Data privacy policy

Data privacy policy

The responsible party within the meaning of the data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

Eubex GmbH & Co KG

Your data protection rights

You can exercise the following rights at any time using the contact details provided by our data protection officer:

• Information about your data stored by us and its processing (Art. 15 DSGVO),
• Correction of inaccurate personal data (Art. 16 GDPR),
• Deletion of your data stored with us (Art. 17 DSGVO),
• Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 DSGVO),
• object to the processing of your data by us (Art. 21 DSGVO) and
• Data portability, provided you have consented to the data processing or have concluded a contract with us (Art. 20 DSGVO).

If you have given us consent, you can revoke this at any time with effect for the future.
You can contact a supervisory authority at any time with a complaint, e.g. the competent supervisory authority in the federal state of your residence or the authority responsible for us as the responsible body.
A list of supervisory authorities (for the non-public sector) with address can be found at: bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html.

Collection of general information when visiting our website

Type and purpose of processing

When you access our website, i.e. if you do not register or otherwise submit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and the like.
In particular, they are processed for the following purposes:

• Ensuring a problem-free connection of the website,
• Ensuring a smooth use of our website,
• Evaluation of system security and stability as well as for the optimisation of our website.

We do not use your data to draw conclusions about your person. Information of this kind is statistically evaluated anonymously by us, if necessary, in order to optimise our website and the technology behind it.

Legal basis and legitimate interest

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

Receiver

Recipients of the data may be technical service providers who act as order processors for the operation and maintenance of our website.

Memory duration

The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case for data used to provide the website when the respective session has ended.

Provision mandatory or required

The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services and services may not be available or may be restricted. For this reason, an objection is excluded.

Contact form

Type and purpose of processing

The data you enter will be stored for the purpose of individual communication with you. For this purpose, it is necessary to provide a valid e-mail address and your name. This is used for the assignment of the enquiry and the subsequent response to it. The provision of further data is optional.

Legal basis

The processing of the data entered in the contact form is based on a legitimate interest (Art. 6 para. 1 lit. f GDPR).
By providing the contact form, we would like to enable you to contact us easily. The information you provide will be stored for the purpose of processing your enquiry and for possible follow-up questions.
If you contact us to request a quote, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 para. 1 lit. b GDPR).

Receiver

Recipients of the data are, if applicable, order processors.

Memory duration

Data will be deleted no later than 6 months after the request has been processed.
If a contractual relationship arises, we are subject to the statutory retention periods according to the German Commercial Code (HGB) and delete your data after these periods have expired.

Provision mandatory or required

The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, e-mail address and the reason for the request.

AssessIt

Type and purpose of processing

The data you enter is collected for the purpose of gathering information to comply with various legal or regulatory requirements n your organisation. The following personal data is required to ensure the functioning of and access to AssessIt:

• E-mail address
• Phone number
• Optional name and surname of the users

Legal basis

The processing of the data entered in AssessIt is based on a legitimate interest (Art. 6 para. 1 lit. f GDPR).
By providing AssessIt, we aim to enable your business to easily and efficiently collect information to comply with legal or regulatory requirements. The data you enter will be stored for purposes defined by your company.
You can view your personal data at any time in the main view of AssessIt under the menu item Profile. You are able to change this data at any time.
Eubex GmbH & Co will neither view the stored data nor use it for its own purposes without a request from your company.
All data is stored within your company's Assessit instance. The instance is provided on servers installed within the EU.
The systems are operated by personnel from within the EU. Eubex GmbH & Co KG requires its employees and any third parties involved to comply with the regulations of the GDPR.
Eubex GmbH & Co KG provides its own staff with regular instructions and has set up organisational measures to check compliance.

Receiver

Recipients of the data are employees in your company and, if applicable, order processors.

Memory duration

Data will be deleted at the latest after expiry of the contract between your company and Eubex GmbH & Co KG.

Provision mandatory or required

The provision of your personal data is voluntary. However, access to and the function of AssessIt is dependent on the entry of this data.

SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.
Information about your right to object according to Art. 21 GDPR

Right to object on a case-by-case basis

You have the right to object at any time, on causes relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Art. 6(1)(f) GDPR (data processing on the basis of a balance of interests); this also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate causes for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Recipient of an opposition

Eubex GmbH & Co KG

Change to our privacy policy

We reserve the right to adapt this data protection declaration so that it always complies with the current legal requirements or in order to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new data protection statement will then apply to your next visit.

Questions to the Data Protection Officer

If you have any questions about data protection, please write us an email or contact the person responsible for data protection in our organisation directly:
The privacy policy was created with the help of activeMind AG, the experts for external data protection officers (version #2020-09-30).