Data Protection-Information of the allocation Network GmbH (version 2.0; Stand 24.05.2018)
On 25 May 2018, the provisions of the basic data Protection Regulation [Http://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32016R0679&from=EN] (hereinafter: DSGVO) apply throughout Europe. In the following, we would like to inform you about the processing of personal data carried out by the allocation in accordance with this new regulation (comparisons art. 13 DSGVO). Please read our data protection information carefully. If you have any questions or comments about this data protection information, you can send it to the email address given in point 2 at any time.
- 1 Overview
- 2 Name and contact details of the controller and the company data protection officer
- 3 purposes of data processing, legal bases and legitimate interests pursued by the allocation or a third party, and categories of recipients
- 3.1 accessing our website/application
- 3.2 conclusion, execution or termination of a contract
- 3.3 Data processing for advertising purposes
- 3.4 Online presence and website optimization
- 3.4.1 Cookies-General Information
- 3.4.2 Google Analytics
- 3.4.3 Using Google Maps with referral components
- 3.4.4 Use of Google Webfonts:
- 3.4.5 Targeting
- 3.4.6 Social media plug-ins
- 4 Recipients outside the EU
- 5 Automated decision-making in individual cases including profiling
- 6 Privacy and third party websites
- 8 Your rights
- 9 Security
- 10 Information on registering for webinars
- 11 Login to the internal area (DigiMember)
The following data protection instructions inform you about the type and extent of the processing of so-called personal data by the allocation. Personal data is information that is directly or indirectly attributable to your person.
Data processing by the allocation can be divided into two main categories:
– For the purpose of contract processing, all data required for the execution of a contract with the allocation will be processed. If external service providers are also involved in the execution of the contract, e.g. logistics companies or payment service providers, your data will be passed on to the required extent.
– With the call of the website/application of the allocation, different information is exchanged between your device and our server. This may also be personal data. The information collected in this way is used, among other things, to optimize our website or to display advertisements in the browser of your terminal.
According to the requirements of the DSGVO you have different rights which you can assert to us. This includes, among other things, the right to appeal against selected data processing, in particular data processing for advertising purposes. The possibility of contradiction is emphasized in terms of printing/can be quickly identified by the following symbol/…
20354 Hamburg, Germany
Name and contact details of the controller and the company data protection officer
This data protection information applies to data processing by the
Allocation Network GmbH
Arabellastraße 17 81925 Munich, Germany
Management: Bernhard Soltmann, Andreas Mann, Andreas Prohaska
Registered office: Munich, HRB No. 122527 District Court Munich
purposes of data processing, legal bases and legitimate interests pursued by the allocation or a third party, and categories of recipients
accessing our website/application
When you call up our website/application, the browser that is used on your device automatically sends information to the server of the incite online GmbH, our website/application, and temporarily in a so-called log file Stored. We have no influence here. The following information is also recorded without your intervention and stored until automated deletion:
– The IP address of the requesting Internet-enabled device,
-The date and time of the access,
-the name and URL of the retrieved file,
– the website/application from which access was made (referrer URL),
– the browser and if necessary you are using. The operating system of your Internet-enabled computer and the name of your access provider.
The legal basis for the processing of the IP address is Article 6 para. 1 lit. f) DSGVO. Our legitimate interest follows from the purposes of data collection listed below. At this point, it is also pointed out that we are not able to draw any direct conclusions about your identity from the collected data and are not drawn by us.
The IP address of your terminal as well as the other data listed above are used by us for the following purposes:
– Ensuring a smooth connection,
– Ensuring a comfortable use of our website/application,
– Evaluation of system security and stability.
The data is stored for a period of 14 26 days and is then automatically deleted. Furthermore, we use so-called cookies, tracking tools, targeting methods and social media plug-ins for our website/application. The exact procedures and how your data will be used are described in more detail in section 3.4 below.
If you have consented to so-called geolocalisation in your browser or operating system or other settings of your terminal, we use this function to provide you with your current location-specific services (e.g. the location of the Nearest branch). We process your processed location data exclusively for this function. Stop using the data will be deleted.
conclusion, execution or termination of a contract
The object of the allocation is the sale or rental of software and services. In this context, we process the data required for the conclusion, implementation or termination of a contract. These include:
-First name, surname
– Billing and delivery address
– Billing and payment data
– Date of birth
– Order data, such as the type and quantity of the goods or services used,
– Credit information and payment terms
– Data due to complaints
– Identification and authentication data, such as ID data, signature, company stamp and passwords
– Advertising and sales data incl. Target group-specific information
– Data in the context of ongoing contact maintenance or business initiation, such as data on the communication taking place, incl. Date and time and purpose
– Copies of correspondence, if this is done in writing, by e-mail or by fax
The legal basis for this is Article 6 para. 1 lit. b) DSGVO, i.e. You provide us with the data on the basis of the contractual relationship between you and us. As far as we do not use your contact data for commercial purposes (see 3.3), we save the data collected for the processing of the contract up to the expiry of the legal or possible contractual warranty and warranty rights. At the end of this period, we retain the information of the contractual relationship required by trade and tax law for the periods specified by law. For this period (regularly ten years from the conclusion of the contract), the data will be processed again solely in the event of a review by the financial administration.
In the event of a delay in payment, if the other legal requirements are met, we will send the necessary data to a company responsible for asserting the claim. Legal bases for this are both article 6 para. 1 lit. b) as well as article 6 para. 1 lit. f) DSGVO. The assertion of a contractual claim is to be regarded as a legitimate interest within the meaning of the second stipulation. If the other legal requirements are met, we also forward information about the delay of payment or any loss of receivables to the credit bureaus cooperating with us. The legal basis for this is Article 6 para. 1 lit. f) DSGVO. The justified interest in this is due to our and the interest of third parties in the reduction of contractual risks for future contracts.
Data processing for advertising purposes
The following statements refer to the processing of personal data for advertising purposes. The DSGVO declares such data processing on the basis of Article 6 para. 1 lit. f) as basically conceivable and as a legitimate interest. The duration of the data storage for advertising purposes does not follow rigid principles and is based on the question whether the storage is required for the commercial approach. In the allocation, we also follow the principle of deleting data for advertising use after 12 months. As in the case of your opposition proceedings, please refer to para. 3.3.3.
On our website we offer you the possibility to register for our newsletter. The processing of your e-mail address is based on your consent (art. 6 para. 1 lit. a) DSGVO). In order to be sure that no errors have been made when entering the email address, we may use the so-called double-opt-in procedure: After you have entered your email address in the registration field, we will send you a confirmation link. Only when you click on this confirmation link will your email address be added to our mailing list. You can revoke your stated consent at any time with effect for the future. For this, a short note by email to the email address specified under 2.
Order data processing with KLICKTIPP
We have signed a contract for the order data processing process with our email marketing service Provider click-Tip. This ensures that our service provider will comply with the strict requirements of the German data protection law in all respects when sending the newsletter. This also ensures that your data is stored only within the EU with a high level of protection. Your data will not be stored on servers outside the EU.
If you would like to receive the newsletter offered on the website, we need an e-mail address as well as information which will allow us to verify that you are the owner of the specified e-mail address and to receive the newsletter are in agreement. We use this data exclusively for the dispatch of the requested information and do not pass it on to third parties. You can revoke your consent to the storage of the data, the e-mail address and its use for the sending of the newsletter at any time, for example via the “unsubscribe” link in the newsletter.
Online presence and website optimization
If you have a customer account in the allocation and are logged in or activate the function “Stay logged in”, the information stored in cookies will be added to your customer account.
For the purpose of the demand-based design and continuous optimization of our pages we use on the basis of Article 6 abs. 1 lit. f) DSGVO Google Analytics, a web Analysis service of Google Inc. (“Google”). In this context, pseudonymised usage profiles are created and cookies are used. The information generated by the cookie about your use of this website, such as
– Operating system used,
– Referrer URL (the previously visited page),
– Hostname of the accessing computer (IP address),
-Time of the server request,
are transferred to a Google server in the United States and stored there. The information is used to evaluate the use of the website, to compile reports on the website activities and to provide further services related to the use of the website and the Internet for the purposes of market research and Appropriate design of these Internet pages. This information may also be transferred to third parties if this is required by law or if third parties process this data in order. In no case will your IP address be merged with other data from Google. The IP addresses are anonymized so that an assignment is not possible (so-called IP-masking).
You can prevent the installation of the cookies by a corresponding setting of the browser software; However, we would point out that in this case, not all functions of this website can be used in full. You can also prevent Google from capturing the data generated by the cookie and related to your use of the website (including your IP address) and the processing of such data by using this browser add-on
Download and install. As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from capturing it by clicking this link. An opt-out cookie is set to prevent the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must reset the opt-out cookie. For more information about privacy related to Google Analytics, visit the Google Analytics Web site
Using Google Maps with referral components
On our site we use “Google Maps” in combination with the so-called “share function” for easier orientation and locating our branches. “Google Maps” is a service of the company Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter “Google”.
With every single call to Web pages where a Google Maps map is embedded, Google sets a cookie to process your user settings and data when you view the Web page you are visiting. Please note that this cookie is usually not deleted by closing the browser, but expires after a certain amount of time, as long as it is not manually deleted by you before.
You can prevent this data processing by Google and the loading of the embedded content, for example by disabling the Java script function in your browser to disable the service of “Google Maps”.
As well as the additional terms and conditions for Google Maps
Use of Google Webfonts:
The design of our web pages uses specially designed fonts, Google fonts. Google Fonts is a web Design Wizard of Google Inc. (“Google”). The use of Google Webfonts causes certain fonts to be retrieved from a Google server in the United States when we build our website. During this retrieval of the font, the Web page in your browser is also transmitted to the Google server, which of our individual internet pages you access. Also, the IP address of your terminal’s Internet connection is stored when you call this Internet site from Google.
The targeting measures listed below and used by us will be based on article 6 para. 1 lit. f) DSGVO performed. We want to ensure that the targeted targeting measures are used to show you only your actual or supposed interest-oriented advertising on your terminals. Not to bother you with advertising impressions that are uninteresting for you is in your interest as well as in our interests.
Our website collects and evaluates information about the optimization of advertisements using cookies. This information includes, for example, information on which of our products you are interested in. The recording and evaluation is exclusively pseudonymous and does not allow us to identify you. In particular, the information is not merged with personal data to you. On the basis of the information we can show you on our page offers that are specifically tailored to your interests, as they result from your previous user behavior. The cookie is automatically deleted after 26 days.
We also use re-targeting technologies at times. This allows us to make our online offer tailored to you more interesting. A cookie is set to be used to collect interest data using pseudonyms. On the basis of this information you will be shown on the websites of our partner interest related advertisements to our offers. No personal data are stored directly and no user profiles with personal data are brought together. The cookie is stored for a period of 14 and is then automatically deleted.
You can prevent the explained targeting technologies by using a corresponding cookie setting in your browser (see also 3.4.1). In addition, you have the option of preference-based advertising using the preference manager that can be accessed here
Social media plug-ins
We use our website on the basis of Article 6 para. 1 lit. f) DSGVO Social plug-ins of social networks Facebook, Google + and Twitter to make our company more aware of this. The underlies advertising purpose is to be regarded as a legitimate interest within the meaning of the DSGVO. The responsibility for the data-protection-compliant operation is to be guaranteed by their respective providers. The integration of these plug-ins by us may be done by means of the so-called two-click Method
To protect visitors to our website in the best possible way.
On our website are so-called plug-ins of the social network Facebook used by the Facebook Inc. is offered. The Facebook plug-ins are marked with a Facebook logo or the “like” or “share” addition. An overview of the Facebook plug-ins and their appearance can be found behind the following link
If you activate such a plug-in (first click), your browser establishes a direct connection to the servers of Facebook. The content of the plug-in is transmitted directly from Facebook to your browser and integrated into the page. Through this integration, Facebook receives the information that your browser has called the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged on to Facebook. This information (including your IP address) is transmitted from your browser directly to a server from Facebook to the USA and stored there. If you are logged in to Facebook, Facebook can directly assign your visit to our website to your Facebook profile. When you interact with the plug-ins, such as the like button, this information is also sent directly to a server from Facebook and stored there. The information is also published on your Facebook profile and displayed to your Facebook friends.
If you do not wish Facebook to assign the information collected about your visit to our website directly to your Facebook profile, you must log out of Facebook before you visit our website. You can also completely prevent the Facebook plug-ins from loading with the Internet-accessible add-ons for your browser, such as the “Facebook blocker”.
LinkedIn is certified under the Privacy Shield Agreement and provides a guarantee to comply with European data protection law
LinkedIn is certified under the Privacy Shield Agreement and provides a guarantee to comply with European data protection law
Contact form for inquiries, registrations, news and applications
If you send us inquiries, messages, registrations or applications via contact form, your information will be stored in our enquiry form, including the contact details and attachments you provided there for the purpose of processing. Your data will be transferred to us via SSL encryption. We do not pass on your data without your consent and use it exclusively for further contact with you.
Our website uses plugins of the Google-powered YouTube page. The site operator is the YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our sites equipped with a YouTubePlugin, a connection to the servers of YouTube is established. This tells the YouTube server which of our pages you have visited.
If you are logged in to your YouTube account, allow YouTube to assign your browsing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.
Our website uses plugins of the Vimeo video portal. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
When you visit one of our sites equipped with a Vimeo plug-in, you will be connected to the servers of Vimeo. This tells the Vimeo server which of our pages you have visited. Also, Vimeo obtains your IP address. This also applies if you are not logged in to Vimeo or you do not have an account with Vimeo. The information that Vimeo collects is sent to the Vimeo server in the United States.
When you are logged in to your Vimeo account, you enable Vimeo to directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your Vimeo account.
For more information about how to handle user data, see the Vimeo privacy statement at: Https://vimeo.com/privacy.
Recipients outside the EU
With the exception of the processing described in 3.4, we do not pass on your data to recipients established outside the European Union or the European Economic Area. The processing activities referred to in 3.4 result in a data transmission to the servers of the providers of tracking and Targetingtechnologien. These servers are located in the United States. The data is transmitted in accordance with the principles of the so-called privacy shield
And on the basis of so-called standard contractual clauses
The European Commission.
Automated decision-making in individual cases including profiling
You have the right not to be subjected to a decision based solely on automated processing, including profiling, which will have a legal effect on you or, in a similar manner, significantly affect you. This does not apply if the decision
(1) The conclusion or fulfilment of a contract between you and us is necessary,
(2) is permissible on the basis of legislation of the Union or of the Member States to which the person responsible is subject, and where such legislation contains appropriate measures to safeguard their rights and freedoms and their legitimate interests;
(3) with your express consent.
However, these decisions may not be based on specific categories of personal data referred to in article 9 ( 1 DSGVO, unless article 9 ( 2 lit. A or G DSGVO and appropriate measures have been taken to protect the rights and freedoms and their legitimate interests.
As regards the cases referred to in (1) and (3), the person responsible shall take appropriate measures to safeguard the rights and freedoms and their legitimate interests, including at least the right to a person’s intervention on the part of the party responsible, Position and to challenge the decision.
In the context of the initiation of business relations, we are entitled-within the scope of the legally permissible-for the purpose of the decision on the justification, execution or termination of the purchase contract to examine the risk of defaults on the customer side.
In this respect, probability values for the future behaviour of the customer are collected and processed. To calculate these probability values, the customer’s address data and credit rating data are also used.
For the examination, we take advantage of services of credit bureaus, such as Schufa Holding AG (Wiesbaden), or other third parties and for this purpose data from you sent to them or requested from them.
The collection, processing and use of data for this purpose is carried out on the basis of Article 6 para. 1 lit. b) DSGVO.
In this legal framework, we are also entitled to transmit your data to third parties if and to the extent that this is necessary for the implementation of pre-contractual measures and fulfilment of this contract (e.g. for dispatch, invoicing or customer care) in accordance with article 6 para. 1 lit. b) DSGVO or fulfilment of a legal obligation within the meaning of article 6 para. 1 lit. c) DSGVO is required. In the necessary case, we shall, in the context of the legally permissible, also be subject to this data for the purpose of enforcement of claims in accordance with article 6 para. 1 lit. b) and/or F) DSGVO to third parties (e.g. debt collection companies).
Privacy and third party websites
In addition to the right to revoke your consent given to us, you are entitled to the following additional rights if the respective legal requirements are met:
– Right to information about your personal data stored by us in accordance with article 15 DSGVO; In particular, you can provide information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the origin of your data, if it is not Were collected directly from you,
– Right to rectify incorrect or complete correct data in accordance with article 16 DSGVO,
– Right to delete your data stored by us in accordance with art. 17 DSGVO to the extent that no legal or contractual retention periods or other legal obligations or rights for further storage are to be adhered to,
– The right to restrict the processing of your data in accordance with article 18 DSGVO, if the correctness of the data is disputed by you, the processing is unlawful, but you refuse to delete it; The person responsible is no longer in need of the data, but they need it for the assertion, exercise or defence of legal claims or they have inserted in accordance with art. 21 DSGVO opposition to the processing,
– The right to transfer data in accordance with art. 20 DSGVO, i.e. the right to receive data stored by you from us about you in a common, machine-readable format, or to request the transfer to another person in charge.
– Right to appeal to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of stay or workplace or company headquarters.
Right to Object
Under the conditions laid down in article 21 ( 1 DSGVO may be objected to data processing for reasons arising from the particular situation of the person concerned.
The above general right of objection applies to all processing purposes described in this data protection information, which are based on article 6 para. 1 lit. f) DSGVO be processed. In contrast to the special right of objection, which is directed towards the processing of data for commercial purposes (comparisons above), we are only obligated after the DSGVO to implement such a general contradiction, if you give us reasons of superiority Meaning (e.g. a possible danger to life or health). In addition, there is the possibility to contact a competent supervisory authority.
All personal data, including your payment data, will be transmitted using the standard and secure SSL (Secure Socket Layer). SSL is a secure and proven standard that can be used for E. G. Online Banking. You recognize a secure SSL connection among other things on the attached S on HTTP (i.e. https://…) in the address bar of your browser or at the lock icon in the lower part of your browser.
We also use appropriate technical and organisational security measures to protect your personal data stored by us against tampering, partial or complete loss and against unauthorized access by third parties. Our security measures are continuously improved in accordance with technological developments and the technical devices are certified by different DIN standards.
Information on registering for webinars
Visitors to this website can subscribe to the webinars offered. The registration is done here via an application form, which is integrated into the website via IFRAME and is linked to the software Webinaris. In addition, interested parties can register for the webinar via the external landing page created directly at Webinaris.
By registering for the webinars of allocation network, you agree that your first name, surname and email address will be sent to us. In addition, your data transmitted with the Webinaranmeldung and Webinarteilnahme will only be used for internal statistical analysis and will not be passed on to third parties.
The provider of Webinaris is the Webinaris GmbH, Bussardstr. 5.2, 82166 Gräfelfing. This insures for data protection verbatim as follows: Https://webinaris.com/datenschutzbestimmungen.html
Login to the internal area (DigiMember)
We offer a member area on our site, which gives you a deep insight into our software after registration. Since these pages contain sensitive information that we do not wish to make accessible to everyone, we need the following data from you to check: company, first name, name, position. The e-mail address is recorded as the access data is sent by e-mail. This information is never passed on to third parties and is only used for the internal area.
For this purpose we use the software DigiMember.
Does DigiMember store IP addresses in plain text?
DigiMember stores the IP address to prevent fraud. However, the IP address is not stored in plaintext, but as a hash value (a type of checksum). Then the IP address is no longer visible – not even for us. However, DigiMember can still check how many IP addresses the access takes.
How can I delete my data (right to “Vergessenwerden”)?
In your account under the “Delete account” function. This allows members to delete their WordPress account irretrievably.
To prevent accidental deletion, a password entry and a further confirmation, by mouse click, is required. If both are done by a member, the WordPress account and also the access to all products will be deleted.
How can members know what data they have stored?
With the DigiMember there is the function “Export of personal data”. Clicking on “Export of personal data” will create 2 files which can then be downloaded.
The member can download the data as XML and/or as a text file and obtain information about his stored personal data.