Name and address of the controller
The controller within the meaning of the General Data Protection Regulation and other national data protection laws is:
dmaic software GmbH & Co. KG
Luisenstraße 1
32052 Herford
info@dmaic-software.de
General Information on Data Processing
1. Scope of the Processing of Personal Data
We generally process personal data of our users only insofar as this is necessary to provide a functional website as well as our content and services. The processing of personal data of our users regularly takes place only with the user’s consent. An exception applies in cases where obtaining prior consent is not possible for factual reasons and the processing of the data is permitted by statutory provisions.
2. Legal Basis for the Processing of Personal Data
3. Data Deletion and Storage Duration
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this is provided for by European or national legislation in Union regulations laws or other provisions to which the controller is subject. Blocking or deletion of the data also takes place if a storage period prescribed by the aforementioned standards expires unless there is a necessity to continue storing the data for the conclusion or fulfillment of a contract.
Provision of the Website and Creation of Log Files
1. Description and Scope of Data Processing
Each time our website is accessed our system automatically collects data and information from the computer system of the accessing device. The following data is collected:
Information about the browser type and version used
The user’s operating system
The user’s internet service provider
The user’s IP address
Date and time of access
Websites from which the user’s system accesses our website
Websites that are accessed by the user’s system via our website
The data is also stored in the log files of our system. This does not affect the user’s IP addresses or other data that enables the assignment of the data to a user. This data is not stored together with other personal data of the user.
2. Legal basis for data processing
The legal basis for processing your data in connection with sending the newsletter is your consent pursuant to Art. 6 para. 1 lit. a GDPR in conjunction with § 7 UWG.
3. Purpose of data processing
The personal data collected as part of the newsletter registration is processed exclusively for the purpose of sending you our newsletter with information about our company our products and services and where applicable promotions and events and to address you personally.
4. Duration of storage
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected.
For personal data from the contact form and data sent by email this is the case when the respective conversation with the user has ended. The conversation is considered ended when the circumstances indicate that the matter in question has been conclusively clarified.
5. Right to object
The user has the option at any time to withdraw their consent to the processing of personal data.If the user contacts us by email they may object to the storage of their personal data at any time. In such a case the conversation cannot be continued.All personal data stored in the course of contacting us will be deleted in this case.
Use of Cookies, Consent Management, Web Analytics and Online Marketing
We use cookies and similar technologies on our website. Cookies are small text files or other storage technologies that are stored on your device or enable access to information on your device. Similar technologies may include pixels, tags, local storage technologies or scripts.
We use these technologies to technically provide our website, manage consent, statistically evaluate the use of our website and measure and optimize marketing activities.
Where cookies or similar technologies are technically necessary, they are used on the basis of Section 25(2) TDDDG and Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and user-friendly provision of our website.
Where cookies or similar technologies are not technically necessary, we use them only after your prior consent. In this case, the legal basis is Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw or change your consent at any time with effect for the future via the cookie settings on our website.
Further information on the cookies used, their categories, providers and storage periods can be found in our Cookie Policy.
1. Consent Management with Complianz
We use the consent management solution Complianz on our website. The provider is Complianz B.V., Kalmarweg 14-5, 9723 JG Groningen, Netherlands.
Complianz is used to obtain, document and manage consent for cookies and similar technologies and to enable withdrawal of consent. Through Complianz, you can choose which categories of cookies and services you wish to consent to.
As part of consent management, the following data in particular may be processed: the consent categories you have selected, consent status, date and time of consent or withdrawal, technical information about the browser and device used, and a pseudonymous identifier for assigning your consent.
The processing is carried out in order to document and manage your consent in a legally compliant manner. The legal basis is Art. 6(1)(c) GDPR, insofar as the processing is necessary to comply with legal obligations. In addition, the processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the legally compliant, transparent and user-friendly management of consent.
The stored consent data will be deleted as soon as it is no longer required for the purposes mentioned or if you request deletion, provided that there are no statutory retention obligations to the contrary.
2. Google Tag Manager
We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a technical management system that allows website tags to be integrated and controlled centrally. Tags are small code elements that can be used to trigger certain services on a website. Through Google Tag Manager, we control in particular Google Analytics 4 and the LinkedIn Insight Tag depending on your consent.
Google Tag Manager itself does not create independent user profiles for analytics or marketing purposes and does not carry out its own reach analyses. It is used for the technical management and triggering of the services we integrate. The actual data processing is carried out by the respective integrated services, which are described separately in this Privacy Policy.
Where Google Tag Manager is used technically for the consent-based control of our website tags, the processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, efficient and consent-based management of the services used on our website. Where services that require consent are triggered via Google Tag Manager, they are only triggered after you have given the corresponding consent.
It cannot be excluded that, in the context of using Google Tag Manager, technical data, in particular IP address, browser information and information about the integration of tags, may be transmitted to Google.
3. Web Analytics, Monitoring and Optimization
We use web analytics technologies to statistically evaluate the use of our website and continuously improve our online offering. Web analytics allow us in particular to understand which pages and content are frequently used, how users reach our website and where there is potential for optimization.
In particular, the following data may be processed: visited pages, page views, click paths, time spent on the website, referrer URL, interactions with content and functions, device type used, browser, operating system, language settings, screen resolution, approximate location data, technical identifiers and time and duration of use.
As part of web analytics, we do not transmit clear data such as names, email addresses or telephone numbers to the analytics provider. The evaluation is generally based on technical and pseudonymous information.
Web analytics services are activated on our website only after you have given your consent to the “Statistics” category. The legal basis is Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future via the cookie settings.
4. Google Analytics 4
We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics 4 is used to analyze the use of our website. The information obtained helps us improve our content, user guidance and the technical performance of our website.
In particular, the following data may be processed: page views, events, clicks, scrolling behavior, time spent on the website, referrer URL, approximate location data, device information, browser information, operating system, screen resolution, language settings, technical identifiers and information about your consent.
Google Analytics 4 is integrated on our website via Google Tag Manager and is activated only after you have given your consent to the “Statistics” category. The legal basis is Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
According to Google, Google Analytics 4 does not store IP addresses of users from the European Union. IP addresses are used to derive approximate location data but are discarded before storage.
The storage period of the data processed by Google Analytics 4 depends on the retention settings we have defined in Google Analytics.
It cannot be excluded that data may be transmitted to Google LLC in the United States. Google bases such transfers on appropriate safeguards, in particular the EU-U.S. Data Privacy Framework, where applicable.
Further information on data processing by Google can be found in Google’s privacy information.
5. Online Marketing
We use online marketing technologies to measure the effectiveness of our marketing activities, evaluate website actions and create target groups for advertising measures.
In particular, the following data may be processed: visited pages, clicked content, referrer URL, time of visit, device and browser information, IP address, technical identifiers, interactions with our website and information about whether a specific action was carried out on our website.
As part of online marketing, pseudonymous user profiles may be created. We generally do not receive the direct identity of individual website visitors, but rather aggregated evaluations of the effectiveness of our marketing activities.
Online marketing services are activated on our website only after you have given your consent to the “Marketing” category. The legal basis is Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future via the cookie settings.
6. LinkedIn Insight Tag
We use the LinkedIn Insight Tag. The provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
The LinkedIn Insight Tag is used to measure and optimize our LinkedIn advertising campaigns, for conversion measurement, for analyzing website actions and for creating target groups for LinkedIn advertising.
In particular, the following data may be processed: visited URLs, referrer URL, IP address, device and browser information, timestamps, page views, clicks and other interactions on our website.
The LinkedIn Insight Tag is integrated on our website via Google Tag Manager and is activated only after you have given your consent to the “Marketing” category. The legal basis is Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
LinkedIn may use the collected data to measure the success of our LinkedIn campaigns, create website target groups and provide us with aggregated reports on website visits and ad interactions. We do not receive the direct identity of individual website visitors.
According to LinkedIn, direct identifiers are removed or pseudonymized within certain time periods. It cannot be excluded that data may be transmitted to LinkedIn or affiliated companies outside the European Union. LinkedIn bases such transfers on appropriate safeguards, where required.
Further information on data processing by LinkedIn can be found in LinkedIn’s privacy information.
Newsletter
1. Description and Scope of Data Processing
On our website users have the option to subscribe to a newsletter by email. Registration takes place exclusively via the designated newsletter page using the corresponding form.
As part of the newsletter registration the following data is collected:
Name
Email address
In addition users must confirm via a checkbox that they wish to receive the newsletter and consent to the associated processing of their personal data.
For sending our newsletter we use the service “Brevo” formerly Sendinblue. The service provider is Sendinblue GmbH Köpenicker Straße 126 10179 Berlin Germany.
The data provided during newsletter registration is transmitted to Brevo and stored there in a mailing list. Brevo processes this data exclusively on our behalf and in accordance with our instructions based on a data processing agreement pursuant to Article 28 GDPR.
The data is not used for any other purpose than sending the newsletter. Data is not passed on to other third parties.
2. Legal Basis for Data Processing
The legal basis for processing personal data in connection with the sending of the newsletter is the user’s consent pursuant to Article 6 paragraph 1 lit. a GDPR in conjunction with Section 7 UWG.
3. Purpose of Data Processing
The processing of personal data collected during newsletter registration serves exclusively to send regular information about our company our products and services as well as information about promotions and events and to address users personally.
4. Duration of Storage
The processing of personal data collected during newsletter registration serves exclusively to send regular information about our company our products and services as well as information about promotions and events and to address users personally.
5. Revocation of Consent / Unsubscription
You may revoke your consent to receive the newsletter at any time with effect for the future. Revocation is possible in particular:
– via the unsubscribe link provided in the newsletter
– by sending an informal message to marketing@dmaic-software.de
After revocation, your email address will no longer be used for sending the newsletter.
Rights ob Data Subjects
1. Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is based on Art. 6 para. 1 lit. e or f GDPR. This also applies to profiling based on these provisions.
The controller will no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or the processing serves the establishment, exercise or defense of legal claims.
If personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for such marketing purposes. This also applies to profiling insofar as it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for such purposes.
You also have the option, in connection with the use of information society services and notwithstanding Directive 2002/58/EC, to exercise your right to object by automated means using technical specifications.
2. Further Rights
With regard to the personal data concerning you, you may assert the following rights:
Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Right to lodge a complaint with a data protection supervisory authority