Privacy policy in accordance with Article 12 of the General Data Protection Regulation (GDPR).

The protection of your personal data is very important to us. We process your data primarily in order to provide you with a functional and easy-to-use website. We want to ensure that you can use our contents and offers via these websites. Furthermore, we process your data only if and to the extent permitted by legal regulations. For further information, please refer to the following explanations.

Name and address of the controller

The controller, within the meaning of the European General Data Protection Regulation, is:

DocYard GmbH

Schwachhauser Heerstraße 197
 28211 Bremen
Germany

+49 (0) 421 3658 3185

info@docyard.eu
www.docyard.eu

General information on data processing

Protecting your personal data is very important to us. We process your data primarily in order to provide a functional website that is easy to use. We want to make sure that you can use our content and the products and services we offer via these websites. Furthermore, we only process your data if and to the extent that this is permitted by the statutory provisions. Please refer to the sections below for further information.

Making the website available and creation of log files

Every time you visit our website, our system automatically collects data and information concerning your computer system. The data collected includes the following:

  1. Information on the browser type and the version used

  2. Your operating system

  3. Your IP address

  4. Date and time of access

  5. Websites from which your system accesses our website

  6. Websites accessed by your system via our website

This data is saved in our system’s log files. The data referred to above is not saved together with other personal data.

Our system has to save your IP address temporarily so that the website can be displayed on your computer. Your IP address has to remain saved for the duration of your visit to the website. This means that storage in log files enhances the functionality of the website. We also use this data to optimize our website and protect our IT systems. The data is not used for marketing purposes within this context. The legal basis for the temporary storage of the data and the log files is Article 6(1) (f) of the General Data Protection Regulation (hereinafter referred to as the “GDPR”).

The data is stored for as long as is necessary to achieve the purpose for which it was collected. If data is required to make the website available, this data is deemed to no longer be required when the session in question ends. The data is then deleted automatically. As far as the storage of data in log files is concerned, this data is no longer required after seven days at the latest. If, however, we continue to save the data referred to above, your IP address will be erased or modified so that it can no longer be matched with the Internet connection that accessed the site.

The recording of data to make the website available and the storage of data in log files are absolutely essential for the operation of the website.

Use of cookies

We use what are known as “cookies” on our website. Cookies are text files that are stored in/by your Internet browser on your computer system. When you access our website, a cookie may be stored on your system. The cookie contains an individual character string that can be used to identify your browser the next time you visit the website.

The sections below (“Technically necessary cookies” and “Cookies to analyze surfing behavior”) provide details on the types of cookies that we use and the data processed in each case.

Unless the sections below refer to different deletion periods, the following applies in summary to the storage period, irrespective of the type and purpose of the cookies:

  1. You have full control over the use of cookies. They are saved on your computer and the data is then transmitted from your computer to us. While most browsers are configured to accept cookies by default, you can change your browser settings to deactivate or restrict the transmission of cookies.

  2. Cookies that have already been saved can be deleted at any time. You can also change your browser settings so that cookies are deleted automatically. If cookies are generally deactivated for our website, you may no longer be able to use all of the website functions in full.

  3. When you visit our website, an information banner will draw your attention to the aforementioned use of cookies and to this Privacy Policy. We would ask you to consent to the use of cookies by clicking on the “Accept” button.

  4. You can object to the use of cookies at any time. You can do this either by not agreeing to the use of cookies when the banner is displayed in the first place, by revisiting the Privacy & Cookies setting or by changing your browser settings accordingly.

Technically necessary cookies

Some functions of our website require your browser to be recognized again even after you move to a different site. It would be impossible to offer these functions without the use of cookies. The cookies save and transmit the following data:

  1. Your cookie settings

  2. Preferred website language

  3. Login sessions

If you object to the use of these cookies or configure your browser accordingly, our website will not recognize your browser and you may not be able to access certain content, or data (e.g. from an input mask) may be lost. The information set out in the section “Use of cookies” applies with regard to the storage period for technically necessary cookies.

Cookies to analyze surfing behavior

Our website also uses cookies that allow your surfing behavior to be analyzed. Technical measures are in place to pseudonymize the data collected by these cookies. This means that the data can no longer be traced back to you. This data is not saved together with your other personal data.

The following data can be transmitted within this context:

  1. Frequency of page views

  2. Use of website functions

We use analysis cookies to improve the quality of our website and its content. The analysis cookies show us how the website is being used, allowing us to optimize the products and services we offer on an ongoing basis. We use these cookies only with your consent. The basis for this processing is Article 6(1)(a) DSGVO.

If you object to the use of these cookies or configure your browser accordingly, this will not have any disadvantages for you. All of the website functions will remain available. The information set out in section “Use of cookies” applies with regard to the storage period for cookies to analyze surfing behavior.

We use the following services based on analysis cookies on our website:

a) Google Analytics

We use Google Analytics, a web analytics service provided by Google, 1600 Amphitheatre Parkway , Mountain View, CA 94043, USA (hereinafter referred to as: “Google”). This service uses cookies. Data generated by the cookie about your use of the website is usually transmitted to a Google server in the U.S. and stored there.

Google will use this information on our behalf to evaluate the use of our website, to compile reports on the activities within this website and to provide us with further services relating to the use of this website and the use of the Internet. Pseudonymous user profiles can be created using the data that is processed within this context.

We only use Google Analytics with IP anonymization enabled. This means that Google truncates your IP address within Member States of the European Union or other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the U.S. and truncated there. The IP address transmitted from your browser is not merged with other data from Google. You can prevent the storage of cookies by configuring your browser software accordingly; you can also prevent Google from storing the data relating to your use of the website generated by the cookie and from processing this data by downloading and installing the browser plug-in that is available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

You can find further information on how Google uses data for advertising purposes, as well as on your options for configuring your settings and for raising objections, on Google’s website: https://www.google.com/intl/de/policies/privacy/partners/ (“How Google uses information from sites or apps that use our services”), http://www.google.com/policies/technologies/ads (“How Google uses cookies in advertising”), http://www.google.de/settings/ads (“Manage the information Google uses to show you ads”) and http://www.google.com/ads/preferences/ (“Choose which ads Google shows you”).

Contact form and e-mail contact

You can contact us using various contact forms on our website or by sending us an e-mail. If you enter data in the input mask provided for this purpose on the contact form, this data will be transmitted to, and processed by, us. This includes the following data.

  1. Subject matter of/reason for the contact enquiry

  2. Your name

  3. E-mail address

  4. Message

As soon as your message is sent, the following other data is also saved:

  1. Your IP address

  2. Date and time at which the message was sent

To enable the processing of data for correspondence purposes, we ask for your consent before the message is sent and draw your attention to this Privacy Policy. In this respect, the legal basis for the data processing is Article 6(1) (a) GDPR.

The processing of other data (e.g. connection data) during the sending process is designed to prevent the misuse of the contact form and to ensure the security of our IT systems. In this respect, the legal basis is Article 6(1) (f) GDPR.

If you contact us using the e-mail address provided, the personal data transmitted along with your e-mail will be saved. In this respect, the legal basis for the processing of your data is Article 6(1) (f) GDPR, as we have a legitimate interest in this regard. If you contact us using the form or by e-mail in connection with the conclusion of a contract, Article 6(1) (b) GDPR also forms the basis for the processing. We only process personal data from the input mask or e-mails in order to process your enquiry. The data is not transmitted to third parties.

Your data is erased as soon as it is no longer required to achieve the purpose for which it was collected. In cases involving personal data from the contact form input mask and data transmitted by e-mail, this applies when the correspondence with you has ended. The correspondence is deemed to have ended when the circumstances indicate that the matter in question has been resolved with definitive effect. Additional personal data collected during the sending process is erased after a period of seven days at the latest.

You can withdraw your consent to the processing of the personal data at any time. If you contact us by e-mail, you can object to your personal data being saved at any time. In order to do so, simply send us an informal message to this effect using the contact details at the top.

If you object, however, we will not be able to process your e-mail.

If the data is required for the performance of a contract or in order to take steps prior to entering into a contract, the data can only be erased prematurely if this is permitted on the basis of contractual or statutory obligations. The storage periods that apply in this respect vary depending on the individual contracts and contracting parties.

Newsletter

You can sign up for our free newsletter. To do so, you enter your data in the input mask provided and your data is transmitted to us. Your e-mail address is recorded when you sign up for the newsletter.

As soon as your message is sent, the following other data is also saved:

  1. Your IP address

  2. Date and time at which the message was sent

Before you submit your data, we ask you to consent to the processing of your data and draw your attention to this Privacy Policy. Your data is processed with your consent. In this respect, the legal basis is Article 6(1) (a) GDPR.

After you sign up, you will receive an e-mail asking you to confirm your subscription. This confirmation is necessary to ensure that nobody can subscribe using e-mail addresses that are not their own. Newsletter subscriptions are logged in order to be able to furnish evidence of the subscription process in accordance with the legal requirements. This includes saving the time of registration and confirmation and the IP address you used. Since the processing of the data is also necessary in order to deliver the newsletter you have subscribed to, Article 6(1) (b) and Article 6(1) (f) GDPR also serve as the legal basis.

You can cancel your subscription to the newsletter at any time or object to receiving further newsletters. Each newsletter contains a link to the form allowing you to unsubscribe. This means that we also allow you to withdraw your consent to the storage of your data at the same time. You can also, however, withdraw your consent by sending us an informal message to this effect using the contact details set out at the top.

Your data is erased as soon as it is no longer required to achieve the purpose for which it was collected. Your e-mail address is stored for as long as you remain subscribed to the newsletter. In general, we erase the other personal data collected as part of the subscription process seven days after it is collected.

If the data is required for the performance of a contract or in order to take steps prior to entering into a contract, however, the data can only be erased prematurely if this is permitted on the basis of contractual or statutory obligations. We may be under a contractual or statutory obligation to save data even after a contract has been terminated (e.g. for tax-related reasons). The storage periods that apply in this respect vary depending on the individual contracts and contracting parties.

Your rights

The information below summarizes your rights under the General Data Protection Regulation.

Right to withdraw consent to data processing (Article 7(3) GDPR)

You have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Prior to giving consent, you will be informed thereof.

Right of access (Article 15 GDPR)

You have the right to access:

  1. the purposes of the processing;

  2. the categories of personal data concerned;

  3. to whom the personal data has been or will be disclosed, in particular recipients in third countries or international organizations;

  4. where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;

  5. the existence of the right to request rectification or erasure of personal data or restriction of processing of personal data concerning you by us, or to object to such processing by us;

  6. the right to lodge a complaint with a supervisory authority;

  7. where the personal data is not collected from you, any available information as to its source;

  8. the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and – in those cases – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.

Where personal data is transferred to a third country or to an international organization, you have the right to be informed of the appropriate safeguards to ensure that the provisions of the GDPR are adhered to at the level of these recipients as well.

Right to rectification (Article 16 GDPR)

You can request the immediate rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right to erasure / “right to be forgotten” (Article 17 GDPR)

You have the right to ask us to erase data where one of the following grounds applies:

  1. The data is no longer necessary in relation to the purposes for which it was collected or otherwise processed.

  2. You withdraw the consent on which the processing is based and there is no other legal ground for the processing.

  3. You object to the processing pursuant to Article 21(1) GDPR on grounds relating to your particular situation and there are no overriding legitimate grounds for the processing.

  4. You object to the process for direct marketing purposes pursuant to Article 21(2) GDPR.

  5. The data has been unlawfully processed.

  6. The erasure of the data is required to comply with a legal obligation under European or German law.

  7. The data has been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

If we have made your data public and are obliged to erase it, then, taking account of available technology and the cost of implementation, we shall take reasonable steps to inform the controllers that you have requested the erasure.

Right to restriction of processing (Article 18 GDPR)

Pursuant to Article 18 GDPR, we may only process data subject to restrictions in the following cases. This is the case if:

  1. you contest the accuracy of your data, for a period enabling us to verify the accuracy of the data.

  2. the processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead;

  3. we no longer need the data for the purposes of the processing, but you require it for the establishment, exercise or defence of legal claims, or

  4. you objected to processing pursuant to Article 21(1) GDPR on grounds relating to your particular situation pending the verification whether our legitimate grounds for processing override your interests.

If processing has been restricted, we may only save this data. Data may then only be processed further with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

You can withdraw your consent granted in this regard at any time.

We will inform you before the restriction is lifted.

Notification obligation (Article 19 GDPR)

We are obliged to communicate any rectification or erasure of your data or restriction of processing to all recipients to whom your data has been disclosed, unless this proves impossible or involves disproportionate effort. We shall inform you about those recipients if you request this.

Right to data portability (Article 20 GDPR)

You have the right to receive the data concerning you which you have provided to us in a structured, commonly used and machine-readable format. You also have the right to ask us to transmit this data to a third party where

  1. the processing is based on consent or on a contract and

  2. the processing is carried out by automated means.

You have the right to have the data transmitted directly to the third party where technically feasible. This right shall not adversely affect the rights and freedoms of others.

Automated individual decision-making, including profiling (Article 22 GDPR)

Your data is not used on our website for decisions made exclusively based on automated processing (e.g. profiling).

Right to object (Article 21 GDPR)

If we process your data based on a legitimate interest (Article 6 (1) (f) GDPR), you have the right to object to this on grounds relating to your particular situation. This also applies to profiling based on these provisions. In such cases, we will no longer process your data unless we demonstrate compelling legitimate grounds for doing so. These must override your interests, rights and freedoms, or the processing must serve the establishment, exercise or defense of legal claims. Where we process your data for direct marketing purposes, you have the right to object to the processing of the data. This includes profiling to the extent that it is related to such direct marketing. After you object, your data will no longer be processed for such purposes. In order to object, simply send us an informal message to this effect using the contact details set out at the top.

Right to lodge a complaint with a supervisory authority (Article 77 GDPR)

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of the data relating to you infringes the General Data Protection Regulation. This shall not affect any other administrative or judicial redress to which you may be entitled.