Welcome to the eluCloud connect platform, a service provided by elumatec AG. Thank you for your interest in our website and our company. Protecting your data and maintaining your privacy are top priorities for us. Please read the following information to ensure you are fully aware of how we collect, process and use personal data on this platform. Please note: This Privacy Policy may be updated from time to time. For example, it will be updated when technological progress, legal regulations or other influencing factors mean changes are required. Please therefore visit this page on a regular basis to stay up to date with any changes we may make to this Privacy Policy. 1. Controller for the processing of personal data Your data are processed on behalf of elumatec AG Pinacher Strasse 61 75417 Mühlacker Controller and CEO: Nebojsa Wosel You can contact our Data Protection Officer using the above postal address, or by sending an e-mail to datenschutzbeauftragter@elumatec.com. 2. Data collection for internal system and statistical purposes When you access our website, your internet browser automatically sends data to our web server for security reasons. This includes the date and time you accessed our website, the URL of the referring website, any files accessed, the browser type, the operating system and the IP address you used. These data are stored separately from other data that you may enter when using our web services. It is only possible to attribute these data to a specific data subject if there is a concrete suspicion of unlawful use of the data. We keep a record of each visit to our website and of each time a file stored on our website is accessed. The collected log data are used for statistical evaluations for the purpose of ensuring reliable operation and security and of making the website more convenient to use. These data are subsequently erased. If there are concrete reasons to suspect unlawful use of the data, we reserve the right to check the log data at a later date and, if necessary, evaluate the data to investigate the suspected activity. The legal basis for this processing is our legitimate interest in accordance with Art. 6(1)(f) GDPR. 3. Collection and processing of personal data We also collect and process personal data if you voluntarily provide these data to us via our website. This can take place as follows: 3.1 Processing of data in the course of user registration/management When registering and managing your user for our platform, we collect the key data required for the processing (e-mail address, display name, first/last name, role, preferred language). The personal data you save will only be collected and stored for internal use and for our own purposes. These purposes are managing your user account and the associated rights based on the assigned role, in order to enable use of this platform. Only the initiating administrator is created by elumatec, and this administrator in turn has the ability to add as many users as desired for their respective area of responsibility. We may arrange to transfer your data to one or more processors, such as service providers (web hosting providers, etc.), to other companies within our group or to dealers, who will also only use the personal data for internal use to pursue the above purposes. 3.2 Legal basis for the processing of your data We process your personal data in compliance with the provisions of the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and all other relevant legislation (e.g. the German Digital Services Act (DDG), the German Telecommunications Digital Services Data Protection Act (TDDDG), etc.). The lawfulness (legal basis) of the processing of your data is derived from • performance of a contract or taking steps prior to entering into a contract (in accordance with Art. 6(1)(b) GDPR) when creating administrator accounts or managing added users; • compliance with a legal obligation to which we are subject (in accordance with Art. 6(1)(c) GDPR) when keeping activity logs to meet accountability obligations; • safeguarding of the legitimate interests of elumatec AG (in accordance with Art. 6(1)(f) GDPR) when processing data to keep a log of website activities. 3.3 Duration of data storage We will store your data until the purpose for which they were stored has been fulfilled or until they are removed from the platform by an administrator. The account designated by the customer as the administrator (the account used for initial user creation) is responsible for deleting the user accounts created by the customer. We will delete the administrator account if requested to do so by the customer. The customer will be informed that the administrator account is due to be deleted and will then have 30 days to back up their data. We will delete the administrator account once this period has elapsed. The data will be erased when the business relationship is terminated, provided that the legal retention periods for these data have elapsed. This is regularly the case as a result of legal obligations to produce evidence and retain data, which are governed in the German commercial code, the German tax code and elsewhere. 3.4 Automated decision-making/profiling We will not use your data for automated decision-making or for profiling. 4. Transfer of data Your personal data will be transferred in encrypted form using SSL via the internet. Your data will only be disclosed to third parties – if required – for the purpose of providing the platform to service providers (such as web hosting providers) commissioned by us or to companies within our group (Voilàp Holding companies), who will also only process the personal data for internal use or to pursue the above purposes. Your data will not be transferred to a third country. Further disclosure of your personal data to third parties will only occur with your consent, unless relevant legal requirements apply or this is necessary in order to protect the rights, property and security of elumatec AG. If external service providers obtain access to personal data, we require them to take legal, technical and organizational steps to comply with data privacy regulations. 5. Use of cookies and other services Our website uses technology known as cookies, which help to make our internet presence more user-friendly, effective and secure overall – e.g. to speed up navigation on our platform or to save your preferences (such as display language). Cookies also allow us to measure the frequency of page visits and assess how users navigate around our website. Cookies are small text files that are stored on your computer system. In some cases these cookies are transmitted from our server to your computer system, and some of these cookies are known as session cookies. When you close your browser, session cookies are automatically deleted from your hard drive. Other cookies (known as persistent cookies) remain on your computer system and allow us to recognize your computer system the next time you visit our website. You can of course refuse cookies at any time, if your browser allows you to do this. This platform only uses functional cookies, which we require in order to operate the website and display the web pages correctly (e.g. function or personalization cookies, for example to set the display language). Via the “Cookies” link in the footer of the website, you can obtain an overview of the functional cookies used on this website. 6. Links to other websites Our internet presence contains links to other websites. We have no influence over whether operators of other websites comply with the data protection regulations. As the provider, we are responsible for providing our own content in accordance with general legislation. A distinction should be made between this content we provide and the links to content from other providers. We accept no responsibility for third-party content provided for use via links and make no claim to ownership of this content. The operator of the website to which reference is made is solely liable for illegal, faulty or incomplete content and in particular for damage arising from the use or non-use of information presented on the website in question. If we become aware of legal infringements, we will immediately remove the respective links. 7. Your rights to your personal data If you have any questions or concerns relating to your personal data rights, please contact us using the details below. In detail, your rights are: 7.1 Right of access, rectification, restriction and erasure, and right to receive The General Data Protection Regulation gives you the right to free access to your personal data stored by us, and if required the right to rectification, restriction of processing and erasure of these data. If we are subject to legal retention obligations, rather than erasing your data we will restrict them for further processing so that they can no longer be used for the above purposes. You retain the right to receive your personal data stored by us in electronic form. 7.2 Right to object in individual cases For reasons arising from your individual situation, you have the right to object to the processing of your personal data which takes place on the basis of Art. 6(1)(f) GDPR (data processing based on the balance of interests) at any time; this also applies to profiling based on this provision pursuant to Art. 4(4) GDPR. If you object, we will stop processing your data, unless we can demonstrate compelling legitimate reasons for the processing which override your interests, rights and freedoms, or unless the processing serves the purposes of the establishment, exercise or defence of legal claims. 7.3 Right to lodge a complaint If you believe that the processing of your data by elumatec AG is not in compliance with the applicable data protection legislation, you have the right to lodge a complaint with the data protection supervisory authority of your choice. 8. Data security We take technical and organizational steps to secure our website and other systems against loss, destruction, access, alteration and distribution of your data by unauthorized parties. The security precautions are continuously improved in accordance with technological progress. You can only access your online shop account by entering your personal password. You should treat your login data confidentially at all times and close the browser window once you have finished your communication with us, especially if you are using a shared computer. 9. Obligation to provide your data When registering, you must provide the personal data required in order for us to administer the platform. Without these data, we will not be able to make these services available to you. There are no further obligations to provide your data. 10. Further information and contact details Please contact us if you have any further questions about data protection. If you have questions about how we collect, process or use your personal data, if you wish to request access to or rectification, blocking/restriction or erasure of your data, or if you wish to object to the processing of your data, please contact: elumatec AG Marketing Pinacher Strasse 61 75417 Mühlacker marketing(at)elumatec.com elumatec AG Data Protection Officer Pinacher Strasse 61 75417 Mühlacker datenschutzbeauftragter(at)elumatec.com
