Datenschutz

Privacy

Privacy policy We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.

1. Person responsible for data processing (hereinafter: "we") Craftview Software GmbH Mainzer Landstr.178-190, D-60327 Frankfurt a. Main Germany

Telephone: 02823-4256 - 0 Fax: 02823-4256 - 999 E-mail: info@craftview.de Authorised representative Management: Mr. Klaus Enke Telephone: 02823-4256 - 0 Fax: 02823-4256 - 999 E-mail: info@craftview.de

2. Data protection officer and responsible supervisory authority: Creditreform Compliance Services GmbH Hammfelddamm 13 D - 41460 Neuss Tel.: 02131 / 109 1089 E-mail: datenschutz-extern@craftview.de

Responsible supervisory authority:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestr. 2-4, 40213 Düsseldorf, Germany Telephone: 0221 / 38424-0 Fax: 0211 / 38424-10 E-mail: poststelle@ldi.nrw.de

3. Personal data, purposes of processing and legal basis As a rule, it is possible to use our website without providing personal data. The provision of personal data is voluntary. Personal data are any information relating to an identified or identifiable natural person (hereinafter "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the identity of that natural person. The purpose of the processing of data is the operation of a website with information on our range of services together with contact options and the conclusion of contracts. Personal data are collected on our website when this is necessary a) for the use of the website (legal basis: Article 6 para. 1 lit. a and/or Article 6 para. 1 lit. b GDPR), b) to protect our interest in improving the user experience and maintaining the security of use (legal basis: Article 6 para. 1 lit. f GDPR), c) for the use of the services offered on the website as well as pre-contractual measures, in particular for form entries (legal basis: Article 6 para. 1 lit. a and/or Article 6 para. 1 b GDPR) or d) for the conclusion and performance of a contract (legal basis: Article 6 para. 1 lit. a and lit. b GDPR).

4. Duration of storage The duration of the storage of personal data is determined by the relevant statutory retention periods (e.g. from commercial law and tax law). After expiry of the respective period, the corresponding data are routinely deleted. If data are required to fulfil or initiate a contract or if we have a legitimate interest incontinuing to store them, the data will be deleted when they are no longer required for these purposes or you have exercised your right of revocation or objection.

5. Transfer of data Your personal data will not be transferred to third parties unless: a) we have explicitly indicated this in the description of the respective data processing, b) you have given your express consent in accordance with Art. 6 para. 1 lit. a GDPR, c) the disclosure is necessary for the assertion, exercise or defence of legal claims pursuant to Art. 6 para. 1 lit. f GDPR and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data, d) a legal obligation exists for the disclosure in accordance with Art. 6 para. 1 lit. c GDPR and e) this is necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 lit. b GDPR. We also use external service providers for the processing of our services, which we have carefully selected and commissioned in writing. They are bound by our instructions and are regularly monitored by us. If necessary, we have concluded order processing contracts with them in accordance with Art. 28 GDPR. These are service providers for web hosting, sending e-mails as well as maintenance and care of our IT systems, etc. The service providers will not pass on these data to third parties. Data transfers to countries outside the European Union and the European Economic Area ("third countries") do not generally take place and are only carried out if the following conditions are met: a) The fulfilment of a legal permission requirement. b) In particular, we ensure an adequate level of data protection in accordance with the EU standard contractual clauses for the transfer of personal data to data processors in third countries by concluding appropriate contracts. A copy of the standard contractual clauses specified by the EU Commission in this regard can be found on the Internet at: https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=EN Data will only be transferred abroad or to supranational or intergovernmental bodies if this is permitted or required by law. Suitable safeguards may not currently exist for the transfer of data to the USA. The protection of personal data is limited. This comes from the fact that, under US law, security authorities can access data transferred from the EU to the US and use them without restriction to what is strictly necessary. As the data subject, you may not be able to take legal action against such use unless you are a US citizen.

6. Your rights You have the following rights if the legal requirements are met: a) Pursuant to Art. 7 (3) GDPR, you may revoke your consent once given at any time. This also applies to the revocation of declarations of consent given to us before the GDPR came into force, i.e. before 25.05.2018. The revocation of consent has the consequence that we may no longer continue the data processing based on this consent in the future; b) In accordance with Art. 15 GDPR, to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details; c) In accordance with Art. 16 of the GDPR, to demand the correction of inaccurate or the completion of your personal data stored by us without delay; d) In accordance with Article 17 of the GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of rights and/or claims; e) In accordance with Article 18 of the GDPR, in order to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need them for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Article 21 of the GDPR; f) In accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller; and g) Complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority responsible for our company. If you have any further questions regarding the protection of your personal data, this data protection notice or declarations of consent, you may of course contact us and/or our data protection officer(s) at any time. You are also welcome to address any complaints regarding the handling of your personal data to us and/or our data protection officer(s). Right of objection Insofar as your personal data are processed on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR, you have the right to object to the processing of your personal data at any time pursuant to Art. 21 GDPR, insofar reasons for doing so arise from your particular situation. An objection to the processing mentioned in No. 3 e - direct advertising - is possible at any time and without giving reasons. If you wish to exercise your right of objection, it is sufficient to send us a form-free declaration, also by e-mail to datenschutz-extern@craftview.de.

7. Collection of personal data when visiting our website In the case of merely informative use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (legal basis is Art. 6 para. 1 lit. f GDPR): a) IP address b) Date and time of the request c) Time zone difference to Greenwich Mean Time (GMT) d) Content of the request (specific page) e) Access status/HTTP status code f) Amount of data transferred in each case g) Website from which the request comes h) Browser i) Operating system and its interface j) Language and version of the browser software.

8. Social media portals

8.1 Shariff method for sharing blog posts We enable the sharing of our blog posts on Facebook, Twitter and Google+, YouTube and Instagram via share buttons using the so-called "Shariff" method. With this solution, a direct contact between the user and the social media portal is only established when the user actively clicks on the share button. The click on the share button thus constitutes a declaration of consent in accordance with Art. 6 para. 1 lit. a) GDPR by the user to the transmission of data to the respective social media portal.

8.2 Link to social media portals Social networks - Facebook, Twitter, Xing, LinkedIn, Instagram and Pinterest - are otherwise predominantly integrated on our website in the form of a link to the corresponding services. After clicking on the embedded text/image link, you will be redirected to the page of the respective provider. Only after you have been redirected will user information be transferred to the respective provider. We are not aware of, nor do we have any influence on, the extent to which your data are processed by the individual providers as soon as you call up the provider's page. For information on how your personal data are handled when using these websites, please refer to the respective data protection provisions of the providers you use.

8.3 Company presence on social networks We are present on the following social networks: a) Facebook Ireland Lt., 4 Grand Canal Square, Dublin 2 ireland b) Twitter International Company, One Cumberland Place Fenian Street, Dublin 2, D02 AX07 Ireland c) Instagram Inc, Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2 ireland d) LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland e) XING - New Work SE, Am Strandkai 1, 20457 Hamburg, Germany f) Printerest Europe Ltd. Palmerston House 2nd Floor Fenian Street Dublin 2, Ireland. Responsible party, for the other social networks: If you visit our company website with one of the above providers, your personal data will be processed by the respective provider and this provider is responsible for the data processing within the meaning of the GDPR. For the assertion of your data subject rights, we would like to point out that these can be asserted most effectively with the respective providers. Only they have access to the data collected from you. Should you still require assistance, please feel free to contact us at any time. Data protection officer: Information on how to contact the data protection officer of the other social media providers can be found here: a) Facebook: Fragen zur Datenrichtlinie: https://www.facebook.com/help/contact/2061665240770586 b) Twitter: https://help.twitter.com/de/forms/privacy c) Instagram Inc. https://help.instagram.com/contact/1845713985721890 d) LinkedIn Ireland Unlimited Unternehmen: https://www.linkedin.com/help/linkedin/ask/TSO-DPO e) XING - Neue Arbeit SE: https://www.xing.com/settings/privacy/data/disclosure f) Printerest: privacy-support@pinterest.com Processing of personal data due to transmission of data to us via social networks: As soon as you contact us via the various communication channels provided by social networks, we are independently responsible for the lawfulness of the data processing. Therefore, if you contact us via the various communication channels (e.g. chat function or comment function, etc.) of the social networks, we will process your data for the purpose of answering the question so that we can process your request in the best possible way. The legal basis for this processing is our legitimate interest in answering your communication according to Art. 6 para. 1 lit. f GDPR. In addition, we receive anonymous statistical data from the providers for evaluation. These statistics are compiled on the basis of usage data, among other things, but we ourselves do not receive access to this underlying usage data. The processing of these data is based on our legitimate interest according to Art. 6 para. 1 lit. f GDPR

** 8.4 YouTube ** For the integration and display of video content, our website uses plug-ins from YouTube. The provider of the video portal is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit a page with an embedded YouTube video, this is only loaded if you have previously agreed to this in our cookie banner. Nevertheless, data are transmitted through the connection with YouTube, e.g. with information about the page from which the connection was established. YouTube can assign your surfing behaviour directly to your personal profile if you are logged into your YouTube account. You have the option to prevent this by logging out beforehand. We have no influence on this and only limited knowledge of how and to what extent your data are processed. The legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR). Details on the handling of user data can be found in YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy.

9. General contact As soon as you contact us - by e-mail or telephone - and provide us with your contact details, we process these contact details (name, e-mail address, telephone number) by way of correspondence. The legal basis for this is both Article 6 para. 1 lit. b and Article 6 para. 1 lit. f GDPR. The assertion of contact for sales purposes in the business-to-business area (B2B), taking into account a balancing of interests, can be regarded as a legitimate interest within the meaning of the second-mentioned provision. Those data will not be passed on to third parties without your consent and will be deleted immediately after contact has been made, provided that no further purposes of use arise from this. In the case of Article 6 para. 1 lit. f GDPR, you may object to the processing unless the relevant laws permit data processing, inter alia, for the performance of a contract in accordance with Article 6 para. 1 lit. b GDPR or there is a legal obligation to retain data for this purpose.

10. Cookies Our website does not use any other cookies. Changes to our data protection information We reserve the right to update this data protection information if necessary, in compliance with the applicable data protection regulations. In this way, we can adapt them to the current legal requirements and take changes in our services into account, e.g. B. when introducing new services. The most current version applies to your visit.

The status of this data protection notice is February 2022.