1. Overview of data privacy
General information
Below is a simple overview of what happens to your personal data when you visit this website. Personal data refers to all data that can be used to identify you as a person. You can find further information on data privacy in our data privacy policy available below this data privacy statement.
Data collection on this website
Who is responsible for data collection on this website?
It is the website operator who handles data processing on this website. You will find their contact details in the section Information about the controller in this data privacy statement.
How do we collect your data?
First of all, we collect the data that you provide to us. This might be any data that you enter into a contact form, for example.
Other data is automatically collected by our IT systems or after you give your consent when you visit our website. These primarily include technical data, such as your web browser, operating system or time of website access. This data is collected automatically as soon as you access this website.
What do we use your data for?
Some of your data is collected to ensure that the website is fully available without any errors. Other data may be used to analyse your user behaviour.
What are your rights with respect to your data?
You have the right to receive information on the source, recipient and intended use of your stored personal data free of charge at all times. You also have the right to request rectification or erasure of this data. If you have given your consent to process your data, you have the right to withdraw this consent for the future at any time. You also have the right to demand limited processing of your personal data under certain circumstances. Moreover, you also have a right of appeal to the competent supervisory authority.
You may contact us at any time for further information on this subject or matters related to data privacy.
Analysis tools and third-party providers’ tools
Your browsing behaviour may be subject to statistical analysis during visits to this website. What are known as analysis programs mainly perform such analyses.
You will find detailed information on these analysis programs in the data privacy statement below.
2. Hosting
We host the contents of our website through the following provider:
External hosting
This website is hosted externally. Personal data which is collected on this server is saved on the hosting service provider’s/providers’ servers. This may include especially IP addresses, contact enquiries, metadata, communication data, contract details, contact details, names, website visits and other data which are generated via a website.
A professional provider supplies external hosting for the purpose of fulfilling contracts for our potential and existing customers (Art. 6 (1) (b) GDPR) and in the interests of secure, fast, efficient provision of our website (Art. 6 (1) (f) GDPR). If relevant consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR and Section 25 (1) German Telecommunications Telemedia Data Protection Act (TTDSG) if the consent includes storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) as specified in TTDSG. Consent can be revoked at any time.
Our hosting service provider(s) will only process your data in the way required to fulfil their service obligations and will follow our instructions regarding this data.
We use the following hosting service provider:
jweiland.net
Echterdinger Strasse 57
70794 Filderstadt bei Stuttgart
Germany
Order processing
We have concluded an order processing agreement to use the aforementioned service. This is a contract required under data protection legislation, which ensures that the provider only processes our website visitors’ personal data in accordance with our instructions and in compliance with the GDPR.
3. General information and mandatory information
Data protection
The operators of these pages take the protection of your personal data very seriously. We will treat your personal data as confidential and in accordance with statutory data privacy regulations and this data privacy statement.
When you use this website, we collect a variety of personal data. Personal data refers to data that can be used to identify you as a person. This data privacy statement explains what data we collect and what we use it for. It also describes how this is carried out and why.
Please also note that data transmission over the Internet – by email, for example – may be susceptible to security vulnerabilities. It is not possible to fully protect data from unauthorised access.
Controller
The controller responsible for data processing on this website is:
IoT Venture GmbH
Hilpertstr. 31
64295 Darmstadt
Germany
Phone: +49 800 0060751
Email: info@iot-venture.com
The controller is refers to a natural person or legal entity who alone or jointly with others determines the purposes and means of personal data processing (e.g. names, email addresses and similar).
Period of storage
Unless a more specific storage period has been specified within this data privacy statement, your personal data will remain with us until the purpose for processing the data ceases to exist. If you make a justified request for deletion or revoke consent to data processing, your data will be deleted provided that we do not have any other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial legislation); in the latter case, the data will be deleted once these reasons cease to apply.
General information on the legal basis for data processing on this website
If you have given your consent for processing of your data, we will process your personal data in compliance with Art. 6 (1) (a) GDPR, or Art. 9 (2) (a) GDPR if special data categories are being processed as specified in Art. 9 (1) GDPR. In the case of express consent for the transmission of personal data to third countries, data will also be processed in compliance with Art. 49 (1) (a) GDPR. If you have given your consent to the storage of cookies or retrieval of information on your terminal device (e.g. using device fingerprinting), the data will also be processed in compliance with Section 25 (1) TTDSG. Consent can be revoked at any time. If your data is required to fulfil a contract or take steps prior to entering into a contract, we also process your data in compliance with Art. 6 (1) (b) GDPR. Moreover, we will process your data in accordance with Art. 6 (1) (c) GDPR if they are required to comply with a legal obligation. Data may also be processed for reasons of our legitimate interest as specified in Art. 6 (1) (f) GDPR. Information on the relevant legal basis for each individual case is provided in the following paragraphs of this data protection statement.
Data Protection Officer
We have appointed a Data Protection Officer.
Email: datenschutz@iot-venture.com
Data transfer to the US and other third countries
Among other things, we use tools provided by companies based in the US or other third countries that are not secure in terms of data protection legislation. If these tools are active, your personal data may be transferred to these third countries and processed there. We’d like to point out that a level of data protection comparable to that provided in the EU cannot be guaranteed in these countries. For example, US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal steps against such action. As a result, it cannot be excluded that US authorities, such as intelligence services, will process, evaluate and permanently store your data located on US servers. We have no control over such processing activities.
Withdrawal of consent for data processing
Many data processing operations are only possible if your express consent has been obtained. You may withdraw consent that you have given at any time. Withdrawal of consent has no impact on the legality of data processing up to the point in time when consent was revoked.
Right to object to data collection in specific cases
IF DATA IS PROCESSED ON THE BASIS OF ART. 6 (1) (E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA DUE TO REASONS RELATED TO YOUR SPECIFIC CIRCUMSTANCES AT ANY TIME; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. YOU WILL FIND THE RELEVANT LEGAL BASIS ON WHICH YOUR PERSONAL DATA IS PROCESSED IN THIS DATA PRIVACY STATEMENT. IF YOU LODGE AN OBJECTION, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE ARE ABLE TO DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR PROCESSING SERVES TO ESTABLISH, ASSERT OR DEFEND LEGAL CLAIMS (OBJECTION AS PER ART. 21 (1) GDPR).
Right of appeal to competent supervisory authority
In the event of infringements of the GDPR, the data subject has the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, place of work, or the place where the alleged infringement took place. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedy.
Right to data portability
You have the right to have data that we process with your consent or process with the aim of fulfilling an order sent to you or to a third party in a customary machine-readable format. If you request direct transfer of data to another controller, this will only be performed if technically possible.
Information, erasure and rectification
Under the applicable provisions of the law, you have at all times the right to request access – free of charge – about your stored personal data, its source and the recipient, the purpose of its processing, and, where applicable, a right to rectification or erasure of this data. You may contact us at any time for further information on this subject or matters related to data privacy.
Right to restriction of processing
You have the right to demand limited processing of your personal data. You may contact us at any time for this purpose. The right to restriction of processing exists in the following cases:
- If you wish to dispute the accuracy of the personal data that we store on you, we generally need time to check this. You have the right to demand limited processing of your personal data while we make this check.
- If your personal data has been/is being processed in an unlawful way, you may request that data processing is restricted instead of erasure.
- When we no longer need your personal data but you need them to exercise, defend or assert legal claims, you have the right to require that processing of your personal data be restricted instead of erasure.
- If you lodge an objection as per Art. 21 (1) GDPR, there needs to be a balance between your interests and ours. You have the right to demand limited processing of your personal data if it has not yet been determined whose interests predominate.
If you have restricted processing of your personal data, this personal data, irrespective of whether it is stored or not, may only be processed with your consent or to establish, assert, or defend legal claims, or to protect the rights of another natural person or legal entity, or for reasons of important public interest in the European Union or a Member State.
SSL or TLS encryption
This site uses SSL and/or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries, that you send to us as the site owners. You can easily recognise an encrypted connection because the address line in the browser changes from http:// to https:// and also displays a padlock icon.
The data that you provide to us cannot be read by third parties if SSL and/or TLS encryption is active.
4. Data collection on this website
Cookies
Our internet pages use what are known as cookies. Cookies are small data packages and will not damage your terminal device. They are stored on your terminal device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are deleted automatically at the end of your visit. Permanent cookies remain stored on your terminal device until you yourself delete them or your web browser deletes them automatically.
Third-party cookies may be stored on your terminal device in some cases when you visit our site. These allow you or us to use specific services provided by the third-party company (e.g. cookies to process payment services).
Cookies have different functions. Numerous cookies are necessary from a technical standpoint since certain website functions will not work without them (e.g. the shopping basket function or videos). Other cookies are used to analyse user behaviour or show advertisements.
The cookies needed (necessary cookies) to carry out the electronic communication process, provide the specific functions you require (e.g. the shopping basket function) or optimise the website (e.g. cookies to quantify the website’s visitors) are stored in accordance with Art. 6 (1) (f) GDPR unless any other legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to provide an optimised, technically flawless service. If consent to store cookies and comparable recognition technologies has been requested, processing takes place solely on the basis of this consent (Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG); consent can be revoked at any time.
You can set your browser to inform you that cookies are being used and only permit cookies on a case-by-case basis, accept cookies in certain cases or generally refuse them, and automatically delete them when you close your browser. Deactivating cookies may limit this website’s functions.
If third-party cookies or cookies stored for analysis purposes are used, we will inform you about them separately within this data privacy statement and, if necessary, request consent.
Server log files
The provider of the pages automatically collects and stores information in what are known as server log files, which your browser automatically transmits to us. These comprise:
- Browser type and version
- Operating system used
- Referrer URL
- Host name of the computer accessing the site
- Time of the server request
- IP address
This data is not combined with any other data sources.
This data is collected in accordance with Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in technically flawless display and the optimisation of their website. Server log files need to be collected for this purpose.
Contact form
If you send us an enquiry using our contact form, we will store the information you entered into the form, including contact details, to handle your enquiry and deal with any follow-up questions. We will not disclose this data without your permission.
This data is processed in accordance with Art. 6 (1) (b) GDPR provided that your enquiry is related to the fulfilment of a contract or completion of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) if this has been requested; consent can be revoked at any time.
The data you enter into the contact form will remain with us until you ask us to delete it, revoke your consent to store it or the reason for storing the data no longer applies (e.g. after we have completed processing your enquiry). Mandatory statutory provisions, especially retention periods, remain unaffected.
Enquiry by email, telephone or fax
If you contact us by email, telephone or fax, your request, including all personal data provided in it (name, request), will be stored and processed in our systems in order to process your enquiry. We will not disclose this data without your permission.
This data is processed in accordance with Art. 6 (1) (b) GDPR provided that your enquiry is related to the fulfilment of a contract or completion of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) if this has been requested; consent can be revoked at any time.
The data you transmit to us in requests for contact will remain with us until you ask us to delete it, revoke your consent to store the data or the reason for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory statutory provisions, especially statutory retention periods, remain unaffected.
Use of chatbots
We use chatbots to communicate with you. Chatbots are able to respond to your questions and other inputs without human intervention. In addition to your inputs, chatbots analyse data to give suitable answers (e.g. names, email addresses and other contact details, email addresses and other identifiers, orders and chat histories). Furthermore, the chatbot may collect your IP address, log files, location information and other metadata. This data is stored on the chatbot provider’s servers.
This website uses the chatbot provider MobileMonkey. The provider MobileMonkey Inc. 359 Newbury Street, 5th Floor Boston, MA, 02115, United States. Email: contact@mobilemonkey.com . The provider’s data privacy statement: https://mobilemonkey.com/privacy-policy .
User profiles can be created based on the data recorded. The data may also be used to show interest-based advertisements, provided that the other legal requirements for this usage are met, especially regarding consent. Chatbots can be linked to analysis and advertising tools for this purpose.
The collected data may also be used to improve our chatbots and their response behaviour (machine learning).
The data you enter during communication will remain with us or the chatbot operator until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory statutory provisions, especially retention periods, remain unaffected.
The legal basis for the use of chatbots is Art. 6 (1) (b) GDPR, provided that the chatbot is used to initiate or fulfil a contract. If relevant consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR and Section 25 (1) German Telecommunications Telemedia Data Protection Act (TTDSG) if the consent includes storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) as specified in TTDSG. Consent can be revoked at any time. In all other cases, the use of data is based on our legitimate interest in the most effective customer communication possible (Art. 6 (1) (f) GDPR).
5. Analysis tools and advertising
Google Analytics
This website uses functions provided by the Google Analytics website analysis service. The provider is Google Ireland Limited (Google), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyse the website visitor’s behaviour. In doing so, the website operator obtains a variety of usage data, such as site visits, visit duration, the operating systems used and the user’s origin. This data is correlated with the user’s terminal device. It is not correlated with a user ID.
Google Analytics uses technologies that make it possible to recognise the user for the purposes of analysing user behaviour (e.g. cookies or device fingerprinting). The information that the cookie generates during usage of this website is generally transferred to a Google server in the US and stored there.
This service is used based on your consent in compliance with Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG. Consent can be revoked at any time.
Data transfer to the US is in compliance with the EU Commission’s standard contractual clauses. You will find the details here:
https://privacy.google.com/businesses/controllerterms/mccs/.
IP anonymization
We have enabled the IP anonymization function on this website. This means that Google shortens the user’s IP address within a Member State of the European Union or within another state which has signed the European Economic Area Agreement. A full IP address is transferred to a Google server in the US and shortened there in exceptional cases only. Google will use this information to evaluate your usage of the website, compiling reports on website activity for this website’s operator and providing other services relating to website activity and Internet usage to the website operator. Under no circumstances will the IP address that your browser provides for Google Analytics be linked to other Google data.
Browser plugin
You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
You will find more information on how Google Analytics handles your user data in Google’s data privacy statement: https://support.google.com/analytics/answer/6004245?hl=en.
Demographic features at Google Analytics
This website uses the Google Analytics Demographic features function to show website visitors suitable online ads within the Google advertising network. This function can be used to produce reports to obtain information on website visitors’ ages, gender and interests. This data comes from interest-based advertising by Google and visitor data from third-party providers. This data cannot be correlated with a specific person. You can disable this function at any time in your Google account ad settings or prohibit collection of your data by Google Analytics in general as indicated under Objection to data collection.
Order processing
We have concluded an order processing agreement with Google and fully meet the German data protection authorities’ strict requirements when using Google Analytics.
Google Ads
The website operator uses Google Ads. Google Ads is an online advertising platform provided by Google Ireland Limited (Google), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads enables us to display advertisements in the Google search engine or on third-party websites when the user enters specific search terms into Google (keyword targeting). Moreover, targeted advertisements can be shown based on the user data available from Google, such as location data and interests (target group targeting). As the website operator, we can evaluate this data quantitatively by analysing items such as what specific search terms have resulted in our advertisements being displayed and how many times users have clicked on these advertisements.
This service is used based on your consent in compliance with Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG. Consent can be revoked at any time.
Data transfer to the US is in compliance with the EU Commission’s standard contractual clauses. You will find the details here:
https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.
6. Plugins and tools
YouTube with extended data privacy
This website incorporates videos from the YouTube website. The YouTube website operator is Google Ireland Limited (Google), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in advanced data privacy mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, disclosure of data to YouTube partners is not necessarily prevented by the advanced data privacy mode. YouTube establishes a connection to the Google DoubleClick network regardless of whether you look at a video or not.
If you start a YouTube video on this website, a connection is established to the YouTube servers. During this process, the YouTube server is informed which of our web pages you have visited. If you are logged into your YouTube account, you allow YouTube to correlate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.
After you start a video, YouTube can also store cookies on your terminal device or use similar recognition technologies (e.g. device fingerprinting). This allows YouTube to obtain information about visitors to this website. This information is used to collect video statistics, improve the user experience and prevent fraud among other things.
If necessary, further data processing operations may be triggered after a YouTube video is started, over which we have no control.
YouTube is used to provide an appealing presentation of our online services. This represents a legitimate interest as per Art. 6 (1) (f) GDPR. If relevant consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR and Section 25 (1) German Telecommunications Telemedia Data Protection Act (TTDSG) if the consent includes storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) as specified in TTDSG. Consent can be revoked at any time.
You will find more information about data privacy on YouTube in its data privacy statement at: https://policies.google.com/privacy?hl=en.
Status: December 2022
