the technology of our website. In addition, we process this data so that we can provide law enforcement authorities the information they need in the event of a cyber attack.

Legal basis:
We have a legitimate interest in processing the data within the meaning of Art. 6 paragraph 1, point (f) GDPR, whereby a legitimate interest results from the stated purpose.

Storage time:
We delete the stored data as soon as the data storage no longer fulfills its stated purpose. The time of deletion is determined on a case-by-case basis; we will terminate storage, at the latest, as soon as any civil claims under § 199 BGB are statute-barred or prosecution is no longer possible because of the statute of limitations (§§ 78, 79 StGB)

4.3 Contact - General

When you contact us (by email, fax, etc.), we will store information including your name, email address, and any other contact details you have provide.
Purpose of data processing:
We must process the above mentioned data to answer your contact request.

Legal basis:
The legal bases for data processing may vary, depending on the request. In any case, we process data to protect our legitimate interests within the meaning of Art. 6 paragraph 1, point (f) GDPR. These legitimate interests are a product of our intention to fulfill the purpose of the data processing.

Storage time:
We will delete your personal data as soon as storage is no longer necessary. The time of deletion will be determined on a case-by-case basis; we will terminate storage, at the latest, as soon as any civil claims under § 199 BGB are statute-barred or prosecution is no longer possible because of the statute of limitations (§§ 78, 79 StGB).

4.4. Contact – Contact Form

If you contact us via the contact form, the data you enter in the input mask will be transmitted and stored. When you use the contact form, we also store the following information at the time the message is sent:
- IP-Address
- Date and time

Our website host provides us with a platform that allows us to show you our website and create applications that you can interact with. Your data is stored using the host's data storage, databases, and general applications.

Purpose of data processing:
We collect your personal data from the input mask to process the contact form. The other data we process at the time of dispatch prevents misuse of the contact form and ensures the security of our information technology systems.

Legal basis:
To process this data, we obtain your consent before the contact form is sent and this data protection declaration is pointed out. On the basis of your consent, the legal basis of the processing is Art. 6 (1) lit (a) GDPR.

Storage time:
We will delete your data, at the latest, as soon as the data storage no longer fulfills its purpose. The time of deletion will be determined on a case-by-case basis; we will terminate storage, at the latest, as soon as any civil claims under § 199 BGB are statute-barred or prosecution is no longer possible because of the statute of limitations (§§ 78, 79 StGB).

4.5. Cookies

At various points on our website, we use so-called cookies. We refer you to the function of cookies and how you can control general cookie settings in the sub-item "data processing/definition".

We use permanent and so-called session cookies.

The cookies on our website that enable us to analyze the behavior of visitors to our website (tracking) are only deployed if users previously give their consent. Cookies not involved in tracking are deployed by our system without this consent.

Purpose of data processing:
The cookies allow us to recognize your browser on subsequent visits. We also use cookies to improve our service, analyzing the browsing behavior of our website’s users to increase user-friendliness.

Legal basis:
Insofar as cookie settings and the processing of the respective data facilitate the analysis of the behavior of visitors to our website (tracking), the processing only takes place on the basis of the data subject’s consent as stipulated in art. 6 paragraph 1, point (a) GDPR. In other cases, we use cookies to protect our legitimate interests following the meaning of art. 6 paragraph 1, point (f) GDPR, which states that legitimate interests arise from the intention to fulfill the purpose of data processing.

Storage time:
Session cookies are automatically deleted after you conclude your visit. Persistent cookies are stored for a maximum of 24 months or remain on your device until you delete them. We will delete data transmitted by cookies immediately after evaluating it.

5. USE OF GOOGLE SERVICES

We use various Google services (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), which are described in more detail below.

This involves the transmission of data to the USA. Google has a so-called EU-U.S. Privacy Shield certification. The EU-U.S. Privacy Shield Agreement is a data protection agreement intended to ensure an adequate level of data protection for data transfers to certified U.S. companies. The EU Commission has determined the adequacy of the guaranteed data protection level according to the EU-U.S. Privacy Shield Agreement by decision of 12.07.2016 (Az. C(2016) 4176).

Further information on data handling by Google can be found in Google's privacy policy.

5.1 Google Analytics

It is important to us to design our internet pages as optimized as possible and to make them attractive for our visitors. For this it is necessary for us to know how our website is used. For this purpose we use the service Google Analytics of Google.

Data collected:
Using Google Analytics, we record when you access which pages of our website, your rough location and data on the device you are using (e.g. device type, operating system or screen resolution). This data is processed pseudonymized, i.e. in such a way that the data is not linked to your directly identifying details (e.g. name, e-mail address).

How it works:
Google Analytics uses cookies, which are text files placed on your device, to analyze how users of the website interact with the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States.

On our website, IP anonymization has been activated so that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.

Purpose of data processing:
On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and, where appropriate, to provide us as website operators with other services relating to website activity and internet usage.

Storage time:
Your Google Analytics data will be deleted after 14 months.

Possibility to object:
You may opt-out of data collection and use by Google Analytics by downloading and installing this browser plug-in.

Legal basis:
The processing of your data takes place on the legal basis of Art. 6 para. 1 f) GDPR (balancing of interests). Our interest lies in being able to evaluate how our website is used and to adapt and optimize our website on the basis of the results.

5.2 GOOGLE Remarketing

We use Google Remarketing to show you interest-related advertising in the Google advertising network. A cookie is used to record your visit to our website. Google Remarketing is a function of the AdWords advertising network.

Data collected:
We use cookies and other technologies (e.g., program code or invisible images) on our websites that Google uses to record that you have visited our website and, where applicable, which pages you have visited there or what activities you have carried out (e.g., ordered a newsletter or viewed pages about certain products). These cookies enable Google to recognize you as a visitor to our website on other Internet pages of Google's advertising network.

Purpose of use:
Google Remarketing allows us to target ads to you on Google and other Google advertising network websites based on your visit and activities on our website.

Storage time:
We delete the data collected by Google Remarketing after 12 months.

Possibility to object:
You can opt out of remarketing by doing one of the following:

• You can deactivate interest-related ads from Google in the Google display settings

• You can disable the use of cookies for interest-based advertising via an advertising network initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp.

• You can permanently deactivate the use of cookies by Google by following the link below and downloading and installing the plug-in (browser extension) provided there: https://www.google.com/settings/ads/plugin

• You can configure your browser so that it generally does not accept cookies. However, the use of our website may then only be possible to a limited extent.

Legal basis:
The processing of your data takes place on the legal basis of Art. 6 para. 1 f) GDPR (balancing of interests). Our interest lies in optimizing our advertising on Google and Google's advertising network and in displaying targeted, interest-related advertising to visitors to our website.

5.3 GOOGLE Adwords and conversion tracking

We enable Google to collect certain activity from you on our website so that we can optimize our ads on Google and the Google advertising network.

Data collected and how it works:
If you have reached our website via an advertisement on Google or from the Google advertising network, Google may already have placed a cookie, i.e. a small text file, on your computer that has a lifespan of 30 days (so-called "conversion cookie").

If you carry out certain activities on our site, e.g. call up a page, fill out a form or order a newsletter, we integrate a code provided by Google on the relevant page. This code causes your browser to connect to Google and transmit the content of the conversion cookie. This way Google gets the information that your click on a particular ad has led to a particular activity (conversion) on our website and provides us with the result in a processed, statistical and non-personal form ("conversion tracking").

This way, we can optimize our ads that we place with Google by seeing what ads lead to what activity on our website. We only receive statistical data from Google, without reference to your person. Google collects your information in a pseudonymized form, i.e. it does not link it to any information that directly identifies you (e-mail address, Google user account) unless you have given Google your consent.

You can object to conversion tracking:

• You can configure your browser so that it does not accept cookies. However, the use of our website and services may then only be possible to a limited extent.

• You can deactivate interest-related ads from Google in the Google display settings: https://support.google.com/ads/answer/2662922?hl=en
  

Legal basis:
The processing of your data takes place on the legal basis of Art. 6 Para. 1 f) GDPR (balancing of interests). Our interest lies in optimizing our advertising on Google and Google's advertising network.

6. OTHER DATA PROCESSING RELATED TO THE WEBSITE

6.1. Google Fonts

We use Google Fonts to ensure uniform font representation on our website.
The provider of Google Fonts is Google Inc. (hereinafter "Google"), 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

When visiting our website, your browser loads the embedded fonts into its cache. To do this, a direct connection between your browser and a Google server is established. We do not know what personal data Google uses.

Google‘s processing of your data is its own responsibility. We are therefore not responsible for any data processing related to this service. Nevertheless, we would like to inform you, to the extent possible, about the collection of data in connection with this service, based on Art. 13 GDPR.

Purpose of data processing:
The data mentioned above will be used so that we can make our website more consistent and therefore more appealing and user-friendly.

Legal basis:
The legal basis for the use of this service is Art. 6 para. 1 point (f) GDPR. We have a legitimate interest in increasing the attractiveness of our website.

Storage time:
Since we have no influence over Google’s additional processing and use of data, we cannot say anything about how long Google stores this data.

Data transfer:
Your data will be sent to Google's servers in the United States. The possibility exists that Google transmits this data to third parties.

Further information:
Click the following link to view Google‘s privacy policy: https://policies.google.com/privacy?hl=de#infochoices

6.2. YouTube

We have integrated the plugin for the video portal YouTube on our website. The provider is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066 USA (hereinafter "YouTube").

When visiting our website, your browser will establish a direct connection to a YouTube server in the US. YouTube then transmits the video content embedded on our website to your browser.

As a result, YouTube processes at least the following data:
- your IP address
- Referer URL

YouTube‘s processing of your data is its own responsibility. We are therefore not responsible for data processing related to this service. Nevertheless, we would like to inform you, to the extent possible, about the collection of data in connection with this service, based on Art. 13 GDPR.

Purpose of data processing:
The above data is used to display YouTube platform videos on our website.

Legal basis:
The legal basis for the use of the YouTube plug-in is Art. 6 paragraph 1, point (f) GDPR. We have a legitimate interest in increasing the attractiveness of our website.

Storage time:
Since we have no control over YouTube’s additional processing and use of data, we cannot say how long YouTube stores this data.

Data transfer:
Your data will be sent to YouTube's servers in the United States. The possability exists that YouTube transmits this data to third parties.

Further information:
Click the following link to view YouTube’s privacy policy: https://policies.google.com/privacy?hl=de&gl=de

7. SOCIAL MEDIA LINKS

We have decided not to embed so-called social media plugins on our website and, instead, only link to the pages of the companies listed below to protect your data:

• Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
• LinkedIn Ireland Unlimited Company, Wilton Place,, Dublin 2, Irland
• XING SE, Dammtorstraße 30, 20354 Hamburg, Deutschland
• Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland
• Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA

If you follow a link, you will be redirected to the website of the respective company. Any processing of your personal data will be outside our area of responsibility. Nevertheless, we would like to fulfill our duty to inform under Art. 13 GDPR as far as we can.

Purpose of social media links:

We set the links to make our website appealing. Furthermore, the links are set to promote the communicative nature of the Internet and thus freedom of expression.

Legal basis:

The legal basis for the creation of links is Art. 6 para. 1 point (f) GDPR. We have a legitimate interest in increasing the attractiveness of our website.

Storage time:

Since we have no influence over the further processing and use of the data by the companies identified above, we cannot say anything about how long the companies store the data.

Data transfer:
If you follow a link, depending on the company, your data is sent to servers in third countries, such as the US. The possibility exists that the companies transmit this data to third parties.

Further information:

On the websites of the companies listed above you will find further information on their respective privacy policy.

8. RIGHTS OF THE DATA SUBJECT

According to the GDPR, you are the person affected by our processing of your personal data and you have the following rights for which we are "responsible":

Right of access, Art. 15 GDPR
You have the right to request information from the person responsible for the processing of your personal data. In this case, you have a right to information about the information listed in Art. 15 GDPR.

Right to rectification, Art. 16 GDPR
Pursuant to Art. 16 GDPR you have the right to the correction or completion of personal data concerning you by the person responsible, insofar as the personal data relating to you are incorrect or incomplete.

Right to erasure (‘right to be forgotten‘), Art. 17 GDPR
Pursuant to Art. 17 GDPR, you have the right to demand that the person responsible delete your personal data.

Right to restriction of processing, Art. 18 GDPR
As the data subject, you have the right, under the conditions of Art. 18 GDPR, to require the person responsible to restrict the processing of your data.

Right to notification, Art. 19 GDPR
Pursuant to Art. 19 GDPR, you have the right to be informed about the individuals or entities to whom your personal data have been disclosed and regarding whom the person responsible has informed you of your rights to rectification, deletion, or restriction of your data.

Right to data portability, Art. 20 GDPR
Under the conditions of Art. 20 GDPR you have the right to receive your personal data in a structured, common, and machine-readable format. You have the right, under the conditions of Art. 20 GDPR, to transfer this data to another person without hindrance by the person responsible in providing the personal data. You have the right to ensure that the personal data are transmitted directly from one responsible person to another responsible person, to the extent that this is technically feasible.

Right to object, Art. 21 GDPR
You have the right to object at any time to the processing of your personal data, on grounds relating to your particular situation, which are based on points (e) or (f) of Article 6 (1), including profiling based on those provisions. This also applies if personal data are processed for direct marketing purposes. You have the right to object at any time to the processing of your personal data for direct marketing; this includes profiling to the extent that it is related to such direct marketing.

Right of automated individual decision-making, including profiling, Art. 22 GDPR
As a data subject, you have the right, pursuant to Art. 22 GDPR, not to be subject to a decision based solely on automated processing – including profiling – that will have legal effects on you or similarly affect you considerably.

Right to withdraw consent, Art. 7 GDPR
According to Art. 7 GDPR, you have the right to withdraw your consent to the processing of your personal data at any time.

Right to lodge a complaint with a supervisory authority, Art. 77 GDPR
Without prejudice to other legal remedies, you have the right to complain to a supervisory authority in accordance with Art. 77 GDPR if you believe that our processing of your personal data violates the GDPR.