Privacy Policy

Thank you for visiting the web pages and using the services of IT Manufactory GmbH. IT Manufactory GmbH is the software developer, distributor and implementer of Digital Automotive. The protection of your personal data is very important to us. With this privacy policy, we would like to inform you about the handling of your personal data when visiting our websites and in the context of using our software modules (Digital Automotive Web App and Digital Automotive Mobile Apps) and about your rights. This privacy policy also informs you about which personal data we collect and process from you in the context of our social media presences.

1. Who are we and how can you reach us?

We, the

IT Manufactory GmbH
Brunngasse 4
94032 Passau
e-mail: info@it-manufactory.com

as the responsible party, are responsible for protecting your personal data. If you have any questions regarding data processing, your rights or the data protection declaration, our data protection officer Jürgen Sterr will be happy to assist you. You can reach him by post at the above address or by e-mail at juergen.sterr@it-manufactory.com.

In contrast, if our customers use one of the software modules, the person responsible for processing your personal data is the customer in each case, and we process your data only as a processor on behalf of the respective customer (Art. 28 DSGVO). For this purpose, the customer and we have concluded a contract for commissioned processing, which obligates us as a processor to protect your data, to process it exclusively for the use of the software modules and within the scope of the legal basis, and in particular not to pass it on to third parties or use it for other purposes unless you have expressly consented to such further processing.

2. What data is processed when visiting our websites?

In the following, we inform you about which data is collected when you visit our websites, for which purposes it is processed, the legal basis for the data processing, whether we disclose the data to third parties (in a third country), when the data is deleted and whether the data processing is mandatory or required.

2.1 Log-Files

DATA COLLECTED:

When you visit our websites, your browser automatically transmits the following data:

• Your IP address
• web pages that you call up via our site
• the pages you click on on our website, and
• time of the page call
• the name of your Internet service provider
• your browser type and its version
• the operating system of your terminal device
• the date and duration of your visit.

PURPOSES OF DATA PROCESSING:

The temporary storage of this data is necessary to enable delivery of the website to your computer and to ensure the functionality of the website. With the help of this data, we also gain statistical insights into how our web pages are used. In addition, we collect the data in order to be able to trace and prevent unauthorized access to the web server and misuse of the web pages and to secure our information technology systems.

IP addresses that are used for malicious behavior (DDoS attacks, brute force attacks, etc.) are stored and blocked by us.

LEGAL BASIS:

We store this data on the basis of our legitimate interests (Art. 6 para. 1 f DSGVO). Our legitimate interest is to achieve the purposes described above.

STORAGE DURATION:

Log files are deleted after 90 days at the latest. IP addresses used for malicious behavior are stored permanently.

PROVISION OF THE DATA MANDATORY OR REQUIRED:

The provision of the data is neither legally nor contractually required. However, without the IP address, the service and functionality of our websites cannot be guaranteed. In addition, individual services and services may not be available or may be limited.

2.2 Cookies and targeting technologies

What are cookies?

So-called cookies are set when you visit our websites. These are small text files that are stored on your terminal device. Cookies usually contain a characteristic string of characters, the so-called cookieID, with which your browser can be identified when you visit our websites again.

In addition, we use so-called tags, which are small code elements that help us measure the behavior of our users and the success of advertising activities.

Depending on the type of cookies or tags, different data is collected and usually processed pseudonymously.

The information stored in the cookies or with the help of the tags is subsequently sent back to our websites (so-called first party cookies) or to the website of another provider to which the cookie belongs (so-called third party cookies).

What do we use cookies for?

We generally classify the first and third party cookies we use into the following categories, depending on their purpose and function:

• Essential, technically necessary cookies that enable the technical functioning of the website. Some functions of our websites cannot be offered without the use of the cookies.
• Functional cookies, which serve to make our websites more user-friendly and to ensure certain functionalities, e.g. the cross-page shopping cart display, in which you can see how many items are currently in your shopping cart and the storage of your login data, so that you can access the data and settings you have already entered when you return to the site.
• Statistics cookies that enable us to generate overall statistics, e.g. on the number of views, which areas of the web pages are viewed most frequently, as well as information on locations and on the duration of the average stay on the web pages. This allows us to improve the quality of our websites and content.
• Marketing and retargeting cookies that enable us to provide you with offers and information tailored to you. This enables us to make our websites more interesting for you and to address you on other websites with personalized, interest-based advertising.

Do we use cookies without your consent?

We only use essential, technically necessary cookies as well as functional first party cookies and first party statistics cookies without your consent based on our legitimate interests (Art. 6 para. 1 f DSGVO). Our legitimate interests are to ensure the functioning of our websites and their optimal usability, to improve the quality of our websites and content and to make the functionality of the website as pleasant as possible for you.

In addition, we use third-party cookies, in particular marketing and retargeting cookies, in principle only with your consent (Art. 6 para. 1 a DSGVO).

Can you control the use of cookies yourself?

You have full control over the use of cookies and can delete cookies in your browser, disable the storage of cookies altogether or selectively accept certain cookies. Please use the help functions of your browser to learn how to change these settings. This may limit the functionality of our websites.

How long are cookies stored?

In general, some of the cookies we use are automatically deleted after you close your browser (so-called session cookies), while others remain permanently on your terminal device and enable us to recognize your browser again (so-called persistent cookies).

2.2.2 Joint responsibility

With the following social media service providers, we are joint controllers for data processing by means of data collected by the social media service provider with your consent using cookies or comparable tracking technology and have entered into a joint responsibility agreement in this regard.

LinkedIn, which is operated by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland ("LinkedIn"); (for joint responsibility agreement, see https://legal.linkedin.com/pages-joint-controller-addendum)

Regardless of the details of this processing, you can assert your rights under the GDPR both against us and against the respective provider.

Google Analytics

We use the "Google Analytics" service on the basis of your consent. 

In addition to the information provided there, we would like to point out that Google and we are jointly responsible for the processing of your data in Google Analytics and have concluded an agreement on joint responsibility. Regardless of the details of this processing, you can assert your rights under the GDPR against both us and Google.

3. What data do we process as part of our social media presence?

We have a presence on the following social media service:

LinkedIn, which is operated by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland ("LinkedIn")

The provider is responsible for the processing of your data. You can find information about which data is processed and for what purposes it is used in the privacy policy of the respective provider. We have no influence on the type and scope of the data processed by the respective social media provider, the type of processing and use or the transfer of this data to third parties.

DATA COLLECTED, PURPOSE OF DATA PROCESSING, LEGAL BASIS:

We process your data entered at the respective social media service, in particular your user name and the content published under their account insofar as we comment on your posts or refer to your presence in our posts, if applicable. The legal basis for this processing is our legitimate interest (Art. 6 para. 1 f DSGVO). The data thus published by you in the social media service will be included by us in our offer and made available to our fans and subscribers.

4. What data is processed when you contact us, chat with us, order a newsletter, or when we send you existing customer advertising?

In the following, we inform you about which data is collected and processed when you contact us, order a newsletter, chat with us, you register for an expert forum or we send you advertising on similar products as a customer, for which purposes and by which recipients this data is processed, on which legal basis the data processing is based, when the data is deleted and whether the provision of the data is mandatory or required.

4.1 CRM service used

For the processing of your data we use the CRM software Hubspot.

Hubspot, which is operated by Hubspot Inc. 25 First Street, Cambridge, MA 02141 USA

Your data is hosted in the European Union. See: Hubspot Data

4.2 Contact

DATA COLLECTED:

We collect and process the data you provide, such as your contact details, your name and your request, when you contact us via a contact form or by e-mail or telephone. All data that you transmit to us electronically is transmitted in encrypted form between your browser and our server.

PURPOSES OF DATA PROCESSING:

The data processing is carried out exclusively on the basis of and for the processing of your request.

LEGAL BASIS FOR PROCESSING:

The processing of the data entered in the contact form is based on our legitimate interest (Art. 6 para. 1 f DSGVO) to process your request. If you contact us to request a quote, the data is processed to carry out pre-contractual measures (Art. 6 para. 1 b DSGVO).

DATA PROCESSING IS PRESCRIBED OR REQUIRED:

The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, e-mail address and the reason for the request. However, insofar as the request is made in the context of pre-contractual measures, the processing of the data is necessary for the implementation of these measures and without the data we can unfortunately not send an offer.

4.3 Newsletter "Sales Next Level Insights"

DATA COLLECTED:

We collect and process the data you provide, such as your name and email address, when you subscribe to our newsletter.

In our newsletter we use tracking technologies. With the help of these technologies, data is collected about whether our emails are opened and on which links you click.

SERVICE USED:

We use the CRM software Hubspot for processing your data and sending the newsletter.

Hubspot, which is operated by Hubspot Inc. 25 First Street, Cambridge, MA 02141 USA

PURPOSES OF DATA PROCESSING:

We process the data to send you the newsletter.

We use the collected data to find out which topics are of interest to you. We then use this information to improve the emails we send you and the services we provide, and to combine it with tracking or profiling information we already have.

LEGAL BASIS:

If you wish to receive a newsletter, we will process your data with your consent (Art. 6 para. 1 a DSGVO) in order to inform you by electronic mail about tips on the use of Digital Automotive as well as selected topics and also to address you in an advertising manner.

STORAGE DURATION:

We store your data for as long as we need them for the specific processing purpose. You can object to the newsletter order at any time and demand the deletion of your personal data.

4.4 Existing customer advertising

DATA COLLECTED:

We process the e-mail address that you provide to us in connection with the sale of a product or in the context of a test registration for the purpose of sending you advertising for our own similar products (existing customer advertising), provided that we have informed you when collecting the e-mail address from you (and whenever it is used for sending existing customer advertising) that you can object to this processing at any time.

PURPOSES OF DATA PROCESSING:

If we have collected your e-mail address as described above in connection with the sale of a product or as part of a test registration, we will use it to send you advertising for existing customers.

LEGAL BASIS:

The use of your e-mail address is based on our legitimate interest (Art. 6 para. 1 f DSGVO) to address you in an advertising manner in order to send you advertising for existing customers.

STORAGE DURATION:

Insofar as we have collected your e-mail address from you as part of a test registration and you have not objected to the use of the e-mail address for sending advertising to existing customers, we will store your e-mail address for the aforementioned purpose for a period of up to 13 months after the end of your test registration.

5. What data is processed when you open a user account?

In the following, we inform you about what data is collected and processed when you open a Digital Automotive user account, for what purposes and by which recipients this data is processed, on what legal basis the data processing is based, when the data is deleted and whether the provision of the data is mandatory or required.

5.1 User Account Creation, Contract Execution

DATA COLLECTED:

As part of creating a user account, we collect your name, email address, job title, and for certain modules within Digital Automotive, information about your supervisor is required.

PURPOSES OF DATA PROCESSING:

We process your data to enable you to use Digital Automotive.

LEGAL BASIS:

The processing of your data is necessary for the performance of our contractual relationship regarding the provision of the commissioned services (Art. 6 para. 1 b DSGVO).

6. What data is processed in the context of online training/meetings/webinars?

In the following, we inform you about what data is collected and processed when you participate in an online training/meetings/webinars, for what purposes and by which recipients this data is processed by us or the service providers we use, the legal basis for the data processing, when the data is deleted, and whether the provision of the data is mandatory or required.

6.1 Services used

The execution and storage of your data for the purpose of conducting online trainings/meetings/webinars is carried out via the services of

• Microsoft Teams, which is operated by Microsoft Inc., One Microsoft Way, Redmond WA 98052, USA
• Hubspot, which is operated by Hubspot Inc. 25 First Street, Cambridge, MA 02141 USA

DATA COLLECTED:

For the purpose of providing online training, meetings, webinars we collect the following data

• First and last name, e-mail address

PURPOSES OF DATA PROCESSING:

Provision of online training/meetings/webinars including registration, reminders and the retrieval of recordings along with evaluation of online training.

LEGAL BASIS FOR PROCESSING:

The basis for the data processing is Art. 6 para. 1 b DSGVO, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

STORAGE DURATION AND CONTROL OPTIONS:

The personal data is routinely deleted after 6 months if it is no longer required for the fulfillment or initiation of the contract.

7. What rights do you have and how can you exercise them?

7.1 Revocation of your consent

You can revoke your consent to the processing of your personal data at any time with effect for the future. Please note that the revocation has no effect on the lawfulness of the data processing carried out up to the time of your revocation and that it does not extend to such data processing which we base on a legal ground for permission and which may therefore also be processed without your consent.

7.2 Further data subject rights

In addition, you are entitled to the following data subject rights if the legal requirements are met:

DISCLOSURE:

You can demand at any time that we provide you with information about whether and which of your personal data we process and how, and that we provide you with a copy of the personal data we have stored about you, Art. 15 DSGVO.

CORRECTION:

You may request the correction of inaccurate personal data and, if necessary, the completion of incomplete personal data, Art. 16 DSGVO.

DELETION:

You may, under certain circumstances, request that we delete personal data concerning you, Art. 17 DSGVO.

PROCESSING RESTRICTION:

You can request the restriction of processing under certain conditions, e.g. if you believe that your data is incorrect, if the processing is unlawful or if you have objected to the data processing. This means that your data may only be processed in a very restricted manner without your consent, e.g. for the assertion, exercise and defense of legal claims or for the protection of the rights of other natural and legal persons, Art. 18 DSGVO.

DISAGREEMENT AGAINST DATA PROCESSING:

You have the option to object to data processing for direct marketing purposes at any time.

In addition, you can object at any time to data processing based on a legitimate interest (Art. 6 (1) f DSGVO), Art. 21 DSGVO, if there are special reasons arising from your particular situation.

DATA TRANSMISSION:

You have the right to receive the data that you have provided to us and that we process automatically on the basis of your consent or for the performance of a contract, in a common, machine-readable format and to request direct transmission of this data to third parties within the scope of what is technically feasible, Art. 20 DSGVO.

7.3 Contact channels

You can assert your rights against us via the aforementioned contact channels.

You can revoke consent to data processing by cookies and tracking technologies by making the appropriate settings in your browser.

You can also revoke your consent to receive the newsletter and direct marketing advertising emails at any time by clicking the corresponding link in each newsletter or advertising email.

7.4 Right to complain to a supervisory authority

For example, if you believe that our data processing is unlawful or that we have not granted the rights described above to the extent necessary, you have the right to lodge a complaint with the competent data protection supervisory authority.

7.5 Amendment and update of this privacy policy

We ask you to regularly inform yourself about the content of our privacy policy. Changes and updates to this privacy statement will take place when changes to our data processing operations make this necessary. The date of the last update is the "as of" date shown at the end of this statement. Earlier versions of this statement can be requested at info@lexoffice.de.

Version: 05.08.2023