Privacy statement portal

General

With this privacy statement, tectuality GmbH informs you about the use of your personal data when providing the analytics software sensalytics for use via the Internet in accordance with our General Terms and Conditions. We only collect data from you to in order provide the sensalytics software and for security reasons. We take the protection of your personal data seriously and adhere to all applicable data protection laws and regulations of the Federal Republic of Germany. In particular, we collect, process and use your personal data only where you have given your consent or where permitted by law.

Please note that we only provide the sensalytics software. You as a customer are responsible for the lawful collection, processing and use of personal data within the scope of your use of sensalytics. We process the data collected by you exclusively as a data processor and are strictly bound to your instructions. In this respect, this privacy statement does not apply, and we would like to point out that you, inter alia, shall inform the data subjects about the data processing for which you are responsible when using sensalytics.

Personal data

Personal data means any information relating to an identified or identifiable natural person (data subject). Personal data can be used to identify or contact a data subject. This includes, for example, the name, address, email, telephone number or an IP address assigned by an Internet provider. Information that does not identify a person shall be no personal data (anonymous data).

Log files

sensalytics can only be used as a software-as-a-service application via the Internet or the domain name sensalytics.net, respectively. When using sensalytics, your Internet browser automatically transmits certain usage data or server log files to us due to technical reasons. This, inter alia, includes the following:

- date and time of access,
- URL (address) of the referring app,
- file retrieved,
- amount of data sent,
- host name of the accessing computer (IP address),
- browser type and version,
- operating system.

This information is used by us exclusively for technical administration of sensalytics and to prevent illegal actions relating to sensalytics. We reserve the right to check these protocol data retrospectively if concrete indications give rise to justified suspicion of an illegal act. As far as personal data is processed in this regard, we do so solely to protect our legitimate interest to control illegal acts in connection with our website and the sensalytics application, respectively. The legal basis for the processing is Article 6 (1) (f) GDPR. Personal data will be stored for a maximum period of six months if there are no indications of any illegal use.

Data required for the use of sensalytics

The use of sensalytics requires you to register. Required information can be found in the input fields. Information about your person, such as your name, company, email address, payment data or language settings, will only be used for the purpose of your use of sensalytics according to our General Terms and Conditions and the performance of the respective contract as well as necessary user administration. This information will only be disclosed to third parties where you have given your consent or where there is a legal basis. The legal basis for the processing is 6 (1) (b) GDPR. Personal data will only be stored as long as it is necessary for the performance of the contract. Where we are required to store your data longer to comply with a legal obligation (e.g. due to commercial recording obligations), the processing of your data for any other purpose will be restricted.

Cookies

When providing sensalytics cookies are used to some extent. Cookies serve to make sensalytics more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser. Session cookies are automatically deleted after closing sensalytics.net. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser the next time you visit. You can set your browser in such a way that you are informed about the setting of cookies and allow cookies only in individual cases. Further, you can exclude the acceptance of cookies for certain cases or in general. You can also activate the automatic deletion of cookies when closing the browser. When deactivating cookies, the functionality of sensalytics may be restricted. More information about cookies can be found here http://www.allaboutcookies.org. If we process personal data in this regard, we do so for the purpose of our legitimate interests in improving the performance of our website. We safeguard your interests by only collecting the information contained in the cookies pseudonymised and by not being able to attribute this information to a natural person. Furthermore, the information contained in the cookie is not stored by us. We only process cookie information upon visiting our website. Legal basis for the processing is Article 6 (1) (f) GDPR.

Content Delivery Networks

For our help area we use the service MaxCDN (BootstrapCDN) of NetDNA, LLC (3575 Cahuenga Blvd. West, Suite 330, Los Angeles, CA 90068, USA MaxCDN). This is a Content Delivery Network (CDN) which shortens the loading time of common Java-Script libraries by transferring the files from fast, local or servers with low utilization. MaxCDN is integrated via a Java script code and requires MaxCDN to perceive the IP address of the users. The IP address is required to send the content to the user's browser. By using MaxCDN it is also possible to call servers of MaxCDN outside the EU (e. g. in the USA) when using the software. The contents of our service and communication are not processes via MaxCDN. Please note that MaxCDN has its own privacy policy, which is independent of ours. Please read MaxCDN's privacy policy at https://www.maxcdn.com/legal/ privacy before using our software. MaxCDN is based on Java script code, so you can prevent execution altogether by disabling Java script in your browser's settings or installing a Java script blocker. Please note that our website may not be displayed correctly then.

Transfer to third parties

As a matter of principle, we will only disclose your personal data where we are obliged to do so by law or based on an official or court order or if you have given your consent. However, we reserve the right to commission third parties to process your data on our behalf. These third parties shall act exclusively and strictly in accordance with our instructions as commissioned data processors on our behalf and shall only receive the data that they require for the specific work commissioned by us. The following data processors carry out processing for us:

- We use cloud and hosting services of Amazon Web Services, Inc.

Your rights

As a data subject, you have the right to assert the rights of the data subject vis-à-vis us at any time. In particular, you have the following rights:

• You have the right to obtain information whether and if applicable to which extent we process personal data concerning you or not.
• In the case of processing of personal data concerning you, you have the right to access information, in particular, the following information: stored data concerning you, purpose(s) of the processing, categories of data, recipients to whom we disclose data, duration of the storage.
• You have the right to request the rectification of your data without undue delay, as far as they are inaccurate or incomplete.
• You have the right to request the deletion of your personal data from us without undue delay.
• You have the right to withdraw your consent given vis-à-vis us concerning the processing of your data at any time.
• You have the right to let the processing of your personal data be restricted.
• You have the right to receive the personal data concerning you which you had provided to us in a structured, standard and machine-readable format, and to transmit these data to another controller.

Your right to object according to Article 21 GDPR

In accordance with Article 21 (1) and (5) GDPR, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you, which may be carried out on the basis of Article 6 (1) (e) or (f) GDPR, with effect for the future; this also applies to a profiling (which we do not carry out) based on these provisions.

Data Controller

If you have any questions regarding privacy issues, please contact

tectuality GmbH
Liebknechtstr. 33
70565 Stuttgart
Germany
Email: privacy@sensalytics.net

Our data protection officer

In addition, you have the possibility to contact our data protection officer:

privacy@sensalytics.net

Supervisory authority

In case of complaints you can contact a supervisory authority of the EU or of an EU Member State at any time.

Date 05/2018