Privacy

Idemus GmbH,
Untere Pfaffensteigstr. 61a,
91126 Schwabach

as the operator of this website (http://idemus.com), is the responsible body (controller) within the meaning of the GDPR, which alone or jointly with others determines the purposes and means of the processing of personal data, hereinafter “data”.

In the following, we would like to inform you about the processing of your personal data when visiting our website and using our content and services and first explain what is meant by “processing” of “personal data”:

“Personal data” according to the GDPR means any information relating to an identified or identifiable natural person (data subject). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier (such as name, address, telephone number, e-mail address, IP address, location data or specific characteristics such as the genetic, economic and social identity of that natural person).

Processing” means any operation or set of operations which is performed upon data, whether or not by automatic means. This includes, in particular, collection, recording, organization, classification, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or making available, alignment, combination, restriction, erasure or destruction.

In principle, it is not necessary for you to provide data in order to use our website. In certain cases, however, we need your name and address as well as other information so that we can provide the requested services.

The same applies, for example, to the sending of information material and ordered goods or to answering individual questions. Where this is necessary, we will point this out to you accordingly. In addition, we only process data that you provide to us voluntarily and, where applicable, data that we collect automatically when you visit our website (e.g. IP address and the names of the pages you access, the browser you use and your operating system, date and time of access, search engines used, names of downloaded files).

If you make use of services, we generally only collect the data that we need to provide the services. If we ask you for further data, this is voluntary information.

We process the data you provide in accordance with the principles of data economy and purpose limitation. The purpose limitation principle means that data is collected for specified, explicit and legitimate purposes and may not be further processed in a way incompatible with those purposes. Further processing for archival purposes in the public interest, for scientific or historical research purposes, or for statistical purposes is not considered incompatible with the original purposes.

Basically, we process your data for the purpose of answering your inquiries, processing your orders or providing you with access to certain information or offers. In order to maintain customer relations, it may also be necessary for us or a service company commissioned by us to use this data to inform you about product offers or to conduct online surveys in order to better meet the tasks and requirements of our customers.

We will process the data you provide online only for the purposes disclosed to you.

Your data will only be passed on to third parties in exceptional cases:

• to external service providers acting on our behalf (order processors) if this is necessary for the purpose of implementing the contractual relationship,
• to state institutions and authorities if we are legally obliged to do so, or
• if you consent to this.

We conclude the corresponding agreements on commissioned processing with the commissioned processors on the basis of Art. 28 DS-GVO. The service companies commissioned by us are obliged to maintain confidentiality and to comply with the provisions of the DS-GVO and the BDSG. The data passed on may only be used by our service providers to fulfill their task. Any other use of the information is not permitted and does not take place with any of the service providers entrusted by us.

The transmission and further processing of data to institutions and authorities entitled to receive information will only take place within the framework of the relevant laws or if we are obliged to do so by a court decision.

Beyond this, we do not pass on any data to third parties unless you have given your express consent.

Of course, we will respect your wishes if you do not want to provide us with your data to support our customer relationship (especially for direct marketing or market research purposes). We will neither sell your data to third parties nor market it in any other way unless you have given us your consent to do so.

As a matter of principle, we only process your personal data within Germany, the European Union (EU) and the European Economic Area (EEA).

If, in the course of using third-party services, data is disclosed or transferred to third parties in a third country, i.e. outside the EU or the EEA, and data is further processed, this will only be done on the basis of your consent, a legal obligation, our legitimate interests or if it is necessary for the fulfillment of our (pre)contractual obligations. Subject to legal or contractual permissions, we process or allow the processing of data in a third country only if the special requirements of Art. 44 et seq. DS-GVO are met. This means that the processing is carried out, for example, on the basis of special guarantees, such as the officially recognized determination of a level of data protection corresponding to the EU (e.g. for the USA by the “Privacy Shield”) or compliance with officially recognized special contractual obligations (so-called “EU standard contractual clauses”).

Insofar as we obtain your consent for processing operations of personal data, the consent pursuant to Art. 6 (1) p. 1 lit. a DS-GVO constitutes the legal basis for the processing of your data.

When processing personal data that is required to fulfill the requested service, we refer to Art. 6 (1) p. 1 lit. b DS-GVO as the legal basis.

Insofar as the processing of personal data is necessary for the fulfillment of a legal obligation to which our company is subject, Art. 6 (1) sentence 1 lit. c DS-GVO serves as the legal basis.

If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Article 6 (1) sentence 1 lit. f DS-GVO forms the legal basis for the processing.

We only store your data until the purpose has been fulfilled and no other legal storage obligations exist (e.g. storage obligations under commercial or tax law).

If you have given us your consent, we will store your data until you revoke your consent, provided there is no other legal basis for processing your data and no legal retention periods prevent deletion.

In addition, in individual cases, e.g. for evidentiary purposes, longer storage may be indicated for the defense/enforcement of civil or public law claims.

When using our website, the following data may be processed for organizational and technical reasons: the names of the pages you access, the browser you use and your operating system, the date and time of access, search engines used, names of downloaded files and their IP address.

When you visit one of our websites, we may store information on your computer in the form of a cookie. Cookies are small text files that are sent to your browser from a web server and stored on your computer’s hard drive.

Some cookies are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your terminal device and allow your browser to be recognized the next time you visit (so-called persistent cookies). If cookies are set, they process certain user information such as browser and location data as well as IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie.

The cookies we use generally do not store any of the user’s personal data other than the Internet protocol address. This information is used to automatically recognize you the next time you visit our websites and to make navigation easier for you. Cookies allow us, for example, to adapt a website to your interests or to save your password so that you do not have to re-enter it each time.

Of course, you can also view our websites without cookies. If you do not want us to recognize your computer, you can prevent cookies from being stored on your hard drive by selecting “do not accept cookies” in your browser settings. Please refer to your browser manufacturer’s instructions for details on how this works. If you do not accept cookies, however, this may lead to functional restrictions of our offers.

Cookies that are necessary for the technically error-free and optimized provision of our services (“technically necessary cookies”) are stored based on our legitimate interest according to Art. 6 (1) lit. f DS-GVO. Technically unnecessary cookies are only set after you have given your consent (based on the legal basis Art. 6 (1) lit. a DS-GVO).

You can adjust the cookie settings at any time under the following link and revoke any consent you have already given: Customize cookie settings.

11.1 General

When visiting our website, your surfing behavior can be statistically evaluated. This is done primarily with cookies and with so-called analysis programs. The analysis of your surfing behavior is usually anonymous; the surfing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. For more information, please see the following.

11.2 Google Analytics

Our website uses Google Analytics, which is a web analytics service provided by Google LLC (“Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA. Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site.

The information generated by the cookie about your use of this website will be transmitted to and stored by Google on servers in the United States. In the event that IP anonymization is activated on this website, your IP address will, however, be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area (so-called IP masking).

Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. IP anonymization is active on this website. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. In addition, you can object to the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link. The current link for this is: http://tools.google.com/dlpage/gaoptout?hl=de.

As an alternative to the browser plugin or on browsers for mobile devices, you can click this link to prevent Google Analytics from collecting data on this website in the future. This will place an opt-out cookie on your terminal device. If you delete your cookies, you must click the link again.

Google has certified itself in accordance with the US-EU data protection agreement “Privacy Shield” (can be found at https://www.privacyshield.gov/list under the search term “Google”) and has thus undertaken to comply with the European data protection guidelines. The data processing, in particular the setting of cookies, is carried out with your consent on the basis of Art. 6 para. 1 p. 1 lit. a DS-GVO. You can revoke your consent at any time by clicking on the following link.

You can access Google’s privacy policy at https://policies.google.com/privacy?hl=de and Google’s terms of use at https://policies.google.com/terms?hl=de.

If you use our contact form to contact us, we will ask you for personal information. In order for us to be able to answer the request, it is necessary to provide a valid e-mail address. Further information about your person can be provided voluntarily.

Your data will be processed by e-mail.

For technical reasons, an encrypted transmission of your contact information cannot be ensured. Thus, there is theoretically the possibility that data could be taken note of or also falsified by unauthorized persons.

Your data is stored on protected servers in Germany in compliance with data protection regulations.

Data processing for the purpose of contacting us is based on your voluntarily given consent. By clicking the “Make an appointment” button, you consent to the processing of your contact information for the above-mentioned purposes. If you do not agree, you must cancel the process. The contact form will then not be sent and your data will not be processed.

The processing of the data entered in the contact form is therefore based exclusively on your consent (Art. 6 para. 1 S.1 lit. a DS-GVO). You can revoke this consent at any time with effect for the future. To do so, please write to idemus GmbH, Untere Pfaffensteigstr. 61a, 91126 Schwabach, Germany, or send an e-mail to joanna.reutner@idemidemussolutions.

We use your data only to the extent necessary for processing your requests and for further correspondence with you. The data collected by us for the use of the contact form will be stored for the purpose of processing the request and in case of follow-up questions and deleted after completion of your request in accordance with data protection law, unless there is another legal obligation to retain data.

Our website is aimed exclusively at potential customers as well as business partners and representatives of the press.

Persons under the age of 16 should not transmit any data to us without the consent of their parents or legal guardians. We do not request data from children and young people who have not reached the age of sixteen. We do not collect them and do not pass them on to third parties.

We have taken technical and organizational security measures in accordance with legal requirements to protect your data from loss, destruction, manipulation and unauthorized access.

The security measures include, in particular, the encrypted transmission of data between your browser and our server.

All our employees and all persons involved in data processing, as well as the service companies we commission, are obliged to comply with the DS-GVO, the BDSG and other laws relevant to data protection and to handle data confidentially.

Our security measures are regularly reviewed and continuously revised in line with technological developments.

If you have given us your consent to the processing of your data, you can revoke your consent at any time with effect for the future. To do so, please write to idemus GmbH, Untere Pfaffensteigstr. 61a, 91126 Schwabach, Germany, or send an e-mail to joanna.reutneridemus.com.

15.1 Right to information

You can get information about your data processed by us at any time according to Art. 15 DS-GVO.

In particular, you can request information about the purposes of processing, the categories of data processed, categories of possible recipients and the planned storage period.

Please address your request for information to idemus GmbH, Untere Pfaffensteigstr. 61a, 91126 Schwabach, Germany, or send an e-mail to joanna.reutneridemus.com.

15.2 Right to rectification

You are entitled to request a correction or completion of your data stored by us if the data is incorrect in accordance with Art. 16 DS-GVO.

To exercise your right of rectification, please write to idemus GmbH, Untere Pfaffensteigstr. 61a, 91126 Schwabach, Germany, or send an e-mail to joanna.reutneridemus.com.

15.3 Right to deletion

According to Art. 17 DS-GVO, you can demand the erasure of the data if the storage of the data is no longer necessary and there is no other legal basis for the processing. In addition, you can request erasure if you have objected to the processing and there are no overriding legitimate grounds for further processing of your data and if your data has been processed unlawfully or if there is a legal obligation to erase it under EU or national law.

You may exercise your right to request deletion by writing to idemus GmbH, Untere Pfaffensteigstr. 61a, 91126 Schwabach, Germany, or by sending an e-mail to joanna.reutneridemus.com.

15.4 Right to restriction of processing

In addition, you have a right to restriction of processing pursuant to Art. 18 DS-GVO if you dispute the accuracy of the data for a period enabling the controller to verify the accuracy of the data; if the processing is unlawful but you object to the erasure of the data; if the purpose of the processing has ceased to exist but the data is necessary to assert your legal claims or if you have objected pursuant to Art. 21 DS-GVO and it is not yet clear whether the legitimate grounds of the controller override your interests.

To exercise your right to restrict processing, please write to idemus GmbH, Untere Pfaffensteigstr. 61a, 91126 Schwabach, Germany, or send an e-mail to joanna.reutneridemus.com.

15.5 Right to data portability

According to Art. 20 DS-GVO, you have the right to receive the data concerning you in a common, structured and machine-readable format (data portability). In addition, under certain conditions, you can request that your data be transferred directly from a data controller, insofar as this is technically possible.

If you wish to exercise your right to data portability, please write to idemus GmbH, Untere Pfaffensteigstr. 61a, 91126 Schwabach, Germany, or send an e-mail to joanna.reutneridemus.com.

You have the right to object to the use of your data for the above-mentioned purposes at any time (Art. 21 DS-GVO). This is possible insofar as the objection is directed against direct advertising or there are reasons for this that arise from your particular situation. In the case of objection to direct advertising, you have a general right to object, which is implemented by us without specifying a particular situation.

To exercise your right to object, please write to Idemus GmbH, Untere Pfaffensteigstr. 61a, 91126 Schwabach, Germany, or send an e-mail to joanna.reutner<at>idemus.com.

In addition, we would like to point out that, without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement, if you consider that the processing of data relating to you infringes the GDPR.

A list of supervisory authorities (for the non-public sector) with address can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

If you have any questions about our information on data protection or the processing of your personal data, you can contact our contact person for data protection directly:

Joanna Reutner
Untere Pfaffensteigstr. 61a, 91126 Schwabach
0157 / 3131 5879
Joanna.reutner<at>idemus.com

She is also available as a contact person in the event of requests for information, suggestions or complaints.

We reserve the right to change our security and data protection measures if this becomes necessary due to technical developments. In these cases, we will also adapt our data protection notices accordingly. Therefore, please note the respective current version of our data protection declaration.