We take the protection of your personal data very seriously and treat your personal data confidentially and in accordance with the legal data protection regulations as well as this data protection declaration.
Below is some information on our processing of your personal data and your rights under applicable data protection laws.
1. Who processes my data and who can I contact about this processing?
DIN Software GmbH
Contact our external data protection officer at:
DIN Software GmbH
Data Protection Officer
3. Which data do we use?
You can visit our sites without telling us who you are, except when you send us an e-mail or contact information, or order our products and/or services. We generally only use such data as necessary to answer your query or for completing your order.
4. Why do we collect your data and on which legal basis?
We process your personal data in accordance with the EU's General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), as follows:
a) To fulfil contractual obligations (Art. 6 (1) point (b) GDPR)
Your personal data is processed for the performance of a contract , and to take steps at your request prior to entering into the contract.
b) To fulfil legitimate interest/balancing of interests conditions (Art. 6 (1) point (f) GDPR)
Where necessary, we process your data for reasons beyond fulfilling the contract, e.g. for the purposes of the legitimate interests pursued by us or by a third party. Examples:
- The establishment of legal claims or for their defence in cases of dispute
- Direct advertising
- Ensuring IT security
c) Where you have given your consent (Art. 6 (1) point (a) GDPR)
Where you have given us your consent to process your personal data for specific purposes (e.g. signing up for a newsletter), the processing of this data based on your consent is legitimate. The consent can be revoked at any time. Please note that such revocation of consent only applies from the time of revocation onwards. Any processing that had taken place before that time is not affected.
d) Where we have a legal obligation (Art. 6 (1) point (c) GDPR) or the processing is in the public interest (Art. 6 (1) point (e) (GDPR)
Our company is subject to various legal obligations (e.g. in accordance with the German Commercial Code, tax laws, etc.).
5. With whom do we share your data?
DIN Software GmbH belongs to the DIN Group which also includes DIN, the German Institute for Standardization and Beuth Verlag. All members of the DIN Group are bound by the same data protection directives. Your data is shared with the departments within the DIN Group who need this data to fulfil our contractual and legal obligations. We may also share your data with our service providers and agents for the purposes mentioned above as long as confidentiality is maintained and data protection provisions are met.
6. Is my data shared with a third Country?
Data is not shared with countries outside the EU or EEA ("third countries").
7. How long do you keep my data?
We process and store your personal data as long as is necessary to fulfil our contractual and legal obligations. When this data is no longer necessary for meeting contractual and legal obligations, it will be regularly deleted, except where - limited - data retention periods are required by commercial and tax laws such as the German Commercial Code and the German Fiscal Code. The retention periods specified in the above-mentioned Codes is six to ten years.
8. What are my rights in terms of data protection?
In accordance with the General Data Protection Regulation (GDPR) you have the right of access (Art. 15), right of rectification (Art. 16), right to erasure (Art. 17), right to restriction of processing (Art. 18), right to object (Art. 21) and the right to data portability (Art. 20). Furthermore, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR in connection with Art. 19 of the German Federal Data Protection Act (BDSG)).
The link below gives a list of supervisory authorities in Germany and elsewhere, and their contact information: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
Your consent to process personal data can be revoked at any time. Please note that such revocation of consent only applies from the time of revocation onwards. Any processing that had taken place before that time is not affected.
To exercise your rights please contact our Data Protection Officer (see above).
9. Is the provision of personal data obligatory?
If you have a business relationship with us or have ordered our services, you must provide the personal data necessary for performing that business function or service, and for fulfilling all associated contractual obligations or where we are subject to the legal obligation to collect such data. As a rule, without this data we are obliged to reject the order or conclusion of the contract, or cannot continue to carry out an existing contract and may need to end such contract.
10. Do you use any automated decision-making, including profiling?
We do not use any automated individual decision-making, including profiling, in accordance with Art. 22 of the General Data Protection Regulation (GDPR).
11. Information on your right to object in acc. with Art. 21 of the GDPR
a) Individual right to object
You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data. The prerequisite for this is that the processing is in the public interest or on the basis of legitimate interest/balancing of interests. This also applies to profiling. In the case of such an objection, we will no longer process your personal data. An exception to this is if we can demonstrate compelling legitimate grounds for the processing of this data which override your interests, rights and freedoms, or the data serve the establishment, exercise or defence of legal claims.
b) Objections to using your data for direct marketing
Sometimes we use your personal data for direct marketing purposes. You have the right to object at any time to the processing of your data for such marketing; this also applies to profiling to the extent that it is related to direct marketing. In the case of such an objection, we will no longer process your personal data for this purpose. Objections can take any form and should be sent to the address for our Data Protection Officer given above.
12. Which data do you use for the website?
a) Information on use
When you visit one of our websites we receive data related to this use. Such data includes your screen resolution, browser version, internet access, operating system, language, plug-ins, where you are (in terms of country or region), and search engines. This data will only be used for statistical purposes. It will not be passed on to third parties and will not be analysed in relation to the user.
You can change your cookie settings at any time under the menu item "Cookie settings" at the bottom of every page.
13. How secure is my data?
To protect your personal data, we use a secure transmission process, Secure Socket Layer (SSL) transmission, in order to handle customer data. All information transmitted by means of this secure method is encrypted before it is sent. Your personal data is stored and processed on computers and other data centre equipment that are protected by industry standard security technology (e.g. firewalls, password protection, access control, etc.).
14. Which plug-ins and tools does your website use?
We use YouTube plug-ins to incorporate videos on our site. YouTube is a product of YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you open a page of our website which contains a YouTube plug-in, your browser establishes a direct connection with YouTube’s servers. YouTube is thus informed that your browser has visited the corresponding page of our website. If you are logged in as a registered user of YouTube, YouTube will add this information to your personal user profile. You can prevent this information from being added to your user account by logging out of YouTube. Further information on data processing by YouTube (Google) can be found in YouTube's privacy statement at https://policies.google.com/privacy?hl=en&gl=en
b) Google Analytics
We only use Google Analytics with activated IP anonymisation . This means that Google will truncate your IP address within Member States of the European Union as well as in other parties to the Agreement on the European Economic Area. Only in exceptional cases is your full IP address transmitted to a Google server in the USA and stored there. Google will not associate your browser’s IP address transmitted for Google Analytics purposes with any other data held by Google. You can adjust your browser settings to prevent cookies from being stored. Furthermore, you can prevent the transmission of data generated by the cookie about your use of the website to Google, and prevent its processing by Google by downloading and installing the following browser plug-in: https://tools.google.com/dlpage/gaoptout?hl=en
c) Facebook plug-ins
Our website uses plug-ins provided by the social network Facebook.com, operated by Facebook Inc., 1601 S. California Avenue, Palo Alto, CA 94304, USA.
When you visit a page of our website, your browser does not automatically establish a direct connection to Facebook servers. A connection only takes place if you click the link to Facebook. In this case, Facebook will be informed that you have visited our site with your IP address
We would like to point out that as a provider of our website, we do not receive from Facebook any knowledge of the content of the transmitted data nor its use. For further information go to Facebook's privacy statement at https://www.facebook.com/about/privacy?ref=new_policy
Current as of April 2018