Name and address of the controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws is:

dmaic software GmbH & Co. KG
Luisenstraße 1
32052 Herford
info@dmaic-software.de

General Information on Data Processing

1. Scope of the Processing of Personal Data

We generally process personal data of our users only insofar as this is necessary to provide a functional website as well as our content and services. The processing of personal data of our users regularly takes place only with the user’s consent. An exception applies in cases where obtaining prior consent is not possible for factual reasons and the processing of the data is permitted by statutory provisions.

2. Legal Basis for the Processing of Personal Data

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis. When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures. Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation to which our company is subject, Art. 6 (1) c DSGVO serves as the legal basis. In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) (d) DSGVO serves as the legal basis. If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 (1) f DSGVO serves as the legal basis for the processing.

3. Data Deletion and Storage Duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this is provided for by European or national legislation in Union regulations laws or other provisions to which the controller is subject. Blocking or deletion of the data also takes place if a storage period prescribed by the aforementioned standards expires unless there is a necessity to continue storing the data for the conclusion or fulfillment of a contract.

Provision of the Website and Creation of Log Files

1. Description and Scope of Data Processing

Each time our website is accessed our system automatically collects data and information from the computer system of the accessing device. The following data is collected:

  • Information about the browser type and version used

  • The user’s operating system

  • The user’s internet service provider

  • The user’s IP address

  • Date and time of access

  • Websites from which the user’s system accesses our website

  • Websites that are accessed by the user’s system via our website

The data is also stored in the log files of our system. This does not affect the user’s IP addresses or other data that enables the assignment of the data to a user. This data is not stored together with other personal data of the user.

2. Legal basis for data processing

The legal basis for processing your data in connection with sending the newsletter is your consent pursuant to Art. 6 para. 1 lit. a GDPR in conjunction with § 7 UWG.

3. Purpose of data processing

The personal data collected as part of the newsletter registration is processed exclusively for the purpose of sending you our newsletter with information about our company our products and services and where applicable promotions and events and to address you personally.

4. Duration of storage

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected.

For personal data from the contact form and data sent by email this is the case when the respective conversation with the user has ended. The conversation is considered ended when the circumstances indicate that the matter in question has been conclusively clarified.

5. Right to object

The user has the option at any time to withdraw their consent to the processing of personal data.If the user contacts us by email they may object to the storage of their personal data at any time. In such a case the conversation cannot be continued.All personal data stored in the course of contacting us will be deleted in this case.

Newsletter

1. Description and Scope of Data Processing

On our website users have the option to subscribe to a newsletter by email. Registration takes place exclusively via the designated newsletter page using the corresponding form.

As part of the newsletter registration the following data is collected:

  • Name

  • Email address

In addition users must confirm via a checkbox that they wish to receive the newsletter and consent to the associated processing of their personal data.

For sending our newsletter we use the service “Brevo” formerly Sendinblue. The service provider is Sendinblue GmbH Köpenicker Straße 126 10179 Berlin Germany.

The data provided during newsletter registration is transmitted to Brevo and stored there in a mailing list. Brevo processes this data exclusively on our behalf and in accordance with our instructions based on a data processing agreement pursuant to Article 28 GDPR.

The data is not used for any other purpose than sending the newsletter. Data is not passed on to other third parties.

2. Legal Basis for Data Processing

The legal basis for processing personal data in connection with the sending of the newsletter is the user’s consent pursuant to Article 6 paragraph 1 lit. a GDPR in conjunction with Section 7 UWG.

3. Purpose of Data Processing

The processing of personal data collected during newsletter registration serves exclusively to send regular information about our company our products and services as well as information about promotions and events and to address users personally.

4. Duration of Storage

The processing of personal data collected during newsletter registration serves exclusively to send regular information about our company our products and services as well as information about promotions and events and to address users personally.

5. Revocation of Consent / Unsubscription

You may revoke your consent to receive the newsletter at any time with effect for the future. Revocation is possible in particular:

– via the unsubscribe link provided in the newsletter
– by sending an informal message to marketing@dmaic-software.de

After revocation, your email address will no longer be used for sending the newsletter.

Rights ob Data Subjects

Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is based on Art. 6 para. 1 lit. e or f GDPR. This also applies to profiling based on these provisions.

The controller will no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or the processing serves the establishment, exercise or defense of legal claims.

If personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for such marketing purposes. This also applies to profiling insofar as it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for such purposes.

You also have the option, in connection with the use of information society services and notwithstanding Directive 2002/58/EC, to exercise your right to object by automated means using technical specifications.

Further Rights

With regard to the personal data concerning you, you may assert the following rights:

  • Right of access

  • Right to rectification

  • Right to erasure

  • Right to restriction of processing

  • Right to data portability

  • Right to lodge a complaint with a data protection supervisory authority