Data protection
We collect, process and use personal data exclusively in accordance with the applicable legal provisions on the protection of personal data and data security. The following information is for your information. Please note that the integriBOX Compliance Services GmbH website may contain links to websites of other providers to which this data protection declaration does not extend.
1. Summary and generalmy overview
The following information is intended to inform the users of the website what happens with regard to the personal data associated with the visit to the website by the website provider. The notes below provide detailed information.
a) What is personal data?
-
as personal data is all data with which the user can be personally identified.
b) Who is responsible for data collection on this website?
-
The data processing on this website is carried out by integriBOX Compliance Services GmbH or at their instigation on their behalf. The contact details of the responsible person can be found in the imprint.
c) How do we collect your data?
-
On the one hand, your data is collected by actively communicating it. This can be z. B. be data that you enter in a contact form. Other data is automatically recorded by IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of the page view). This data is collected automatically as soon as you enter this website.
d) What do we use your data for?
-
Part of the data is collected to ensure that the website is provided without errors. Other data can be used to analyze your user behavior.
e) What are your rights regarding your data?
-
You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction, blocking or deletion of this data. You can contact the address given in the imprint for this and other questions on the subject of data protection. Furthermore, you have the right to lodge a complaint with the competent data protection supervisory authority.
f) Analysis tools and third-party tools
When you visit this website, your surfing behavior can be statistically evaluated. This is mainly done with cookies and so-called analysis programs. The analysis of your surfing behavior is usually anonymous; surfing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools.
2. Visiting our website
The following data is collected and processed whenever you visit our website, as it is necessary for the operation of our website:
-
Operating system and version
-
Browser type, version and plug-in types
-
browser language
-
Device used
-
IP address
-
display resolution
-
Setting the time zone
-
Location data: country, time zone
-
Date and time of the server request
-
Access status/http status code
-
Amount of data transferred in each case
-
Website from which the request comes (referrer URL)
-
Registration information
When you visit our websites, we collect and process your personal data based on our legitimate interest for the following purposes:
-
For the efficient operation of our online offer and our website.
-
Ensuring the operation of IT systems: Ensuring operations includes, among other things: the following activities
-
Backup and recovery of data processed in IT systems•
-
Incident and problem management when troubleshooting IT systems•
-
IT security as well as detection and prevention of unauthorized access•
-
Logging and monitoring of transactions to verify the proper functioning of the IT systems
You can visit our websites at any time without telling us who you are and without your personal data being processed.
3. Plugins and Tools
Google Web Fonts
Our website uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display text and fonts correctly.
For this purpose, the browser you are using must connect to the Google servers. This gives Google knowledge that our website was accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offering. This represents a legitimate interest within the meaning of Article 6 (1) (f) GDPR.
If your browser does not support web fonts, a standard font will be used by your computer.
Data protection declaration for the use of Google Analytics
Our website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. If IP anonymization is activated on this website, however, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.
Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out to you however that in this case you will if applicable not be able to use all functions of this website in full. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install:http://tools.google.com/dlpage/gaoptout?hl=de
For more information about Google's applications, see Google's privacy policy:https://www.google.com/policies/privacy
4. Contact form
We collect and process personal data when you send us an inquiry via the contact form or otherwise contact us, e.g. B. in the context of general correspondence by e-mail, fax or post. The data you provide to us includes:
-
Name (first and last name)
-
Address (zip code, city, street and house number)
-
Company (name, legal form and address)
-
Telephone numbers (telephone and fax)
-
Website (URL)
-
country
-
E-mail address
We collect and process this data for the purposes for which you provide it to us. We also use the data for direct marketing if you have given us separate consent for this or if the authorization results from an existing contractual relationship or the initiation of one. You can object to the direct marketing measures at any time.
5. Servicet services or other services of integriBOX Compliance Services GmbH
We collect and process the personal data that you provide to us when we provide a service or another performance for you, or when this is necessary in the context of the provision of the service. The data you provide to us includes:
-
Name (first and last name)
-
Address (zip code, city, street and house number)
-
Company (name, legal form and address)
-
Telephone numbers (telephone and fax)
-
Website (URL)
-
Lani.e
-
E-mail address
-
Registration information
-
Master data (e.g. bank details)
Your personal data is collected and processed to initiate and fulfill contractual obligations and in the event that we have a legitimate interest in using yourhe has personal data, e.g. B.
-
Ensuring product quality, developing new products,
-
to fulfill sales, service and administrative processes,
-
to improve and operate our online offerings, our website and our e-mail communication efficiently,
-
to send you advertisements for products similar to those you have already purchased, unless you have opted out.
6. Use of the reporting portal by whistleblowers
If you use a reporting portal provided by us for our customers to report a violation of the law or unethical behavior, to provide other information or to send messages in the chat, we process the data that you make available to us in this context. Your report and messages as well as the associated data are stored in encrypted form on the server we use and made available for retrieval to the respective case worker named in the reporting portal. The case handler processes these data and files for the purpose of further investigating the facts you have reported. For its part, integriBOX Compliance Services GmbH has no readable access to the content of your report and messages.
The data mentioned in item 2 above is collected and processed when the reporting portal is called up, insofar as this is necessary for the operation of the reporting portal. Processing for other purposes does not take place, in particular we do not use the data mentioned to determine your identity. The case worker has no access to this data, with the exception of the date and time the notification was submitted or the registration in the reporting portal was made.
If you provide your e-mail address when submitting a report, this will be processed by us exclusively for the purpose of (a) automatically confirming that your report has been technically recorded and (b) automatically informing you in each case once the caseworker has messaged you in the reporting portal chat. Your e-mail address will not be passed on to the customer or his caseworker.
7. Compliance with Legal Obligations
We will also process personal data for purposes for which we are legally obliged. We are subject to a variety of legal obligations. In order to meet these obligations, we process your data to the extent required for this and, if necessary, pass them on to the responsible authorities within the framework of statutory reporting obligations. If necessary, we also process your data in the event of a legal dispute if the legal dispute requires the processing of your data.
8. How long do we keep your information?
We only keep your data for as long as is necessary for the purposes for which we process your data. When we process data for multiple purposes, it is automatically deleted or stored in a format that does not directly identify you once the last specific purpose has been fulfilled.
We also delete the data if their storage is inadmissible (especially if the data is incorrect and correction is not possible). integriBOX Compliance Services GmbH is based in particular on the statutory retention requirements and other legal requirements. Blocking takes the place of deletion if there are legal or factual obstacles to the contrary (e.g. special storage obligations due to commercial and tax law requirements).
9. To whom do we grant international access to your data and how do we protect this data?
Personal data is processed by employees of integriBOX Compliance Services GmbH and the service providers commissioned by us, preferably within the EU. If data is processed in countries outside the EU, we take appropriate measures (e.g. EU standard contractual clauses including appropriate technical and organizational measures) to ensure that your personal data is processed in accordance with European data protection standards.
10. Contacting us, your data protection rights and your right to complain to the data protection authority
If you have consented to the processing of your personal data by us, you have the right to withdraw your consent at any time. For this purpose, an informal message by e-mail to the responsible office, which is specified in the imprint, is sufficient. The legality of the processing of your personal data that took place up to the point of revocation is not affected by the revocation. Our right to further process this data on another legal basis, for example to fulfill legal obligations, remains unaffected by a revocation.
In accordance with Art. 15 et seq. GDPR, you have the following rights with regard to your personal data:
-
right to information,
-
right to rectification or erasure,
-
right to restriction of processing,
-
right to object to processing,
-
right to revoke a given consent,
-
Right to data portability.
We take your concerns and rights very seriously. However, if you feel that we don'tmeasured to have responded to your concerns, you have the right to lodge a complaint with a competent data protection authority.