Privacy policy

(01.07.2024)


Thank you for your interest in our company. Data protection is of a particularly high priority for Buchholz Software. If you wish to use the Buchholz Software websites, you are not required to provide any personal data unless you wish to make use of services.

The processing of data is always carried out in accordance with the EU General Data Protection Regulation (hereinafter: GDPR).


1. Name and address of the controller

The controller within the meaning of the GDPR, other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is the:

Buchholz Software
Wilhelmstr. 46
10117 Berlin
hb@buchholz-software.de
Phone: +49 176 42045979

Contact person for data protection
If you have any questions about the processing of your personal data or your rights in relation to data protection, please contact datenschutz@buchholz-software.de or call us on the above telephone number.

2. General data and information

When you visit our website, we collect some data and information in a log file each time you access the website, which we need to ensure that the website functions correctly.

This data is also required in order to be able to take the necessary defence measures in the event of attacks on our IT systems.

In detail, these are
(1) the type and version of your web browser,
(2) the operating system of the device you use to access our website,
(3) the website from which you access our web pages (referrer)
(4) the actual website that you visit on our site,
(5) the date and time of access to the website,
(6) Your Internet Protocol address (IP address) and the source port

The legal basis for the storage is Art. 6 para. 1 lit. b of the GDPR. We cannot technically operate the website without collecting this data.

The log files are automatically deleted after 7 days. If we do retain data from log files for longer, the IP addresses are deleted and the data anonymised. This means that later personal identification is theoretically no longer possible.

Although Buchholz Software does not collect the data for any purposes other than those stated, it is theoretically possible that we could transfer the data to the responsible authorities for criminal prosecution. In this case, the authorities would be able to identify the persons or IT systems responsible.


3. Contact forms

If you contact us via our contact forms, you may transmit personal data to us. The data is always encrypted during transmission.

When you fill out a contact form to submit an application, you provide us with the following categories of personal data, depending on the specific procedure:

- ID card data: Surname, first name, valid from to, place of birth, surname at birth, date of birth, registration address, ID card number (for comparison of application, ID card, proof of identification), issuing authority

- Further data: Title, academic degree, mailing addresses, contact e-mail, e-mail certificate, telephone number, mobile phone number, fax, gender, organisation, signature, organisational unit, protected profession, free fields: "other" and "restrictions", application ID, pseudonym

- Evidence: if applicable, proof of title, academic degree, copy of ID/passport/ID document (depending on product), organisational charts, extracts from the commercial register


You are under no obligation to use these forms. Of course, you can also communicate with us by telephone, post or e-mail.

The legal basis for the collection of personal data via contact forms is Article 6(1)(f) of the GDPR. We have a legitimate interest in offering you a modern and efficient means of communication. This is offset by the relatively low risk posed by the transmission and processing of the data.

If you wish to initiate the conclusion of a contract or make use of services by contacting us, the legal basis for the processing is Article 6(1)(b) of the GDPR. If we are legally obliged to respond to you after contacting you via the web form, e.g. if you exercise your rights under the GDPR, the legal basis is Article 6(1)(c) of the GDPR.

The data collected will only be stored by us for as long as is necessary for the stated purpose. As a rule, we delete the data when the conversation with you has ended. If there is a legal obligation for us to retain data, we comply with the statutory retention periods.


4. Cookies

The Buchholz Software websites may use cookies. Cookies are small text files that your web browser stores on your computer or mobile device.

There are different types of cookies that fulfil different tasks. For example, they may be necessary for our website to function properly. The legal basis for this type of cookie is Art. 6, para. 1 lit. b of the GDPR.

Other cookies may be set by us to make it easier for you to use the website, to make the website easier to read or to analyse visits to the website in an anonymised statistical manner. The legal basis for this is Art. 6, para. 1 lit. f of the GDPR.

The following table lists which cookies we use on our website, for what purpose we use them, on what legal basis they are based and how long they are stored on your computer:

 

Name

Explanation

Service life

Opt-Out

Data protection notice
(cookieconsent_dismissed)

Consent to the
Cookie collection

1 year


Accessibility, contrast strength
(contrast-activated)

Activation of the high-contrast version of the
Website

24 hours


Session

Status of your registration on the website
(only active if you are a registered user of the site and are logged in)

Until you log out

 

 

5. Links to other websites

For reasons of user-friendliness and for information purposes, our website may contain links to other websites. Such websites are operated independently of us. Linked sites have their own privacy policies or statements; we recommend that you check these carefully when you visit the linked websites. To the extent that any linked websites you visit are not owned or controlled by us, we are not responsible for the content of such websites or any use or privacy practices of such websites.

6. Processors and third parties

We will only pass on your personal data to service providers and other third parties within the framework of the applicable data protection laws.

We may disclose personal data to the service providers commissioned by us and oblige them to perform services on our behalf. In doing so, we observe the strict applicable national and European data protection regulations. Service providers are subject to our instructions and are subject to strict contractual restrictions with regard to the processing of personal data. Accordingly, processing is only permitted insofar as it is necessary for the provision of services on our behalf or to comply with legal requirements. We determine in advance exactly what rights and obligations our service providers should have in relation to personal data.

We also pass on your personal data,

a. if they are legally or judicially obliged to do so,
b. to law enforcement authorities or other government agencies, or
c. if they believe that disclosure is necessary or appropriate to prevent physical harm or financial loss, or in connection with an investigation of suspected or actual fraudulent or illegal activity.

If Buchholz Software or its assets are sold or transferred, in whole or in part, we also reserve the right to transfer data we hold about you. If such a sale or transfer occurs during the application process, we will use reasonable endeavours to require the transferee to use the personal data you have provided to them in a manner consistent with our Privacy Policy. Following such a sale or transfer, you may contact the office to which the controller has transferred your personal data if you have any questions about the processing of such data.

7 Rights of the data subject

As a visitor and user of our website, you are a data subject within the meaning of the EU GDPR and have the following rights:

Right to revoke the declaration of consent under data protection law

If the processing of your personal data is based on your consent, you have the right to withdraw this consent at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Whenever we ask you for your consent, we describe how you can withdraw it. Alternatively, you can withdraw your consent by sending an email to daten-schutz@Buchholz-Software.de. You can withdraw your consent to receive newsletters or press releases by clicking on the "unsubscribe" link in one of the messages you receive.

Right to confirmation

You have the right to obtain confirmation from us as to whether or not personal data concerning you is being processed.

Right to information

You can request confirmation from Buchholz Software free of charge as to whether personal data concerning you is being processed by us. If such processing is taking place, you can request the following information from us:

–   die Zwecke, zu denen die personenbezogenen Daten verarbeitet werden;
–   die Kategorien von personenbezogenen Daten, welche verarbeitet werden;
–   die Empfänger bzw. die Kategorien von Empfängern, gegenüber denen die Sie betreffenden personenbezogenen Daten offengelegt wurden oder noch offengelegt werden;
–   die geplante Dauer der Speicherung der Sie betreffenden personenbezogenen Daten oder, falls konkrete Angaben hierzu nicht möglich sind, Kriterien für die Festlegung der Speicher-dauer;
–   das Bestehen eines Rechts auf Berichtigung oder Löschung der Sie betreffenden personen-bezogenen Daten, eines Rechts auf Einschränkung der Verarbeitung durch den Verantwortli-chen oder eines Widerspruchsrechts gegen diese Verarbeitung;
–  das Bestehen eines Beschwerderechts bei einer Aufsichtsbehörde;
–  alle verfügbaren Informationen über die Herkunft der Daten, wenn die personenbezogenen Daten nicht bei der betroffenen Person erhoben werden;
–  das Bestehen einer automatisierten Entscheidungsfindung einschließlich Profiling gemäß Art. 22 Abs. 1 und 4 DSGVO und – zumindest in diesen Fällen – aussagekräftige Informationen über die involvierte Logik sowie die Tragweite und die angestrebten Auswirkungen einer derartigen Verarbeitung für die betroffene Person.

You have the right to request information as to whether the personal data concerning you will be transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

However, this right of access may be restricted if it is likely to render impossible or seriously impair the realisation of our research or statistical purposes and the restriction is necessary for the fulfilment of our research or statistical purposes.

Right to rectification

You have the right to obtain from us the rectification and/or completion of inaccurate or incomplete personal data concerning you. We must make the correction without delay.

Right to erasure (right to be forgotten)

a) Cancellation obligation
You can demand that we delete the personal data concerning you immediately and we are obliged to delete this data immediately if one of the following reasons applies:

    The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
    You revoke your consent on which the processing was based pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR and there is no other legal basis for the processing.
    You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
    The personal data concerning you has been processed unlawfully.
    The deletion of personal data concerning you is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the controller is subject.
 The personal data concerning you have been collected in relation to the offer of information society services referred to in Art. 8 (1) GDPR.

b) Information to third parties
If we have made the personal data concerning you public and we are obliged to delete it in accordance with Art. 17 para. 1 GDPR, we will take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform those responsible for data processing who process the personal data that you, as the data subject, have requested them to delete all links to this personal data or copies or replications of this personal data.

c) Exceptions
The right to erasure does not exist if the processing is necessary

    to exercise the right to freedom of expression and information;
    for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
    for reasons of public interest in the area of public health in accordance with Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR;
    for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
    for the assertion, exercise or defence of legal claims.


Right to restriction of processing

You have the right to demand that we restrict processing if one of the following conditions is met:

- The accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data.
- The processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead.
- We no longer need the personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims.
- You have objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet clear whether our legitimate grounds override yours.

If the processing of personal data concerning you has been restricted, this data - apart from its storage - may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted.

Your right to restriction of processing may be restricted to the extent that it is likely to render impossible or seriously impair the realisation of the research or statistical purposes and the restriction is necessary for the fulfilment of the research or statistical purposes.

Right to information

If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right vis-à-vis us to be informed about these recipients.

Right to data portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to have this data transmitted to another controller without hindrance from us, provided that the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR. This also applies to profiling based on these provisions.

Buchholz Software shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.

In addition, you have the right, on grounds relating to your particular situation, to object to processing of personal data concerning you by Buchholz Software for scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

To exercise your right to object, you can contact the controller named in the legal notice, Buchholz Software, directly. You are also free to exercise your right to object in connection with the use of information society services, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications.

Your right to object may be restricted to the extent that it is likely to render impossible or seriously impair the realisation of the research or statistical purposes and the restriction is necessary for the fulfilment of the research or statistical purposes.



Automated decisions in individual cases including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, provided that the decision

- is not necessary for the conclusion or fulfilment of a contract between you and us, or
- is authorised by Union or Member State law to which we are subject and which also lays down suitable measures to safeguard the data subject's rights and freedoms and legitimate interests; or
- with your express consent.

However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a) or g) GDPR applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.

Is the decision
- necessary for the conclusion or fulfilment of a contract between you and us or
- it is done with your express consent,

Buchholz Software will take appropriate measures to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain the intervention of a person on the part of Buchholz Software, to express your own position and to contest the decision.

Right to lodge a complaint with a data protection supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

Die Berliner Beauftragte für Datenschutz und Informationsfreiheit, Friedrichstr. 219, 10969 Berlin, phone: +49 30 13889-0, e-mail: mailbox@datenschutz-berlin.de, is responsible for the Buchholz Software.

Changes to our privacy policy

Our privacy policy may change from time to time to reflect any changes in our privacy practices. All important changes to the privacy policy will be clearly published on this website. The date of the last change will appear at the top of the statement.