Privacy

Note: This page describes the privacy policy of the website of arivis AG. The privacy policy of the arivis Inc. can be found at: arivis, Inc. Privacy Policy and Privacy Shield Notice.

We are delighted about your interest in our website (“website”). The protection of your personal data (hereinafter referred to as “data”) is very important to us. Personal data is any data with which you could be personally identified.

In the following, we would like to inform you in detail which data is collected when you visit our website and use our offers there and how we process or use them in the following.

A. General Information

1. Responsible body

arivis AG
Erika-Mann-Straße 23
80636 Munich
Germany

Phone: +49 (89) 4132458-0
Fax:+49 (89) 4132458-88
E-Mail: info@arivis.com

2. Data Protection Officer

Daniela Duda
rehm Datenschutz GmbH
Eugen-Sänger-Ring 13
85649 Brunnthal
Tel: +49 89 6080 7600
Fax: +49 89 6080 7602
eMail: kontakt@rehm-datenschutz.de


3. Scope of data collection and data saving

Some data are collected when you provide it to us. This could, for example, be data you enter on a contact form.

Other data are collected automatically by our IT systems when you visit the website. These data are primarily technical data such as the browser and operating system you are using or when you accessed the page. These data are collected automatically as soon as you enter our website. This data would possibly enable identification; however there will be no personal exploitation in this regard.

We will collect, process and use all personal data that we learn from you in the course of using our website only for the stated purpose. We note that this is only done within the framework of the applicable legal regulations or only with your consent.

The data will only be processed within the EU and the European Economic Area, unless we subsequently or directly inform you about a transfer to third countries stating the respective legal basis and, if necessary, request your consent.

4. Legal Basis

In accordance with Art. 13 General Data Protection Regulation (GDPR), we inform you about the legal basis of our data processing. Unless the legal basis in the data protection declaration is mentioned, the following applies:

Consent according to Art. 6 para. 1 (a) GDPR. Consent is any voluntary expression of intent, in an informed and unequivocal manner, in the form of a statement or other unambiguous confirmatory act, which indicates that the data subject consents to the processing of his personal data.

Necessity to fulfill the contract or carry out preparatory actions in accordance with Art. 6 para. 1 (b) GDPR, this means that the data is required so that we can fulfill the contractual obligations to you or we need the data to prepare a contract closure with you.

Processing to fulfill legal obligations under Art. 6 para. 1 (c) GDPR, this means that a processing of the data is required by law or other regulations.

Processing for the protection of legitimate interests in accordance with Art. 6 para. 1 (f) GDPR, this means that processing is necessary to safeguard legitimate interests on our part or by third parties, unless the interests or fundamental rights and freedoms on your part that require the protection of personal data prevail.

5. Data Erasure and Storage Duration

The data of the data subject will be deleted or blocked as soon as the purpose of the storage is deleted. In addition, storage may take place if provided for by the European or national legislator in EU regulations, laws or other regulations to which the processor is subject. Blocking or deletion of the data also takes place if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.

6. Data encryption

Our website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the character string https:// and the lock symbol in your browser line.

7. Cookies

Our website also uses "cookies". Cookies are small text files that are transferred from a website server and saved to your hard drive. This automatically gives us certain data, such as IP address, language and browser used, operating system e.g..

Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your terminal and enable us to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process specific user information such as browser and location data as well as IP address values according to individual requirements. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

Based on the information contained in cookies, we can facilitate navigation and enable the correct display of our websites. Cookies stored on your computer can be deleted by you at any time.

In no case will the data collected by us be passed on to third parties or a link with personal data will be established without your consent.

We do not give third parties the opportunity to set cookies on our websites.

You can also use our website without cookies. You can deactivate the use of cookies at any time via the settings of your browser. Each browser differs in the way it manages the cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings.

Please note that some features of our website may not work if you have disabled the use of cookies.

B. Concrete Data Processing

1. Data collection when visiting the website

In general you can use our website without the disclosure of your identity. By accessing our website there will be data saved on our servers, like the name of your internet service provider, your IP address, the used browser type, the used operating system, the referrer URL (the website visited before) and the time designations of your visit.

Scope of data processing

When visiting our website, the following data is collected and stored by our web server:

  • IP address
  • Date and time of request
  • Time zone difference from Greenwich Mean Time (GMT)
  • Content of request (concrete page)
  • Access status/HTTP status code
  • Data volume transmitted in each case
  • Website making the request
  • Browser
  • Operating system and its interface
  • Language and version of the browser software.

The data is stored in the log files of our system. A storage of this data together with other personal data of the user does not take place.

Legal basis

The legal basis for processing the data is Art. 6 para. 1 (f) GDPR.

The legitimate interest within the meaning of Art. 6 para. 1 (f) GDPR therefore lies in the functionality of our website and its availability.

Purpose of data processing

The temporary storage of the IP address by the system is necessary to allow delivery of the website to the computer of the user. To do this, the user’s IP address must be kept for the duration of the session.

The data is stored in order to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

Duration of storage

The logfiles will be deleted after 30 days at the latest, unless there is a need to keep the data for the aforementioned purpose due to specific events.

Storage beyond that is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment to a specific user is no longer possible.

Objection and removal possibility

The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no possibility of objection by the user.

2. E-Mail contact / contact form

Scope of data processing

Should you send us questions via e-mail or the contact form, we will collect the data entered on the form, including the contact details you provide, to answer your question and any follow-up questions. We do not share this information without your permission.

Legal basis

The legal basis for processing data is our legitimate interest in responding to your request in accordance with Art. 6 (1) f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) b GDPR.

Purpose of data processing

These data are stored and used exclusively for the purpose of responding to your request or for establishing contact and for the associated technical administration.

Duration of storage

Your data will be deleted after final processing of your enquiry; this is the case if it can be inferred from the circumstances that the facts in question have been finally clarified, provided that there are no legal storage obligations to the contrary.

Objection and removal possibility

You may revoke your consent at any time. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.

3. Newsletter

Scope of data processing

At your explicit request, we will send you our newsletter on the topics you have chosen as well as information about our company. The input mask used for this purpose determines what personal data are transmitted.

 Please note that delivery can only take place once you have expressly confirmed your subscription request again in the course of our double opt-in process.
Legal basis

The legal basis for processing the data is Art. 6 para. 1 (a) GDPR.

Purpose of data processing

Collection of the email address of the user is done to deliver the newsletter. The personal data collected within the scope of the newsletter registration will be used exclusively for sending and personalising the newsletter (e.g. to address you by your name).

Duration of storage

Data is deleted as soon as it is no longer required to fulfill the purpose of its collection. The email address of the user is therefore stored for as long as the newsletter subscription is active.

Objection and removal possibility

You can revoke your consent to the storage of personal data that you have given us for sending the newsletter at any time with effect for the future. For the purpose of revoking your consent, each newsletter contains an appropriate link; alternatively, you are welcome to contact us directly so that we can implement your revocation.

4. Social Media / OpenStreetMap

a) Social Media Buttons

Our website uses social media buttons (Twitter, LinkedIn) to enable you to interact with third parties.

These social media buttons are not integrated as plug-ins via a so-called iFrame, but are stored as links. By clicking the social media buttons you will be redirected to the page of the respective provider. The relevant provider is then responsible for compliance with the data protection regulations and for the correctness, up-to-dateness and completeness of the information provided there for data processing within the meaning of Art. 4 No. 17 GDPR.

b) youtube

On this website, the controller has integrated components of YouTube. YouTube is an Internet video portal that enables video publishers to set video clips and other users free of charge, which also provides free viewing, review and commenting on them. YouTube allows you to publish all kinds of videos, so you can access both full movies and TV broadcasts, as well as music videos, trailers, and videos made by users via the Internet portal.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, UNITED STATES. The YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, UNITED STATES.

With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which a YouTube component (YouTube video) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to download a display of the corresponding YouTube component. Further information about YouTube may be obtained under https://www.youtube.com/yt/about/en/. During the course of this technical procedure, YouTube and Google gain knowledge of what specific sub-page of our website was visited by the data subject.

If the data subject is logged in on YouTube, YouTube recognizes with each call-up to a sub-page that contains a YouTube video, which specific sub-page of our Internet site was visited by the data subject. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.

YouTube and Google will receive information through the YouTube component that the data subject has visited our website, if the data subject at the time of the call to our website is logged in on YouTube; this occurs regardless of whether the person clicks on a YouTube video or not. If such a transmission of this information to YouTube and Google is not desirable for the data subject, the delivery may be prevented if the data subject logs off from their own YouTube account before a call-up to our website is made.

YouTube’s data protection provisions, available at https://www.google.com/intl/en/policies/privacy/, provide information about the collection, processing and use of personal data by YouTube and Google.

c) OpenStreetMap

We integrate the maps of the service “OpenStreetMap” (https://www.openstreetmap.de), which are offered by the OpenStreetMap Foundation (OSMF) based on the Open Data Commons Open Database License (ODbL).

Privacy Policy:
https://wiki.openstreetmap.org/wiki/Privacy_Policy

To the best of our knowledge, OpenStreetMap uses users’ data solely for the purpose of displaying map features and caching the selected settings. This data may include, but is not limited to, users’ IP addresses and location data, but they are not collected without their consent (usually as part of their mobile device settings). The data can be processed in the USA.

For more information, see the OpenStreetMap privacy policy:

https://wiki.openstreetmap.org/wiki/Privacy_Policy

C. Web analysis

This website uses the open source web analytics service Matomo. Matomo uses so-called "cookies" (see above). These are text files that are stored on your computer and that allow an analysis of the use of the website by you. For this purpose, the information generated by the cookie about the use of this website is stored on our server. The IP address is anonymized before it is stored.

Matomo cookies remain on your device until you delete them.

The storage of Matomo cookies is based on Art. 6 (1) (f) DSGVO. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

The information generated by the cookies about your use of this website will not be disclosed to third parties. You can prevent these cookies being stored by selecting the appropriate settings in your browser.

If you do not agree with the storage and use of your data, you can disable this feature here. In this case, an opt-out cookie will be stored in your browser to prevent Matomo from storing your usage data. If you delete your cookies, this will mean that the opt-out cookie will also be deleted. You will then need to reactivate it when you return to our site if you wish your activity not to be tracked.

Opt-Out:

 

Matamo makes use of this website with the extension "AnonymizeIP". This abbreviates IP addresses before processing, thus excluding the possibility of any direct personal identification. The IP address transmitted by your browser via Matamo will not be combined with other data collected by us.

Further information and the applicable data protection provisions of Matomo may be retrieved under https://matomo.org/privacy/.

D. Rights of affected

You are entitled to the following rights with regard to the processing of data by us in accordance with the respectively listed articles of the General Data Protection Regulation:

Right of access by the data subject to Art. 15 GDPR

You have the right to request confirmation as to whether the data concerned are processed and to request information about these data as well as further information and a copy of the data in accordance with Art. 15 DSGVO.

If this is the case, you have the right to obtain from us free of charge information about the personal data stored about you together with a copy of this data. Furthermore, there is a right to the following information:

  • processing purposes;
  • the categories of personal data being processed;
  • the recipients or categories of recipients to whom the personal data have been or are still being disclosed, in particular recipients in third countries or international organisations;
  • if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
  • the existence of a right to have your personal data concerning you corrected or deleted or to have the data controller restrict or object to such processing;
  • the existence of a right of appeal to a supervisory authority;
  • if the personal data is not collected from you, all available information about the origin of the data;
  • the existence of automated decision-making, including profiling in accordance with Art. 22 para. (1) and para. (4) DSGVO and – at least in these cases – meaningful information on the logic involved and the scope and intended effects of such processing for you.

If personal data are transferred to a third country or an international organisation, you have the right to be informed of the appropriate guarantees in accordance with Art. 46 DSGVO in connection with the transfer.

Right to rectification according to Art. 16 GDPR

In accordance with Art. 16 of the DSGVO, you have the right to request the completion of data concerning you or the correction of inaccurate data concerning you.

Right to erasure (“right to be forgotten”) in accordance with Art. 17 GDPR

In accordance with Art. 17 DSGVO, you have the right to demand that relevant data be deleted immediately.

Right to restriction of processing according to Art. 18 GDPR

In accordance with Art. 18 DSGVO, you have the right to demand a restriction on the processing of the data in accordance with Art. 18 DSGVO.

Right to data portability according to Art. 20 GDPR

You have the right to request that the data concerning you that you have provided to us be received in accordance with Art. 20 DSGVO and to request its transmission to other persons responsible.

Right to object according to Art. 21 GDPR.

If your personal data is processed based on legitimate interests in accordance with Art. 6 para. 1 clause 1 lit. f GDPR, you have the right to file an objection against the processing of your personal data in accordance with Art. 21 GDPR provided that there are reasons for this arising from your particular situation or the objection relates to direct advertising. In the latter case, you have a general right of objection, which is implemented by us with no requirement to give a specific reason. If you would like to exercise your right of revocation or objection, please send an e-mail to (datenschutz@arivis.com).

Right to information

If you have exercised your right to have the data controller correct, delete or limit the processing, he/she is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort.
The person responsible shall have the right to be informed of such recipients.

Automated decisions including profiling

You have the right not to be subject to a decision based exclusively on automated processing – including profiling – that has legal effect against you or significantly impairs you in a similar manner.

Right to withdraw

You have the right to revoke granted consents with effect for the future.

Right of appeal to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of your place of residence, employment or the place of the alleged infringement, if you believe that the processing of the personal data is violating the GDPR.

The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR