DEEN

Legal

Privacy Policy

This is a translation for your convenience. In case of any discrepancies, the German version shall prevail.

1) Information on the collection of personal data and contact details of the controller

1.1 We are delighted that you are visiting our website and thank you for your interest. Below we inform you about how we handle your personal data when you use our website. Personal data is any data that can be used to identify you personally.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Emotive Systems GmbH, Hohenloher Weg 44, 33102 Paderborn, Germany, phone: +49 (0) 5251 5449190, email: info@emotive-systems.de. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the string “https://” and the lock symbol in your browser’s address bar.

2) Data collected when you visit our website

When you use our website for information purposes only, i.e. if you do not otherwise transmit information to us, we only collect the data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

  • The page of our website you visited
  • Date and time of access
  • Amount of data sent in bytes
  • Source/referrer from which you reached the page
  • Browser used
  • Operating system used
  • IP address used (anonymised where applicable)

Processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to check the server log files retrospectively should there be concrete indications of unlawful use.

3) Hosting

Our website is hosted by the following provider: Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp, Germany. The provider supplies the servers on which the website is stored and from which it is delivered. In doing so, the data listed in section 2 and the data submitted via our contact form (section 5) are processed on the provider’s servers in Germany. We have concluded a data processing agreement with the provider. The legal basis is our legitimate interest in providing our website securely and reliably in accordance with Art. 6 (1) (f) GDPR.

4) Cookies and third-party content

Our website does not set any cookies and does not use any analytics, tracking or advertising services. Fonts and all other components of the website are loaded exclusively from our own server; therefore, no data is transferred to third parties such as Google when you visit our website.

5) Contacting us

When you contact us (e.g. via the contact form or by email), personal data is collected. The data collected via the contact form can be seen in the form itself (name, email address, your message and, optionally, company and phone number). The information from the contact form is sent to us by email; in addition, you will receive an automatic confirmation of receipt at the email address you provided. This data is stored and used exclusively for the purpose of responding to your request or for establishing contact and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 (1) (f) GDPR. If your enquiry is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted once your enquiry has been fully processed. This is the case when it can be inferred from the circumstances that the matter in question has been conclusively resolved, provided there are no statutory retention obligations to the contrary.

For our email communication – including sending form enquiries and confirmations of receipt – we use Microsoft 365 from the following provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland. We have concluded a data processing agreement with the provider. A transfer of data to Microsoft Corporation in the USA cannot be ruled out. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

6) Rights of the data subject

6.1 Applicable data protection law grants you comprehensive rights vis-à-vis the controller with regard to the processing of your personal data (rights of access and intervention), about which we inform you below:

  • Right of access pursuant to Art. 15 GDPR: In particular, you have the right to obtain information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining it, the existence of a right to rectification, erasure, restriction of processing, objection to processing, the right to lodge a complaint with a supervisory authority, the source of your data if it was not collected from you by us, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved and the scope and intended effects of such processing for you, as well as your right to be informed about the safeguards pursuant to Art. 46 GDPR when your data is transferred to third countries;
  • Right to rectification pursuant to Art. 16 GDPR: You have the right to have inaccurate data concerning you corrected without delay and/or to have incomplete data stored by us completed;
  • Right to erasure pursuant to Art. 17 GDPR: You have the right to request the erasure of your personal data if the conditions of Art. 17 (1) GDPR are met. However, this right does not apply in particular if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
  • Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data while the accuracy of your data, which you dispute, is being verified; if you oppose the erasure of your data because of unlawful processing and request the restriction of its use instead; if you need the data for the establishment, exercise or defence of legal claims after we no longer need it once the purpose has been achieved; or if you have objected on grounds relating to your particular situation, as long as it has not yet been determined whether our legitimate grounds override yours;
  • Right to notification pursuant to Art. 19 GDPR: If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to communicate this rectification, erasure or restriction of processing to all recipients to whom the personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients;
  • Right to data portability pursuant to Art. 20 GDPR: You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller, where technically feasible;
  • Right to withdraw consent pursuant to Art. 7 (3) GDPR: You have the right to withdraw any consent you have given to the processing of data at any time with effect for the future. In the event of withdrawal, we will delete the data concerned without delay, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of the consent before its withdrawal;
  • Right to lodge a complaint pursuant to Art. 77 GDPR: If you consider that the processing of personal data concerning you infringes the GDPR, you have the right – without prejudice to any other administrative or judicial remedy – to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

6.2 Right to object

If, in the context of a balancing of interests, we process your personal data on the basis of our overriding legitimate interest, you have the right to object to this processing at any time with effect for the future on grounds relating to your particular situation.

If you exercise your right to object, we will stop processing the data concerned. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.

If your personal data is processed by us for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing. You can exercise your objection as described above.

If you exercise your right to object, we will stop processing the data concerned for direct marketing purposes.

7) Duration of storage of personal data

The duration of storage of personal data is determined by the respective statutory retention period (e.g. retention periods under commercial and tax law). After the period has expired, the corresponding data is routinely deleted, provided it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in its continued storage.