Data Protection Privacy Statement

Privacy: your right – our commitment 

Personal data (usually referred to just as “data” below) will only be processed by us to the extent necessary and for the purpose of providing a functional and user-friendly website, including its contents, and the services offered there. 

Per Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as the “GDPR”), “processing” refers to any operation or set of operations such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, or combination, restriction, erasure, or destruction performed on personal data, whether by automated means or not. 

The following privacy policy is intended to inform you in particular about the type, scope, purpose, duration, and legal basis for the processing of such data either under our own control or in conjunction with others. We also inform you below about the third-party components we use to optimize our website and improve the user experience which may result in said third parties also processing data they collect and control. 

For further information you can contact our data protection officer at any time: 

dataprivacy@smartray.com 

Information about us as controllers of your data 

The party responsible for this website (the “controller”) for purposes of data protection law is: 

SmartRay GmbH 

Bürgermeister-Finsterwalder-Ring 12
82515 Wolfratshausen
GERMANY 

P + 49 (0) 8171 9683 400
F + 49 (0) 8171 9683 401
info@smartray.com 

The controller’s data protection officer is: 

Oliver Peters

CAPCAD SYSTEMS AG
Carl-Zeiss-Ring 21
85737 Ismaning
P + 49 (0) 89 991522-0 

 

Information that we collect 

You can use almost all of the website’s offer without us needing your personal information. Only a few offers and services that you find on our pages require the use of personal data for their use. 

If you use the website, the internet servers (web servers) automatically records and evaluates technical access data. However, this data can not be assigned to a specific person; the individual user remains anonymous. A merge with other data does not take place. 

Personal data (hereinafter referred to as “data” for the most part) are processed by us only within the scope of necessity and for the purpose of providing a functional and user-friendly website, including its contents and the services offered there. 

Pursuant to Article 4 (1) of Regulation (EU) 2016/679, the Basic Data Protection Regulation (hereinafter referred to as the ‘GDPR’), ‘processing’ means any operation or series of operations carried out with or without the aid of automated procedures personal data, such as collecting, organizing, storing, adapting or modifying, reading out, querying, using, disclosing through transmission, dissemination or any other form of provision, reconciliation or the join, the restriction, the deletion or the annihilation. 

In particular, the following privacy policy informs you of the nature, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide on the purposes and means of processing either alone or together with others. In addition, we will inform you about the third-party components used by us for optimization purposes and to increase the quality of use, insofar as third parties process data in their own responsibility. 

Protecting the privacy of persons under the age of 16 on the Internet 

Personal data of minors (under 16 years of age) are not knowingly collected or used in any form by SmartRay GmbH. As a rule, we do not learn the age of the visitor to our website. However, we have also taken no specific measures to protect such data to a particular degree. 

Persons under the age of 16 may not submit personal data without the express consent of parents or guardians. 

How we use your information 

SmartRay GmbH collects, processes and uses all personal data arising from your visits to our internet service only in accordance with the respectively valid regulations for the protection of personal data. 

We use the personal data only for the purposes set out in this privacy policy (for example, to process inquiries or, if necessary, to use services). When collecting personal data via forms, you will be informed about the purpose of the survey and other circumstances in accordance with the requirements of Art. 13 GDPR. Use of such data for other purposes is excluded.

We will not disclose the personal information you have provided to third parties without your explicit consent. 

 

The rights of users and data subjects 

The person concerned has the right to request confirmation from the person responsible as to whether personal data relating to them are being processed; if this is the case, she has the right to information about this personal data and the information listed in Art. 15 GDPR.
The data subject has the right to request the person responsible to correct any incorrect personal data relating to them and, if necessary, to complete incomplete personal data (Art. 16 GDPR).

The person concerned has the right to demand that the person responsible erase personal data concerning them immediately, provided that one of the reasons listed in Art. 17 GDPR applies, e.g. B. if the data is no longer required for the purposes pursued (right to deletion).
The data subject has the right to request the controller to restrict processing if one of the conditions listed in Art. 18 GDPR is met, e.g. B. if the person concerned has objected to the processing, for the duration of the review by the person responsible.

Right to data portability: The person concerned has the right to receive the personal data concerning them, which they have provided to a responsible person, in a structured, common and machine-readable format. You also have the right, if technically feasible, to have this data passed on to another person responsible (Art. 20 GDPR).

The data subject has the right to object at any time to the processing of personal data relating to them for reasons that arise from their particular situation. The person responsible will then no longer process the personal data unless he can prove compelling legitimate reasons for the processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims (Art . 21 GDPR).

Without prejudice to any other administrative or judicial remedy, every person concerned has the right to lodge a complaint with a supervisory authority if the person concerned is of the opinion that the processing of their personal data violates the GDPR (Art. 77 GDPR). The person concerned can assert this right with a supervisory authority in the member state of their place of residence, their place of work or the place of the alleged violation. In Bavaria the competent supervisory authority is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27
91522 Ansbach
bzw. poststelle@lda-bayern.de

The security of your data 

The data provided by you to SmartRay GmbH are protected by suitable technical and organizational means with the aim of protecting your data against accidental or intentional manipulation, loss, destruction, access by unauthorized persons or unauthorized disclosure to third parties. Our security measures are continuously monitored and improved according to technological developments and organizational possibilities. 

Information about the data processing 

Your data processed when using our website will be deleted or blocked as soon as the purpose for its storage ceases to apply, provided the deletion of the same is not in breach of any statutory storage obligations or unless otherwise stipulated below. 

Server data 

For technical reasons, the following data sent by your internet browser to us or to our server provider will be collected, especially to ensure a secure and stable website: These server log files record the type and version of your browser, operating system, the website from which you came (referrer URL), the webpages on our site visited, the date and time of your visit, as well as the IP address from which you visited our site. 

The data thus collected will be temporarily stored, but not in association with any other of your data. 

The basis for this storage is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the improvement, stability, functionality, and security of our website. 

The data will be deleted within no more than seven days, unless continued storage is required for evidentiary purposes. In which case, all or part of the data will be excluded from deletion until the investigation of the relevant incident is finally resolved. 

Cookies 

We would like to point out that these websites use cookies. Cookies are text files that are stored on the user’s computer system in the internet browser. The legal basis for the use of cookies is Art. 6 Para. 1 lit. a GDPR (consent to processing for statistical purposes, to optimize the presentation or for marketing purposes). If the consent to the use of cookies is not given, some offers on the website cannot be used or can only be used in part.

Information on the cookies used:

Name	purpose	Storage period	Type of cookie
_ga	Registers a unique ID that is used to generate statistical data on how the visitor uses the website.	2 years	First-Party-Cookie
_gat	This cookie is used for Google Analytics to limit the request rate.	1 day	First-Party-Cookie
_gid	This cookie is used for Google Analytics to distinguish between users.	1 day	First-Party-Cookie

The website also uses cookies, which are absolutely necessary for the technical operation of the website, they do not contain any personal information and are not read by third parties.

Possibility of elimination

You can prevent or restrict the installation of cookies by setting your internet browser. You can also delete cookies that have already been saved at any time. The steps and measures required for this, however, depend on the specific Internet browser you are using. If you have any questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support. In the case of so-called flash cookies, however, processing cannot be prevented via the browser settings. Instead you have to change the setting of your Flash player. The steps and measures required for this also depend on the specific Flash player you are using. If you have any questions, please use the help function or documentation of your Flash player or contact the manufacturer or user support.

However, should you prevent or restrict the installation of cookies, this may mean that not all functions of our website can be used to their full extent.

Newsletter 

If you register for our free newsletter, the data requested from you for this purpose, i.e. your email address and, optionally, your name and address, will be sent to us. We also store the IP address of your computer and the date and time of your registration. During the registration process, we will obtain your consent to receive this newsletter and the type of content it will offer, with reference made to this privacy policy. The data collected will be used exclusively to send the newsletter and will not be passed on to third parties. 

The legal basis for this is Art. 6 Para. 1 lit. a) GDPR. 

You may revoke your prior consent to receive this newsletter under Art. 7 Para. 3 GDPR with future effect. All you have to do is inform us that you are revoking your consent or click on the unsubscribe link contained in each newsletter. 

MailChimp – Newsletter delivery 

We offer the opportunity to register with us via our website for our free newsletter. 

For the purposes of newsletter distribution, we use MailChimp, a service of The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA, hereinafter referred to as “The Rocket Science Group”. 

The Rocket Science Group also offers 

http://mailchimp.com/legal/privacy/ 

further privacy information. 

If you subscribe to our newsletter, the data requested during the registration process, such as your e-mail address and, optionally, your name and address, will be processed by The Rocket Science Group. In addition, your IP address as well as the date of your registration will be saved along with the time. As part of the further registration process, your consent to the sending of the newsletter will be obtained, the content specifically described and referred to this privacy policy. 

The newsletter, which is subsequently sent via The Rocket Science Group, also contains a so-called “counting pixel”, also called Web Beacon “. With the help of this pixel we can evaluate if and when you have read our newsletter and if you have followed the links in the newsletter. In addition to other technical data, such as the data of your computer system and your IP address, the processed data are stored so that we can optimize our newsletter offer and respond to the wishes of the reader. The data will therefore increase to increase the quality and attractiveness of our newsletter offer. 

The legal basis for sending the newsletter and the analysis is Art. 6 para. 1 lit. a.) GDPR. 

The consent to the newsletter dispatch can be withdrawn at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. For this you only need to inform us about your withdrawal or press the unsubscribe link contained in each newsletter. 

Contact 

If you contact us via email or the contact form, the data you provide will be used for the purpose of processing your request. We must have this data in order to process and answer your inquiry; otherwise we will not be able to answer it in full or at all. 

The legal basis for this data processing is Art. 6 Para. 1 lit. b) GDPR. 

Your data will be deleted once we have fully answered your inquiry and there is no further legal obligation to store your data, such as if an order or contract resulted therefrom. 

Other websites and social networks 

The Website may contain links to other websites that are not under our control and for which this Privacy Policy does not apply. If you use the links provided to access other websites, the operators of these websites may collect information about you that they use in accordance with their privacy policies, which may differ from ours. 

The Website may also offer you the opportunity to share or follow information about SmartRay, the Website or the products and / or services available through it using social networking functionality (eg, “share this”, “like”). or “follow” buttons). 

We offer this functionality to members of these social networks to give them the opportunity to share and follow opinions, messages and recommendations about the website with their contacts. However, as a member of these social networks you should be aware that if personal information is shared on a social network, that information may be collected and made public by the social network provider, including through internet search engines. 

You should always read the privacy policy of every webpage you visit or any social network you use to disclose information in order to be aware of their privacy practices. 

Google Analytics 

We use Google Analytics on our website. This is a web analytics service provided by Google Inc., Gordon House, Barrow Street, Dublin 4, Irland (hereinafter: Google). 

The Google Analytics service is used to analyze how our website is used. The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, optimization, and economic operation of our site. 

Usage and user-related information, such as IP address, place, time, or frequency of your visits to our website will be transmitted to a Google server in the United States and stored there. However, we use Google Analytics with the so-called anonymization function, whereby Google truncates the IP address within the EU or the EEA before it is transmitted to the US. 

The data collected in this way is in turn used by Google to provide us with an evaluation of visits to our website and what visitors do once there. This data can also be used to provide other services related to the use of our website and of the internet in general. 

Google states that it will not connect your IP address to other data. In addition, Google provides further information with regard to its data protection practices at 

https://www.google.com/intl/de/policies/privacy/partners, 

including options you can exercise to prevent such use of your data. 

In addition, Google offers an opt-out add-on at 

https://tools.google.com/dlpage/gaoptout?hl=en 

in addition with further information. This add-on can be installed on the most popular browsers and offers you further control over the data that Google collects when you visit our website. The add-on informs Google Analytics’ JavaScript (ga.js) that no information about the website visit should be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analytics services we may use as detailed herein. 

Google-Maps 

Our website uses Google Maps to display our location and to provide directions. This is a service provided by Google Inc., Gordon House, Barrow Street, Dublin 4, Irland (hereinafter: Google). 

To enable the display of certain fonts on our website, a connection to the Google server in the USA is established whenever our website is accessed. 

If you access the Google Maps components integrated into our website, Google will store a cookie on your device via your browser. Your user settings and data are processed to display our location and create a route description. We cannot prevent Google from using servers in the USA. 

The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in optimizing the functionality of our website. 

By connecting to Google in this way, Google can determine from which website your request has been sent and to which IP address the directions are transmitted. 

If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your browser. Further details can be found in the section about cookies above. 

In addition, the use of Google Maps and the information obtained via Google Maps is governed by the Google Terms of Use https://policies.google.com/terms?gl=DE&hl=en and the Terms and Conditions for Google Mapshttps://www.google.com/intl/de_de/help/terms_maps.html. 

Google also offers further information at 

https://adssettings.google.com/authenticated 

https://policies.google.com/privacy 

Google Fonts 

We use Google Fonts from Google Inc. (1600 Amphitheater Parkway Mountain View, CA 94043, USA) on our website.

You do not need to register or enter a password to use Google fonts. Furthermore, no cookies are stored in your browser. The files (CSS, typefaces/fonts) are requested via the Google domains fonts.googleapis.com and fonts.gstatic.com. According to Google, requests for CSS and fonts are completely separate from all other Google services. If you have a Google account, you don’t have to worry about your Google account data being transmitted to Google while using Google Fonts. Google records the use of CSS (Cascading Style Sheets) and the fonts used and stores this data securely. How the data storage looks exactly, we will look at in detail.

What are Google Fonts?
Google Fonts (formerly Google Web Fonts) is an interactive directory with more than 800 fonts provided by Google LLC for free use.
Many of these fonts are released under the SIL Open Font License, while others are released under the Apache License. Both are free software licenses. So we can use them freely without paying license fees.

Why do we use Google Fonts on our website?
With Google Fonts we can use fonts on our own website and do not have to upload them to our own server. Google Fonts is an important component in keeping the quality of our website high. All Google fonts are automatically optimized for the web and this saves data volume and is a great advantage especially for use with mobile devices. When you visit our site, the small file size ensures fast loading time. Furthermore, Google Fonts are so-called secure web fonts. Different image synthesis systems (rendering) in different browsers, operating systems and mobile devices can lead to errors. Such errors can partially distort texts or entire websites. Thanks to the fast Content Delivery Network (CDN), there are no cross-platform problems with Google Fonts. Google Fonts supports all major browsers ( Google Chrome, Mozilla Firefox, Apple Safari, Opera) and works reliably on most modern mobile operating systems, including Android 2.2+ and iOS 4.2+ (iPhone, iPad, iPod).

So we use Google Fonts so that we can present our entire online service as ideal and uniformly as possible. According to Art. 6 Para. 1 f lit. F GDPR, this already represents a “legitimate interest” in the processing of personal data legal system are recognized.

Google reCAPTCHA 

Our website uses Google reCAPTCHA to check and prevent automated servers (“bots”) from accessing and interacting with our website. This is a service provided by Google Inc., Gordon House, Barrow Street, Dublin 4, Irland (hereinafter: Google). 

This service allows Google to determine from which website your request has been sent and from which IP address the reCAPTCHA input box has been used. In addition to your IP address, Google may collect other information necessary to provide and guarantee this service.    

The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the security of our website and in the prevention of unwanted, automated access in the form of spam or similar. 

Google offers detailed information at 

https://policies.google.com/privacy 

concerning the general handling of your user data. 

YouTube 

We use YouTube on our website. This is a video portal operated by YouTube LLC, 901 Cherry Ave, 94066 San Bruno, CA, USA, hereinafter referred to as “YouTube”. 

YouTube is a subsidiary of Google LLC, Gordon House, Barrow Street, Dublin 4, Irland, hereinafter referred to as “Google”. 

We use YouTube in its advanced privacy mode to show you videos. The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in improving the quality of our website. According to YouTube, the advanced privacy mode means that the data specified below will only be transmitted to the YouTube server if you actually start a video. 

Without this mode, a connection to the YouTube server in the USA will be established as soon as you access any of our webpages on which a YouTube video is embedded. 

This connection is required in order to be able to display the respective video on our website within your browser. YouTube will record and process at a minimum your IP address, the date and time the video was displayed, as well as the website you visited. In addition, a connection to the DoubleClick advertising network of Google is established. 

If you are logged in to YouTube when you access our site, YouTube will assign the connection information to your YouTube account. To prevent this, you must either log out of YouTube before visiting our site or make the appropriate settings in your YouTube account. 

For the purpose of functionality and analysis of usage behavior, YouTube permanently stores cookies on your device via your browser. If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your browser. Further details can be found in the section about cookies above. 

Further information about the collection and use of data as well as your rights and protection options in Google’s privacy policy found at 

https://policies.google.com/privacy 

 

LinkedIn 

We use Social Media Network features on LinkedIn, LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. 

By calling up pages that use such functions, data (IP address, browser data, date and time, cookies) are transmitted to LinkedIn, stored and evaluated. 

If you have a LinkedIn account and are logged in, this information will be associated with your personal account and the data stored in it. 

You can find the privacy policy that collects information on LinkedIn and how to use it at https://www.linkedin.com/legal/privacy-policy.

LinkedIn Insight Tag

The LinkedIn Insight Tag enables the collection of data regarding members’ visits to our website, including the URL, referrer, IP address, device and browser characteristics (User Agent), and timestamp. The IP addresses are truncated or hashed (when used for reaching members across devices), and members’ direct identifiers are removed within seven days in order to make the data pseudonymous. This remaining pseudonymized data is then deleted within 180 days.

We don’t receive the personal data of members with you; we only receive reports and alerts (which do not identify members) about our website audience and ad performance. We also use retargeting for website visitors, enabling us to show personalized ads off our website by using this data, but without identifying the member. We also use data that doesn’t identify members to improve ad relevance and reach members across devices. LinkedIn members can control the use of their personal data for advertising purposes through their account settings.

 

Twitter

We use the plug-in of the social network Twitter on our website. Twitter is an Internet service provided by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA, hereinafter referred to as “Twitter”.

The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in improving the quality of our website.

If the plug-in is stored on one of the pages you visit on our website, your Internet browser will download a representation of the plug-in from Twitter’s servers in the USA. For technical reasons, it is necessary for Twitter to process your IP address. In addition, the date and time of your visit to our website are also recorded.

If you are logged into Twitter while you are visiting one of our websites with the plug-in, the information collected by the plug-in about your specific visit will be recognized by Twitter. Twitter may assign the information collected in this way to your personal user account there. If you use the so-called “Share” button from Twitter, for example, this information will be saved in your Twitter user account and, if necessary, published on the Twitter platform. If you want to prevent this, you must either log out of Twitter before visiting our website or make the appropriate settings in your Twitter user account.

Further information about the collection and use of data as well as your rights and protection options in this regard is available from Twitter at
https://twitter.com/privacy
available data protection information.

XING

Our website also uses the “share function” of the XING network. The provider is XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany.

If you click on the XING “Share button” (plug-in), you will be forwarded to your user account in a separate browser window – provided you are logged into your XING user account – and you can view the electronic publication on our website with the addition of a comment divide. A direct connection between your browser and the XING server is established via the plug-in. As a result, XING receives the information that you have visited our website with your IP address. We would like to point out that we have no knowledge of the content of the transmitted (personal) data or its use by XING.

You can find more information on this in XING’s privacy policy at: https://www.xing.com/app/share?op=data_protection.

Facebook 

Our website uses the plug-in of the Facebook social network. Facebook.com is a service provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. In the EU, this service is also operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, hereinafter both referred to as “Facebook.” 

The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in improving the quality of our website. 

Further information about the possible plug-ins and their respective functions is available from Facebook at 

https://developers.facebook.com/docs/plugins/ 

If the plug-in is stored on one of the pages you visit on our website, your browser will download an icon for the plug-in from Facebook’s servers in the USA. For technical reasons, it is necessary for Facebook to process your IP address. In addition, the date and time of your visit to our website will also be recorded. 

If you are logged in to Facebook while visiting one of our plugged-in websites, the information collected by the plug-in from your specific visit will be recognized by Facebook. The information collected may then be assigned to your personal account at Facebook. If, for example, you use the Facebook Like button, this information will be stored in your Facebook account and published on the Facebook platform. If you want to prevent this, you must either log out of Facebook before visiting our website or use an add-on for your browser to prevent the Facebook plug-in from loading. 

Further information about the collection and use of data as well as your rights and protection options in Facebook’s privacy policy found at 

• Privacy Policy: https://www.facebook.com/policy 
• Pursuant to Art. 26 para. 1 sentence 2 DSGVO responsibility with regard to the processing of Insights data https://www.facebook.com/legal/terms/page_controller_addendum 
• Facebook Opt-Out:
  https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen und http://www.youronlinechoices.com 

• Facebook Data Protection Officer: https://www.facebook.com/help/contact/540977946302970 

Chat – Zendesk 

We use the Zendesk ticket system, a Zendesk Inc. customer service platform, 989 Market Street # 300, San Francisco, CA 94102 to process customer inquiries. We also use Zendesk’s Zopim chat tool from Zendesk. 

To process your inquiries, necessary data such as Your name, first name, postal address, telephone number, and e-mail address are collected via our website in order to answer your information needs.

For more information about Zendesk’s data processing, please refer to Zendesk’s Privacy Policy at http://www.zendesk.com/company/privacy. If you have any questions, feel free to contact the Zendesk Privacy Officer at privacy@zendesk.com 

If you contact us by e-mail or via the form on the website, we will only use the personal data you provide to process your specific request. The given data will be treated confidentially. The specified data and the message history with our service desk will be saved for follow-up questions and subsequent contacts. The processing of the data entered into the contact form is based on your consent (Article 6 (1) (a) GDPR). 

We have signed an agreement with Zendesk for order data processing and fully implement the strict requirements of the German data protection authorities when using Zendesk.
 

SurveyMonkey 

We also conduct Surveys using Surveymokney. 

The privacy policy can be found at: https://www.surveymonkey.de/mp/legal/privacy-policy/

MADixel

This website uses the MADixel analysis tool from MADixel GmbH (Königsdorfer Straße 25, 82515 Wolfratshausen) to determine which companies have visited the website. Tracking is limited to companies only. MADIXEL compares the IP address of a website visitor with the known IP addresses of companies using partly publicly accessible databases. If there is a match, certain generally accessible company data is processed and made available to the website operator on a platform. The comparison is made using an encrypted function, known as hashing. Access from private individuals is filtered out in advance in a pre-selection. If it is a private IP address, it is neither stored nor identified. A cookie is set on the end devices of the website visitor. If the user was not identified as a company, the tool only instructs them not to collect any further data. Otherwise only a cookie with a random ID will be generated. This is valid for 30 minutes. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR.

Hotjar

We use Hotjar in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices. This includes a device’s IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf.

For further details, please see the ‘about Hotjar’ section of Hotjar’s support site.

GoToWebinar 

To run webinars over the Internet, we use the GoToWebinar software solution from LogMeIn, Inc. LogMeIn, Inc. is the controller of this service and associated data processing. The LogMeIn Privacy Policy can be found at: https://www.logmeininc.com/en/legal/privacy 

Partner Portal 

We use the partner portal envivo.
The privacy policy of envivo can be found at: https://envivo-select.com/datenschutz/ 

Privacy Policy for the use of our online application system 

By using our online application system, you will be redirected to the website of our service provider Hrworks. HRworks is for SmartRay order data processor in the sense of the Federal Data Protection Act (Art. 28 DSGVO). That means, your data is hosted at this provider. Both SmartRay and the provider use technical and organizational security measures to protect your collected data against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. 

As part of the application process you have the opportunity to collect the following information about your person: salutation, title, first and last name, address, date of birth, telephone contact (mobile, landline), nationality, e-mail address, salary, earliest date of entry, current notice period, photo, CV, cover letter, certificates, other personal documents to your application. 

Only the information about yourself that you provide in your application will be saved. Your stored data is only purpose-specific, so used for the application process. 

After transmission of your data, they are sent via an encrypted connection (TLS) directly to the server of our external service provider. An encryption method is also available for login. 

By processing and transmitting your data solely for the application process, you consent to the transmission of your data to us. 

Further information about the collection and use of data as well as your respective rights and protection options are included in HRworks 

https://www.hrworks.de/unternehmen/datenschutz/ 

available privacy notices. 

Salesforce Sales Cloud

We use Salesforce Sales Cloud to manage customer data. The provider is salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich (hereinafter “Salesforce”).

Salesforce Sales Cloud is a CRM system and enables us, among other things, to manage existing and potential customers as well as customer contacts and to organize sales and communication processes. The use of the CRM system also enables us to analyze our customer-related processes. Customer data is stored on Salesforce’s servers. Personal data can also be transmitted to the parent company of salesforce.com Germany GmbH, salesforce.com inc., Salesforce Tower, 415 Mission Street, San Francisco, CA 94105, USA.
You can find details about the functions of Salesforce Sales Cloud here: https://www.salesforce.com/uk/products/sales-cloud/overview/ .

The use of Salesforce Sales Cloud is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in customer management and customer communication that is as efficient as possible. If a corresponding consent has been requested, the processing takes place exclusively on the basis of Article 6 (1) (a) GDPR; the consent can be revoked at any time.

Salesforce has Binding Corporate Rules (BCR) approved by the French Data Protection Authority. These are binding company-internal regulations that legitimize the company-internal data transfer to third countries outside the EU and the EEA. Details can be found here: https://www.salesforce.com/content/dam/web/en_us/www/documents/legal/misc/Salesforce-Processor-BCR.pdf.

Details can be found in the Salesforce data protection declaration: https://www.salesforce.com/uk/company/privacy/full_privacy/

Contract for order processing
We have concluded an order processing contract with Salesforce. This is a contract required by data protection law, which ensures that Salesforce only processes the personal data of our website visitors according to our instructions and in compliance with the GDPR.

Contact 

You can contact our data protection officer at:
dataprivacy@smartray.com