Data Protection

§ 1 Information about collection of personal data

The following outlines the principals of personal data collection when using our website. Personal data is any information that can be obtained and that relates to you personally, eg. name, address, email addresses, user behaviour.

Responsible acc. Art. 4 par. 7 of the EU General Data Protection Regulation (GDPR) is:

INNODOX Technologies GmbH
Managing Director: Dominique Nagy
Exerzierstraße 24
D-13357 Berlin

For matters relating to privacy protection, you may also reach us at: datenschutz@innodox.com or via our postal address addressing your letter to "the data protection officer".

When contacting us via e-mail or via a contact form, the data provided by you (eg your email address, if applicable your name, address and your telephone / fax number) will be stored by us to an-swer your questions. Any data collected therein will either be deleted once storage is no longer necessary, or its processing will be reduced should there be any legal obligation to retain said data.

If we use contracted service providers for specific functions of our offer or would like to use your data for advertising purposes, we will inform you in detail below about the respective processes. In doing so, we also state the determined criteria of the duration of storage.

§ 2 Your Rights

You have the following rights in relation to us with regard to your personal data:

•right to information
•right to correction or deletion
•right to restrict processing
•right to oppose processing
•right to data portability.
You also have the right to submit a complaint to a data protection supervisory authority regarding our processing of your personal data.

§ 3 Collection of personal data when visiting our website

In the case of merely informative use of the website, ie if you do not register or otherwise submitting data, we only collect the personal data that your browser transmits to our server. By browsing on our website, we collect the following data that is technically necessary for us to display the pages to you and that guarantees the stability and security (legal basis is Art. 6 par. 1 p. 1 lit.f. GDPR):
- IP-address
- date and time of the query
- time zone difference to Greenwich Mean Time (GMT)
- content of the request (concrete page)
- access status / HTTP-status code
- each transmitted amount of data
- website originating the request
- browser
- operating system and its interface
- language and version of the browser software.

In addition to the aforementioned data, cookies are stored on your computer while using our website. Cookies are small text files that are stored on your hard drive, assigned to the browser you are using, and that provide certain information to the body that sets the cookie (here, Innodox). Cookies can neither execute programmes nor transmit viruses. They serve to make the internet overall more user-friendly and effective.

Use of cookies:
a) This website uses the following types of cookies, the scope and mode of operation of which are explained below:
- transient cookies (see b)
- persistent cookies (see c)
- flash cookies (see f).
b) Transient cookies are deleted automatically, when you close the browser. These include, in particu-lar, the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the shared session. This will allow your computer to be recognized when you return to our website. The session cookies are deleted when you close the browser.
c) Persistent cookies are deleted automatically after a predetermined period, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
d) You can configure your browser setting according to your wishes, i.e. decline the acceptance of third-party cookies or all cookies. We inform you, however, that you may not be able to use all of the features of our website.
e) We use cookies to identify you for follow-up visits, so that we can keep track the ratio of our re-turning visitors statistically.
f) The Flash cookies used are not detected by your browser, but by your Flash plug-in. Furthermore, we use HTML5 storage objects, which are stored on your device. These objects store the necessary data regardless of your browser and do not have an automatic expiration date. If you do not want to process the Flash cookies, you must install a corresponding add-on, e.g. "Better Privacy" for Mozilla Firefox (https://addons.mozilla.org/en/firefox/addon/betterprivacy/) or the Adobe Flash killer cookie for Google Chrome. You can prevent the use of HTML5 storage objects by using private mode in your browser. In addition, we recommend that you delete your cookies and browser history manually at regular intervals.

§ 4 Additional functions of our website

In addition to the purely informational use of our website, we offer to contact us electronically by using a link directed to our emailprogram. As part of an emailmessage, you usually enter additional personal data that we need to contact you or to reply to your message. The data associated with the emailmessage is transmitted to us and stored. In addition to the IP address used, the date and time of sending are stored.
Legal basis is in the presence of the consent of the user Art. 6 para. 1 lit. a GDPR
If the emailcontact aims to conclude a contract, then additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.
The acquired data is deleted as soon as it has served its purpose. The data sent by email, twill be deleted once a particular conversation with the user has ended or the end of the conversation can be deduced from the circumstances. The additional personal data acquired during the dispatching process is deleted within seven days at the latest. Some of the processing of your data is done by external vendors. These vendors have been chosen carefully and commissioned, and are both bound by our instructions and monitored regularly.

The above-mentioned fundamentals of data processing also apply here.

§ 5 Restriction or retraction of the processing of your data

If you have given your consent to the processing of your data, you can retract said consent at any time. Such a retraction, once issued, restricts our ability to process your personal data for the time period following your notification.
In cases in which we base the processing of your personal data on the balancing of interests, you may object to the processing. This is the case in particular if such processing is not necessary to fulfil a contract with you, as described by us in the relevant function descriptions. If you exercise such a right to opposition, we ask you to give the reasons why we should not process your personal data in our customary manner. In the event of justified opposition, we will examine the circumstances and either stop or adjust the data processing, or advise you of our compelling and protection-worthy reasons for continuing to process your data.

Naturally, you may object to the processing of your personal data for advertising or data analysis purposes at any time. You may inform us about your objection under the following contact data:

INNODOX Technologies GmbH
Exercise course 24
D-13357 Berlin.
Telephone: +49 (0) 30/5056 675 - 0
Fax: +49 (0) 30/5056 675 - 1
E-Mail: privacy@innodox.com
Managing Director: Dominique Nagy

§ 6 Use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and that allow an analysis of the use of our website by you. This cookie-based information on how you use the website is then sent to a Google server in the USA where it is stored. However, if IP anonymisation is enabled on the website, your IP-address is first shortened by Google within the member states of the European Union or other parties to the Agreement on the European Economic Area. Only in excep-tional cases will the full IP address be sent to a Google server in the USA and shortened there. The website operator has instructed Google to use this information to analyse your use of the website, compile reports on website activity and provide further services associated with usage of the website and the Internet.
The IP-address sent to Google Analytics by your browser will not be combined with any other data by Google.
You can prevent the storage of cookies by a corresponding setting of your browser software; how-ever, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. You may also prevent the collection of the data generated by the cookies and related to your use of the website (including your IP-address) as well as the processing of this data by Google by using the browser plug-in available under the following link. in download and install: http://tools.google.com/dlpage/gaoptout?hl=de.

This website uses Google Analytics with the extension "_anonymizeIp ()". As a result, IP addresses are processed shortened, so that they cannot be related to a specific person. Insofar as the data collected about you has a personal reference, it will be excluded immediately, and the personal data will be deleted immediately.

We use Google Analytics to analyze and regularly improve the use of our website. With the statistics we can improve our offer and make it more interesting for you as a user. For the exceptional cases in which Personal Information is transferred to the US, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US Framework.

Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of Use: http://www.google.com/analytics/ terms / DE .html, Privacy Policy: http://www.google.com/intl/de/analytics/learn/privacy.html, and the Privacy Policy: http://www.google.com/intl/en/policies/privacy.
This site also uses Google Analytics for cross-device analysis of visitor traffic conducted through a user ID. You can disable the cross-device analysis of your usage under My Data, Personal Infor-mation in your customer account.

The legal basis for the use of Google Analytics is Art. 6 par. 1 p. 1 lit. f GDPR.

§ 7 Use of social media plug-ins

We currently use the following social media plug-ins: Facebook, Google+, Xing and LinkedIn. We use the so-called two-click solution. In other words, when you visit our site, no personal data is initially passed on to the providers of the plug-ins. The provider of the plug-in can be identified by the mark-ing on the box by its initial letter or the logo. We give you the opportunity to communicate directly with the provider of the plug-in via the button. Only if you click on the marked field and activate it, the plug-in provider receives the information that you have accessed the corresponding website of our online service. In addition, the data mentioned under § 3 of this declaration will be transmitted. In the case of Facebook and Xing, according to the respective providers in Germany, the IP-address is anonymized immediately after collection. By activating the plug-in, personal data will be transmitted by you to the respective plug-in provider and stored there (with US providers in the USA). Since the plug-in provider performs the data collection, in particular via cookies, we recommend that you delete all cookies before clicking on the grey box via the security settings of your browser.
We have no influence on the collected data and data processing operations, nor are we aware of the full extent of data collection, the purpose of the processing, or the retention periods. We also have no information regarding the deletion of the data collected by the plug-in provider.
The plug-in provider stores the data collected about you in the form of user profiles and uses these for advertising and market research purposes and/or for tailoring the design of its website. Such evalua-tions are conducted above all for the presentation of tailored advertising (including for users who are not logged in) and in order to inform other social network users about your activities on our website. You have a right to object to the creation of such user profiles; to do so you must contact the re-spective plug-in provider. Through the plug-ins we allow you to interact with social networks and other users; this enables us to improve the service we provide and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 par. 1 p. 1 lit. f GDPR.

The data is forwarded regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, the data we collect from you is as-signed directly to your account with the plug-in provider. If you click the activated button and, e.g., link to the page, the plug-in provider also stores this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, especially before activating the button, as you can then avoid being assigned to your profile with the plug-in provider.

Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the data protection declarations of the following providers below. They will also provide you with further information about your rights and the privacy protection setting options.

Addresses of the respective plug-in providers and URLs of their data protection policies:
a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; For more information about data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications and http: //www.facebook .com / about / privacy / your-info # everyoneinfo. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US Frame-work.
b) Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://www.google.com/policies/privacy/partners/?hl=de. Google has submitted to the EU-US Priva-cy Shield, https://www.privacyshield.gov/EU-US Framework.
c) Xing AG, Gänsemarkt 43, 20354 Hamburg, DE; http://www.xing.com/privacy.
d) LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy. LinkedIn has subscribed to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US Framework.

The legal basis for the use of the plug-ins is Art. 6 par. 1 p. 1 lit. GDPR.

§ 8 AddThis-Bookmarking

Our web pages also include AddThis plug-ins. These plug-ins enable you to place bookmarks and to share interesting content with other users. We use the plug-in to give you the opportunity to interact with the social networks and other users, enabling us to improve our service and to make our website more interesting to you as a user.

Your Internet browser uses this plug-in to create a direct connection to the AddThis servers and, if applicable, to the selected social network or bookmarking service. The recipients receive the infor-mation that you have visited the corresponding web page of our website and the data listed under § 3 of this Policy. This information is processed on the servers of AddThis in the USA. If you send content on our website to social networks or bookmarking services, a connection can be made between the visit to our website and your user pro-file for the corresponding network. We have no influence over the data that is collected and the data processing procedures, nor are we aware of the full extent of data collection, the purposes of pro-cessing and the storage periods. Moreover, we have no information about the deletion of the collect-ed data by the provider of the plug-in.

The provider of the plug-in stores this data as a usage profile and uses this for the purposes of advertis-ing, market research and/or needs-oriented website design. Such evaluation is carried out in particular (even for users who are not logged in) so as to provide appropriate advertising and to inform other users of the social network about your activities on our website. You are entitled to object to this user profile being created and will need to contact the respective provider of the plug-in to exercise this right.

(If you do not wish to participate in this process, you may object to the data collection and storage at any time by placing an opt-out cookie with future effect: http://www.addthis.com/privacy/opt-out. Alternatively, you can set up your browser to prevent the placement of cookies.

(More information on the purpose and scope of data collection and its processing by the provider of the plug-in, as well as more information on your rights in this regard and the setting options to protect your private sphere, may be obtained from: AddThis LLC, 1595 Spring Hill Road, Suite 300, Vienna, VA 22182, USA, www.addthis.com/privacy.

The legal basis for the use of the plug-in is set out in Art. 6 par. (1) p. 1 lit. (f) GDPR.

§ 9 Integration of YouTube videos

We have integrated YouTube videos into our website. These are stored on www.YouTube.com and can be played directly from our website. These are all integrated in "extended data protection mode", i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will the data referred to in paragraph 2 be transmitted. We have no influence over this data transmission.

When you visit the website, YouTube is informed that you have accessed the corresponding subpage of our website. The data specified in section 3 of this declaration is also transmitted. This is inde-pendent of whether or not you have a YouTube user account which you are logged in to. If you are logged in to Google, your information will be directly assigned to your account. If you do not wish to be assigned to your YouTube profile, you should log out before activating the button. YouTube stores your data in the form of user profiles and uses these for advertising and market research pur-poses and/or for tailoring the design of its website. Such evaluations (even users who are not logged in) are conducted in particular for the delivery of tailored advertising and in order to inform other so-cial network users about your activities on our website. You have a right to object to the creation of these user profiles; contact YouTube directly to do so.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in the data protection declaration. This also contains further information about your rights and the privacy protection setting options: www.google.de/intl/de/policies/privacy. Google also pro-cesses your personal data in the USA and is regulated by the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.

The legal basis for the processing of your data is Art. 6 par. 1 p. 1 lit. f GDPR.

§ 10 Use of Google Adwords Conversion

We also use Google Adwords to draw attention to our attractive offerings on third party websites. The advertising campaign data helps us to determine how successful the individual advertising measures are. The purpose of this is to display advertisements that are of interest to you, to make our website more appealing to you and to obtain a fair calculation of advertising costs.

This advertising is provided by Google via so-called "ad servers". We use ad server cookies for this purpose. These allow to ascertain the success by measuring certain parameters, such as ad impres-sions or user clicks. Whenever you access our website via a Google ad, Google Adwords stores a cookie on your PC. These cookies usually expire after 30 days and are not intended to identify you personally. The unique ID of this cookie, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions) and opt-out information (marker indicating that the user no longer wishes to be targeted) are usually stored as analysis values.

These cookies enable Google to recognize your Internet browser. If a user visits certain pages of an Adwords customer's website and the cookie stored on his/her computer has not expired, Google and the customer can detect that the user has clicked on the ad and has been redirected to this page. Each Adwords customer is assigned a different cookie. Cookies cannot therefore be traced via the websites of Adwords customers. We ourselves do not collect and process any personal data in such advertising. We only receive statistical analyses from Google. On the basis of these analyses we can recognize which of the advertising measures deployed are most effective. We do not receive any further data regarding the use of advertising materials; in particular, we cannot identify users on the basis of this information.

The marketing tools automatically cause your browser to establish a direct connection to the Google server. We have no influence over the extent and further use of the data which Google collects through this tool and therefore can only provide information based on what we ourselves know: through the integration of AdWords Conversion, Google is informed that you have accessed the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google may assign your visit to your account. Even if you are not registered with Google or have not logged in, the provider may still obtain and store your IP-address.

You can prevent participation in this tracking process in various ways:
a) by changing the appropriate setting in your browser, in particular by suppressing third-party cook-ies which will stop you receiving ads from third-party providers;
b) by disabling conversion tracking cookies by setting your browser to block cookies from the "www.googleadservices.com" domain, www.google.de/settings/ads, although these settings are de-leted if you delete your cookies;
c) by disabling the interest-based ads of providers that are part of the "About Ads" self regulation campaign via the link www.aboutads.info/choices, although this setting is deleted if you delete your cookies;
d) by permanently disabling this in your browsers (Firefox, Internet Explorer or Google Chrome) via the link www.google.com/settings/ads/plugin. We would like to point out that it may not then be possible to exploit the full range of functions available on this website.

Further information on data protection by Google can be found at: www.google.com/intl/de/policies/privacy and services.google.com/sitestats/de.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at www.networkadvertising.org Google is regulated by the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.
The legal basis for the processing of your data is Art. 6 par. 1 p. 1 lit. f GDPR.

§ 11 Remarketing

In addition to Adwords Conversion, we also use the application Google Remarketing. This is a process that allows us to target you again. This application enables us to display our adverts to you after you have visited our website and as you continue to use the Internet. We do this through cookies stored on your browser, which Google uses to record and evaluate your user behavior when you visit different websites. Google can detect your previous visit to our website in this way. Google states that it does not combine the data collected as part of remarketing with personal data that it may have stored about you. In particular, Google states that pseudonymized data is used in relation to re-marketing.
The legal basis for the processing of your data is Art. 6 par. 1 p. 1 lit. f GDPR.

§ 12 Data security

We use the popular Secure Soket Layer method (SSL) on our website in conjunction with the highest encryption level supported by your browser. In general, this entails a 2048-bit encryption. The fact that individual pages of our website are transmitted in encrypted form can be recognized by the closed representation of the key or lock symbol in the status bar of your browser. In addition, we use appropriate technical and organizational security measures to protect your data against incidental or deliberate manipulation, loss, destruction or against unauthorized access by third parties. In line with technological progress, our security measures are regularly adjusted and improved.

§ 13 Timeliness and amendment of this privacy policy

This privacy policy is currently valid as of May 24, 2018.

Due to the further development of our website or due to changes in statutory regulatory guide-lines, it may become necessary to amend this privacy policy. The most current version of our privacy policy can be retrieved from our website at any time via innodox.com/privacy-policy.