Menu
Privacy policy
(22.07.2024)
Thank you for your interest in our company. Data protection is of a particularly high priority for Buchholz Software. If you wish to use the Buchholz Software websites, you are not required to provide any personal data unless you wish to make use of services.
The processing of data is always carried out in accordance with the EU General Data Protection Regulation (hereinafter: GDPR).
1. Name and address of the controller
The controller within the meaning of the GDPR, other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is the:
Buchholz Software
Wilhelmstr. 46
10117 Berlin
hb@buchholz-software.de
Phone: +49 176 42045979
Contact person for data protection
If you have any questions about the processing of your personal data or your rights in relation to data protection, please contact datenschutz@buchholz-software.de or call us on the above telephone number.
2. General data and information
When you visit our website, we collect some data and information in a log file each time you access the website, which we need to ensure that the website functions correctly.
This data is also required in order to be able to take the necessary defence measures in the event of attacks on our IT systems.
In detail, these are
(1) the type and version of your web browser,
(2) the operating system of the device you use to access our website,
(3) the website from which you access our web pages (referrer)
(4) the actual website that you visit on our site,
(5) the date and time of access to the website,
(6) Your Internet Protocol address (IP address) and the source port
The legal basis for the storage is Art. 6 para. 1 lit. b of the GDPR. We cannot technically operate the website without collecting this data.
The log files are automatically deleted after 7 days. If we do retain data from log files for longer, the IP addresses are deleted and the data anonymised. This means that later personal identification is theoretically no longer possible.
Although Buchholz Software does not collect the data for any purposes other than those stated, it is theoretically possible that we could transfer the data to the responsible authorities for criminal prosecution. In this case, the authorities would be able to identify the persons or IT systems responsible.
3. Contact forms
If you contact us via our contact forms, you may transmit personal data to us. The data is always encrypted during transmission.
When you fill out a contact form to submit an application, you provide us with the following categories of personal data, depending on the specific procedure:
- ID card data: Surname, first name, valid from to, place of birth, surname at birth, date of birth, registration address, ID card number (for comparison of application, ID card, proof of identification), issuing authority
- Further data: Title, academic degree, mailing addresses, contact e-mail, e-mail certificate, telephone number, mobile phone number, fax, gender, organisation, signature, organisational unit, protected profession, free fields: "other" and "restrictions", application ID, pseudonym
- Evidence: if applicable, proof of title, academic degree, copy of ID/passport/ID document (depending on product), organisational charts, extracts from the commercial register
You are under no obligation to use these forms. Of course, you can also communicate with us by telephone, post or e-mail.
The legal basis for the collection of personal data via contact forms is Article 6(1)(f) of the GDPR. We have a legitimate interest in offering you a modern and efficient means of communication. This is offset by the relatively low risk posed by the transmission and processing of the data.
If you wish to initiate the conclusion of a contract or make use of services by contacting us, the legal basis for the processing is Article 6(1)(b) of the GDPR. If we are legally obliged to respond to you after contacting you via the web form, e.g. if you exercise your rights under the GDPR, the legal basis is Article 6(1)(c) of the GDPR.
The data collected will only be stored by us for as long as is necessary for the stated purpose. As a rule, we delete the data when the conversation with you has ended. If there is a legal obligation for us to retain data, we comply with the statutory retention periods.
4. Cookies
The Buchholz Software websites may use cookies. Cookies are small text files that your web browser stores on your computer or mobile device.
There are different types of cookies that fulfil different tasks. For example, they may be necessary for our website to function properly. The legal basis for this type of cookie is Art. 6, para. 1 lit. b of the GDPR.
Other cookies may be set by us to make it easier for you to use the website, to make the website easier to read or to analyse visits to the website in an anonymised statistical manner. The legal basis for this is Art. 6, para. 1 lit. f of the GDPR.
The following table lists which cookies we use on our website, for what purpose we use them, on what legal basis they are based and how long they are stored on your computer:
|
Name |
Explanation |
Service life |
Opt-Out |
|
Data protection notice |
Consent to the |
1 year |
|
|
Accessibility, contrast strength |
Activation of the high-contrast version of the |
24 hours |
|
|
Session |
Status of your registration on the website |
Until you log out |
|
5. Links to other websites
For reasons of user-friendliness and for information purposes, our website may contain links to other websites. Such websites are operated independently of us. Linked sites have their own privacy policies or statements; we recommend that you check these carefully when you visit the linked websites. To the extent that any linked websites you visit are not owned or controlled by us, we are not responsible for the content of such websites or any use or privacy practices of such websites.
6. Processors and third parties
We will only pass on your personal data to service providers and other third parties within the framework of the applicable data protection laws.
We may disclose personal data to the service providers commissioned by us and oblige them to perform services on our behalf. In doing so, we observe the strict applicable national and European data protection regulations. Service providers are subject to our instructions and are subject to strict contractual restrictions with regard to the processing of personal data. Accordingly, processing is only permitted insofar as it is necessary for the provision of services on our behalf or to comply with legal requirements. We determine in advance exactly what rights and obligations our service providers should have in relation to personal data.
We also pass on your personal data,
a. if they are legally or judicially obliged to do so,
b. to law enforcement authorities or other government agencies, or
c. if they believe that disclosure is necessary or appropriate to prevent physical harm or financial loss, or in connection with an investigation of suspected or actual fraudulent or illegal activity.
If Buchholz Software or its assets are sold or transferred, in whole or in part, we also reserve the right to transfer data we hold about you. If such a sale or transfer occurs during the application process, we will use reasonable endeavours to require the transferee to use the personal data you have provided to them in a manner consistent with our Privacy Policy. Following such a sale or transfer, you may contact the office to which the controller has transferred your personal data if you have any questions about the processing of such data.
7 Rights of the data subject
As a visitor and user of our website, you are a data subject within the meaning of the EU GDPR and have the following rights:
Right to revoke the declaration of consent under data protection law
If the processing of your personal data is based on your consent, you have the right to withdraw this consent at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Whenever we ask you for your consent, we describe how you can withdraw it. Alternatively, you can withdraw your consent by sending an email to daten-schutz@Buchholz-Software.de. You can withdraw your consent to receive newsletters or press releases by clicking on the "unsubscribe" link in one of the messages you receive.
Right to confirmation
You have the right to obtain confirmation from us as to whether or not personal data concerning you is being processed.
Right to information
You can request confirmation from Buchholz Software free of charge as to whether personal data concerning you is being processed by us. If such processing is taking place, you can request the following information from us:
- the purposes for which the personal data are processed;
- the categories of personal data that are processed;
- the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
- the planned duration of storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage duration;
- the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
- the existence of a right of appeal to a supervisory authority;
- all available information about the origin of the data if the personal data is not collected from the data subject;
- the existence of automated decision-making, including profiling, referred to in Art. 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
You have the right to request information as to whether the personal data concerning you will be transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.
However, this right of access may be restricted if it is likely to render impossible or seriously impair the realisation of our research or statistical purposes and the restriction is necessary for the fulfilment of our research or statistical purposes.
Right to rectification
You have the right to obtain from us the rectification and/or completion of inaccurate or incomplete personal data concerning you. We must make the correction without delay.
Right to erasure (right to be forgotten)
a) Cancellation obligation
You can demand that we delete the personal data concerning you immediately and we are obliged to delete this data immediately if one of the following reasons applies:
The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
You revoke your consent on which the processing was based pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR and there is no other legal basis for the processing.
You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
The personal data concerning you has been processed unlawfully.
The deletion of personal data concerning you is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the controller is subject.
The personal data concerning you have been collected in relation to the offer of information society services referred to in Art. 8 (1) GDPR.
b) Information to third parties
If we have made the personal data concerning you public and we are obliged to delete it in accordance with Art. 17 para. 1 GDPR, we will take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform those responsible for data processing who process the personal data that you, as the data subject, have requested them to delete all links to this personal data or copies or replications of this personal data.
c) Exceptions
The right to erasure does not exist if the processing is necessary
to exercise the right to freedom of expression and information;
for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
for reasons of public interest in the area of public health in accordance with Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR;
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
for the assertion, exercise or defence of legal claims.
Right to restriction of processing
You have the right to demand that we restrict processing if one of the following conditions is met:
- The accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data.
- The processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead.
- We no longer need the personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims.
- You have objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet clear whether our legitimate grounds override yours.
If the processing of personal data concerning you has been restricted, this data - apart from its storage - may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted.
Your right to restriction of processing may be restricted to the extent that it is likely to render impossible or seriously impair the realisation of the research or statistical purposes and the restriction is necessary for the fulfilment of the research or statistical purposes.
Right to information
If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
You have the right vis-à-vis us to be informed about these recipients.
Right to data portability
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to have this data transmitted to another controller without hindrance from us, provided that the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR. This also applies to profiling based on these provisions.
Buchholz Software shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.
In addition, you have the right, on grounds relating to your particular situation, to object to processing of personal data concerning you by Buchholz Software for scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
To exercise your right to object, you can contact the controller named in the legal notice, Buchholz Software, directly. You are also free to exercise your right to object in connection with the use of information society services, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications.
Your right to object may be restricted to the extent that it is likely to render impossible or seriously impair the realisation of the research or statistical purposes and the restriction is necessary for the fulfilment of the research or statistical purposes.
Automated decisions in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, provided that the decision
- is not necessary for the conclusion or fulfilment of a contract between you and us, or
- is authorised by Union or Member State law to which we are subject and which also lays down suitable measures to safeguard the data subject's rights and freedoms and legitimate interests; or
- with your express consent.
However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a) or g) GDPR applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.
Is the decision
- necessary for the conclusion or fulfilment of a contract between you and us or
- it is done with your express consent,
Buchholz Software will take appropriate measures to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain the intervention of a person on the part of Buchholz Software, to express your own position and to contest the decision.
Right to lodge a complaint with a data protection supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
Die Berliner Beauftragte für Datenschutz und Informationsfreiheit, Friedrichstr. 219, 10969 Berlin, phone: +49 30 13889-0, e-mail: mailbox@datenschutz-berlin.de, is responsible for the Buchholz Software.
Changes to our privacy policy
Our privacy policy may change from time to time to reflect any changes in our privacy practices. All important changes to the privacy policy will be clearly published on this website. The date of the last change will appear at the top of the statement.
(c) 2024 Haiko Buchholz